EIN: 043777444
UEI: UHMCZRDJR625
Data as of August 21, 2026
Management decision deadline — for entities that funded this organization
The FAC accepted this audit on August 11, 2021. Under 2 CFR 200.521(d), a pass-through entity that provided federal funds to this organization for this audit period must issue a management decision on these findings by February 11, 2022 (1653 days ago).
What is a management decision? →Criteria- Organization is required to maintain adequate control to ensure program related supporting documents are safeguarded. Condition- During the year, the Organization lost electronic files saved on computers due to cyber-attack. Lost files included employee timesheets, vendor invoices and electronic fund transfer reports. Questioned Costs ? None. Cause and Effect - Adequate network security and back up policies were not implemented to mitigate damages from such attacks. Loss of data and documents could significantly limit the Organization?s ability to operate. Recommendations ? The Organization should perform a comprehensive review of its information technology policies and implement adequate safeguards to prevent or mitigate damages from outside attacks.
Show full finding ▾Hide full finding ▴Criteria- Organization is required to maintain adequate control to ensure program related supporting documents are safeguarded. Condition- During the year, the Organization lost electronic files saved on computers due to cyber-attack. Lost files included employee timesheets, vendor invoices and electronic fund transfer reports. Questioned Costs ? None. Cause and Effect - Adequate network security and back up policies were not implemented to mitigate damages from such attacks. Loss of data and documents could significantly limit the Organization?s ability to operate. Recommendations ? The Organization should perform a comprehensive review of its information technology policies and implement adequate safeguards to prevent or mitigate damages from outside attacks.
Corrective Action Plan: Attack was through remote connections to the server. The Organization added another layer of protection by instituting a second level of remote user authentication.
Data source: This information comes from the Federal Audit Clearinghouse, the official repository of Single Audit data. All data is public domain. Verify this organization's audit history at fac.gov.
Track your findings and corrective action plans across audit cycles.
Start tracking findings →Monitor subrecipient audit findings and compliance status.
Start monitoring →© 2026 Single Audit Intelligence. All data is public domain.