Loading...
compliance

Subrecipient Pre-Award Risk Assessment Form

Assess a proposed subrecipient’s financial, compliance, and programmatic risk before issuing a subaward. This form captures the evidence needed to set monitoring intensity, special conditions, or a deferral decision.

Trusted by frontline teams 15 years of frontline software AI customization in seconds

Built for: Higher Education · Nonprofit Grants Management · State And Local Government · Healthcare Research

Overview

The Subrecipient Pre-Award Risk Assessment Form is a compliance workflow for pass-through entities that need to evaluate a proposed subrecipient before issuing a subaward. It captures the core facts that drive the decision: who the subrecipient is, what federal award the subaward will support, whether the organization is active and not excluded in SAM.gov, what its financial statements and audit history show, and whether it has the staffing and systems to manage the award.

Use this template when you need a documented pre-award review under 2 CFR 200.332, when the subrecipient is new or unfamiliar, or when prior findings, weak controls, or a limited federal history may require extra monitoring. It is also useful when you need to justify special conditions, such as more frequent reporting, reimbursement-only payments, or additional approvals.

Do not use this form as a blanket intake for every vendor or contractor. It is for subrecipients, not procurement relationships, and it should not collect unnecessary PII or sensitive data that you will not use. If the award is low risk and your process only needs a light-touch check, you can still use the template with conditional logic to hide deeper review fields. The result should be a clear, auditable record of what was reviewed, what was found, and what action was taken.

Standards & compliance context

  • This template supports the pre-award risk review expected for subrecipients under 2 CFR 200.332 by documenting financial, compliance, and programmatic capacity.
  • The form should follow the minimum-necessary principle by collecting only the PII and organizational data needed to make the subaward decision.
  • If the form is used in a public-facing or shared workflow, it should meet WCAG 2.1 AA accessibility expectations with clear labels, validation, and keyboard-friendly controls.
  • Where the review touches health-related funding, the financial and operational questions should stay within the minimum necessary scope and avoid unnecessary sensitive data collection.
  • If the assessment is used for HR-adjacent or intake-style subrecipients, any accommodation-related prompts should be framed to support reasonable accommodation without over-collecting personal details.

General regulatory context for orientation only — verify current requirements with counsel or the relevant agency before relying on this template for compliance.

What's inside this template

Assessment & Subaward Identification

This section anchors the review to the correct award, amount, and period so the assessment can be traced back to the proposed subaward.

  • Reviewer Name (Pass-Through Entity Staff) (required)
  • Reviewer Title / Role (required)
  • Assessment Date (required)
  • Federal Award / Program Name (required)
  • Assistance Listing Number (formerly CFDA) (required)

    Enter the Assistance Listing number from SAM.gov for the federal program.

  • Federal Award Identification Number (FAIN) (required)
  • Proposed Subaward Amount (USD) (required)

    Enter the total dollar amount of the proposed subaward.

  • Proposed Period of Performance — Start Date (required)
  • Proposed Period of Performance — End Date (required)

Subrecipient Organization Profile

This section confirms who the organization is and who will respond to follow-up questions, which reduces identity and contact errors later.

  • Subrecipient Legal Organization Name (required)
  • Doing Business As (DBA) Name
  • Unique Entity Identifier (UEI) (required)

    12-character UEI assigned by SAM.gov. Required for all federal subawards per 2 CFR 200.331(a)(1)(i).

  • Organization Type (required)
  • If 'Other', describe organization type
  • Years Organization Has Been in Operation (required)
  • Primary Contact Name (required)
  • Primary Contact Email (required)
  • Primary Contact Phone (required)
  • Is this the first time this organization is receiving a subaward from your entity? (required)

SAM.gov Registration and Exclusion Verification

This section documents eligibility checks and exclusion screening, which are core pre-award controls before funds are released.

  • SAM.gov Registration Status (required)

    Verify at sam.gov using the subrecipient’s UEI. Registration must be active at time of subaward.

  • SAM.gov Registration Expiration Date

    Enter the expiration date shown in SAM.gov.

  • SAM.gov Exclusions Check Result (required)

    Search the SAM.gov exclusions database for the subrecipient’s legal name and UEI per 2 CFR 180.300.

  • Date SAM.gov Check Was Performed (required)
  • SAM.gov Check Performed By (Name) (required)
  • Exclusion / Registration Issue Notes

    If an exclusion was found or registration is not active, describe the issue and any corrective steps taken or required.

Financial Capacity and Internal Controls

This section shows whether the subrecipient can manage funds responsibly and whether its accounting structure is strong enough for the award.

  • Are audited or reviewed financial statements available for the most recent fiscal year? (required)
  • Fiscal Year Covered by Most Recent Financial Statements
  • Total Annual Expenditures (Most Recent Fiscal Year, USD)

    Used to determine Single Audit threshold applicability (≥ $750,000 in federal expenditures triggers 2 CFR 200.501).

  • Total Federal Expenditures (Most Recent Fiscal Year, USD)

    If ≥ $750,000, the subrecipient is subject to Single Audit requirements under 2 CFR 200.501.

  • Were any going-concern opinions or material uncertainties noted in the financial statements? (required)
  • Describe the going-concern or material uncertainty finding
  • Does the subrecipient have written financial management policies and procedures (including procurement, cash management, and allowable costs)? (required)
  • Does the subrecipient maintain adequate segregation of duties for financial transactions? (required)

    Segregation of duties means no single individual controls authorization, custody, and recording of transactions.

Prior Audit Findings and Compliance History

This section surfaces repeat issues, unresolved findings, and sanctions that may require tighter monitoring or special conditions.

  • Is the subrecipient subject to Single Audit requirements (≥ $750,000 in federal expenditures)? (required)

    Per 2 CFR 200.501, non-federal entities that expend $750,000 or more in federal awards in a fiscal year must have a Single Audit.

  • Has the most recent Single Audit been submitted to the Federal Audit Clearinghouse (FAC)?

    Verify at fac.gov. Single Audits must be submitted within 30 calendar days after receipt of the auditor’s report, or 9 months after the end of the audit period, whichever is earlier (2 CFR 200.512).

  • Most Recent Single Audit Year Reviewed at FAC
  • Were there any audit findings (material weaknesses, significant deficiencies, or questioned costs) in the most recent audit period? (required)
  • Type(s) of Audit Findings Identified

    Select all that apply from the most recent audit period.

  • Describe Audit Findings and Corrective Action Plan Status

    Summarize the nature of findings, the corrective action plan (CAP) submitted, and current resolution status. Reference FAC finding reference numbers where available.

  • Has the subrecipient been subject to any federal or state sanctions, terminations for cause, or disallowed costs in the past 5 years? (required)
  • Describe Prior Sanctions, Terminations, or Disallowed Costs

Programmatic and Organizational Capacity

This section checks whether the subrecipient has the staff, systems, and experience to carry out the work as proposed.

  • Has the subrecipient previously managed federal awards or subawards? (required)
  • Years of Experience Delivering Similar Programs or Services (required)
  • Does the subrecipient have dedicated staff responsible for grants management and financial reporting? (required)
  • Type of Accounting System Used (required)
  • Does the subrecipient have an approved or documented cost allocation plan or indirect cost rate agreement? (required)

    Per 2 CFR 200.414, subrecipients must use a negotiated indirect cost rate or elect the 10% de minimis rate if eligible.

  • Does the subrecipient plan to subcontract or further sub-tier any portion of the work? (required)
  • Describe Planned Subcontracting Arrangements

    Identify anticipated subcontractors, estimated amounts, and procurement approach. Note: further sub-tiering of federal funds may require pass-through entity approval per subaward terms.

Risk Rating and Monitoring Determination

This section turns the review into an action plan by linking the evidence to a risk level, monitoring approach, and approval decision.

  • Overall Pre-Award Risk Rating (required)

    Assign a risk rating based on the totality of findings in this assessment. This rating drives monitoring intensity and special conditions.

  • Risk Rating Justification (required)

    Summarize the key factors driving the risk rating. Reference specific findings from this assessment.

  • Planned Monitoring Approach (required)

    Select all monitoring activities to be included in the subaward monitoring plan per 2 CFR 200.332(d).

  • Are special conditions required on the subaward agreement? (required)

    Per 2 CFR 200.332(e), pass-through entities must impose specific conditions on high-risk subrecipients.

  • Describe Special Conditions to Be Imposed

    List each special condition, the basis for imposition, and the criteria for removal per 2 CFR 200.332(e).

  • Subaward Recommendation (required)
  • Reason for Deferral or Denial

    Describe the specific issues that must be resolved before a subaward can be issued, or the basis for denial.

Supporting Documentation

This section creates the audit trail by listing the records reviewed and any files attached to support the assessment.

  • Documents Reviewed (Select All That Apply) (required)
  • Upload Supporting Documentation

    Upload SAM.gov screenshots, financial statements, audit reports, or other supporting documents. Accepted formats: PDF, DOCX, XLSX, PNG, JPG. Max 25 MB per file.

  • Additional Reviewer Notes

    Include any additional context, observations, or follow-up actions not captured elsewhere in this assessment.

Reviewer Certification

This section records accountability for the review and confirms that the reviewer stands behind the assessment and recommendation.

  • Reviewer Certification (required)

    I certify that I have reviewed the information and documentation identified in this assessment, that the findings are accurate to the best of my knowledge, and that this pre-award risk assessment was conducted in accordance with 2 CFR 200.332 and my organization’s subrecipient monitoring policies.

  • Reviewer Signature (required)
  • Signature Date (required)
  • Does this assessment require supervisory or grants officer review before the subaward is issued? (required)
  • Supervisor / Grants Officer Name

How to use this template

  1. Enter the federal award and proposed subaward details first so the review is tied to the correct funding source, period of performance, and amount.
  2. Complete the subrecipient profile and confirm the legal name, UEI, and primary contact information before moving into compliance checks.
  3. Verify SAM.gov registration and exclusion status, record the check date and reviewer, and use conditional logic to open notes only when there is a concern or mismatch.
  4. Review financial statements, audit history, and internal control fields, then document any going-concern issues, prior findings, or missing policies with specific evidence.
  5. Assign the overall risk rating, explain the rationale, and select the monitoring approach and special conditions that match the level of risk.
  6. Attach or list the documents reviewed, obtain reviewer certification, and route the form for supervisor review when required before the subaward is approved or deferred.

Best practices

  • Use progressive disclosure so low-risk subrecipients do not see every high-detail field unless a prior answer triggers it.
  • Mark only the fields you truly need as required, and keep optional fields available for edge cases instead of forcing guesswork.
  • Record the exact SAM.gov check date and the person who performed it so the audit trail is complete.
  • Tie every risk rating to specific evidence, such as audit findings, weak segregation of duties, or missing financial statements.
  • Use field types that match the data, including date pickers for dates, numeric inputs for amounts, and multi-selects for audit finding types.
  • Ask for the minimum necessary financial detail and avoid collecting sensitive identifiers unless they are needed for the award decision.
  • Document what happens after submission, including who reviews the form, how approval is recorded, and what monitoring actions follow.

What this template typically catches

Issues teams running this template most often surface in practice:

SAM.gov status was checked, but the reviewer did not record the expiration date or the date of the exclusion verification.
The risk rating was assigned without explaining which audit findings, control gaps, or financial concerns drove the decision.
The reviewer marked every field as required, which creates unnecessary friction and can lead to incomplete or inaccurate responses.
The form collected more financial detail than needed for the decision, creating avoidable PII and data retention risk.
Prior audit findings were noted, but the reviewer did not distinguish between resolved, repeat, and unresolved issues.
The subrecipient was treated like a vendor, so the review missed subaward-specific monitoring and compliance questions.
Special conditions were selected, but the form did not capture the exact monitoring action or who will own follow-up.

Common use cases

University Sponsored Programs Office
A sponsored programs team reviews a new community partner before issuing a research subaward. The form helps the reviewer document SAM.gov status, audit history, and whether the partner has enough accounting support to manage reimbursement requests.
State Grantor Monitoring a Local Government
A state agency uses the template to assess a city department that will receive pass-through funds for a public service program. The reviewer uses the risk rating to decide whether monthly reporting and additional approvals are needed.
Nonprofit Pass-Through Entity
A nonprofit fiscal manager evaluates a first-time subrecipient with limited federal award experience. Conditional logic reveals deeper questions only after the reviewer flags weak controls or missing audit documentation.
Healthcare Research Administrator
A research administrator reviews a clinical partner’s capacity before a subaward tied to a federal grant. The form keeps the review focused on minimum necessary financial and compliance information while preserving an audit trail.

Frequently asked questions

Who should use a Subrecipient Pre-Award Risk Assessment Form?

Pass-through entities that issue federal subawards should use this form before award execution. It is typically completed by grants, finance, or compliance staff who can verify SAM.gov status, review audit history, and assess internal controls. The form is also useful for supervisors who need a documented basis for monitoring decisions and special conditions.

When should this assessment be completed?

Complete it before the subaward is issued, renewed, or materially amended if the risk profile may have changed. It is especially important when the subrecipient is new, has limited federal award experience, has prior audit findings, or shows gaps in financial controls. If the organization’s status changes during the award period, the assessment should be updated.

What does this template help determine?

It helps determine whether the subrecipient is eligible to receive the award and what level of monitoring is appropriate. The form supports decisions about special conditions, additional reporting, reimbursement-based payment terms, or denial/deferral of the subaward. It also creates a documented audit trail for why the risk rating was assigned.

How does this template relate to 2 CFR 200.332?

The template is structured around the pre-award risk review expectations for subrecipients under 2 CFR 200.332. It prompts reviewers to evaluate financial stability, prior audit results, management systems, and the ability to comply with the terms of the subaward. It does not replace legal review, but it gives you a consistent record of the required assessment.

What are the most common mistakes when filling this out?

Common mistakes include leaving the justification too vague, checking SAM.gov without recording the date, and treating every field as required even when the information is not applicable. Another frequent issue is documenting a risk rating without tying it to specific evidence such as audit findings, going-concern concerns, or weak segregation of duties. The form works best when the reviewer records what was reviewed and why it matters.

Can this form be customized for different subrecipient types?

Yes. You can use conditional logic to show different fields for universities, nonprofits, local governments, or international partners, while keeping the core risk checks the same. For low-risk repeat subrecipients, you may shorten the review; for high-risk or first-time subrecipients, you can add more detail and supporting documentation fields. Keep data minimization in mind and only collect what you will actually use.

What documents should be attached or reviewed?

Typical supporting documents include recent financial statements, the most recent Single Audit or FAC submission, written financial policies, and any documentation that explains prior findings or sanctions. You may also review SAM.gov registration evidence, organizational charts, and cost allocation materials if they are relevant to the proposed subaward. The template includes a place to record which documents were reviewed so the assessment is auditable.

How does this compare with an ad hoc email review or spreadsheet?

An ad hoc review often leaves gaps because different reviewers ask different questions and do not document the same evidence. This template standardizes the fields, makes required versus optional items clear, and creates a repeatable audit trail. It also supports progressive disclosure, so reviewers only see the extra fields that apply to the subrecipient’s situation.

Does this template support monitoring and follow-up after approval?

Yes. The risk rating and monitoring determination section is designed to feed the post-award monitoring plan. You can use the result to set reporting frequency, desk review cadence, site visits, or special conditions. That makes the assessment useful beyond approval and helps align monitoring with the level of risk.

Go deeper on the topic

Related concepts
  • Lockout/tagout (LOTO) is the procedure for controlling hazardous energy — electrical, hydraulic, pneumatic, mechanical, thermal, chemical — before...
  • Job hazard analysis (JHA) — also called job safety analysis (JSA) — is the structured exercise of breaking a work task into sequential steps, identifying the...
  • A near-miss is an event that could have caused injury or damage but didn't — a slip that didn't fall, a load that shifted but didn't drop, a machine that...
  • AI governance is the framework a company uses to decide what AI tools are allowed to do, who's accountable for their outputs, what data they're allowed to...
Related guides

Ready to use this template?

Get started with MangoApps and use Subrecipient Pre-Award Risk Assessment Form with your team — pricing built for small business.

Ask AI Product Advisor

Hi! I'm the MangoApps Product Advisor. I can help you with:

  • Understanding our 40+ workplace apps
  • Finding the right solution for your needs
  • Answering questions about pricing and features
  • Pointing you to free tools you can try right now

What would you like to know?