This bill creates an Audit and Finance Compliance Unit inside the Maryland Department of Budget and Management to centralize monitoring and remediation of audit findings and to publish progress publicly.
The change matters because it replaces fragmented follow‑up with a mandated central function that both assists agencies with repeat or significant findings and publishes a dashboard of unresolved and in‑progress corrective actions—raising the visibility of long‑standing control weaknesses and reallocating responsibility for remediation work toward DBM and affected agencies.
At a Glance
What It Does
The bill requires the newly established Unit to monitor agency efforts to correct audit findings reported by the Office of Legislative Audits, provide objective assessments and proactive advice, and deliver direct remediation assistance under defined triggers. It also requires the Unit to host a public dashboard showing each finding’s status and progress indicators.
Who It Affects
Executive branch agencies under audit, DBM (which houses the Unit), the Joint Audit and Evaluation Committee (which can request help), and any contractors or staff the Unit uses to deliver specialized remediation services. Agencies with repeat findings face prioritized intervention.
Why It Matters
By combining monitoring, hands‑on assistance, and public reporting, the bill raises the stakes for unresolved audit findings and creates ongoing operational work for DBM and audited agencies—changing how corrective actions are tracked, supported, and scrutinized.
More articles like this one.
A weekly email with all the latest developments on this topic.
What This Bill Actually Does
The bill adds a new Subtitle 4 to the State Finance and Procurement Article creating an Audit and Finance Compliance Unit inside the Department of Budget and Management. The Unit’s statutory role is to track how executive agencies respond to audit findings and to help ensure corrective actions are implemented effectively.
The statute cross‑references existing state law that requires the Governor to establish monitoring systems for executive units, anchoring the Unit’s activity in that higher‑level requirement.
Operationally, the Unit must both assess agency corrective action plans and monitor their implementation. The statute directs the Unit to provide objective assessments and to take proactive, advisory steps to prevent recurring findings.
When agencies meet a remediation trigger or when the Joint Audit and Evaluation Committee requests assistance, the Unit must provide direct help: advising on corrective actions, reviewing agency resolution steps for repeat and significant findings, performing sample tests of implemented fixes, and tracking ongoing progress.For higher‑need cases the Unit must stand up a specialized team to lead hands‑on remediation work. That team may be staffed with current state employees, current contractual employees, and external contractors—giving DBM flexibility but also requiring procurement and staffing decisions.
The Unit must publish and maintain a public dashboard that organizes audit findings by agency unit and, for each finding, lists the OLA recommendations, how long a repeat finding has gone unresolved, projected completion dates, reasons findings remain open, and a graphic progress indicator. The dashboard must be fully operational by October 1, 2027, and the Unit must report on the dashboard’s status to the Joint Audit and Evaluation Committee on October 1, 2026 and October 1, 2027.
The Secretary may adopt regulations to implement the subtitle, and the Act takes effect July 1, 2026.
The Five Things You Need to Know
The Unit must provide direct assistance to any agency that has four or more repeat audit findings or when the Joint Audit and Evaluation Committee requests help.
The public dashboard must show, for every finding examined each year by agency unit, the OLA recommendation, years the repeat finding has gone unresolved, projected completion date, reason a finding remains open, and a graphic status (unresolved, in progress, resolved).
The dashboard must be fully operational by October 1, 2027, and the Unit must report on its status to the Joint Audit and Evaluation Committee on October 1, 2026 and October 1, 2027.
The Unit must create a specialized remediation team that can include current state employees, current contractual employees, and external contractors to deliver the direct assistance required by the statute.
The Governor must implement systems to monitor executive departmental units’ audit remediation efforts under existing State Government §2‑1224(h)(1), and the Secretary of DBM may adopt regulations to carry out the subtitle.
Section-by-Section Breakdown
Every bill we cover gets an analysis of its key sections.
Definitions for the new subtitle
This short section defines key terms used throughout the subtitle: “Agency” means an executive branch entity, and “Unit” means the newly created Audit and Finance Compliance Unit. It’s a technical foundation but matters because the statutory scope is limited to executive branch entities; legislative and judicial units fall outside the Unit’s direct remit.
Establishes the Audit and Finance Compliance Unit
This provision formally creates the Unit inside DBM. Practically, that triggers DBM to allocate staff, define reporting lines, and integrate the Unit’s monitoring role into DBM’s operating structure—actions that will drive near‑term hiring, procurement, and IT decisions at DBM.
Monitoring responsibilities and statutory anchor
The section ties the Unit’s monitoring duties to the Governor’s existing obligation under State Government §2‑1224(h)(1). The Unit must monitor agencies’ efforts to correct findings reported by the Office of Legislative Audits under the state’s audit follow‑up framework. This creates a legal cross‑reference that strengthens DBM’s authority to demand remediation status and to report to the Joint Audit and Evaluation Committee.
Assessment, monitoring, and proactive support
The Unit must provide objective assessments of corrective actions and actively monitor implementation. It may also take proactive steps—advice, templates, best‑practice guidance—to prevent findings from recurring. This language gives DBM both an evaluative role and a consultative one, but it does not create explicit enforcement penalties; the Unit’s power is procedural and advisory unless regulations add enforcement mechanisms.
Triggers and content of direct assistance; specialized team
Direct assistance is mandatory when an agency has four or more repeat findings or when the Joint Audit and Evaluation Committee requests help. The assistance includes advising on corrective action development, reviewing resolution steps with emphasis on repeats and serious findings, sampling to test implemented fixes, and ongoing progress monitoring. The Unit must form a specialized team for this work and may staff it with state employees, contractual staff, or external contractors—allowing flexibility but introducing procurement and budget implications.
Public dashboard requirements and deadline
The Unit must maintain a public dashboard on its website listing current and repeat audit findings, organized by agency unit. For each finding the dashboard must include the Office of Legislative Audits’ recommendations, years unresolved for repeat findings, projected completion dates, reasons for unresolved findings, and a graphic progress indicator. The statute sets a firm operational deadline: the dashboard must be fully functional by October 1, 2027, which creates a near‑term IT delivery obligation for DBM.
Regulatory authority, reporting, and effective date
The Secretary may adopt regulations to implement the subtitle. Separately, the Unit must report to the Joint Audit and Evaluation Committee on the dashboard’s status by October 1, 2026 and again by October 1, 2027. The Act takes effect July 1, 2026. Those deadlines compress DBM’s planning window for staffing, IT, and rulemaking in the 2026–2027 period.
This bill is one of many.
Codify tracks hundreds of bills on Government across all five countries.
Explore Government in Codify Search →Who Benefits and Who Bears the Cost
Every bill creates winners and losers. Here's who stands to gain and who bears the cost.
Who Benefits
- Joint Audit and Evaluation Committee — gains centralized, standardized reporting and an operational dashboard to monitor agency remediation progress and to request targeted assistance.
- Audited executive agencies with repeat findings — receive hands‑on remediation support, objective assessments, and sample testing that can reduce time to resolution if they accept and implement the assistance.
- Taxpayers and the public — get greater transparency through a public dashboard that shows what findings exist, why they remain unresolved, and projected completion dates, enabling external scrutiny and better accountability.
- Internal audit functions and agency compliance teams — benefit from centralized guidance, standard remediation templates, and a single DBM point of coordination for repeat or systemic issues.
- Vendors and contractors that provide remediation services — may see increased demand since the specialized team can include external contractors, creating contracting opportunities for firms that assist with corrective actions.
Who Bears the Cost
- Executive branch agencies — face additional reporting, remediation work, and coordination tasks; agencies with repeat findings will shoulder most of the direct remediation effort and potential reputational exposure.
- Department of Budget and Management — must staff the Unit, stand up the specialized team, develop or procure the dashboard, and absorb ongoing monitoring costs unless the General Assembly funds those needs separately.
- State procurement and HR processes — will carry the burden of hiring contractors or reassigning staff to the specialized team, adding procurement workload and potential contract management costs.
- Program managers within agencies — will need to reallocate staff time toward corrective actions, sampling, and coordination with DBM, which may delay other initiatives.
- Budgetary pressure on future appropriations — absent explicit funding in the Act, DBM and agencies will need to find resources within existing budgets or seek new appropriations to meet statutory deadlines.
Key Issues
The Core Tension
The bill pits transparency and centralized accountability—public dashboards and hands‑on remediation—against agency autonomy, resource limits, and the risk of incentivizing superficial fixes: it increases public visibility and support capacity without granting clear enforcement authority or funding, forcing a trade‑off between making problems visible and actually ensuring durable correction.
The statute centralizes monitoring and assistance but stops short of granting DBM clear enforcement tools. That creates a practical question: if the Unit identifies stalled or inadequate corrective actions, the law provides visibility and advice but not explicit sanctions, leaving follow‑through dependent on agency cooperation, political pressure, or future rulemaking.
Implementation timing and resource assumptions create another real tension. The Act requires the dashboard to be operational by October 1, 2027 and directs early status reports in 2026 and 2027, but it does not appropriate funds or specify headcount.
DBM will need to decide whether to repurpose existing staff, request new positions, or use contractors—each option has trade‑offs for institutional knowledge, cost, and procurement timelines. The statutory permission to include contractors in the specialized team raises procurement complexity and potential continuity issues if outside vendors have limited institutional context.
Finally, publicizing unresolved audit findings raises measurement and legal questions: how will the Unit standardize what “resolved” means across disparate findings; how will sensitive information be redacted to avoid privacy or security violations; and how will the dashboard’s projected completion dates be validated and updated? Those are operational choices that will shape whether the dashboard drives sustained remediation or simply creates publicly visible but politically transient metrics.
Try it yourself.
Ask a question in plain English, or pick a topic below. Results in seconds.