U.S. Consolidated Financial Statements: Improvements Needed in Controls over Treasury Preparation Processes

Overview

GAO’s fiscal year 2025 audit found control deficiencies in the Department of the Treasury’s processes for preparing the U.S. government’s consolidated financial statements (CFS). The deficiencies contributed to material weaknesses that affect the federal government’s ability to account for intragovernmental activity and balances, to ensure the CFS is consistent with underlying audited entities’ financial statements, properly balanced, and in accordance with U.S. GAAP, and to produce complete, supported reconciliations and cash-balance change statements. GAO identified three new deficiencies: (1) legal contingencies were not properly reported in the draft CFS note disclosure, (2) note disclosures were not consistently accurate and complete in the draft CFS, and (3) the annual recertification reports for Planning Analytics access were inadequate to determine whether access was appropriate. GAO closed three prior recommendations but left nine recommendations open as of its fiscal year 2024 audit; GAO will monitor Treasury’s corrective actions as part of the fiscal year 2026 CFS audit. For contractors, these findings increase demand for services that tighten disclosure controls, reconciliation processes, and system access governance, and they create near-term opportunity to support corrective-action work and future audit-readiness engagements. See related guidance in the Winning Federal Contracts Guide for positioning capture and proposals.

Immediate Actions (This Week)

• [ ] Confirm receipt and review the Cabrillo Signals War Room briefing on this GAO audit finding and tag relevant capture/proposal teams.
• [ ] Inventory active and planned work that supports Treasury, OMB, or CFS-related financial reporting processes (including any engagements touching consolidated reporting, reconciliations, or Planning Analytics) and flag contracts for potential scope changes or task orders.
• [ ] Perform a quick internal check of system access recertification practices for any consolidation/reporting systems you operate or support (ensure records exist that show who had access, why, and when access was recertified).

Short-Term Actions (30 Days)

• [ ] Run a focused gap assessment for affected engagements against the named compliance surfaces (OMB Circular A-123, NIST 800-53, NIST 800-171 (NIST Special Publication 800-171), FFMIA, U.S. GAAP, and FISMA as applicable) and document remediation priorities tied to GAO’s findings (legal contingencies, note disclosures, access recertification, intragovernmental reconciliations).
• [ ] Update your proposal templates, compliance matrices, and statement-of-work language to include explicit deliverables for improved note/disclosure controls, legal contingency reporting support, reconciliation procedures, and access recertification workflows; prepare first-draft language using your capture artifacts.

Long-Term Actions (90+ Days)

• [ ] Develop and offer a remediation delivery package that includes: strengthened disclosure and note-preparation processes, reconciliation procedures for intragovernmental activity, formalized access recertification workflows for consolidation systems (e.g., Planning Analytics), and audit evidence packages to support Treasury corrective actions.
• [ ] Institutionalize continuous monitoring and audit-readiness services for clients supporting CFS preparation—maintain evidence trails, run periodic mock audits, and update training and controls to reduce risk of repeat GAO findings.

Compliance Checklist

• [ ] OMB Circular A-123 — internal control documentation and remediation plans for financial reporting processes
• [ ] NIST 800-53 — system security and access control implementation and documentation for financial consolidation systems
• [ ] NIST 800-171 — protections if handling controlled unclassified information for Treasury/OMB engagements
• [ ] FISMA — apply when providing services that involve federal information systems subject to FISMA
• [ ] FFMIA — assess financial management system compliance impacts related to consolidated reporting
• [ ] U.S. GAAP — ensure financial statement line items and note disclosures (including legal contingencies) are consistent with underlying audited entities
• [ ] Reconciliations and intragovernmental activity controls — procedures and evidence that reconciliations are complete, supported, and consistent with audited entity data
• [ ] Access recertification controls — documented, auditable recertification reports for systems used in CFS preparation (Planning Analytics noted in GAO findings)

Resources

• OMB Circular A-123 guidance (https://www.whitehouse.gov/omb/)
• U.S. Department of the Treasury (https://home.treasury.gov/)
• U.S. Office of Management and Budget (OMB) (https://www.whitehouse.gov/omb/)
• U.S. Government Accountability Office (GAO) (https://www.gao.gov/)
• NIST Special Publication 800-53 (security and privacy controls) (https://www.nist.gov/publications)
• NIST Special Publication 800-171 (protecting CUI (Controlled Unclassified Information)) (https://www.nist.gov/publications)

Also see the Cabrillo Club guides: Winning Federal Contracts Guide (/insights/winning-federal-contracts), CMMC (Cybersecurity Maturity Model Certification) Compliance Guide (/insights/cmmc-compliance-guide), and CUI-Safe CRM Guide (/insights/cui-safe-crm-guide).

How Cabrillo Club Automates This

• Cabrillo Signals War Room — This event was already detected and delivered via the War Room briefing within minutes. War Room continuously monitors federal reporting and audit developments so your teams are alerted the moment GAO findings, agency corrective-action notices, or related policy signals appear; it surfaces the initial summary, affected agencies (Treasury, OMB), and the specific CFS control issues (note disclosures, legal contingencies, access recertification).
• Cabrillo Signals Match Engine — The Match Engine automatically rescoring your active opportunity pipeline when events like this change opportunity relevance. It updates match scores and keyword relevance for pursuits that mention financial reporting, internal controls, Planning Analytics, or reconciliation services so capture managers see priority shifts immediately.
• Cabrillo Signals Intelligence Hub — The Intelligence Hub tracks affected agencies, NAICS codes, and contract vehicles identified in this event. Use saved searches to get automated alerts when follow-on solicitations or corrective-action support opportunities appear on federal sources matching this event’s profile. It centralizes related docs, GAO updates, and agency notices for easy reference during capture.
• Proposal Studio (Proposal OS) — Proposal Studio generates compliance matrices and first-draft technical approaches tailored to this event (legal contingency support, note-disclosure controls, access-recertification services) by reusing your past performance entries and win themes. Its bid/no-bid decision engine factors in signals like this GAO audit to score capture risk and opportunity, producing a ready starting point for your proposal team.
• Proposal Studio Workflow Tracker — The Workflow Tracker orchestrates a 9-gate capture from opportunity identification through post-submission and audit readiness. For this event it will automatically route compliance reviews to contracts and legal, track required certifications and evidence (access recertification logs, reconciliation packages), and generate audit-ready documentation bundles for client delivery or proposal attachments.

To act now: review the War Room briefing, run the Match Engine rescore on your pipeline, and configure Intelligence Hub saved searches for Treasury/OMB CFS-related solicitations. Contact your Cabrillo Club account team to enable or tailor these features for your capture teams.