Federal grants — subrecipient and contractor verification and monitoring

Template version 2026-10-06 · for: Hospital research offices, academic medical centers, public-health departments, any pass-through entity · owner role: Director, Sponsored Programs / Grants (owner); Principal Investigators (data); Internal Audit (test) · adopted by  organization  effective  date . Editable .txt · JSON

Template. Written against the public text of the standard cited; the organization adopts, edits and owns it as its protocol. Every threshold, identity, hold or disclosure decision belongs to the organization. We report the findings against the protocol — counts, dates, states — nothing more. Not legal advice, not a compliance determination, not a consumer report.

Standards served

Scope

Every subaward and every contractor paid with federal-award funds, before the covered transaction and at each budget period.

Frequency

Before subaward/contract; at each budget period renewal; monthly roster read while active.

Procedure

  1. Collect the subrecipient's legal name as registered in SAM and its UEI (2 CFR 25 requires it). Without a UEI the subaward cannot be issued; do not substitute a name read for the UEI read.
  2. Before the covered transaction: one dated record of SAM.gov exclusions by UEI (2 CFR 180.300 method (a)); on the same record, the Federal Audit Clearinghouse single-audit status and findings, and the subrecipient's federal award rows from USAspending — side by side, dated, not merged into a judgment.
  3. Risk assessment under 200.332(b): the Grants Director records the factors considered (prior audit findings, new/experienced, system changes) and the monitoring plan. The dated record is one input; the assessment is the Director's.
  4. Monthly while active: the subrecipient and any named contractors stay on the roster read; changed lines route to the Grants Director.
  5. Audit follow-up (200.332(d)(3)): when FAC shows a new audit with findings, record the management decision within the period the regulation sets; keep the FAC read that triggered it.
  6. Keep every record with the award file for the Single Audit sample.

Findings reported — computed from your own records; the threshold is your protocol's

FindingComputed asData sourceThreshold
Pre-award verificationsubawards/contracts with a SAM read dated on or before execution ÷ subawards/contractsaward system; receipt created_at your protocol 
UEI completenessactive subrecipients with UEI on file ÷ active subrecipientsaward system your protocol 
Risk assessment on fileactive subawards with a dated 200.332(b) assessment ÷ active subawardsgrants files your protocol 
Audit follow-up timelinessFAC findings with a management decision inside the regulatory period ÷ findingsFAC reads; decision log your protocol 
Sample readinessminutes to produce the dated verification for an auditor-sampled transactionHOSP-08 drill your protocol 

Records

RecordKept byRetention
Pre-award SAM/FAC/USAspending record with award fileGrants3 years from final expenditure report (2 CFR 200.334) or longer per HOSP-08
Risk assessments and monitoring plansGrants Directorsame
Management decisions on audit findingsGrants Directorsame

What this procedure does not decide

Subrecipient risk level, monitoring intensity, allowability, and whether a finding is resolved — the pass-through entity decides and documents; the record shows what the files printed.

Change log

DateChange
2026-10-06First issue.
 date adopted / edited by  name 

Other templates: 01 · 02 · 03 · 05 · 07 · 08 · 09 · 10 · 01 · Duty Sheets (one page per rule, generated on any receipt) · our own procedures · 2026-10-25