Audit (grant)

A grant audit is a formal examination of an institution’s or project’s financial records, internal controls, and compliance with sponsor terms, conducted by external or internal auditors to provide independent assurance that grant funds were properly managed. The term covers several genuinely distinct mechanisms depending on the funder and jurisdiction, and conflating them is a common source of confusion for research administrators encountering “federal grant audit” language for the first time.

The three US federal grant-audit mechanisms

For US federal awards specifically, “federal grant audit” can refer to any of three distinct processes:

• The Single Audit. Governed by 2 CFR 200 Subpart F (Sections 200.500-200.521), this is an organisation-wide, annual audit covering all of a recipient’s federal awards together, required once an entity’s federal expenditures in a fiscal year exceed a statutory threshold. That threshold was raised from $750,000 to $1,000,000 by the April 2024 Uniform Guidance revision, effective for non-federal entity fiscal years beginning on or after October 1, 2024. See the dedicated Single Audit (US) term for the full mechanics, and the Single Audit reporting-package walkthrough for what the resulting report actually contains.
• The program-specific audit. Under 2 CFR 200.501(c), a non-federal entity that expends federal awards under only one federal program — and whose program’s own statutes or regulations don’t separately require a financial statement audit — may elect a program-specific audit conducted per 2 CFR 200.507, instead of the broader organisation-wide Single Audit. This is a narrower-scope alternative, not a lower bar; it applies only when an organisation’s federal funding genuinely comes from a single program.
• The agency-initiated audit. Separate from both routine mechanisms above, a funding agency — most often via its Office of Inspector General — can initiate its own audit of a single award at any time, outside the regular Single Audit or program-specific-audit cycle. This is typically triggered by a specific compliance concern, whistleblower complaint, or risk-based selection rather than occurring on a fixed schedule.

All three are financial/compliance examinations distinct from a sponsor’s routine programmatic progress review, which assesses scientific or project progress rather than financial stewardship.

Non-US and other funder audit mechanisms

Non-US funders run parallel but differently structured mechanisms. For example, a Horizon Europe consortium may need to engage an external auditor to issue a Certificate on the Financial Statements (CFS) once a beneficiary’s cumulative claimed costs exceed a set threshold — a project-level, funder-required audit rather than the US’s organisation-wide annual model.

Oversight of Single Audit reporting

In the US, HHS-OIG conducts Desk Reviews and Quality Control Reviews (QCRs) of Single Audit reporting packages to check compliance with professional auditing standards and to help direct its own audit resource allocation — a layer of federal oversight sitting on top of the Single Audit process itself, distinct from an agency-initiated audit of a specific award.

What a grant audit is not

An internal financial check performed by a principal investigator is monitoring, not a formal audit — it lacks the independence and formal assurance standard a real audit requires. Likewise, a sponsor’s annual progress review is a programmatic assessment of project activity, not a financial audit, even though both are sometimes loosely called “reviews” in practice.

Frequently Asked Questions

What triggers a US Single Audit?

An organisation’s federal expenditures exceeding $1,000,000 in a fiscal year (for fiscal years beginning on or after October 1, 2024; the prior threshold was $750,000), under 2 CFR 200 Subpart F.

Can an organisation avoid a full Single Audit?

Only if its federal awards for the year come from a single federal program and that program’s own rules don’t separately require a financial statement audit — in that specific case, 2 CFR 200.501(c) allows electing a narrower program-specific audit instead.

Is a grant audit the same as a programmatic progress review?

No. A grant audit examines financial records, internal controls, and compliance; a programmatic progress review assesses scientific or project progress. Sponsors typically require both, on separate schedules and for separate purposes.

References

• 2 CFR Part 200, Subpart F (“Audit Requirements”), Sections 200.500-200.521.
• 2 CFR 200.501(c) and 200.507 (program-specific audit election).
• HHS Office of Inspector General, Single Audit oversight activities (oig.hhs.gov/compliance/single-audits).