2 CFR 200 Decoded: What New Federal Grantees Actually Need to Know About Uniform Guidance

A nonprofit in New Jersey won its first federal grant in 2023 — $1.2 million from the Department of Labor for a workforce training program. Eighteen months later, an Office of Inspector General audit questioned $387,000 in expenditures. The organization had charged staff time without adequate documentation, purchased equipment without competitive bidding, and failed to monitor a subrecipient that spent $140,000 with almost no oversight. The grant was not terminated, but the organization spent the next year renegotiating terms, repaying disallowed costs, and rebuilding internal systems it should have had from the start.

The regulation that would have prevented every one of those findings is 2 CFR Part 200, formally titled the Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards. Every organization that receives federal grant funding — nonprofits, universities, state and local governments, tribal nations — is bound by it. And yet most first-time grantees encounter it as a 150-page wall of regulatory text that they defer to "later," usually until an auditor arrives.

This is the plain-language version. Not every subsection, but the provisions that generate the most audit findings, the most disallowed costs, and the most preventable crises for organizations new to federal funding.

The October 2024 Overhaul Changed More Than Thresholds

The Office of Management and Budget finalized the most significant revision to the Uniform Guidance in a decade, effective October 1, 2024. The changes apply to all federal awards issued on or after that date, with audit-related provisions taking effect for fiscal years beginning on or after October 1, 2024. If your organization received a new award after that date, you are operating under the revised rules.

The headline changes involve dollar thresholds. The equipment capitalization threshold rose from $5,000 to $10,000, meaning items under that amount can now be treated as supplies rather than tracked as capital assets. The de minimis indirect cost rate — the fallback for organizations without a federally negotiated rate — increased from 10 percent to 15 percent of modified total direct costs. The single audit threshold jumped from $750,000 to $1,000,000. The simplified acquisition threshold climbed from $250,000 to $350,000 as of October 2025, and the micro-purchase threshold from $10,000 to $15,000.

But the structural changes matter more than the numbers. The revised guidance expanded the definition of modified total direct costs (MTDC) to include the first $50,000 of each subaward, up from $25,000. It granted Indian Tribes the same procurement flexibility as states, allowing them to follow their own procurement policies rather than the federal standards in sections 200.318 through 200.327. And it removed the prior approval requirement for several cost categories, including participant support costs — a change that reduces paperwork for education and training grants but also eliminates a built-in safeguard that forced grantees to think before spending.

Organizations operating under awards issued before October 1, 2024, generally remain subject to the previous version unless their federal agency applies the new rules retroactively. Check your terms and conditions.

What Makes a Cost Allowable — and What Gets You in Trouble

Subpart E of 2 CFR 200 establishes the cost principles that determine whether an expenditure can be charged to a federal award. Every cost must satisfy four tests simultaneously: it must be reasonable, meaning a prudent person would have incurred it; allocable, meaning it provides a proportional benefit to the federal award; consistent with the organization's policies and treatment of similar costs on non-federal activities; and in conformance with the specific provisions of sections 200.420 through 200.475, which list dozens of cost categories with individual rules.

The categories that most frequently generate audit findings for new grantees are compensation (200.430), travel (200.474), equipment and supplies (200.439), and consultant services (200.459). Compensation is the largest line item on most grants and the area where documentation failures are most common. Travel costs must conform to the organization's written travel policy, or if no policy exists, to the federal per diem rates. Equipment purchases above the $10,000 threshold require capitalization and tracking. Consultant rates above a certain threshold may require justification and, depending on the agency, prior approval.

Then there are the costs that are always unallowable, regardless of how reasonable they might seem. Alcoholic beverages. Bad debts. Lobbying and political activity. Entertainment costs, though the 2024 revision narrowed this to exclude some engagement activities. Fines, penalties, and legal costs arising from noncompliance. Alumni activities. Goods and services for personal use. The list at sections 200.420 through 200.475 is the single most important reference in the regulation, and new grantees should read it before they spend a dollar.

The most dangerous costs are not the obviously unallowable ones — nobody charges champagne to a federal grant — but the ambiguously allowable ones. A staff retreat that crosses into entertainment. A technology purchase that benefits both the grant and other programs but is charged entirely to the federal award. An employee whose time is split across projects but whose salary is charged 100 percent to the grant. These are the costs that become disallowed in an audit, and the remedy is repayment from the organization's own funds.

Time-and-Effort Reporting Is Where Audits Begin

Personnel costs typically represent 60 to 80 percent of a federal grant budget. Section 200.430 requires that charges for salaries and wages be based on records that accurately reflect the work actually performed — not budgeted estimates, not after-the-fact allocations, but contemporaneous documentation of how each employee spent their time.

The 2014 version of the Uniform Guidance eliminated the old requirement for specific Personnel Activity Reports (PARs), replacing it with a performance-based standard. Organizations can use any documentation system, including timesheets, activity logs, or other methods, as long as the system provides reasonable assurance that charges are accurate, allowable, and properly allocated. But "flexibility in format" has been misread by many new grantees as "flexibility in substance." It is not. The documentation must still demonstrate that employees charged to the grant worked on grant activities for the hours claimed, and the system must include internal controls such as supervisory review and periodic reconciliation.

Budget estimates may be used on an interim basis, but they must be reconciled against actual time worked on a regular basis — typically aligned with the payroll cycle. If the reconciliation reveals discrepancies, the organization must adjust its payroll charges to reflect actual effort.

The practical implication: every employee paid in whole or in part from a federal grant needs to track their time in a way that can withstand an auditor's review. For employees who work on multiple funding sources, the documentation must show the allocation of time across each source. This is one of the most frequently cited findings in single audits, and one of the easiest to prevent with a simple time-tracking system implemented from day one.

Procurement Standards Will Test Your Patience

Subpart D's procurement standards (sections 200.317 through 200.327) govern how grantees purchase goods and services with federal funds. For organizations accustomed to buying what they need from whoever they prefer, these rules represent a culture change.

The basic framework is tiered by dollar amount. Purchases at or below the micro-purchase threshold ($15,000 as of October 2025) may be made without soliciting competitive quotes, though they must still be distributed equitably among qualified suppliers and must reflect reasonable pricing. Purchases between the micro-purchase threshold and the simplified acquisition threshold ($350,000) require price or rate quotations from an adequate number of qualified sources. Above the simplified acquisition threshold, full competitive procurement applies — sealed bids or competitive proposals, depending on the nature of the purchase.

Three requirements trip up first-time grantees more than any others. First, the conflict of interest provision (200.318): organizations must maintain written standards of conduct covering conflicts of interest and governing the actions of employees engaged in selecting, awarding, and administering contracts. This means your executive director cannot hire their spouse's consulting firm without disclosure and recusal, even if the spouse offers the best price. Second, the documentation requirement: every procurement decision must be documented, including the rationale for the method of procurement, the selection of contract type, and the basis for contractor selection. Third, the requirement to conduct a cost or price analysis for every procurement above the simplified acquisition threshold.

Organizations must also verify that contractors and subrecipients are not suspended or debarred from receiving federal funds — a check that takes two minutes on SAM.gov but generates audit findings when skipped.

The Single Audit: Your Annual Reckoning

If your organization spends $1,000,000 or more in federal awards during its fiscal year (up from $750,000 under the pre-October 2024 rules), it must undergo a single audit in accordance with Subpart F. This is not a standard financial statement audit. It is a compliance audit that examines whether your organization followed the terms of its federal awards, the cost principles, and the administrative requirements of 2 CFR 200.

The auditor will select major programs based on a risk assessment — generally the larger awards and any programs that previously had findings — and test transactions, controls, and compliance in specific areas called compliance requirements. These include activities allowed or unallowed, allowable costs, cash management, eligibility, matching, period of performance, procurement, reporting, and subrecipient monitoring.

Findings are classified by severity. Material weaknesses represent significant deficiencies in internal controls. Questioned costs are expenditures that the auditor believes may be unallowable, and the federal agency must make a final determination on whether to disallow them and require repayment. The audit results are submitted to the Federal Audit Clearinghouse, where they become public and visible to every federal agency considering your organization for future funding.

The single audit threshold increase to $1 million provides relief for smaller organizations, but it does not eliminate accountability. Organizations below the threshold may still be subject to program-specific audits or monitoring reviews by their federal agency or pass-through entity.

Subrecipient Monitoring Is Your Problem, Not Theirs

When a grant recipient passes federal funds to another organization through a subaward, it becomes a pass-through entity with specific monitoring obligations under sections 200.331 and 200.332. This is one of the most consistently underestimated requirements in federal grants management.

Before issuing a subaward, the pass-through entity must evaluate the subrecipient's risk of noncompliance — considering factors such as prior audit results, new personnel, and new or substantially changed systems. Every subaward must include specific information: the federal award identification number, the CFDA number, the applicable compliance requirements, and the indirect cost rate (either negotiated or the 15 percent de minimis).

During the subaward period, the pass-through entity must review financial and programmatic reports, follow up on audit findings, issue management decisions on audit findings within six months, and verify that the subrecipient obtains its own single audit if it meets the threshold. If monitoring reveals noncompliance, the pass-through entity must take enforcement action — which can include disallowing costs, withholding payments, or terminating the subaward.

What catches new grantees off guard is that the federal agency holds the prime recipient responsible for subrecipient compliance failures. A 2024 review of state single audits found that one agency failed to complete required programmatic or fiscal reviews for 94 percent of its subrecipients. The audit findings attached to the prime recipient, not the subrecipients. The lesson is simple: if you cannot monitor a subrecipient adequately, do not issue a subaward.

Record Retention: Three Years Is the Floor, Not the Ceiling

Section 200.334 requires recipients and subrecipients to retain all federal award records for three years from the date of submission of the final financial report. For awards renewed quarterly or annually, the retention period runs from the date of each respective financial report. Records for property and equipment acquired with federal funds must be retained for three years after final disposition.

The three-year rule has three critical exceptions. First, if any litigation, claim, or audit is started before the three-year period expires, records must be retained until the matter is resolved and final action is taken. Second, the federal agency or pass-through entity may notify the recipient in writing to extend the retention period. Third, records for program income earned after the period of performance must be retained for three years from the end of the fiscal year in which the income is earned.

"Records" means everything: financial records, supporting documentation, statistical records, timesheets, procurement files, subaward agreements, correspondence with the federal agency, and any other documents that support charges to the award or demonstrate compliance. The practical recommendation is to retain records for at least five years, because audit findings can surface late and litigation can extend the retention requirement indefinitely.

What Happens When You Get It Wrong

Section 200.339 outlines the remedies available to federal agencies when a recipient fails to comply with the terms of an award or the requirements of 2 CFR 200. The graduated enforcement framework includes temporarily withholding cash payments, disallowing all or part of the cost of the activity not in compliance, wholly or partly suspending or terminating the award, initiating suspension or debarment proceedings, and withholding further awards.

The consequences are not hypothetical. HHS-OIG reported over $7 billion in expected recoveries during the second half of fiscal year 2024 alone, with 1,548 distinct enforcement actions and the exclusion of 3,234 individuals and entities from federal programs. A Department of Justice OIG audit of a single Bureau of Justice Assistance grant resulted in the entire grant amount being questioned, triggering an investigation and suspension of funding. State-level audits have documented material weaknesses persisting for five to eight consecutive audit years, suggesting that some organizations fail to correct problems even after being cited repeatedly.

For first-time grantees, the most common path to trouble is not fraud — it is ignorance. Organizations that treat a federal grant like a foundation grant, spending money without documentation, procurement processes, or time tracking, accumulate findings that compound with each audit cycle. The cost of building compliant systems from the start is a fraction of the cost of repaying disallowed expenditures and repairing an organization's reputation in the Federal Audit Clearinghouse.

The Uniform Guidance is not designed to be punitive. It is designed to ensure that public funds achieve public purposes with adequate accountability. Organizations that invest in understanding 2 CFR 200 before they spend their first dollar — rather than after their first audit finding — are the ones that build sustainable federal funding relationships. Tools like Granted can help new grantees identify federal opportunities and prepare competitive proposals, but compliance starts the moment an award is made, and it runs on systems, not intentions.