Which factor is used to assess risk for subrecipient monitoring?

• A. Past performance
• B. Size and complexity
• C. Size, complexity, and past performance
• D. Geographic location

Answer: (C)

Assessing risk in subrecipient monitoring relies on evaluating past performance and the size and complexity of the subrecipient’s operations. Past performance looks at how reliably the subrecipient has managed funds, submitted required reports, and complied with terms in the past, including any audit findings. A solid track record lowers the level of scrutiny needed, while a troublesome history signals higher risk and the need for closer oversight.

Size and complexity capture the scope of work, the amount of funding involved, and how intricate the internal controls and financial management processes must be to handle the program. A larger, more complex operation typically requires more robust monitoring because the potential for issues is greater and the resources needed to detect and address problems are higher.

Geographic location isn’t a primary risk indicator in subrecipient monitoring on its own; it may influence logistical considerations, but it doesn’t determine risk level by itself. Therefore, combining past performance with size and complexity provides the most accurate assessment of risk and guides how intensively to monitor the subrecipient.