The Single Audit Cliff

The Grant That Changes Everything

Here is a story that plays out every year, and we have watched it happen more times than we can count.

A community-based nonprofit in Washington has been operating for eight years on a mix of foundation grants, state contracts, and one modest federal award. Total annual budget: around $1.2 million. Federal expenditures: roughly $400,000 per year. They have an annual financial statement audit from a local CPA firm. It costs about $8,000. It's routine.

Then they win a $500,000 federal grant — a SAMHSA expansion award, a HUD continuum of care grant, a DOL workforce development program. Their total federal expenditures jump to $900,000.

That number triggers a compliance requirement many growing nonprofits don't understand until they're already subject to it. Under 2 CFR 200, Subpart F (the Uniform Guidance's audit requirements, formerly OMB Circular A-133), any non-federal entity that expends $750,000 or more in federal awards during its fiscal year must have a Single Audit — a fundamentally different and more extensive engagement than an annual financial statement audit.

The deadline: nine months after fiscal year-end. The cost: $15,000 to $50,000+, depending on portfolio complexity. For a $1.2 million organization, that fee alone is 4% to 12% of non-grant revenue. And the fee is just the beginning.

This is the Single Audit cliff — one of the most consequential compliance boundaries in the nonprofit funding world, and one of the least understood. Not because the information isn't available, but because the real impact of crossing $750,000 has almost nothing to do with the audit itself. The cliff is the gap between the financial infrastructure most small organizations have and the infrastructure the audit assumes they already have.

What the Single Audit Actually Is

A Single Audit is not simply a more expensive version of your annual financial statement audit. It is two audits combined into one engagement, governed by a specific set of federal requirements.

The first component is a financial statement audit. This is similar to what many nonprofits already have — an independent auditor examines your financial statements and issues an opinion on whether they present fairly the financial position of the organization. If you've been getting an annual audit already, this part will feel familiar.

The second component is a compliance audit of your federal programs. This is where the Single Audit diverges sharply from anything most small nonprofits have experienced. The auditor tests whether your organization complied with specific federal requirements for each major program — how you spent the money, when you spent it, how you procured goods and services, how you documented staff time, and whether you monitored any organizations you passed funds to.

The auditor doesn't invent these requirements. They come from the Compliance Supplement, an annual government publication (maintained by OMB, updated each spring) that lists specific compliance requirements for virtually every federal program. The Supplement organizes requirements into twelve compliance types — including allowable costs, procurement, period of performance, subrecipient monitoring, and reporting — and the auditor tests the applicable types for each major program.

Which programs get tested? That's determined through major program determination — a risk-based methodology defined in 2 CFR 200.518. Programs above certain dollar thresholds or with prior findings are more likely to be selected. For a first-time Single Audit, every federal program above the threshold is presumed higher risk because there is no audit history to demonstrate otherwise.

When the auditor identifies noncompliance, they issue findings. A significant deficiency means there's a control weakness that could result in noncompliance. A material weakness means the weakness is severe enough that material noncompliance could occur and not be detected. Questioned costs are specific dollar amounts identified as potentially noncompliant — above $25,000, they must be reported, and the relevant federal agency can require repayment.

Findings are not private. Every completed Single Audit is submitted to the Federal Audit Clearinghouse (FAC), maintained by the U.S. Census Bureau, and the data is publicly searchable. Federal awarding agencies, state pass-through agencies, and future grant reviewers can all see your audit history. A clean Single Audit builds credibility. A messy one raises flags that follow your organization for years.

The Real Cost — Not Just the Audit Fee

When organizations hear “$15,000 to $50,000 for an audit,” they understandably focus on the fee. But the audit fee is only part of the picture. For a first-time Single Audit, the total cost includes several categories that most organizations don't budget for.

The audit engagement itself: $15,000–$50,000+. Firms qualified to conduct Single Audits under Government Auditing Standards (the Yellow Book, issued by the Government Accountability Office) are specialized. The pool is limited, and demand consistently exceeds supply — especially for engagements with total federal expenditures under $2 million, which are less profitable for large firms but too complex for many small practices. You are competing for audit firm capacity with every other organization that crossed the threshold this year.

Preparation time: 40–100+ staff hours. Before the auditor arrives, someone must assemble substantial documentation. The centerpiece is the Schedule of Expenditures of Federal Awards (SEFA) — a detailed accounting of every federal dollar expended during the fiscal year, organized by Assistance Listing Number (ALN, formerly CFDA number), awarding agency, and pass-through entity. Preparing the SEFA requires reconciling your accounting records to federal draw-downs and distinguishing between direct and pass-through awards. If your accounting system wasn't set up for this level of tracking, preparing a clean SEFA can consume weeks.

Beyond the SEFA, staff will spend hours assembling grant agreements, pulling procurement documentation, compiling time and effort records, and responding to auditor inquiries during fieldwork. For a first-time audit, expect extensive requests — the auditor has no prior-year working papers to reference.

Policy documentation: the hidden prerequisite. Auditors will test whether your organization has written policies that comply with 2 CFR 200 — procurement procedures (200.318), travel policies, conflict of interest policies (200.318(c)(1)), time and effort documentation procedures, and financial management policies. The key word is written. Many small organizations have reasonable informal practices, but informal practices will not satisfy an auditor. Missing or inadequate written policies are among the most common first-time findings.

System requirements: fund accounting and cost centers. A Single Audit assumes your accounting system can track expenditures by individual federal award — fund accounting, with the ability to record and reconcile revenues and expenses for each grant separately. If your organization has been running all grants through a single revenue account and allocating expenses after the fact, you have a system problem that needs to be solved before the audit.

Opportunity cost. During audit preparation, your CFO, finance director, and program staff are not doing their regular work. For small organizations where one or two people fill these roles, the operational disruption is real: delayed programs, late reports on other grants, board meetings consumed by audit logistics.

The total real cost for a first-time Single Audit: $25,000–$75,000 in direct costs, plus 100–200+ hours of staff time. And unlike the grant itself, the audit cost comes out of unrestricted revenue. There is no line item in most federal budgets for “Single Audit fee.”

The Three Scenarios

We see organizations cross the $750,000 threshold in one of three ways. How they cross determines how painful the experience will be.

Scenario A: You know it's coming.

You've been tracking your total federal expenditures. You can see that with the new award, you'll cross $750,000 this fiscal year. You engaged an audit firm six months ago. Your policies have been updated and board-approved. Your fund accounting is clean, and your SEFA is being built throughout the year as expenditures occur. When the audit happens, it's expensive and time-consuming, but manageable. You may have a finding or two — most first-time audits do — but nothing that threatens your operations or your relationship with your federal funders.

This is the scenario every organization should aim for. It requires intentional planning and the discipline to invest in compliance infrastructure before you're required to have it.

Scenario B: You didn't see it coming.

You were at $600,000 in federal expenditures. Then a supplemental award added $200,000 to an existing grant, or a pass-through agency reclassified a contract as federally funded, or you received a no-cost extension that shifted expenditures into a different fiscal year. Suddenly you're at $800,000 and you didn't plan for a Single Audit.

You discover the requirement when your current auditor mentions it, or when a federal program officer asks for your FAC submission, or when a pass-through agency's monitoring questionnaire asks about your Single Audit. You're scrambling. The audit firms you call are booked. Your policies are incomplete. Your accounting system may not cleanly separate expenditures by award.

This scenario is recoverable, but expensive and stressful. Expect to pay a premium for an audit firm willing to take you on short notice, receive more findings than you would have with proper preparation, and consume significantly more staff time.

Scenario C: You crossed the line years ago and nobody noticed.

This happens more often than anyone admits publicly. An organization has been above $750,000 for two or three years. Their financial statement auditor didn't flag it. The organization didn't know the requirement existed, or confused it with their existing annual audit.

This is a serious compliance failure. The missing audits must be completed retroactively. Federal agencies can demand repayment of questioned costs for any year a required Single Audit wasn't performed. Pass-through agencies may suspend future funding. In severe cases, the organization faces suspension or debarment proceedings.

If you suspect your organization is in Scenario C, engage a qualified audit firm and legal counsel immediately. Self-disclosure and remediation are far better outcomes than discovery during a federal monitoring visit.

The Preparation Timeline

The Single Audit timeline is not something you can compress. Here is what a responsible preparation process looks like, working backward from the requirement.

12+ months before you expect to cross the threshold:

Begin conversations with audit firms that perform Single Audits. Qualified firms book engagements six to twelve months in advance. If you wait until you've crossed the threshold to start looking, you may not find a firm with availability for your fiscal year. Ask your current financial statement auditor whether they are qualified and willing to perform a Single Audit. Many smaller firms are not.

Assess your fund accounting system. Can it track expenditures by individual federal award? Can it produce a SEFA? Can it generate expenditures by cost category, personnel costs by funding source, and indirect cost allocations? If not, this is the time to upgrade — not during the audit.

Inventory your written policies: procurement, travel, conflict of interest, time and effort, allowable costs, property management. Do they exist as written documents? Do they reference 2 CFR 200? Have they been board-approved? Are staff following them? Twelve months gives you time to draft, review, approve, train, and implement before the auditor tests them.

6 months before fiscal year-end:

Formally engage the audit firm. Confirm scope, timeline, fees, and the documentation they'll need. Ask for a Prepared by Client (PBC) list — the specific documents and schedules you'll need to produce.

Begin preparing the SEFA. Reconcile federal expenditures by ALN number and award. If you receive pass-through funding, identify the pass-through entity and the original federal awarding agency for each award. SEFA errors are one of the most common findings in first-time audits — starting early gives you time to resolve discrepancies.

Train staff on documentation requirements. Program managers need to understand procurement documentation standards. Staff who charge time to federal grants need to understand time and effort documentation requirements. Anyone making purchases with federal funds needs to understand the micro-purchase threshold (currently $10,000 under 2 CFR 200.320) and the requirements for purchases above that amount.

At fiscal year-end:

Close your books cleanly. Grant expenditures must be clearly identifiable by award. Accruals and deferrals must be properly recorded. The SEFA must reconcile to your general ledger and to your federal draw-down records.

Begin assembling the documentation your auditor requested on the PBC list. The more complete your documentation is before fieldwork begins, the fewer additional requests the auditor will need to make — and the lower your preparation costs will be.

Within 9 months of fiscal year-end:

Complete the Single Audit. The audit report, data collection form, and SEFA must be submitted to the Federal Audit Clearinghouse within nine months of fiscal year-end. For a June 30 year-end, the deadline is March 31. For a December 31 year-end, September 30.

Missing this deadline is not minor. Federal agencies can — and do — withhold funding from organizations with overdue Single Audits. Under 2 CFR 200.501, an overdue audit is a compliance failure noted in your FAC record that may affect future award decisions.

What Auditors Actually Look For

The Compliance Supplement is dense, and the full range of testable requirements is extensive. But in practical terms, here is what auditors focus on most heavily — and where first-time organizations most commonly receive findings.

Allowable costs (2 CFR 200.403–200.405). Did you charge appropriate expenses to the grant? Costs must be necessary, reasonable, allocable to the award, and consistent with your policies. Some categories are always unallowable — alcoholic beverages (200.423), entertainment (200.438), lobbying (200.450). But the more common findings involve costs that are allowable in general but weren't properly documented or weren't allocable to the specific award they were charged to.

Period of performance (2 CFR 200.309). Did you incur costs within the authorized grant period? Pre-award costs are allowable only under specific conditions (typically up to 90 days before the award date, with agency approval). Costs incurred after the period ends are not allowable under any circumstances. Organizations with carryover funds or no-cost extensions need to watch period boundaries carefully.

Procurement (2 CFR 200.317–200.327). This is one of the most common finding areas for first-time audits. Micro-purchases (under $10,000) require only that the price be reasonable. Purchases between $10,000 and the simplified acquisition threshold ($250,000) require price or rate quotations from an adequate number of qualified sources. Above $250,000, formal competitive bidding is required. The most common findings: no documentation showing that quotes were obtained, sole-source procurements without justification, or procurement policies that don't reference federal thresholds.

Time and effort documentation (2 CFR 200.430). Can you demonstrate that staff charged to the grant actually worked on grant activities for the hours charged? The Uniform Guidance requires records that “reasonably reflect the total activity for which each employee is compensated.” The auditor will expect to see timesheets, activity logs, or similar documentation connecting staff costs to grant activities. The most common finding: no documentation at all, or records that don't cover all staff charged to the award.

Subrecipient monitoring (2 CFR 200.332). If you pass federal funds to other organizations (subrecipients, not contractors), did you assess their risk, communicate applicable requirements, monitor their activities, and review their audit reports? Many organizations that make subawards don't realize they carry these monitoring responsibilities.

Washington State Considerations

For organizations based in Washington, several state-specific factors affect the Single Audit landscape.

State pass-through agencies monitor audit compliance. Washington's major pass-through agencies — the Health Care Authority (HCA), the Department of Social and Health Services (DSHS), and the Department of Commerce — are required under 2 CFR 200.332 to verify that subrecipients over the threshold have completed a Single Audit. If you receive federal pass-through funding and miss your audit deadline, the agency will follow up. Consequences include withholding of payments, additional monitoring, or contract suspension.

The Washington State Auditor's Office does not audit nonprofits. Washington's State Auditor conducts audits of state agencies, local governments, and other public entities — but not of nonprofit organizations. Nonprofits that require a Single Audit must engage a private CPA firm licensed in Washington and qualified to perform audits under Government Auditing Standards. This is a different credentialing requirement than a standard financial statement audit. Not every CPA firm meets it.

The qualified firm pool is limited, especially outside Seattle. The number of CPA firms in Washington qualified to perform nonprofit Single Audits is small. In Seattle, several mid-size and large firms serve this market, but competition for their capacity is real. Outside Puget Sound — in the Tri-Cities, Spokane, Yakima Valley, and rural communities — options shrink considerably. Rural and tribal organizations face the most constrained market, sometimes engaging firms from Portland, Boise, or Seattle and absorbing travel costs on top of audit fees.

Fees run higher in the Puget Sound region. Audit fees in the Seattle-Tacoma corridor track above national averages, reflecting higher cost of living and competitive demand. Organizations in smaller communities may find slightly lower rates from regional firms, but the tradeoff is often less Single Audit experience.

For Washington-based organizations navigating the Single Audit for the first time, we recommend starting the firm search early — twelve months or more in advance — and building a relationship with a firm before the requirement is triggered. The WA readiness checklist includes a dedicated audit preparation section. The WA eligibility guide maps which state-administered programs involve federal pass-through funds, so you can track your total federal exposure accurately.

The Cliff Is Predictable — Plan for It

The Single Audit threshold is not a surprise. It is a known requirement at a known dollar amount, published in a federal regulation in effect since 2014. Every organization can calculate its own federal expenditure total. Every organization can see the threshold coming.

The organizations that manage this transition well start preparing before they're required to. They build fund accounting systems before they need them for an audit. They write procurement and time-and-effort policies before an auditor tests them. They engage audit firms before every firm is booked for the year. They treat $750,000 not as a cliff to fear but as a growth milestone — evidence that their organization is winning substantial federal awards.

The compliance infrastructure you build is not disposable. It serves every future federal grant. Clean audits build credibility with program officers and reviewers. Documented policies reduce risk across your entire organization. A fund accounting system that produces a clean SEFA also produces clean reports for state agencies, foundations, and your board.

The worst outcome of crossing $750,000 isn't the audit cost or the staff time. It's being unable to pursue the next major federal opportunity because you don't have a clean audit history — or worse, because you crossed the threshold years ago and never completed the required audit at all. That is the real cliff: not the compliance requirement, but the consequence of being unprepared for it.

The threshold is coming. For some organizations reading this, it has already arrived. Either way, the playbook is the same: know your number, build your infrastructure, and treat structural readiness as the investment it is.