Office of Inspector General Audit Tips for FEMA Public ... Conference... · Audit Tips for FEMA...
Transcript of Office of Inspector General Audit Tips for FEMA Public ... Conference... · Audit Tips for FEMA...
Office of Inspector General
Audit Tips for FEMA Public Assistance
Grant Recipients and Subrecipients
Tonda L. Hadley, Director
Central Regional Office-South
Office of Emergency Management Oversight
Texas Department of Emergency Management Conference
May 2017
www.oig.dhs.gov
or follow us on Twitter @DHSOIG
Overview DHS OIG Organization
Emergency Management Oversight (EMO) Mission
EMO Audits More than Disasters
How We Select Grant Audits
Life Cycle Audit Approach
Annual Audit Tips Report
Applicable Criteria
Audit Finding Examples
Key Points to Remember
Questions
2
Office of Inspector General
www.oig.dhs.gov
or follow us on Twitter @DHSOIG
DHS OIG
3
Inspector General John Roth
Deputy Inspector General John V. Kelly
Information
Technology Audits
Inspections
& Evaluations
Enterprise
Risk Identification
& Management
Audits
Management
Chief of Staff
Assistant
Inspectors General
Investigations
Emergency Management
Oversight
External Affairs
Counsel to
Inspector General Laurel Loomis Rimon
Integrity and Quality
Oversight
Whistleblower
Protection
Unit
FOIA Unit
www.oig.dhs.gov
or follow us on Twitter @DHSOIG
Emergency Management Oversight
(EMO) MISSION –
Provide aggressive and ongoing audit effort to ensure that disaster
relief funds are spent appropriately;
Identify fraud, waste, and abuse as early as possible;
Keep Congress, the Secretary, the Administrator of FEMA and others
fully informed on problems relating to disaster operations and
assistance programs;
Focus heavily weighted toward prevention through review of internal
controls and monitoring; and
Advise DHS and FEMA officials on contracts, grants, and purchase
transactions before they are approved.
4
www.oig.dhs.gov
or follow us on Twitter @DHSOIG
EMO Audits More than Disasters
Recent Shift from Disaster Relief Funds (DRF)
to Appropriated Funds
Allows Us to Audit All FEMA Activities,
Including Non-DRF Programs such as the
National Flood Insurance Program and
Preparedness Grants and Programs
This presentation focuses on our disaster grant
audits
5
www.oig.dhs.gov
or follow us on Twitter @DHSOIG
Emergency Management Oversight
(EMO)
HOW DO WE SELECT AUDITS?
The OIG considers several factors in determining which
activities to audit. These factors include:
the risk of fraud, waste, and abuse of Federal funds;
statutory and regulatory requirements;
current or potential dollar magnitude;
requests from congressional, FEMA, or State officials; and
reports/allegations of impropriety or problems in implementing FEMA
programs.
6
www.oig.dhs.gov
or follow us on Twitter @DHSOIG 7
Office of Inspector General
Focuses on Public Assistance Grant Phases
Response
Recovery
Close Out
Proactive Approach includes 4 Types of Audits Deployment Audits
Capacity Audits
Early Warning Audits
Traditional Audits
Life Cycle Approach for Grant Audits
www.oig.dhs.gov
or follow us on Twitter @DHSOIG
Annual Audit Tips Report
This report provides an overview of—
OIG responsibilities;
Federal statutes, regulations, and guidelines applicable to
disaster grants;
Frequent audit findings; and
Key points to remember when administering FEMA grants.
8
www.oig.dhs.gov
or follow us on Twitter @DHSOIG
Annual Audit Tips Report
Using this report should assist disaster
assistance applicants:
document and account for disaster-related costs;
minimize the loss of FEMA disaster assistance funds;
maximize financial recovery; and
prevent fraud, waste, and abuse of disaster funds.
9
www.oig.dhs.gov
or follow us on Twitter @DHSOIG
Audit Tips
Applicable Federal Statutes and Regulations
Include the Following:
Robert T. Stafford Disaster Relief and Emergency Assistance
Act
44 Code of Federal Regulations (CFR)
2 CFR Part 200: Uniform Administrative Requirements, Cost
Principles, and Audit Requirements for Federal Awards
10
www.oig.dhs.gov
or follow us on Twitter @DHSOIG
Audit Tips
Applicable FEMA Guidelines Include:
Public Assistance Program and Policy Guide (FEMA First
Issued in January 2016 and Recently Updated)
FEMA 329, Debris Estimating Field Guide (September 2010),
Hazard Mitigation Assistance (HMA) Unified Guidance, and
Public Assistance Policy on Stafford Act Section 705 (FP-205-
081-2, March 31, 2016)
11
www.oig.dhs.gov
or follow us on Twitter @DHSOIG
Frequent Findings: Example 1
Improper Contracting Practices
12
Received a Public Assistance award that included $6.1
million for disaster-related debris removal and permanent
electrical repair work.
Solicited bids for the work only from contractors that it
had used before the disaster.
Used the contractor to complete all emergency and
permanent work.
EMERALD CITY (subgrantee)
www.oig.dhs.gov
or follow us on Twitter @DHSOIG
2 CFR 200.317 to .326 requires all non-federal entities (other
than states) to comply with the following procurement standards:
Retain records of procurement
process and bid selection
Use T&M contracts only as a last
resort and with a ceiling price
Perform a cost analysis
Negotiate profit as a separate
element
13
Frequent Findings: Example 1 (cont.)
Improper Contracting Costs
Full and open competition
Affirmative steps to assure the use of
small and minority firms, women’s
business enterprises, and labor surplus
area firms when possible
Maintain contract oversight
Maintain written standards of conduct
www.oig.dhs.gov
or follow us on Twitter @DHSOIG
As part of the audit, Emerald City officials stated that they procured the
contracts under exigent circumstances.
The OIG determined that the subrecipient had restored electrical power to
almost all of its customers over the next 10 weeks. After such time, exigent
circumstances no longer existed to warrant the use of noncompetitive
contracts.
The OIG also determined that because the solicitation of bids came from a
limited number of contractors, full and open competition did not occur.
FEMA had no assurance that contract costs were reasonable or that minority
firms, women’s business enterprises, and labor surplus area firms had an
opportunity to bid on the work.
The OIG questioned $6.1 million because Emerald City did not meet Federal
procurement standards.
14
Frequent Findings: Example 1 (cont.)
Improper Contracting Costs
www.oig.dhs.gov
or follow us on Twitter @DHSOIG
Frequent Findings: Example 2
Unsupported Costs
15
1. Used contract labor to complete 7 large projects to repair an
electrical distribution system.
Submitted a copy of Invoice 3B as support for labor costs in all 7 PWs. The
invoice contained a single line item for $194,000 labeled “Salary.”
No additional documentation was submitted for labor at the time of
closeout.
2. Claimed a total of $1.7 million across the 7 PWs for materials
withdrawn from existing inventory, using the replacement cost
method.
Bedrock (subgrantee)
www.oig.dhs.gov
or follow us on Twitter @DHSOIG
1. Federal cost principles (2 CFR 200.403(g) require recipients
and subrecipients to adequately document costs that they
claim under Federal programs.
2. OMB Circular A-122, Attachment A, A (2)(c), requires
recipients and subrecipients to be consistent with policies and
procedures that apply uniformly to both federally-financed
and other activities of the organization.
16
Frequent Findings: Example 2 (cont.)
Unsupported Costs
www.oig.dhs.gov
or follow us on Twitter @DHSOIG
Bedrock could not provide supporting documentation for the labor claim of
$194,000 in Invoice 3B.
The labor contractor later provided redacted time sheets and payroll registers,
claiming that it could not provide the sensitive identifying information to the
subrecipient. The time sheets and the payroll registers appeared to match;
however, they totaled $174,000.
The documentation did not indicate which employee completed what work or
if the work was directly assignable to any of the 7 large PWs.
The OIG questioned $194,000 because Bedrock could not support the
accuracy of the claimed labor costs.
17
Frequent Findings: Example 2 (cont.)
Unsupported Costs
www.oig.dhs.gov
or follow us on Twitter @DHSOIG
The Bedrock policy and procedures state that inventory valuation is
determined using the average cost method.
The OIG also determined that had the subrecipient used its standard
method of inventory pricing, the cost of materials would have been
$1 million less than the amount claimed.
The OIG did not question $700,000 of material costs associated with
actual repairs, but did question the $1 million Bedrock claimed for
existing inventory costs because the claim was not consistent with
Federal cost principles.
18
Frequent Findings: Example 2 (cont.)
Unsupported Costs
www.oig.dhs.gov
or follow us on Twitter @DHSOIG
Frequent Findings: Example 3
Poor Project Accounting
19
1. Created an account within its automated accounting system
designated as “ice storm disaster” to account for $15 million
FEMA grant.
All costs incurred during the incident period were included in this account
with no segregation of eligible and non-eligible disaster related
expenditures.
No additional system of accounting, such as spreadsheets or project files,
was employed to track Federal grant funds received.
2. The journal of expenditures contained reference to Payroll for
$950,000 with no reference to projects, pay period(s), or daily
activity reports.
METROPOLIS (subgrantee)
www.oig.dhs.gov
or follow us on Twitter @DHSOIG
Federal regulations (2 CFR 200.302 and 44 CFR 206.205)
require recipients and subrecipients to maintain a system that
accounts for FEMA funds on a project-by-project basis.
The system must disclose the financial results for all FEMA-
funded activities accurately, currently, and completely.
The system must identify funds received and dispersed, and
reference source documentation (i.e., cancelled checks, invoices,
payroll, time and attendance records, contracts, etc.).
20
Frequent Findings: Example 3 (cont.)
Poor Project Accounting
www.oig.dhs.gov
or follow us on Twitter @DHSOIG
• Metropolis did not account for the
expenditures on a project-by-
project basis.
• Further, the single account
comingled eligible and non-
eligible disaster-related
expenditures.
• The OIG questioned the entire $15
million grant because the costs
were not auditable by project.
21
Poor Project Accounting (cont.)
• Metropolis had timesheets to
support costs of $1.7 million for all
disaster-related labor.
• The timesheets did reference work
performed, or if it was attributable
to eligible work on a specific
project.
• The OIG questioned the entire
$950,00 because the labor costs
claimed could not be traced and
verified to supporting documents.
Finding 1 Finding 2
www.oig.dhs.gov
or follow us on Twitter @DHSOIG
Frequent Findings: Example 4
Direct Administrative Costs
22
Contracted with Bruce Wayne Consulting (BWC) to perform all grant management
functions.
7 BWC employees traveled from Los Angeles to Gotham City and remained on-site for 6
weeks (42 days), rented individual cars, lodged at The Grand Hotel, and leased office
space at an area strip mall.
On behalf of Gotham City, BWC attended all meetings, conducted site visits, prepared
PW packets complete with disaster-related expenditures and supporting documentation,
delivered packets to the JFO, reviewed and signed PWs upon completion.
In a separate contract, BWC was also hired to manage closeout requests when the
recovery projects were complete.
Claimed a total of $752,000 direct administrative costs for BWC services allocated
evenly across the 10 small and 4 large PWs submitted to FEMA.
GOTHAM CITY (subgrantee)
www.oig.dhs.gov
or follow us on Twitter @DHSOIG
• Costs identified specifically with a
particular final cost objective… or can be
assigned to such activities relatively
easily with a high degree of accuracy
(2 CFR 200.413(a))
• Costs incurred that can be identified
separately and assigned to a specific
project (44 CFR 207.6(c)) and treated
consistently across all Federal awards and
other activities. (2 CFR 200.413(b))
FEMA Disaster Assistance Policy
9525.9.
23
Frequent Findings: Example 4 (cont.)
Direct Administrative Costs
Direct Administrative Costs
• Indirect costs, administrative expenses, and
any other expenses not directly chargeable to
a specific project.
(44 CFR 207.2)
• A reasonable calculation of pass-through
funds (if any) for management costs to its
subgrantees must be identified in the
grantee’s Admin Plan.
(44 CFR 206.207(b)(iii)(K))
• Can be used only for the administration of
the grant, cannot be charged directly to a
project, and are considered management
costs. (44 CFR 207.6(a-b))
Management (324) Costs
www.oig.dhs.gov
or follow us on Twitter @DHSOIG
Key Points to Remember
1. Designate a person to coordinate the accumulation of records.
2. Establish a separate and distinct account for recording revenue
and expenditures, and a separate identifier for each distinct
FEMA project.
3. Ensure that the final claim for each project is supported by
amounts recorded in the accounting system.
4. Ensure that each expenditure is recorded in the accounting
books and is referenced to supporting source documentation
(checks, invoices, etc.) that can be readily retrieved
24
www.oig.dhs.gov
or follow us on Twitter @DHSOIG
Key Points to Remember
5. Research insurance coverage and seek reimbursement for the
maximum amount. Credit the appropriate FEMA project with
that amount.
6. Check with your Federal Grant Program Coordinator about to
ensure the final project claim does not include costs that
another Federal agency funded or should have funded.
7. Ensure that materials taken from existing inventories for use
under FEMA projects are documented by inventory withdrawal
and usage records.
25
www.oig.dhs.gov
or follow us on Twitter @DHSOIG
Key Points to Remember
8. Ensure that expenditures claimed under the FEMA project are
reasonable and necessary, are authorized under the scope of
work, and directly benefit the project.
9. Ensure that costs claimed as Direct Administrative Costs do
not include indirect costs allocated across multiple projects.
26