Getting Oriented: Who You Are and What You Fund

• Tell us your role and how you’re involved with grants and finance? Options: Executive Director, Chief Financial Officer (CFO), Controller, Grants Manager/Coordinator, Program Director, Other — please specify
• What is your organization's annual operating budget (most recent year)? Options: Under $2M, $2M–$10M, $10M–$50M, $50M–$100M, Over $100M
• Approximately what percent of your revenue comes from government grants (federal, state, local)? Options: Less than 10%, 10%–25%, 26%–40%, 41%–60%, Over 60%
• When was your most recent single audit and did it include any findings? Options: Within the last 6 months — with findings, Within the last 6 months — no findings, 6–18 months ago — with findings, 6–18 months ago — no findings, More than 18 months ago, No single audit on record
• In one or two sentences, describe the most recent audit finding(s) that concern you most.

Are You Comfortable Waiting for the Next Surprise?

• How long are you willing to continue operating as-is before taking steps to prevent repeat audit findings? Options: We need change now — within 30 days, Within 3 months, Within 6 months, Within the year, We’re willing to wait longer
• How does the board or audit committee currently express concern about compliance and repeat findings? Options: Frequent direct questions/pressure, Occasional check-ins, They rely on management updates, They haven’t shown concern, Other — explain
• Which emotion best describes how you feel about audit risk right now? Options: Anxious and urgent, Frustrated but managing, Unsure where to start, Confident in our remedies, Resigned — expecting another finding
• If nothing changes, what is the most likely consequence your organization will face in the next audit cycle? Options: Repeat finding with expanded testing, Financial adjustments/disallowed costs, Loss of funding or increased oversight, Damage to reputation with funders, Board escalation and leadership change, Unsure
• What internal signals or events would force leadership to act immediately on compliance (e.g., grant suspension, audit escalation, loss of key staff)?

What's Hidden in Your Numbers?

• If I opened your grant ledger today, what inconsistency would make me say 'aha' — what would I see that you hope we fix?
• Which systems do you use for finance, payroll, and grant tracking? Options: QuickBooks Desktop, QuickBooks Online, NetSuite, Sage Intacct, MIP Fund Accounting, Blackbaud Financial Edge, ADP/Paychex (payroll), Homegrown spreadsheets, Other — please specify
• Do you have a written cost allocation plan and when was it last updated? Options: Yes — within 12 months, Yes — 1–3 years ago, Yes — more than 3 years ago, Draft or informal only, No
• How do you document time and effort for personnel charging to grants today? Options: Personnel Activity Reports (PARs) regularly used, Certified periodic timesheets with allocations, Effort estimated post-payroll, No formal documentation, Other — explain
• Which grant types/funders make up the bulk of your compliance burden? Options: HHS (Health & Human Services), HUD (Housing), DOE (Education), DOL (Labor), State pass-through grants, Local government grants, Foundation restricted grants, Other — list
• Describe any recent single-audit testing areas that resulted in expanded audit procedures (what was tested and why).

Where Does Risk Live in Your Day-to-Day?

• Which administrative practice worries you most as a source of audit exposure? Options: Procurement documentation and thresholds, Cost allocation and indirect cost recovery, Time-and-effort/personnel charging, Subrecipient monitoring and flow-downs, Policy and records retention, Other — specify
• Select the top five specific risk points you think are most likely to trigger audit findings for your organization. Options: Lack of written procurement procedures, Missing competitive procurement files, Improper allocation of shared costs, Insufficient PARs or certifications, No formal subrecipient monitoring, Inaccurate indirect cost rate application, Improper documentation of matching contributions, Inadequate board oversight
• Who currently owns each of those risk areas day-to-day? (name roles, not people if you prefer) Options: CFO/Finance Director, Grants Manager, Program Director, Executive Director/CEO, Controller, External consultant or CPA, Board/Audit Committee
• Give one concrete example in the last 12 months where a process broke down and why (be specific about documents, approvals, or system failures).
• When auditors have questioned costs or procurement in the past, which corrective actions were actually implemented and sustained? Options: Policy rewritten and applied, Staff retrained and monitored, Documentation templates introduced, One-time fixes only, No corrective action taken, Partial implementation

If You Could Frame 'Good' for Your Board, What Would It Be?

• If the board asked you tomorrow 'how do we know we fixed it?', what three tangible things would you want to show them?
• Which of these outcome signals matter most to your leadership? (pick up to three) Options: No repeat single-audit findings, Consistent, auditable time-and-effort records, Documented procurement files meeting federal thresholds, A functioning subrecipient monitoring roster with evidence, Quarterly dashboard with open issues resolved, Clear, testable cost allocation plan
• Beyond passing the audit, what would 'success' feel like to your grants and program teams (morale, workload, confidence)?
• What constraints would make achieving those success signals unrealistic in the short term? Options: Budget limitations, Staff turnover/bandwidth, Poor data or systems, Board resistance, Contracting/procurement delays, State/funder-specific rules
• If you had to rank the top two metrics your board would accept as evidence of progress, what would they be? Options: Zero repeat findings, Quarterly closure of corrective actions, Reduction in auditor expanded testing, Dashboards showing documentation completeness, Training completion rates for staff

What Would It Take to Breathe Easier Next Audit Season?

• Would a tailored combination of assessment, corrective action plan, training, and a live monitoring dashboard feel like a solution or just another report? Options: Real solution — would reduce risk, Useful but needs proof, Too complex for our team, We’ve tried this before — skeptical
• Which dashboard features would change your daily workflow most positively? Options: Automated missing-document alerts, Role-based task lists, Audit-prep exportable packets, Trend reports on high-risk cost pools, Subrecipient compliance tracker, Integration with payroll/GL
• What training format works best for your staff to actually change behavior? Options: Live in-person workshops, Live virtual sessions, Pre-recorded modules + quizzes, Hands-on coaching during transactions, Documentation templates + office hours
• How will you measure whether training and dashboarding have truly reduced audit risk? Options: Fewer audit exceptions next cycle, Faster response to auditor requests, Higher documentation completeness rates, Internal control testing shows improvements, Board reports show trend improvements
• What timeline feels realistic for assessment → fixes → monitoring to show clear progress to your board? Options: 30–60 days, 60–90 days, 3–6 months, 6–12 months

What’s Stopping You From Fixing This Now?

• What is the single biggest barrier that has kept you from addressing these compliance gaps so far? Options: Lack of budget, Limited staff capacity, Unclear ownership, Competing leadership priorities, Fear of revealing more problems, We tried fixes that failed
• How much internal staff time per week could realistically be dedicated to an initial compliance remediation effort? Options: Less than 5 hours/week, 5–10 hours/week, 10–20 hours/week, 20+ hours/week
• Who would need to champion this internally for it to succeed (title or role)? Options: Executive Director/CEO, CFO/Finance Director, Grants Manager, Program Director, Board/Audit Committee member, Other — specify
• Have you previously engaged an external firm for compliance work and what made that engagement succeed or fail?
• If budget is a barrier, which funding approach would make you comfortable moving forward? Options: One-time assessment + phased work, Subscription model for ongoing monitoring, Grant-funded remediation (seek restricted funding), Performance-based fee tied to outcomes, Other — explain

Show Me the Access — How Ready Is Your Team to Deploy?

• If we requested the following items tomorrow, which are available immediately? (select all that apply) Options: General ledger export by grant, Grant award documents and budgets, Subrecipient list and agreements, Payroll detail with employee allocations, Procurement files and contracts, Written policies (procurement, cost allocation, timekeeping), Board minutes and audit committee notes
• For items not immediately available, how long would it take to gather them? Options: 48 hours, 1 week, 2–4 weeks, Over a month, We don’t know where to start
• Do you have named staff or contractors who can provide access and context for financial records? List roles and availability.
• What access constraints (IT, privacy, vendor approvals) should we plan around? Options: Restricted system admin rights, Vendor contract approvals, Data privacy concerns, No constraints — full access possible, Other — describe
• Would you allow a short, scoped sample review (e.g., one grant and three payroll samples) to validate controls before a full rollout? Options: Yes — start sample now, Yes — but schedule later, Maybe — need more details, No

Let’s Talk About Time and Money — Practical Commitments

• What budget range feels realistic to remediate core compliance gaps and implement monitoring for the next 12 months? Options: Under $10k, $10k–$25k, $25k–$50k, $50k–$100k, Over $100k, Unsure — need scope
• What timeline would leadership find acceptable from kickoff to demonstrable audit-readiness? Options: 30–60 days, 60–90 days, 3–6 months, 6–12 months
• Which acceptance criteria would make leadership sign off on the project? (pick all that apply) Options: Corrected documentation for sampled findings, Staff trained with completion records, Operational monitoring dashboard live, Written cost allocation plan adopted, Subrecipient monitoring evidence in place, Quarterly governance meeting scheduled
• How often would you want governance updates once we start (board/audit committee cadence)? Options: Bi-weekly until remediation, Monthly, Quarterly, At major milestones only
• Who must sign off on scope, price, and timeline for your organization? Options: Executive Director/CEO, CFO/Finance Director, Board Chair or Audit Committee, Program Director, Other — specify

Small First Steps That Build Trust

• What is the smallest, highest-confidence pilot you would approve to test our approach? Options: One high-risk grant assessment, Procurement file clean-up for one funding source, Time-and-effort pilot for one department, Subrecipient monitoring of top 3 partners, Dashboard trial with a single grant
• What deliverables from that pilot would convince you to expand the work? Options: Corrected sample files, A short corrective action plan with owners, Training records and staff feedback, Dashboard showing issue resolution, Independent verification test results
• How will you validate pilot success internally—who inspects the work and what do they look for? Options: Internal audit/Controller review, CFO/Executive Director sign-off, Program manager verification, External auditor preview, Board or audit committee review
• If pilot results meet your standards, how quickly would you want to scale remediation across the portfolio? Options: Immediately, Within 30 days, Within 90 days, Over 3–6 months, Undecided
• Who should we schedule for a short kickoff meeting to confirm scope and next steps if we propose a pilot?

Quick Snapshot: Your Grant Portfolio

• Tell us the approximate annual budget for your organization and the percent that comes from government grants (fiscal year): Options: Under $2M, $2M–$10M, $10M–$50M, $50M–$100M, Over $100M
• Which government funders are significant in your portfolio? (Select all that apply) Options: HHS, HUD, DOE, DOL, ED, State agencies, Local governments, Other federal, Foundations/private
• Roughly how many active grants do you manage today (including subawards)? Options: 1–5, 6–15, 16–30, 31–75, 76+
• How recently was your grant portfolio comprehensively reviewed for Uniform Guidance compliance? Options: Within the last 6 months, 6–12 months ago, 1–2 years ago, Over 2 years ago, Never
• What feels most fragile about your grant portfolio today? Please describe briefly.

Are Audits Still Catching You Off Guard?

• When you think back to the last single audit, what one surprise hurt the most—documentation gap, questioned cost, procurement finding, or something else? Options: Procurement documentation, Cost allocation/questioned costs, Time-and-effort records, Subrecipient monitoring, Other
• How many single-audit findings did you receive in the last audit cycle? Options: None, 1, 2–3, 4–6, 7+
• Of the recent findings, which areas were repeated from prior years versus new issues? Options: Mostly repeated, Mostly new, Even mix, Not sure
• Describe a specific finding that was most painful to explain to your board or funder (what happened, and how did it make you feel?).
• Do you currently maintain a written corrective action plan (CAP) for past audit findings and is it actively tracked? Options: Yes — updated & tracked regularly, Yes — created but not tracked, No — informal fixes only, No — nothing documented

Where Procurement and Purchasing Break Down

• If an auditor picked five procurement files at random, how confident are you that each would meet federal procurement standards? Options: Very confident, Somewhat confident, Not confident, Unknown
• Do you have a formal procurement policy that sets federal thresholds, solicitation methods, and documentation requirements? Options: Yes — aligns to federal thresholds, Yes — needs updating, Partial policy, No policy
• How often do staff follow the written procurement process versus making exceptions based on urgency, relationships, or other pressures? Options: Almost always follow, Often follow with occasional exceptions, Frequent exceptions, Mostly ad hoc
• Tell us about the most recent instance where procurement documentation was challenged—what was missing and what did you learn?
• Which procurement tools or systems do you use to track quotes, vendor selection, and contract files? Options: Manual/Excel files, QuickBooks, NetSuite, Fund accounting ERP, Procurement portal, Other

Where Costs Start to Blur: Allocation & Allowability

• When you allocate shared costs (rent, admin, IT), do you have a written cost allocation plan with documented drivers and calculations? Options: Yes — formal and applied, Yes — formal but inconsistently applied, Informal method (ad hoc), No plan
• Has an auditor ever proposed or made an adjustment to your cost allocation in the last three years? Options: Yes — significant adjustment, Yes — minor adjustment, No, Not sure
• Which allocation bases do you use for major pools (select all that apply)? Options: FTEs/headcount, Direct salaries, Square footage, Program participant counts, Revenue share, Other
• Describe a recurring question or pushback you get from auditors about allowability or allocation (what do they probe most?).
• How comfortable are program managers explaining why costs were allocated the way they were? Options: Very comfortable, Somewhat comfortable, Uncomfortable, They avoid explaining

Who's Holding the Fort? Staff, Skills, and Capacity

• If your grants manager or CFO were suddenly unavailable, how confident are you that someone else could respond to auditor questions and produce the records? Options: Very confident, Somewhat confident, Not confident, No backup exists
• Which roles own key compliance areas (select all that apply)? Options: Executive Director, CFO, Grants Manager, Program Director, Finance Manager, External consultant, Other
• What percentage of the grants compliance work is done manually versus via systems or automated checks? Options: Mostly manual (80%+), Mix (50/50), Mostly automated (80%+), Unsure
• How much formal training on 2 CFR 200 and single-audit requirements has your finance/program team had in the past 24 months? Options: Extensive training (multiple sessions), Some training (one session), Minimal training, None
• Where do your staff say they get stuck most when preparing audit documentation or answering auditor queries?

Are Your Subrecipients a Blind Spot?

• How much of your grant portfolio is passed through to subrecipients (approx percent of total grant dollars)? Options: 0–10%, 11–25%, 26–50%, 51–75%, 76–100%
• Do your subrecipient agreements include required flow-down clauses and clear performance and compliance expectations? Options: Yes, consistently, Some agreements do, Rarely, No
• When was the last time you conducted a risk-based monitoring review of a subrecipient? Options: Within 6 months, 6–12 months ago, 1–2 years ago, Never
• What monitoring activities do you typically perform (select all that apply)? Options: Desk review of invoices, On-site visits, Financial report reconciliation, Sampling underlying records, Annual risk assessment, Other
• Share an example of a subrecipient issue that caused complications—what happened and who had to fix it?

Controls That Actually Catch Problems (or Don’t)

• If a repeat finding were brewing, how likely is it that someone internally would detect it before the auditor does? Options: Very likely, Somewhat likely, Unlikely, Almost impossible
• Which of these control practices do you actively use? (select all that apply) Options: Periodic internal testing, Document checklists for files, Automated dashboard alerts, Quarterly governance reviews, Corrective action tracking, None
• Do you currently use a monitoring dashboard or tool that shows documentation completeness, upcoming deadlines, and control failures? Options: Yes — fully in use, Yes — pilot/testing, Planned but not implemented, No
• Describe a recent instance where an internal control or review prevented an audit adjustment—what changed because of that detection?
• Who receives compliance exception reports today and how are they acted on? Options: Executive team, Finance only, Program leads + finance, Board/audit committee, No one

What Keeps Your Board and Audit Committee Awake?

• If your audit committee asked for one piece of evidence that repeat findings are unlikely, what would you have ready right now? Options: Corrected files & CAP, Active monitoring dashboard, Staff training records, No single evidence, Other
• How often does leadership receive compliance reporting and what does that reporting typically include? Options: Monthly — detailed, Quarterly — summary, Annually — audit results only, Infrequent/as-needed
• When findings are discussed with the board, what tone dominates—defensive, proactive, collaborative, or absent? Options: Proactive/collaborative, Neutral/informational, Defensive, Not discussed
• What timelines would satisfy your board that corrective actions are underway and effective? Options: 30–60 days, 90 days, 6 months, 12+ months, Depends on finding
• What worry or question does your board ask most often about grants compliance?

Imagine Audit Season Without the Fire Drill

• If you could eliminate one recurring audit finding forever, which would it be and why? Options: Procurement, Cost allocation, Time-and-effort, Subrecipient monitoring, Other
• What measurable signals would prove to you that compliance is sustainable (select top 3)? Options: No repeat findings, Dashboards showing 100% documentation, Quarterly sampled testing with clean results, Reduced auditor adjustments, Trained staff with certifications, Other
• How comfortable would you be shifting from reactive clean-up work to an ongoing quarterly monitoring model? Options: Very comfortable, Somewhat comfortable, Unsure, Prefer only one-time fixes
• Describe the minimum evidence you would need to show stakeholders that monitoring is working (documents, samples, dashboards, meeting notes).
• What would it feel like—operationally and emotionally—if you knew repeat findings were unlikely?

Small Changes That Stop Repeat Findings: Next Steps

• How quickly would you want an initial diagnostic assessment completed (from contract/signature to delivery)? Options: 2 weeks, 4 weeks, 6–8 weeks, 3+ months
• What level of access can you provide for a discovery—financials, grant files, subrecipient lists, and staff interviews? Options: Full access immediately, Partial access; need approvals, Limited access due to privacy, Access will take time
• Which outcomes would make an assessment and monitoring engagement a clear yes for you (rank up to three)? Options: Eliminate repeat findings, Board-ready evidence, Staff upskilling, Operationalized controls, Ongoing dashboard monitoring
• What constraints should we know about up front—budget limits, procurement rules for selecting vendors, timing windows for fiscal year close, or internal approvals? Options: Budget constraints, Procurement/Vendor rules, Fiscal close windows, Limited staff time, Legal/contractual constraints, Other
• Who needs to be involved in decision-making and governance for corrective actions and quarterly monitoring (names/roles)?
• Is there anything else you want us to know about the current state that would change how we scope a targeted assessment?

Setting the Table: Quick Context

• Tell us, in one sentence, what prompted you to start this conversation now (recent audit, board request, program growth, other)? Options: Recent single-audit finding, Board audit committee request, Preparing for an upcoming audit, Program or revenue growth, State/local compliance notice, Other
• Which federal or state funders make up the bulk of your grant revenue today? Options: HHS, HUD, DOE, DOL, ED, State agency, Other foundation/local
• Roughly how many active federal grants are you managing right now (count grants or award lines)? Options: 1–5, 6–15, 16–30, 31–75, 75+
• Who on your team will be the day-to-day partner on compliance work (title/role)? Options: CFO/Deputy CFO, Grants Manager/Coordinator, Controller, Program Director, External consultant, Not yet assigned
• How would you describe your current approach to monitoring compliance between audits? Options: Quarterly review cadence, Ad-hoc when issues arise, Annual tidy-up before audit, No formal monitoring, Other

Are We Comfortable With 'Good Enough'?

• What makes you think your current controls or documentation might not be enough to prevent repeat audit findings?
• When you imagine your auditor focusing in next time, which areas worry you most? Options: Procurement documentation, Cost allocation decisions, Time-and-effort/personnel activity reports, Subrecipient monitoring, Indirect cost recovery, Documentation retention
• How often do audit findings from prior years show up as areas of follow-up or expanded testing? Options: Every audit cycle, Often, Occasionally, Rarely, Never
• Tell us about a recent control or documentation gap that surprised leadership—what happened and who had to respond?
• If a single repeat finding landed in front of your board tomorrow, how would that make you feel and what immediate pressure would it create? Options: High reputational risk / board alarm, Moderate concern / corrective plan expected, Manageable / already in progress, Unsure

When Audit Findings Keep Coming Back...

• Why do you think past corrective actions didn’t fully stick (people, process, systems, culture, other)? Options: Staff turnover, No owner assigned, Process too manual, Training gaps, No monitoring tools, Other
• How much of a recurring cost—time, money, or staff distraction—do repeat findings create for you each year? Options: Significant (>$50k or many staff hours), Moderate ($10–50k or regular staff rework), Minimal (small time hit), Hard to quantify
• Are there political or programmatic reasons (board sensitivity, funder relationships, visible programs) that make some findings more urgent than others? Options: Yes—board-level sensitivity, Yes—key funder concerns, Yes—program visibility, No—treat all equally
• Describe a moment when auditors praised a practice you implemented—what worked and who made it happen?
• If we could stop one recurring audit headache this year, which one would change your leadership conversation the most? Options: Procurement documentation, Cost allocation/methodology, Time-and-effort compliance, Subrecipient monitoring, Documentation retention & organization

What Would ‘Solved’ Actually Feel Like?

• If you woke up after this engagement and auditors never questioned the same issue again, what would be different in your day-to-day?
• Which of these outcomes would signal success to your board or funders? Options: No repeat findings, Clear corrective action completion, Audit-ready documentation on demand, Sustainable monitoring cadence, Stronger subrecipient oversight
• Beyond audit language, how would success show up to staff who do the work (less rework, clearer procedures, less fire-drill)? Options: Less rework, Clearer policies, Faster close cycles, Better program compliance, Increased staff confidence
• On a scale from 1–5, how important is building an internal capability (training + tools) versus outsourcing monitoring long-term? Options: 1 - Fully outsource, 2, 3 - Hybrid, 4, 5 - Fully internalize
• Tell us one concrete example of a deliverable or dashboard alert that would make you say, 'Yes—that fixed the problem.'

What’s Standing Between You and That Outcome?

• What internal constraints will make implementation hardest (staff capacity, IT access, competing priorities, budget limits)? Options: Staff capacity, IT/data access, Competing strategic priorities, Limited budget, Change fatigue, Legal/review cycles
• Are there external constraints—state rules, funder timelines, or legislated reporting—that narrow acceptable solutions? Options: State audit rules, Specific federal funder requirements, Subrecipient agreements, Contractual timelines, None notable
• How much time can your core team realistically allocate per week to implement changes over the next 3 months? Options: 10+ hours/week, 5–10 hours/week, 2–5 hours/week, Less than 2 hours/week
• What would cause you to pause or stop a corrective program once it’s started? Options: Budget overrun, Staff turnover, New urgent priorities, Poor early results, Board pushback
• Who needs to sign off internally for policy or system changes (CFO, ED, board audit committee, program directors)? Options: CFO, Executive Director, Board audit committee, Program Directors, Grant-funded program managers, Other

Who’s Willing to Own the Fix?

• If ownership were a person, who would be the visible champion and who would be the day-to-day doer? Options: CFO champion / Grants Manager doer, ED champion / Controller doer, Board champion / CFO doer, Other
• How stable is that ownership—are these people likely to be in place for the next 12 months? Options: Very stable, Some turnover risk, High turnover risk, Unknown
• What governance cadence would satisfy your board that progress is happening (monthly updates, quarterly dashboards, ad-hoc reporting)? Options: Monthly updates, Quarterly dashboard, Ad-hoc for issues, Bi-annual summary
• What level of documentation or audit trail does your board expect to see to be satisfied (redline policies, evidence of training, sample-tested controls)? Options: Policy updates with sign-offs, Training records and acknowledgements, Sample-tested control results, Dashboard alerts and remediation logs, Other
• If we recommended a governance role outside your team (e.g., external compliance reviewer), how open would leadership be to that? Options: Very open, Somewhat open, Prefer internal only, Unsure

Signals, Success Metrics, and Deal Constraints (Be Specific)

• Which measurable signals would make you say the program is working after 6 months? Options: No repeat findings in audit, 30/30/30 corrective actions closed, 90% documentation completeness, Dashboard shows zero high-risk alerts, Sample-testing passes
• Which red-line metrics would force a reconsideration of approach (e.g., less than 60% training completion, repeated noncompliance from subrecipients)? Options: <60% training completion, Persistent procurement gaps, Subrecipient noncompliance >10%, Dashboard not adopted by staff, Other
• What is the budget range you have in mind for fixing the immediate high-risk items and standing up monitoring? Options: <$10k, $10k–$25k, $25k–$75k, $75k–$150k, $150k+
• Are there hard deadlines we must meet (audit arrival date, board meeting, funder reporting window)? If so, list dates.
• Which parts of the solution are non-negotiable for you (training, corrective action plan, dashboard monitoring, policy overhaul)? Options: Corrective action plan, Staff training, Monitoring dashboard, Policy updates, Subrecipient monitoring program

Practical Next Steps — If We Move Forward

• Given everything above, what would a reasonable first milestone look like in 30–60 days (access granted, initial assessment completed, sample testing started)? Options: Access to files and systems, Initial risk assessment complete, Corrective action plan drafted, Staff training scheduled, Dashboard configured with initial alerts
• What data and access will we need immediately to get started (general ledger, grant award files, procurement records, subrecipient list)? Options: General ledger, Grant award agreements, Procurement files, Cost allocation sheets, Time-and-effort records, Subrecipient list
• Are there privacy or legal review steps we should expect before accessing financial or HR records? Options: Yes—legal sign-off required, Yes—IT security review, No major barriers, Unsure
• What would success look like for you after our first quarter working together? Options: Audit readiness demonstrated, Corrective actions underway and evidence logged, Staff trained and policy updated, Monitoring dashboard active with alerts
• Who else should be included in the next conversation (names and roles) to keep momentum?

Start Here: A quick snapshot of your grant landscape

• Which best describes your organization's annual revenue? Options: Under $2M, $2M–$10M, $10M–$50M, $50M–$150M, Over $150M, Prefer not to say
• Approximately what percentage of your revenue comes from government grants (federal, state, local)? Options: Under 10%, 10%–25%, 26%–40%, 41%–60%, 61%–80%, Over 80%, Unsure
• Who in your organization currently owns grant compliance and day-to-day single-audit readiness? Options: CFO/Finance Director, Executive Director, Grants Manager, Program Director, External consultant, Shared responsibility, Other
• Which federal funders are most prominent in your portfolio right now? (select all that apply) Options: HHS, HUD, DOL, ED, USDA, DOJ, DOT, EPA, State/Local grants, Foundations/private grants, Other
• What was the most recent single-audit finding and when did it occur? Please describe briefly.

If Audit Findings Could Speak, What Would They Tell You?

• Which single audit comment or finding makes you wince the most when you think about your next audit?
• Which compliance areas have resulted in findings across your last three audits? (select all that apply) Options: Procurement documentation, Cost allocation / questioned costs, Time-and-effort / personnel activity reporting, Subrecipient monitoring, Allowable cost allowability, Indirect cost rate issues, Record retention, Other
• How many repeat findings (same or closely related issues) have you had in the last three audit cycles? Options: None, 1, 2–3, 4–6, 7 or more, Unsure
• What were the approximate questioned cost amounts or financial exposures tied to recent findings? If you prefer not to give amounts, describe the financial impact qualitatively.
• How did your auditors characterize management's responsiveness to prior corrective actions? Options: Proactive and timely, Some follow-through but inconsistent, Slow and insufficient, No corrective action taken, Not commented on, Other

What Keeps Your Sleeping Hours Short?

• Which potential consequence worries you most if findings repeat? Options: Loss of funding or grants, Expanded audit scope next year, Required repayments, Damage to reputation with funders, Board loss of confidence / leadership changes, Program disruption, Other
• How strongly is your board audit committee pressuring management for a permanent fix versus a one-off remediation? Options: Board demands sustainable solution with monitoring, Board requested short-term corrective action only, Board awareness but no active pressure, Board has not been informed, Other
• Which internal teams feel the most pressure when auditors show up (finance, programs, HR, operations)? Options: Finance, Programs, HR / Payroll, Operations, Executive leadership, All of the above, Other
• Share a recent example of how audit-related stress affected a decision, program, or fundraising effort in your organization.
• If you avoided another finding next year, what would that let your leadership or board do differently?

Where Do Processes Break Down?

• Which workflows most often lack audit-ready evidence when you go looking for it? Options: Procurement solicitations & bids, Vendor contracts and approvals, Cost allocation memos & support, Payroll/time-and-effort records, Subrecipient agreements & monitoring files, Expense documentation and invoices, Other
• For procurement specifically: do you have a documented policy, templates, and threshold table that staff actually use? Options: Yes—fully documented and used, Policy exists but templates are inconsistent, Policy outdated, not used, No formal procurement policy, Unsure
• How is employee time and effort captured, approved, and stored today? Who reviews it for sufficiency?
• Do you have a formal cost allocation plan that is used consistently across grants? Options: Yes—recently updated (within 2 years), Yes—but needs updating (>2 years), We have an informal approach, not a formal plan, No cost allocation plan, Unsure
• How often do you perform proactive internal testing or sample checks of controls outside of the annual audit? Options: Monthly, Quarterly, Semi-annually, Annually (only at audit time), Never

Who Actually Holds the Keys?

• If we needed to run a corrective action plan, who would need to approve scope, budget, and timeline? Options: Executive Director, CFO/Finance Director, Board/Audit Committee, Program Director(s), Grants Manager, Procurement Officer, Other
• Do you have a named internal sponsor who can remove roadblocks and commit staff time? Options: Yes—fully empowered sponsor, Yes—but sponsor is resource-constrained, No sponsor identified yet, Unsure
• What internal barriers typically derail cross-department compliance efforts (examples: competing priorities, turf, lack of tools)?
• How many full-time equivalent staff (or total hours) in finance and grants could realistically participate in implementation each month? Options: <10 hours, 10–25 hours, 26–50 hours, 51–100 hours, >100 hours
• Do you currently rely on external advisors for compliance, and if so, what's missing from that support?

Imagine Zero Repeat Findings — What Changes?

• If you could guarantee no repeat findings from here on, what measurable signs would tell you the work succeeded? Options: No repeat findings in next audit, Dashboard shows 100% documentation coverage, Quarterly samples show controls working, Program staff consistently pass spot checks, Funders express confidence, Reduced auditor testing, Other
• Which single metric would your board consider the strongest proof-of-progress (pick one)? Options: No repeat findings, Documentation completeness %, Time-to-remediate finding, Quarterly control test pass rate, Reduced questioned costs
• What timeline do you believe is realistic to reach an audit-ready posture for the most urgent finding(s)? Options: Immediate / within 1 month, 1–3 months, 3–6 months, 6–12 months, 12+ months
• Estimate the value of success in practical terms (e.g., staff hours saved per month, reduced risk exposure dollars, or avoided penalty). If you can't estimate, describe qualitatively.
• How important is building internal capability (training + process change) versus buying ongoing vendor monitoring? Options: High priority: build internal capability, Balanced: mix of internal + vendor, Prefer vendor-led monitoring long-term, Unsure / open to guidance

What Would Make That Change Practical?

• Which practical constraints are most likely to derail even a strong compliance plan here? Options: Limited budget, Insufficient staff bandwidth, Legacy systems and siloed data, Procurement rules/cycles, Leadership turnover or competing priorities, Cultural resistance to change, Other
• Has leadership indicated a budget or spending tolerance for addressing audit-related corrective actions? Options: No budget allocated yet, <$25k, $25k–$75k, $75k–$200k, >$200k, Confidential / not disclosed
• What procurement or governance steps could delay selecting a vendor (e.g., RFP required, board approval, fiscal year timing)? Select all that apply. Options: Formal RFP required, Board approval required, Procurement threshold review, Must align with annual budget cycle, Can contract under an existing vendor, Other
• Which core systems would we need to integrate with (ERP, payroll, grants management, document storage)? Please list systems and any access limitations.
• How would you describe your organization's appetite for process change and training across program and finance teams? Options: Eager and ready, Cautiously open, Reluctant but cooperative, Resistant

What Would Trustworthy Monitoring Look Like?

• If a monitoring dashboard truly prevented audit surprises, what specific alerts or views would you rely on each quarter? Options: Missing procurement documentation, Questioned-cost flags, Time-and-effort noncompliance, Subrecipient monitoring failures, Upcoming reporting deadlines, Exceptions trending upward, Other
• Who should receive which alerts or reports (e.g., finance, program leads, ED, board), and by what channel? Options: Finance team email, Program leads email, Executive Director summary, Board / Audit Committee quarterly packet, Automated dashboard access, Weekly exception report, Other
• What level of evidence does your CFO or auditor expect when an alert fires (transaction-level documents, summary with links, sampling results)? Options: Transaction-level evidence with links, Sample summary plus supporting docs, High-level trends with drilldown available, Custom format on request
• Would you want monitoring to trigger governance activities (e.g., quarterly remediation meeting) and what cadence would you prefer? Options: Monthly operational check-ins, Quarterly governance review, Ad-hoc for high-risk alerts, Annual review only, Other
• How tolerant are you of false positives (extra work to investigate) versus false negatives (missed risk)? Describe the balance you prefer.

How Will You Decide — and Who Will Be Persuaded?

• What are the top selection criteria for a compliance partner and monitoring tool in your view? (pick all that matter) Options: Direct federal audit experience, State/local grant familiarity, Proven corrective action approach, Technology/dashboard capabilities, Ongoing monitoring & governance, Cost and pricing model, References from similar nonprofits, Training & enablement offerings, Data security and SLA terms
• Who will sit on the vendor selection or approval panel, and what decision authority does each person hold?
• What's your expected timeframe to select and contract with a compliance partner? Options: Within 1 month, 1–3 months, 3–6 months, Longer / unsure, Immediate / within 2 weeks
• Would running a short pilot or proof-of-concept on a single program or finding help move your board toward a decision? Options: Pilot required, Pilot would help but not required, Prefer to skip pilot and proceed, Unsure
• Are there contractual or data security terms that are absolute deal-breakers for you (e.g., specific indemnity, data residency, SOC2)? Please list.

What One Small Action This Week Would Prove Progress?

• If we both committed to one small action this week that would convince your audit committee progress is underway, what would that be? Options: Deliver a sample control test, Provide a remediation timeline for top finding, Share dashboard prototype with sample data, Run an internal training session for staff, Other
• Which documents or data can you provide within 7 days to allow a sample test (select all that apply)? Options: Recent procurement files, Payroll/time-and-effort records, Subrecipient agreements and monitoring files, Grant budgets and ledgers, Corrective action plan for prior finding, Other
• Who should be our single point-of-contact to arrange access and a 60-minute kickoff meeting, and what is their best availability window?
• Do you have any immediate concerns or constraints we should address before proposing a pilot or scope?
• On a readiness scale, how prepared is your organization to start a remediation plus monitoring program in the next 30 days? Options: Ready—we can start immediately, Mostly ready—minor prep needed, Need 1–3 months of preparation, Not ready in next 3 months, Unsure