What Is a Single Audit?
A Single Audit is an independent review of the state’s annual comprehensive financial statements specifically regarding federal grant funds. The purpose of the single audit is to determine whether the money was spent according to federal requirements for those funds. It combines a financial audit with a compliance audit, and allows one audit to cover multiple federal awards across many departments within the state.
Why Are Single Audits Required?
The Single Audit Act of 1984 was created to establish one standardized audit process for organizations receiving federal funding, to improve accountability while reducing duplicate audits. It helps ensure taxpayer dollars are spent properly and that federal grant recipients comply with laws and regulations.
Who Has to Undergo a Single Audit?
Non-federal entities such as state and local governments, nonprofits, universities, and tribal governments that spend at least $1 million in federal funds (called awards) during a fiscal year must undergo a Single Audit (after October 1, 2024). Organizations that receive awards below the threshold are generally not required to have a Single Audit. Organizations that receive these federal funds from states or local governments are required to be monitored for their use of the federal funds, which are called subawards.
What Do Audit Findings Mean?
Audit findings identify problems in internal controls or compliance, which are commonly called deficiencies or weaknesses. A Material Weakness is like a broken front door lock on a house (a serious problem that could allow major errors or fraud), while a Significant Deficiency is like a window that doesn't close properly (important to fix but less severe). Other findings may include noncompliance with grant rules or questioned costs that require management attention and corrective action.
Material Weakness: A deficiency, or combination of deficiencies, in internal control such that there is a reasonable possibility that a material misstatement of the financial statements, or material noncompliance with applicable laws, regulations, or federal award requirements, will not be prevented, detected, and corrected on a timely basis.
Significant Deficiency: A deficiency, or combination of deficiencies, in internal control that is less severe than a material weakness, yet important enough to merit the attention of those charged with governance because it could adversely affect the entity's ability to accurately account for, report, or comply with applicable requirements.
Noncompliance: Failure to comply with applicable laws, regulations, contract provisions, grant agreements, or federal award requirements that govern the administration and use of public funds. Depending on its nature and significance, noncompliance may result in audit findings, corrective actions, questioned costs, or increased oversight by the awarding agency.
Questioned Costs: Costs identified during an audit that may be unallowable, unsupported, unreasonable, or incurred in violation of applicable laws, regulations, grant terms, or federal award requirements. These costs are subject to review by the awarding agency, which determines whether repayment or other corrective action is required.
What Happens After a Single Audit?
After the audit, the organization submits its audit report to the Federal Audit Clearinghouse and must develop corrective action plans for any findings. Federal agencies review the results to determine whether additional oversight, repayment, or other actions are needed.
Why Should Taxpayers Care About Single Audits?
Single Audits help ensure that taxpayer-funded grants are used as intended and identify weaknesses before they become larger problems involving waste, fraud, or abuse. They also promote transparency and accountability for organizations receiving federal funds.
What Single Audits Do NOT Tell You?
A Single Audit does not evaluate whether a program is effective, whether every dollar was spent perfectly, or whether fraud definitely occurred. Instead, it focuses on whether financial reporting and compliance with federal requirements are materially correct. The language in a Single Audit often describes conditions that increase the risk of fraud or misuse—such as excessive overtime, weak supervisory review, or inadequate internal controls—but these findings simply identify vulnerabilities rather than prove fraud occurred.
Common Examples of Single Audit Findings
Common findings include weak internal controls, unsupported or unallowable costs, failure to follow procurement rules, inaccurate reporting, and noncompliance with eligibility or grant requirements. These issues often indicate that an organization needs stronger processes to manage federal funds properly.
What Causes Single Audit Findings
In many cases, these issues stem from process breakdowns or human error rather than intentional wrongdoing, but they can still increase the risk of waste, fraud, or noncompliance. Most audit findings result from weak internal controls, inadequate documentation, insufficient staff training, lack of supervisory review, or failure to follow federal grant requirements.
A Single Audit is Like a Home Security System
The federal government provides billions of dollars to states and cities each year for programs such as Medicaid, highways, education, and housing. A Single Audit checks whether those governments are following the rules for spending that money and whether they have safeguards in place to protect it.
Those safeguards are called internal controls. They include items such as approval processes, documentation requirements, employee training, background checks, and regular reviews of financial records. Their purpose is simple: make sure public money is spent properly and that mistakes or fraud are caught quickly.
A control deficiency is like an outdoor security camera that isn't recording properly. The rest of the security system is still working, but there's a small weakness that should be fixed before it creates a larger problem.
A significant deficiency is like having several security cameras or motion sensors that are not working. Your home still has some protection, but there are noticeable gaps that increase the chances something could happen without being detected. It's serious enough that the homeowner should address it promptly.
A material weakness is much more serious. It's like discovering the front door doesn't lock, and the alarm system isn't working. It doesn't mean someone has already broken into the house, but it means the protections are weak enough that a major problem could occur without being detected in time.
The same is true in government. A material weakness doesn't mean fraud, waste, or abuse definitely occurred. It means the government's controls are not strong enough to provide reasonable assurance that taxpayer dollars are protected, financial records are accurate, or problems will be caught before they become significant. In other words, the house hasn't necessarily been robbed. It just isn't secure enough to give the homeowner confidence that they would know if someone got in. That is exactly what auditors are warning about.