Skip to main content
U.S. flag

An official website of the United States government

Audit Reports

Date

Quality Control Review of the Management Letter for the Federal Aviation Administration’s Audited Financial Statements for Fiscal Years 2022 and 2021

Requested By
Required by the Chief Financial Officers Act of 1990
Project ID
QC2023018
File Attachment
What We Looked At
This report presents the results of our quality control review (QCR) of the management letter that KPMG issued on its audit, under contract with us, of the Federal Aviation Administration’s (FAA) consolidated financial statements for fiscal years 2022 and 2021. This management letter discusses internal control matters that KPMG was not required to include in its audit report.
 
What We Found
Our QCR disclosed no instances in which KPMG did not comply, in all material respects, with U.S. generally accepted Government auditing standards.
 
Recommendations
KPMG made 17 recommendations to FAA in its management letter. FAA concurred with all 17 recommendations.

Recommendations

No. 1 to FAA
KPMG recommends that FAA management design and implement formal detective controls to log and monitor developer activities in the time and attendance production environment. All programmatic changes to the time and attendance production environment should be reviewed and reconciled from the logs to the approved change tickets.
Closed on
No. 2 to FAA
KPMG recommends that FAA management review and re-certify the FAA procurement system PTA in accordance with FAA policy.
No. 3 to FAA
KPMG recommends that FAA management perform a risk assessment to consider the potential impact of discrepancies between vendor-submitted invoice web portal amounts and the vendor-submitted supporting documentation, and respond to the level of risk identified as appropriate.
No. 4 to FAA
KPMG recommends that FAA management communicate the importance of its existing financial system goods and services acceptance processes, policies, and procedures with its CORs.
Closed on
No. 5 to FAA
KPMG recommends that FAA management quantify the impact of the non-GAAP assumption and record it as a part of their estimate if deemed material.
Closed on
No. 6 to FAA
KPMG recommends that FAA management update policies and procedures for the environmental remediation estimate to ensure that all methodology assumptions are documented.
Closed on
No. 7 to FAA
KPMG recommends that FAA management clarify its General Property, Plant & Equipment accounting policies for real property improvements to further document management’s criteria and considerations for capitalizing costs relating to building components typically expensed by FAA during the asset lifecycle.
Closed on
No. 8 to FAA
KPMG recommends that FAA management assess the nature of its FIA and Modernization costs incurred to document the specific criteria distinguishing the nature of these programs’ costs from other programs’ costs.
Closed on
No. 9 to FAA
KPMG recommends that FAA management continue to consider the appropriateness of its policies for real property, including improvement criteria, capitalization thresholds, and estimated useful lives, particularly for its fully depreciated real property.
No. 10 to FAA
KPMG recommends that FAA management assess the risks associated with recording UCOs with Advance within its business process, and design and implement a control activity to ensure timely and accurate recording of UCOs with Advance for which an advance payment associated with the RA has been received.
No. 11 to FAA
KPMG recommends that FAA management design and implement controls to perform a risk assessment for instances in which an AIP grant agreement remains open only for non-financial administrative or compliance requirements and respond to the risk of untimely deobligation of grant UDOs.
No. 12 to FAA
KPMG recommends that FAA management design and implement controls to ensure that the population generated to support the disclosure of future minimum lease payments is complete and accurate.
No. 13 to FAA
KPMG recommends that FAA management develop policies to define the scope of the lease disclosure.
No. 14 to FAA
KPMG recommends that FAA management design and implement control activities to monitor the effective operation of its process controls related to provisioning new payroll shared service center access requests.
No. 15 to FAA
KPMG recommends that FAA management develop policies and procedures for maintaining completed and authorized payroll shared service center access forms for new user access requests in a secure centralized location.
No. 16 to FAA
KPMG recommends that FAA management design and implement control activities to monitor the effective operation of its process controls related to monitoring FAA employees’ payroll shared service center access.
No. 17 to FAA
KPMG recommends that FAA management take measures to ensure that FAA has sufficient control operator personnel available to support the annual recertification of FAA employees with payroll shared service center access within the reporting timeline prescribed by DOT.