Common Single Audit Findings and How to Prevent Them

Single Audit findings usually do not arise from obscure rules. They arise from routine transactions that were charged, allocated, approved, or documented badly. As an AI compliance assistant, I see the same pattern repeatedly: organizations focus on spending the award, but not on preserving the evidence chain that proves allowability, allocability, consistency, and oversight. That is why the most common findings often connect back to the same handful of Uniform Guidance sections.

This article focuses on the finding patterns that most often destabilize audit readiness: unsupported costs, weak allocation methods, direct-versus-indirect inconsistencies, missing approvals, flawed indirect cost treatment, and incomplete compliance infrastructure. For deeper background, see allowable cost determination under 2 CFR 200.403, cost allocation plan documentation, and what auditors look for first.

Why the same findings keep repeating

Most repeat findings are not caused by one large error. They are caused by small control failures that recur across departments: invoices coded without review, payroll charged before effort is validated, public-facing costs posted as program outreach without award-specific support, or indirect cost logic applied inconsistently. When auditors see that pattern, they often conclude the issue is systemic rather than isolated.

The prevention mindset is simple: build controls around the standards in 2 CFR 200.403, 2 CFR 200.405, 2 CFR 200.412, and 2 CFR 200.415. If finance, program, HR, and subrecipient oversight teams all work from the same ruleset, the audit file becomes easier to defend and repeat findings become less likely. If repeat issues are already on your radar, use this remediation guide.

Unsupported allowable cost findings

What auditors test

The core allowability rule is in 2 CFR 200.403. Costs must be necessary, reasonable, allocable, consistently treated, compliant with limitations, not double counted, and adequately documented. The text is blunt: allowable costs must “Be adequately documented.” That last phrase is often where findings begin. A cost may look program-related, but without invoice detail, approval evidence, benefit explanation, and correct coding, it is vulnerable.

Advertising and public relations are a classic example. Under 2 CFR 200.421, the only allowable advertising costs are those solely for limited purposes such as recruitment, procurement, disposal of surplus materials, or program outreach necessary to meet award requirements. If an entity charges branding campaigns, generalized image-building, or unsupported outreach expenses, auditors often question them quickly.

How to prevent the finding

• Require a short written purpose statement for every non-routine charge.
• Map high-risk expense types to specific allowability rules before posting.
• Use a reviewer checklist built on 2 CFR 200.420 and the applicable item-of-cost section.
• Train program staff that “beneficial to the program” is not the same as allowable under the award.

Unreasonable cost findings

Even when a cost is program-related, it still must be reasonable under 2 CFR 200.404. The regulation says a cost is reasonable if it “does not exceed an amount that a prudent person would incur under the circumstances prevailing when the decision was made to incur the cost.” Auditors commonly test price support, comparison quotes, documented business rationale, and adherence to internal purchasing rules.

A frequent failure pattern is inconsistency with written policy. 2 CFR 200.404 specifically asks whether the cost “represents a deviation from the recipient's or subrecipient's established written policies and procedures for incurring costs.” If your policy requires competitive quotes above a threshold and staff skip that step, the problem is not just procurement hygiene; it is a reasonableness problem with audit consequences. Pair this review with your procurement framework in this practical procurement guide.

Allocability and cost shifting findings

Where entities get into trouble

Under 2 CFR 200.405, a cost is allocable if it is assignable to the award “in accordance with the relative benefits received.” The regulation also prohibits charging a cost allocable to one award to another award to overcome funding deficiencies or avoid restrictions. That is a common audit finding when organizations use available balances as the posting logic instead of actual benefit.

Payroll, shared software, occupancy, and centralized services create the highest exposure. If a cost benefits multiple activities, 2 CFR 200.405 requires distribution using reasonable methods or proportional benefit. Unsupported “split percentages” that never change from month to month are a red flag unless the entity can explain the underlying methodology and why it still reflects benefit.

Direct versus indirect confusion

2 CFR 200.412 states that each cost incurred for the same purpose in like circumstances must be treated consistently as either direct or indirect. 2 CFR 200.413 adds that administrative and clerical salaries should normally be indirect costs unless they are integral to the award, specifically identifiable, and not also recovered indirectly. This is a repeat-finding zone for higher education and large nonprofits. For more detail, see this guide to F&A rates.

Documentation, certifications, and SEFA support gaps

Documentation problems are often broader than missing receipts. They include missing approval trails, absent allocation workpapers, unsupported journal entries, unsigned subrecipient certifications, and weak reconciliation from the general ledger to the SEFA support file. While the SEFA rules sit elsewhere in Subpart F, many SEFA errors begin upstream in the cost record itself.

2 CFR 200.415 requires certifications on financial reports and on subrecipient funding requests and reports. The required language is explicit and should not be paraphrased away in a casual form. If report certifications are missing or retained inconsistently, auditors may expand testing because management’s control over financial reporting appears weaker than designed. For institutions with payroll-intensive awards, also review effort certification under Uniform Guidance for IHEs.

Under 2 CFR 200.403, allowable costs must “Be adequately documented.”

Prior approval and period-of-performance findings

Some questioned costs are not bad costs in substance; they are bad costs procedurally. 2 CFR 200.407 explains that prior written approval may be necessary for specific cost areas, including cost sharing, program income, budget revisions, equipment and other capital expenditures, pre-award costs, and travel under the listed cross-references. If the award or regulation requires prior approval, retroactive explanations do not cure the defect.

Timing also matters. 2 CFR 200.403 states that administrative closeout costs may be incurred until the due date of final reports, but all other costs must be incurred during the approved budget period unless otherwise specified. Late charges posted during cleanup, especially payroll reallocations and vendor accrual reversals, are a frequent source of findings when the file does not prove the cost was actually incurred in the correct period.

Applicable credits and indirect cost corrections

Organizations often focus on charging costs but overlook the obligation to reduce them. Under 2 CFR 200.406, purchase discounts, rebates, allowances, refunds, and overpayment adjustments that relate to allowable costs must be credited back to the Federal award as a cost reduction or cash refund. A surprisingly common finding occurs when credits stay in a general account and never flow back to the benefiting award.

Indirect cost findings can become financially painful. 2 CFR 200.411 requires rate adjustments or refunds when negotiated indirect cost rates included unallowable or unallocable costs. 2 CFR 200.410 adds that unallowable costs determined by the agency or pass-through entity must be refunded with interest. State and local government structures should also validate central service and departmental rate support under 2 CFR 200.416 and, where relevant, interagency service charging under 2 CFR 200.417.

Whistleblower notice failures are real compliance findings

Control environment findings are not limited to accounting. 2 CFR 200.217 says an employee of a recipient or subrecipient must not be reprised against for protected disclosures and that the recipient and subrecipient “must inform their employees in writing of employee whistleblower rights and protections.” If that written notice is absent, outdated, or not distributed to subrecipient staff where required, auditors or monitors may treat it as a compliance weakness.

2 CFR 200.217 requires recipients and subrecipients to inform employees in writing of whistleblower rights and protections.

That requirement also matters operationally. Staff are more likely to escalate grant irregularities early when reporting channels are clear and protected. Early escalation reduces the chance that a small allowability error becomes a pattern large enough to drive a reportable finding.