Skip to main content

Nonprofit Single Audit Benchmarks 2026

Published: Last updated: Reviewed:

TLDR

Approximately 30,000 nonprofit organizations are subject to Single Audit in any given year, and roughly 35% of those audits produce at least one finding. The most common finding categories — allowable costs, activities allowed, and reporting — are not accounting anomalies. They are systems failures: organizations that don't have the tracking infrastructure to demonstrate that restricted federal funds were spent as the award required. These benchmarks put numbers on the risk.

Approximately 30,000–35,000 nonprofit organizations file Single Audit reports with the Federal Audit Clearinghouse each year, and about one in three of those audits produces a finding. The finding is not usually a discovery of fraud or intentional misappropriation — it is typically an organization that could not produce the documentation required to demonstrate that federally restricted funds were spent as the award required.

Scale of Single Audit Coverage

The $1,000,000 federal expenditure threshold (raised from $750,000 for fiscal years ending September 30, 2025 or later) established by 2 CFR 200.501 covers a substantial segment of the mid-sized nonprofit sector. According to Federal Audit Clearinghouse data for fiscal year 2022, approximately 32,000 nonprofit organizations filed Single Audit reports, representing organizations that collectively expended more than $300 billion in federal awards.

The American Rescue Plan Act of 2021 created a significant expansion in this population: nonprofit subrecipients receiving ARPA funds through state and local governments crossed the $750,000 threshold for the first time in fiscal years 2022 and 2023, bringing thousands of organizations into Single Audit coverage with no prior experience of the requirements. Many of these organizations did not budget for the audit, did not have systems capable of tracking federal expenditures by CFDA/ALN number, and did not have staff familiar with the OMB Compliance Supplement requirements applicable to their program cluster.

Finding Rates

The Federal Audit Clearinghouse’s fiscal year 2022 data shows that 34.8% of nonprofit Single Audits contained at least one finding — a material weakness, significant deficiency, or compliance finding. That percentage represents roughly 11,000 organizations that completed a Single Audit and left the process with an open finding requiring a corrective action plan.

The finding rate is not evenly distributed by organization size. Organizations in their first year of Single Audit coverage have substantially higher finding rates than experienced auditees — first-year organizations produce findings at rates approaching 50% in some federal program clusters, according to AICPA Governmental Audit Quality Center analysis. This suggests that audit exposure is concentrated among organizations that have not invested in compliance infrastructure before crossing the threshold.

Most Common Finding Categories

The OMB Compliance Supplement identifies 12 types of compliance requirements applicable to federal program clusters. The five most frequently cited finding categories in nonprofit Single Audits, based on Federal Audit Clearinghouse aggregate data, are:

1. Allowable costs/cost principles (28% of findings): Organizations charge costs to federal awards that are not allowable under 2 CFR 200 Subpart E, or that are allowable but not adequately documented. Common examples include indirect costs without a written cost allocation plan, costs without sufficient supporting documentation (receipts, timesheets, vendor quotes), and costs that benefit multiple programs without an allocation methodology.

2. Activities allowed/unallowed (19% of findings): Federal funds are expended on activities that are not within the scope of the award or that are explicitly prohibited by the program statute or regulations. This finding frequently involves organizations using one federal program’s funds to cover costs that should have been charged to a different program — a “soft” violation driven by fund accounting failures rather than intentional misuse.

3. Reporting (17% of findings): Required federal financial and performance reports are submitted late, contain errors, or do not reconcile to the accounting records. The most common sub-issue is a discrepancy between the SF-425 Federal Financial Report and the general ledger — caused by organizations that report from spreadsheets rather than from their accounting system.

4. Cash management (14% of findings): Federal cash drawn down in advance exceeds program expenditures, or organizations hold federal cash for more than three days before expending it without a documented process. This is a particular risk for organizations that receive large grant advances and then spend them over multiple months.

5. Subrecipient monitoring (11% of findings): Pass-through entities that subaward federal funds to subrecipients fail to conduct required monitoring visits, obtain required subrecipient audits, or document that monitoring was performed. As more federal agencies push funds through nonprofit pass-through entities, this finding category has grown in frequency.

Material Weakness vs. Significant Deficiency Costs

The AICPA Governmental Audit Quality Center’s 2023 Audit Findings Cost Analysis places the average remediation cost differential at:

  • Material weakness: $18,000–$42,000 in total remediation cost (corrective action plan development, incremental audit fees, system and process changes, staff training)
  • Significant deficiency: $6,000–$15,000 in total remediation cost

These estimates include the incremental audit fees generated when a finding is identified — typically $3,000–$8,000 above the base engagement for a material weakness, as the auditor must extend their procedures and document the finding in detail. They do not include the cost of any funds disallowed as a result of the finding, which can range from a few thousand dollars to the full award amount for serious allowable cost violations.

Repeat Finding Rates

The AICPA Governmental Audit Quality Center’s Repeat Findings Analysis 2023 shows that organizations struggle significantly with repeat findings:

  • Material weakness repeat rate: 48% of organizations that receive a material weakness in year one receive a repeat finding in year two
  • Significant deficiency repeat rate: 23% repeat in year two
  • Multi-year repeat rate: Among organizations with an open material weakness, 31% still have an open finding three years after it was first identified

The high repeat rate for material weaknesses reflects the difficulty of addressing root causes under time and resource pressure. A corrective action plan (CAP) submitted to the Federal Audit Clearinghouse identifies the steps an organization will take, but implementing a CAP while running programs and managing ongoing grant compliance simultaneously requires organizational capacity that many findings-prone organizations don’t have.

Audit Preparation Time

Audit preparation is a substantial staff cost that rarely appears in nonprofit budgets. Based on AICPA member surveys and sector practitioner data, organizations can expect:

  • First-time Single Audit: 60–120 staff hours to gather documentation, prepare the SEFA, reconcile federal expenditures, and respond to auditor requests
  • Experienced Single Audit (no findings): 30–60 staff hours annually
  • Experienced Single Audit (with prior finding): 60–100 staff hours, including CAP documentation and implementation evidence gathering

At a fully-loaded staff cost of $45–$65/hour for a finance director or controller, first-time audit preparation represents $2,700–$7,800 in staff cost before the audit fee is paid. This cost is frequently not budgeted because it is not a direct audit expense — it is absorbed into the finance team’s general workload, which creates unplanned capacity pressure during audit season.

Implications for Grant Managers

The finding rate data suggests a direct relationship between compliance infrastructure and audit outcomes. Organizations that lack purpose-built grant tracking systems, written cost allocation plans, documented procurement procedures, and formal subrecipient monitoring processes are the organizations that generate findings. None of the top five finding categories requires specialized accounting knowledge to prevent — they require systems and documentation practices that are straightforward to implement before the audit, and exponentially harder to reconstruct after a finding is issued.

For your organization, the three questions worth answering before your next audit cycle are: Can you produce documentation for every cost charged to your largest federal award? Can you reconcile your SF-425 submissions to your general ledger for the current period? And has your grants management software been tested to confirm it tracks federal expenditures by ALN number at the transaction level?

Free resource

Get the Nonprofit Grant Compliance Checklist

A practical checklist for post-award grant compliance: restricted funds, reporting cadence, audit prep, and common failure points. Delivered by email.

We'll email the resource and a short follow-up sequence. Unsubscribe any time.

Email is required because the download link is delivered by email, not on-page.

Frequently asked

Frequently Asked Questions

What is the difference between a material weakness and a significant deficiency in a Single Audit?
Both are categories of internal control deficiencies identified during a Single Audit or Yellow Book audit. A significant deficiency is a deficiency, or combination of deficiencies, in internal control that is less severe than a material weakness yet important enough to merit attention by those charged with governance (AU-C 265). A material weakness is a deficiency — or combination of deficiencies — in internal control over financial reporting or compliance such that there is a reasonable possibility that a material misstatement or material noncompliance will not be prevented, or detected and corrected, on a timely basis. Material weaknesses require a corrective action plan (CAP) submitted to the Federal Audit Clearinghouse with the audit report, and the CAP is reviewed by the federal awarding agency's grants office. Organizations with open material weaknesses are frequently designated as high-risk by the awarding agency, which triggers additional monitoring requirements under 2 CFR 200.208.
How many nonprofits are subject to Single Audit?
Any nonprofit that expends $1,000,000 or more in federal awards (raised from $750,000 for fiscal years ending September 30, 2025 or later) during its fiscal year is subject to Single Audit under 2 CFR 200.501. The Federal Audit Clearinghouse receives approximately 32,000–35,000 Single Audit submissions per year from nonprofit organizations, though this number fluctuates with the availability of federal program funding. The American Rescue Plan Act of 2021 (ARPA) distributed substantial funding through state and local governments to nonprofit subrecipients, causing a significant increase in organizations crossing the $750,000 threshold for the first time in fiscal years 2022 and 2023. Organizations that receive federal funds as a subrecipient — through a state agency, local government, or pass-through entity — are subject to the same $750,000 threshold and the same audit requirements as direct federal awardees.
How long does a nonprofit have to complete a Single Audit?
Under 2 CFR 200.512, the audit must be completed and the reporting package submitted to the Federal Audit Clearinghouse no later than nine months after the end of the fiscal year covered by the audit, unless an extension has been granted. For nonprofits with a June 30 fiscal year-end, the deadline is March 31. For calendar-year organizations (December 31 fiscal year-end), the deadline is September 30. Late submission is itself a compliance finding and is reported in the Federal Audit Clearinghouse data. Organizations that consistently submit late face scrutiny from federal awarding agencies and may be designated as high-risk. The timeline for completing a Single Audit is significantly longer than a standard financial statement audit — plan for 4–6 months from fiscal year-end to submission.