Every subrecipient needs a documented risk assessment and a monitoring plan that matches the risk. Most offices run this on one spreadsheet nobody trusts. Score one in 30 seconds.
Scope: this implements the risk factors named in 2 CFR 200.332(b) and produces a monitoring plan proportional to the score. It is a starting point for your documented assessment, not a substitute for your institution's subrecipient monitoring policy — and thresholds change, so confirm the current Single Audit threshold before you rely on it.
At audit, the question isn't whether you monitored — it's whether you can show the assessment, the plan, and the record that you followed it. That's three artifacts most offices don't have.
per department · unlimited subrecipients
Built by the same team, free to try.