Goldenthal & Suss

HHS Grant Compliance for Accountable Boards

HHS grant compliance requires more than accurate reports. Build controls, documentation, oversight, and audit readiness that protect federal grant awards.

A late report is visible. A cost charged to the wrong award, an unsupported payroll allocation, or a subrecipient left unmonitored may not be visible until much later, when the organization faces questioned costs, repayment demands, or audit findings. Effective HHS grant compliance is therefore not a year-end reporting task. It is an operating discipline that connects program delivery, finance, procurement, payroll, and board oversight from the first day of an award.

For healthcare, human-services, education, and community-based organizations, HHS funding can carry several layers of obligation. The Notice of Award, agency-specific regulations, approved application and budget, federal cost principles, and organizational policies may all apply at once. Leadership needs a structure that makes those requirements usable in the ordinary course of business, not merely available in a grant file.

HHS Grant Compliance Starts With the Notice of Award

The Notice of Award should be treated as the governing document for each grant, not as administrative correspondence to be filed after acceptance. It identifies the award period, approved project scope, funding amount, assistance listing number, reporting expectations, special terms, and conditions that may restrict spending or require prior written approval.

Finance and program leadership should review the award together before expenditures begin. That conversation should establish who owns program performance, who approves costs, how activity will be documented, when reports are due, and which changes require escalation. A grant may be funded by an HHS operating division such as HRSA, SAMHSA, CDC, CMS, or NIH, but the compliance work ultimately happens inside the recipient organization.

Award terms can differ materially even among grants from the same agency. One award may permit a particular staffing model or indirect cost rate, while another may require a budget revision or prior approval before the organization makes the same decision. A reliable compliance process does not assume that last year's practice applies to this year's award.

Build an award profile before charging costs

An award profile translates the terms of a federal award into instructions that the people processing transactions can follow. It should identify the project period, budget categories, matching or cost-sharing requirements if applicable, indirect cost treatment, reporting calendar, key personnel, subaward activity, equipment considerations, and approval thresholds.

This profile should also identify the responsible individuals in finance, operations, and program management. When responsibility is diffuse, errors tend to surface only after the reporting deadline or during the audit. Clear ownership creates a more useful control environment than a generic statement that the organization "follows Uniform Guidance."

The profile is particularly valuable when there is staff turnover. It gives a new controller, grants manager, or program director a current record of the award's operating requirements and the decisions already made. It also creates a disciplined starting point for the board or audit committee when reviewing significant federal funding risk.

HHS Grant Compliance Is a Control System

The federal cost principles require costs to be allowable, allocable, reasonable, consistently treated, and adequately documented. Those words are familiar, but their application is where many organizations encounter difficulty. A cost can be reasonable in a general business sense and still be unallowable under the award terms. A cost can be allowable in theory but improperly charged if the organization cannot show the connection to the benefiting program.

The accounting system should capture HHS activity by award and, when necessary, by budget category or program component. Program leaders should review budget-to-actual results regularly with finance, not only when a federal financial report is due. This is how leadership identifies spending that is running ahead of the award period, underspending that could compromise program delivery, or cost categories that may require prior approval before funds are moved.

Payroll deserves heightened attention because personnel costs are often the largest component of an HHS budget. Salary charges should be supported by records that accurately reflect work performed, are incorporated into the organization's official records, and are reviewed through an established internal-control process. The right method depends on the organization's work structure. A clinician, case manager, investigator, or shared administrative employee may need different support, but estimates alone are not sufficient when actual activity can be measured.

Procurement is another frequent point of exposure. Organizations should follow their documented procurement policies while meeting applicable federal standards for competition, conflict-of-interest safeguards, contractor oversight, and documentation. The appropriate process depends on the purchase amount, the nature of the goods or services, and the current federal threshold structure. What matters most is that the organization can demonstrate why it selected the vendor, how it evaluated price or other factors, and whether the purchase complied with both internal policy and award restrictions.

Documentation should answer an auditor's questions

Good documentation does more than prove that money was spent. It explains the compliance logic behind the transaction. For a payroll charge, that means the employee's documented activity, compensation rate, approval, and connection to the grant. For a vendor payment, it includes the procurement record, contract or purchase order, invoice, evidence of receipt, approval, and allocation method where costs benefit more than one program.

This does not require keeping every record in a single physical or electronic folder. It does require records that can be retrieved, reconciled, and understood by someone who was not involved in the original transaction. Fragmented systems are workable only when the organization has a clear record-retention process and can produce the complete support promptly.

Monthly reconciliations are central to that discipline. Finance should reconcile the general ledger to drawdowns, reimbursement requests, and grant reports, while program leadership confirms that reported activity is consistent with actual services delivered. Differences should be investigated before a report is submitted, not explained after the fact.

Subrecipients Require Active Oversight

Passing federal funds to another organization does not pass away the recipient's accountability. The recipient must first determine whether the relationship is a subaward or a procurement contract. The label used in an agreement is not controlling; the substance of the relationship is. A subrecipient generally carries out a portion of the federal program and has responsibility for programmatic decision-making, while a contractor provides goods or services for the recipient's own use.

Where a subrecipient relationship exists, the organization needs a written agreement containing the required federal award information and clear compliance expectations. It must assess risk, monitor performance and expenditures, follow up on identified concerns, and retain evidence of that oversight. The level of monitoring should be risk-based. A long-standing subrecipient with strong controls may warrant a different approach than a new organization managing a large share of the award.

A practical monitoring file often includes financial and program reports, follow-up correspondence, review notes, audit information where applicable, and evidence that corrective actions were completed. Leadership should not view this as paperwork generated for an auditor. It is how the prime recipient confirms that federal funds are producing the intended services under the required conditions.

Prepare for the Single Audit Before It Is Due

Organizations expending $1 million or more in federal awards during a fiscal year are generally subject to a Single Audit for fiscal years beginning on or after October 1, 2024. The audit threshold is only one part of the analysis. The auditor will evaluate major programs based on risk and expenditure, then test compliance requirements and the internal controls supporting them.

Audit readiness begins with a complete schedule of federal expenditures, accurate award identification, reconciled grant records, and a current understanding of applicable compliance requirements. It also requires management to assess whether controls are actually operating as designed. A policy that requires approval before a budget revision is useful only if approvals are consistently documented before changes occur.

When prior findings exist, corrective action deserves direct attention from management and the governing body. Repeated findings often signal a deeper issue: unclear accountability, insufficient staffing, systems that do not support grant-level reporting, or policies that do not reflect current practice. The clearest picture your board will ever get may come from asking not whether a finding was cleared, but whether the underlying condition has been corrected.

What Boards and Audit Committees Should Ask

Boards are not expected to approve every drawdown or review every invoice. Their responsibility is governance: ensuring that management has the competence, resources, controls, and reporting discipline required to steward public funds. Federal awards should appear in regular financial and risk discussions when they are material to the organization or operationally complex.

Useful board-level questions include whether management has a current inventory of HHS awards and their major terms, whether grant reports reconcile to the general ledger, whether subrecipient monitoring is documented, and whether any spending, reporting, or staffing pressures threaten compliance. The answers should be specific. A statement that grants are "on track" is less useful than a report identifying due dates, material variances, prior approvals in process, and unresolved control issues.

Independent audit and compliance support can provide partner-level attention when leadership needs to test the design of controls, prepare for a Single Audit, or respond to a finding. For organizations with multiple funding streams, an early assessment is usually less disruptive and less costly than correcting unsupported activity after funds have been spent.

Federal funding is a public trust as well as a revenue source. When the organization treats award terms, documentation, and oversight as part of program management, it protects both the grant and the mission the grant was awarded to serve.

This article is general information, not accounting, audit, or tax advice, and it does not create a client relationship. Thresholds and filing requirements change. Confirm anything you intend to rely on against the current rules or speak with us directly.

Talk to an auditor

Goldenthal & Suss performs nonprofit audits, single audits, and Yellow Book government engagements from offices in Staten Island, NY and Freehold, NJ.

Request a Proposal

More insights