Pass-Through Entity Responsibilities Checklist

Why pass-through entity oversight is a high-risk function

Pass-through entities sit at a control point where award terms, subaward design, payment controls, and monitoring all meet. As an AI compliance assistant, I see this area generate repeat findings because organizations treat subrecipient monitoring as a post-award task instead of a full life-cycle responsibility. A complete checklist must connect pre-award risk review, award drafting, financial oversight, cost allowability, indirect cost treatment, certifications, and corrective action.

The most effective PTE programs are built around documented decisions. If your file does not show what you assessed, required, reviewed, escalated, and resolved, auditors will often conclude the control did not operate. That is why this checklist should be read alongside Subrecipient Monitoring Under 2 CFR 200.332 and Common Single Audit Findings and How to Prevent Them.

Checklist item 1: establish the award structure before obligation

Confirm subrecipient versus contractor treatment

Before issuing funds, the PTE should document why the relationship is a subaward and not a procurement. Misclassification breaks monitoring, cost oversight, and reporting expectations. If the relationship is really contractual, the control framework shifts toward procurement standards. For organizations that need a refresher on that side of the line, see 5 Procurement Methods Under 2 CFR 200: A Practical Guide and Sole-Source Procurement: When Justification Is Required.

Draft subaward terms that support monitoring

A strong subaward agreement should do more than restate program goals. It should define deliverables, reporting cadence, invoice detail, supporting documentation expectations, access to records, indirect cost treatment, corrective action timelines, closeout responsibilities, and remedies for noncompliance. If the agreement is vague, monitoring becomes subjective and difficult to enforce.

Where costs are involved, the subaward should align with the allowability framework in 2 CFR 200.403, which requires that costs be necessary, reasonable, allocable, consistent, conform to award limitations, not be double counted, and be adequately documented.

Checklist item 2: perform and document a risk assessment

Assess what could go wrong before payments begin

A practical PTE risk assessment should evaluate prior audit results, staff capacity, turnover, financial stability, program complexity, reimbursement history, newness to Federal funding, and the sensitivity of participant services. The point is not to create a score for its own sake. The point is to tie risk factors to monitoring intensity.

For example, a new subrecipient with weak accounting segregation may warrant monthly invoice review, targeted source documentation testing, and earlier technical assistance. A mature subrecipient with strong audit history may justify lighter monitoring. If your organization struggles with repeat findings, pair this process with Remediating Repeat Single Audit Findings: A Complete Guide.

Translate risk into a monitoring plan

Every assessed risk should lead to a control response: desk reviews, programmatic check-ins, site visits, payment holds, expanded sampling, or corrective action plans. A risk assessment with no operational follow-through is one of the easiest weaknesses for reviewers to identify.

Checklist item 3: test allowability, reasonableness, and allocability

PTEs often review invoices for math but not for allowability. That is a mistake. Under 2 CFR 200.403, allowable costs must be adequately documented and meet multiple criteria. Under 2 CFR 200.404, a reasonable cost is one a prudent person would incur, considering market prices, sound business practices, and whether the action deviated from written policies. Under 2 CFR 200.405, a cost is allocable only when it benefits the Federal award in proportion to the charge.

That means a PTE checklist should ask: Is the cost tied to the subaward scope? Is it supported by invoices, payroll support, or allocation worksheets? Does it appear inflated relative to market? Was it shifted from another award to solve a funding problem? Has the subrecipient applied the same treatment consistently across programs?

For a deeper breakdown of the allowability standard, link your reviewers to Mastering Allowable Cost Determination: 2 CFR 200.403 Explained.

Checklist item 4: review indirect cost treatment and cost allocation support

Check direct versus indirect consistency

One persistent audit issue is inconsistent treatment of costs. 2 CFR 200.412 states that each cost incurred for the same purpose in like circumstances must be treated consistently as either direct or indirect. 2 CFR 200.413 further explains that direct costs must be specifically identifiable to the award, while administrative and clerical salaries normally belong in indirect costs unless strict conditions are met.

PTE reviewers should verify whether the subrecipient is charging items like admin salaries, shared software, rent, or utilities in a way that matches its methodology. If the same kind of cost appears both in direct charges and the indirect pool, the risk of double charging is immediate.

Require defensible cost allocation

When a cost benefits more than one objective, 2 CFR 200.405 requires distribution in proportion to benefits received using reasonable methods. PTEs should ask for allocation narratives and worksheets, not just totals. This is especially important for shared personnel, occupancy, IT, and centralized support. For practical documentation models, see Cost Allocation Plans: Documentation That Holds Up and De Minimis Indirect Cost Rate: When and How to Use It.

Checklist item 5: capture credits, limits, and approvals before costs age

Subrecipient oversight also means checking whether the net charge is correct. 2 CFR 200.406 requires applicable credits such as rebates, refunds, and adjustments of overpayments to reduce the Federal charge or be refunded as appropriate. A PTE that never asks about credits may reimburse overstated net costs.

Where a cost may require agency approval, 2 CFR 200.407 is the decision rule. The section explains that prior written approval can avoid later disputes and lists areas where approval may be specifically required, including cost sharing, program income, budget revisions, fixed amount subawards, equipment, pre-award costs, and travel. Your checklist should ask whether the subrecipient obtained and retained required approvals before billing.

PTEs should also remember 2 CFR 200.408: if a statute caps a cost, anything above that maximum is unallowable even if otherwise documented.

Checklist item 6: collect certifications and retain the file

Certification language is not optional paperwork. Under 2 CFR 200.415, subrecipients must certify to the pass-through entity whenever applying for funds, requesting payment, and submitting financial reports that the information is true, complete, and accurate, and that false or omitted material information may trigger criminal, civil, or administrative consequences. Each certification must be maintained under record retention requirements.

A disciplined PTE checklist therefore includes: required certification text on reimbursement requests, certification on financial reports, file retention indexing, and escalation if a submission arrives without certification. These are simple controls, but they are heavily relied upon when the PTE later needs to defend payment decisions.

Checklist item 7: enforce employee notification and reporting protections

Whistleblower obligations are easy to overlook in subrecipient oversight, but they belong in the compliance architecture. 2 CFR 200.217 states: “The recipient and subrecipient must inform their employees in writing of employee whistleblower rights and protections under 41 U.S.C. 4712.”

A prudent PTE should require the subrecipient to attest that written notice has been provided to employees and should reserve the right to review the notice. This matters because staff are often the first source of information about gross mismanagement, abuse of authority, or waste of Federal funds. If your monitoring program ignores internal reporting channels, it may miss the earliest warning signs.

Checklist item 8: respond to questioned and unallowable costs fast

When monitoring identifies unsupported, unreasonable, or otherwise impermissible charges, delay increases exposure. 2 CFR 200.410 requires payments made for unallowable costs, when so determined by the Federal agency, cognizant agency, or pass-through entity, to be refunded with interest to the Federal Government. That means the PTE is not merely a messenger. It has authority and responsibility to make allowability determinations within its oversight role.

Relatedly, 2 CFR 200.411 requires adjustment or refund when negotiated indirect cost rates included unallowable or nonallocable costs. If a subrecipient’s rate support is flawed, the financial correction may extend beyond a single invoice.

Your checklist should therefore include a questioned-cost workflow: notice to subrecipient, response deadline, document review, final determination, repayment method, interest analysis, and tracking of corrective action.

Checklist item 9: tailor oversight for entity type and cost environment

Some PTEs monitor every subrecipient the same way. That is administratively simple but legally weak. 2 CFR 200.409 highlights special considerations for states, local governments, Indian Tribes, and institutions of higher education. Sections 200.416 and 200.417 address cost allocation plans and interagency service for governmental entities, while 200.419 addresses cost accounting standards for certain IHEs.

If your subrecipient is a university, effort support, F&A practices, and institutional systems may require specialized review. See Research Grant Compliance for Universities, Effort Certification Under Uniform Guidance for IHEs, and Mastering F&A Rates in Higher Education: A 2 CFR 200 Guide.