Reports

Small Business Administration OIG

Serious Concerns Regarding the Return of Paycheck Protection Program Funds

The Office of Inspector General (OIG) is issuing this management advisory to bring to your attention concerns regarding the return of Paycheck Protection Program (PPP) funds. This issue requires immediate attention and action by the U.S. Small Business Administration (SBA) to ensure it has processes and procedures in place to adequately accept, process, and account for PPP funds returned by borrowers, lenders, and financial institutions. Expedited management action should mitigate the risk of financial loss to taxpayers. Establishing clear and detailed guidance for borrowers, lenders, and...

Full Details: Oversight.gov Report Page

Pandemic Response Accountability Committee

FRAUD ALERT FOLLOW-UP: Improved Sharing of Death Records and Use of the Do Not Pay System Would Strengthen Program Integrity and Better Protect the Public

This update expands on our January 2023 Fraud Alert that identified 69,000 questionable Social Security Numbers (SSNs) used to obtain $5.4 billion in potentially fraudulent loans made in the COVID-19 Economic Injury Disaster Loan (EIDL) program and Paycheck Protection Program (PPP). As detailed in that Fraud Alert, PRAC data scientists, using our Pandemic Analytics Center of Excellence, identified the questionable SSNs after determining that the names, SSNs, and/or dates of birth used in connection with COVID-19 EIDL/PPP applications did not match Social Security Administration’s (SSAs)...

Full Details: Oversight.gov Report Page

Small Business Administration OIG

White Paper: 7(a) Loan Program During SBA’s Response to the COVID-19 Pandemic

We prepared this white paper to report on the U.S. Small Business Administration’s (SBA) 7(a) loan program performance during SBA’s response to the Coronavirus Disease 2019 (COVID-19) pandemic and address potential risks SBA should consider in managing the program. We identified factors that could impact the 7(a) loan program and should be considered in SBA’s program risk strategy. Specifically, in FY 2021, the total amount of loans increased to $31.4 billion from $19.4 billion in FY 2020 (62 percent increase) and $20.6 billion in FY 2019 (53 percent increase), as did the average loan amount...

Full Details: Oversight.gov Report Page

Election Assistance Commission OIG

Audit of the Help America Vote Act Grants Awarded to the Commonwealth of the Northern Mariana Islands

EAC OIG audited funds received by the Commonwealth of the Northern Mariana Islands under the Help America Vote Act, totaling $1.2 million. This included Election Security and Coronavirus Aid, Relief, and Economic Security Act grants.

Full Details: Oversight.gov Report Page

Audit | 2/24/2023

Pandemic Response Accountability Committee

FRAUD ALERT: PRAC Identifies $5.4 Billion in Potentially Fraudulent Pandemic Loans Obtained Using Over 69,000 Questionable Social Security Numbers

The PRAC’s Pandemic Analytics Center of Excellence (PACE) data scientists identified $5.4 Billion in potential identity fraud associated with over 69,000 questionable Social Security Numbers (SSNs) used on applications across disbursed loans in the Small Business Administration’s COVID-19 Economic Injury Disaster Loan Program and Paycheck Protection Program. Through collaborative verification methods with the Social Security Administration, we identified that these SSNs were used in connection with over 99,000 applications and warrant further scrutiny. The results of this Fraud Alert...

Full Details: Oversight.gov Report Page

Pandemic Response Accountability Committee

Insights on Telehealth Use and Program Integrity Risks Across Selected Health Care Programs During the Pandemic

Recognizing how critical telehealth has been to the federal COVID-19 response, the PRAC Health Care Subgroup—which includes six Federal Offices of Inspectors General—worked together to provide insights on the use of telehealth and its associated program integrity risks.

Full Details: Oversight.gov Report Page

Election Assistance Commission OIG

Audit of the Help America Vote Act Grants Awarded to the State of California

EAC OIG, through the independent public accounting firm of McBride, Lock & Associates, LLC, audited funds received by the State of California under the Help America Vote Act, including state matching funds and interest earned, totaling $216.3 million. This included Election Security, reissued Section 101, reissued Section 251, and Coronavirus Aid, Relief, and Economic Security Act grants.

Full Details: Oversight.gov Report Page

Audit | 10/04/2022

1 - Closed

We recommend that the EAC require the Office perform a reconciliation of the grant activity for the Election Security, Section 251 reissued, Section 101 reissued, and CARES Act funds and ensure that all expenditures are fully disclosed, and file amended FFRs, as applicable. If the Office determines that it is unable to perform the reconciliation of the grant activity, obtain financial services to support the completion of the reconciliation.

2 - Closed

We recommend that the EAC require the Office implement procedures and training to properly fill out the required Federal Financial Reports, which reflect the uses of award funds and the interest and program income generated from those funds for all HAVA grants.

3 - Closed

We recommend that the EAC require the Office transfer into the election fund $51,012 and any related fringe benefits and indirect costs for the unsupported payroll costs cited above.

4 - Closed

We recommend that the EAC require the Office implement procedures or provide additional training to ensure that payroll costs are adequately supported with appropriate signature approvals, pay rates, and timesheets when being allocated to the HAVA grants.

5 - Closed

We recommend that the EAC require the Office perform detailed testing on the $180,350 of additional wages selected for substantive testing to determine what amount, if any, remains unsupported.

6 - Closed

We recommend that the EAC work with the Office to resolve the one remaining unsupported County reimbursement.

7 - Closed

We recommend that the EAC require the Office to transfer into the election fund any amount which remains unsupported.

8 - Closed

We recommend that the EAC require the Office to develop and implement policies and procedures and provide training to ensure adequate documentation is maintained to support the allowability of expenditures charged to the HAVA grant.

Small Business Administration OIG

SBA's Guaranty Purchases for Paycheck Protection Program Loans

The Office of Inspector General (OIG) is issuing this management advisory to express concerns regarding the U.S. Small Business Administration’s (SBA) decision to end collections on purchased Paycheck Protection Program (PPP) loans with an outstanding balance of $100,000 or less. In anticipation of a significant number of delinquent PPP loans that lenders will submit for guaranty purchase, we began reviewing SBA’s process for approving PPP guaranty purchases. During our review, we identified concerns with SBA’s decision to end collections on these loans and found that expedited management...

Full Details: Oversight.gov Report Page

Review | 9/30/2022

Small Business Administration OIG

Follow-up Inspection of SBA’s Internal Controls to Prevent COVID-19 EIDLs to Ineligible Applicants

This report presents the results of our follow-up inspection to assess the effectiveness of the U.S. Small Business Administration’s (SBA) enhanced internal controls to prevent Coronavirus Disease 2019 (COVID-19) Economic Injury Disaster Loans (EIDL) to ineligible applicants. The Coronavirus Aid, Relief, and Economic Security (CARES) Act prohibited the agency from requiring tax return transcripts to prove eligibility. Congress eliminated this restriction 9 months later with the Consolidated Appropriations Act, 2021. We found SBA did not implement the tax transcript requirement in a timely...

Full Details: Oversight.gov Report Page

Inspection / Evaluation | 9/29/2022

Small Business Administration OIG

COVID-19 and Disaster Assistance Information Systems Security Controls

This report presents the results of our audit to determine whether the U.S. Small Business Administration (SBA) maintained effective management control activities and monitoring of the design and implementation of third-party operated SBA systems. SBA needed information technology systems from third-party service providers that could improve the system efficiency and productivity to process high transaction volumes, transmit data between other information systems, and safeguard the integrity and confidentiality of the personally identifiable information processed by the programs. We found the...

Full Details: Oversight.gov Report Page

Audit | 9/27/2022

1 - Open

Ensure the existing SBA System Development Methodology is updated to include supply chain risk-management practices as required by OMB Circular A-130 and high-value asset system designation guidance. Also, ensure high-value asset system risks are incorporated into the enterprise risk management framework, as recommended by OMB M-19-03 and SBA SOP 90 47 6.

10 - Open

Implement an automated process to document and monitor system changes as recommended by NIST SP 800-53 Rev. 5.

2 - Open

Communicate and enforce the SBA System Development Methodology in which a traceability matrix is used to ensure that system requirements can be tested and demonstrated in the operational system. Ensure all requirements are aligned with the contractual acceptance criteria.

3 - Open

Implement in updated agency guidance, the requirements of OMB Circular No. A-123 that stipulate a SOC 1 Type 2 report is needed for all new and existing financial systems. This guidance should also require confirmation at least annually that the controls are functioning as designed.

4 - Closed

Enforce the requirement to establish and implement internal controls to ensure appropriate program officials perform and document contract reviews to ensure that information security is appropriately addressed in the contracting language, as required by OMB Circular A-130 and SBA SOP 90 47 6.

5 - Open

In conjunction with the Enterprise Risk Management Board, implement enterprise-wide privacy risk mitigation practices that can be assimilated into new and existing system program designs.

6 - Open

Complete an initial assessment and authorization for each information system and all agency-designated common controls before operation.

7 - Open

Transition information systems and common controls to an ongoing authorization process (when eligible for such a process) with the formal approval of the respective authorizing officials or reauthorize information systems and common controls as needed, on a time or event-driven basis in accordance with agency risk tolerance, as required by OMB Circular No. A-130 and SOP 90 47 6.

8 - Open

Review and update POA&Ms at least quarterly as required by SOP 90 47 6.

9 - Closed

Ensure data-sharing agreements are reviewed annually as required by SBA SOP 90 47 6.

Date Range

Report Type

Report Category

Submitting Agency

State/Local Agency

State (State and Local Reports)

Fraud Type

Agency Reviewed

Related Organizations

Management Challenges

Any Recommendations

Any Open Recommendations

Reports

Serious Concerns Regarding the Return of Paycheck Protection Program Funds

FRAUD ALERT FOLLOW-UP: Improved Sharing of Death Records and Use of the Do Not Pay System Would Strengthen Program Integrity and Better Protect the Public

White Paper: 7(a) Loan Program During SBA’s Response to the COVID-19 Pandemic

Audit of the Help America Vote Act Grants Awarded to the Commonwealth of the Northern Mariana Islands

FRAUD ALERT: PRAC Identifies $5.4 Billion in Potentially Fraudulent Pandemic Loans Obtained Using Over 69,000 Questionable Social Security Numbers

Insights on Telehealth Use and Program Integrity Risks Across Selected Health Care Programs During the Pandemic

Audit of the Help America Vote Act Grants Awarded to the State of California

SBA's Guaranty Purchases for Paycheck Protection Program Loans

Follow-up Inspection of SBA’s Internal Controls to Prevent COVID-19 EIDLs to Ineligible Applicants

COVID-19 and Disaster Assistance Information Systems Security Controls

Glossary

Glossary name will go here