Compliance responsibility for vendors.

Compliance responsibility for vendors. In most cases, the auditee's compliance responsibility for vendors is only to ensure that the procurement, receipt, and payment for goods and services comply with laws, regulations, and the provisions of contracts or grant agreements. Program compliance requirements normally do not pass through to vendors. However, the auditee is responsible for ensuring compliance for vendor transactions which are structured such that the vendor is responsible for program compliance or the vendor's records must be reviewed to determine program compliance. Also, when these vendor transactions relate to a major program, the scope of the audit shall include determining whether these transactions are in compliance with laws, regulations, and the provisions of contracts or grant agreements.

Source

29 CFR § 99.210


Scoping language

General. An auditee may be a recipient, a subrecipient, and a vendor. Federal awards expended as a recipient or a subrecipient would be subject to audit under this part. The payments received for goods or services provided as a vendor would not be considered Federal awards. The guidance in paragraphs (b) and (c) of this section should be considered in determining whether payments constitute a Federal award or a payment for goods and services.

Is this correct? or