Subrecipient Monitoring Under Uniform Guidance: Risk, Agreements, Audits

Subrecipient monitoring requirements under the Uniform Guidance obligate a pass-through entity to classify each downstream organization, assess its risk before issuing the subaward, build specific terms into the agreement, monitor financial and performance activity throughout the period, review any Single Audit findings, and handle closeout and record retention on federal deadlines. The rules live in 2 CFR Part 200, and the pass-through entity carries responsibility for every step.¹

Confirming You Have a Subrecipient

Monitoring duties only apply if the other organization is a subrecipient rather than a contractor. The pass-through entity must make that call on a case-by-case basis, looking at the substance of the relationship rather than the label on the agreement.²

A subrecipient takes on a piece of the federal program: it decides who receives services, has its performance judged against the federal program’s goals, and bears responsibility for meeting federal program requirements. A contractor sells goods or services it provides to many buyers in the ordinary course of business and does not share responsibility for whether the federal program achieves its objectives. When the call is close, the deciding factor is usually whether the organization exercises independent judgment about how to achieve the program’s goals. If it does, treat it as a subrecipient.²

Misclassifying a subrecipient as a contractor is one of the most common audit findings in grant management. The pass-through entity loses the ability to impose required monitoring, the required flow-down provisions are absent, and both parties end up exposed.

Pre-Award Risk Assessment

Before issuing a subaward, the pass-through entity must evaluate each subrecipient’s risk of noncompliance and use that evaluation to shape the monitoring plan.¹ A workable assessment looks at four things:

Prior audit history. Check the Federal Audit Clearinghouse for any Single Audit results. Unresolved findings, material weaknesses, or questioned costs raise the rating.³
Experience with similar awards. An organization that has successfully managed comparable federal programs presents less risk than a first-timer.
Financial stability. Review recent financial statements, internal control policies, and organizational structure for signs the organization can track federal dollars separately and comply with cost principles.
Complexity of the work. A pass-through of stipend payments is inherently less risky than a multi-site research project with cost-sharing.

Most pass-through entities land on a low, medium, or high rating. A low-risk subrecipient with a clean history may need only standard quarterly report reviews. A high-risk subrecipient often warrants special conditions written directly into the subaward, such as reimbursement-only payments instead of advance funding, more frequent financial reporting, or prior approval before incurring certain costs.⁴

Document the assessment and the reasoning. Auditors want to see both.

SAM.gov Exclusion Check

Before any subaward, the pass-through entity must verify that the prospective subrecipient is not suspended, debarred, or otherwise excluded from receiving federal funds.¹ The regulations allow three methods: checking the exclusions list on SAM.gov, collecting a written certification from the subrecipient, or adding a clause to the agreement requiring the subrecipient to certify its eligibility.⁵ Most experienced grant managers check SAM.gov directly and keep a screenshot or printout in the file. Issuing a subaward to an excluded organization can result in disallowed costs for the full subaward amount.

What the Subaward Agreement Must Contain

The Uniform Guidance requires specific data elements in every subaward. Missing elements lead to audit findings and make compliance harder to enforce.¹ At minimum:

The Federal Award Identification Number, tying the subaward to the original federal grant.
The federal award date, subaward period of performance, and budget period dates.
The amount obligated in the subaward, the total obligated to that subrecipient to date, and the total committed to the subrecipient.
The Assistance Listings title and number (formerly the CFDA number), with the dollar amount per Assistance Listings Number identified at disbursement.
An indirect cost rate: either the subrecipient’s federally negotiated rate or a rate determined in collaboration with the subrecipient. A subrecipient with no negotiated rate may use the de minimis rate of 15 percent of modified total direct costs.⁶
A research designation indicating whether the federal award is for research and development.
An access-to-records clause requiring the subrecipient to allow the pass-through entity and auditors to review its records and financial statements.
Closeout terms with conditions and deadlines.

You cannot force a subrecipient with a federally negotiated indirect cost rate to accept the 15 percent de minimis rate instead. The regulation prohibits it, and the point comes up often when a university sits below a smaller pass-through entity.¹

Ongoing Monitoring Duties

The Uniform Guidance requires the pass-through entity to monitor subrecipient activities to ensure compliance with federal requirements and achievement of the program’s performance goals.¹ Every subrecipient, regardless of risk level, needs a baseline set of activities:

Financial report review. Compare reported expenditures against the approved budget and federal cost principles. Look for spending outside the project’s scope or over budget category limits without prior approval.
Performance report review. Check whether the subrecipient is hitting milestones and deliverables. A subrecipient spending money on schedule but not producing results is a red flag.
Regular communication. Ongoing contact catches problems earlier than the next quarterly report will.
Technical assistance. When a subrecipient struggles with a federal requirement or reporting format, guide them through it rather than just documenting the failure.

Higher-risk subrecipients call for more. On-site visits let you inspect physical records, timecards, and procurement files to check that reported data matches reality. Desk audits of accounting records serve a similar function without travel. Agreed-upon-procedures engagements, where an independent auditor tests specific compliance areas, add another layer.¹

Single Audit Follow-Up

The pass-through entity must verify whether each subrecipient is required to undergo a Single Audit. The current threshold is $1,000,000 in federal expenditures during the subrecipient’s fiscal year.⁷ When a subrecipient crosses that threshold, the pass-through entity must review the audit results and issue a management decision on any findings within six months of the Federal Audit Clearinghouse accepting the report.³ That management decision spells out required corrective actions and the timeline for completing them. Missing the six-month window is itself an audit finding against the pass-through entity.

FFATA Subaward Reporting

A separate obligation runs alongside monitoring. Under the Federal Funding Accountability and Transparency Act, any subaward of $30,000 or more must be reported through fsrs.gov by the end of the month following the month the subaward was made.⁸ If a modification later pushes a subaward to $30,000 or above, reporting is required at that point.

Enforcement When a Subrecipient Falls Short

When monitoring turns up noncompliance, the Uniform Guidance sets out escalating remedies.⁹

Temporarily withhold payments until the subrecipient takes corrective action.
Disallow costs, declaring specific expenditures ineligible for federal reimbursement and requiring the subrecipient to return those funds.
Suspend or terminate the award in whole or in part.
Recommend suspension or debarment. The pass-through entity cannot initiate debarment itself, but it can recommend that the federal awarding agency do so. Debarment bars the organization from receiving federal funding for a set period, typically several years.

The pass-through entity must give the subrecipient an opportunity to object and present information challenging the enforcement action, and honor any applicable hearing or appeal rights under other statutes.¹⁰ Document the noncompliance thoroughly and communicate it in writing before imposing a remedy. A clear paper trail protects the pass-through entity if the decision is challenged.

Closeout and Record Retention

When the subaward’s period of performance ends, the subrecipient must submit all final reports (financial, performance, and any other reports the subaward requires) within 90 calendar days. The parties can agree on an earlier deadline, and the pass-through entity can grant extensions when justified. All financial obligations must be settled within the same 90-day window.¹¹

Closeout is where loose ends become audit findings. Unreported expenditures, unresolved cost-share obligations, and missing deliverables all have to be handled before the file can be closed. Build a closeout checklist into your procedures and start the process well before the 90-day clock runs out.

Both the pass-through entity and the subrecipient must keep all records related to the federal award for at least three years from the date they submit their final financial report.¹² If any litigation, claim, or audit is pending when that three-year period would otherwise expire, the records must be kept until the matter is resolved. Grant files have a habit of becoming relevant years later, so err on the side of keeping them longer.