Codify — Article

Maryland creates DBM Audit and Finance Compliance Unit and public dashboard

Establishes a new unit in the Department of Budget and Management to monitor agency audit remediation, provide direct assistance for repeat findings, and publish a dashboard tracking resolution status.

The Brief

This bill creates an Audit and Finance Compliance Unit (the Unit) inside Maryland’s Department of Budget and Management (DBM). The Unit must monitor Executive Branch agencies’ efforts to correct Office of Legislative Audits (OLA) findings, provide assistance on repeat or persistent problems, and publish an agency-level dashboard showing current and repeat audit findings and remediation status.

The statute sets specific operational duties: the Unit must offer objective assessments of corrective actions, conduct sample testing of implemented fixes, form a specialized team to provide direct assistance to problem agencies, and maintain a public dashboard with the history, projected completion dates, and progress graphics for each finding. The law also requires two interim reports on the dashboard and authorizes the Secretary to adopt regulations to implement the subtitle.

At a Glance

What It Does

Creates an Audit and Finance Compliance Unit in DBM to monitor agencies’ remediation of OLA audit findings, provide targeted assistance for repeat problems, and operate a public dashboard listing findings and progress. The Unit must establish a specialized team that can include state employees, contractors, and current contractual staff.

Who It Affects

Executive Branch agencies that receive OLA audits—particularly units with repeat findings—DBM (which will staff and run the Unit), the Joint Audit and Evaluation Committee (which can request assistance), and external contractors who may be engaged for specialized support.

Why It Matters

It centralizes monitoring and technical support for audit remediation, makes unresolved audit findings publicly visible by unit and year, and creates a tool for legislative and public oversight. For compliance officers and agency managers, it adds a centralized reviewer and a public accountability mechanism to close repeat problems.

More articles like this one.

A weekly email with all the latest developments on this topic.

Unsubscribe anytime.

What This Bill Actually Does

The bill adds a new Subtitle 4 to the State Finance and Procurement Article to establish the Audit and Finance Compliance Unit inside DBM. The Unit’s core mission is monitoring and assisting Executive Branch agencies in correcting audit findings that the Office of Legislative Audits reports.

It does not create new sanctions; instead, it provides oversight, assessment, and technical support aimed at resolving findings.

Under the statute, the Unit must provide objective assessments of agencies’ corrective actions and track progress on implementation. The Unit may also work proactively with agencies to prevent future findings by offering advice and support.

When an agency has persistent problems—defined in the bill as having four or more repeat audit findings—or when the Joint Audit and Evaluation Committee requests help, the Unit must provide direct assistance. That assistance ranges from developing corrective action plans to performing sample testing of implemented fixes and monitoring ongoing progress.To make remediation efforts transparent, the Unit must maintain a public dashboard that lists all findings for audited agencies each year organized by agency unit.

For each finding the dashboard must show OLA’s recommendation, how long a repeat finding has been unresolved, a projected completion date, reasons a finding remains unresolved, and a graphic indicator whether the finding is unresolved, in progress, or resolved. The dashboard must be operational by October 1, 2027, and the Unit must report to the Joint Audit and Evaluation Committee on dashboard status by October 1, 2026 and October 1, 2027.The law authorizes the Secretary to adopt regulations to implement the new subtitle and allows the specialized assistance team to be composed of current state employees, current contractual employees, and external contractors.

Practically, the Unit centralizes expertise and public reporting while relying on DBM resources and potential contracting to deliver hands-on remediation support.

The Five Things You Need to Know

1

The Unit must provide direct assistance to any agency with four or more repeat audit findings or when the Joint Audit and Evaluation Committee requests help.

2

The specialized assistance team may include current state employees, current contractual employees, and external contractors.

3

The public dashboard must display each finding’s OLA recommendation, years unresolved, projected completion date, reason for being unresolved, and a graphic status (unresolved, in progress, resolved).

4

The dashboard must be fully operational on or before October 1, 2027, with progress reports to the Joint Audit and Evaluation Committee due by October 1, 2026 and October 1, 2027.

5

The Unit’s mandate focuses on monitoring, objective assessment, sample testing of corrective actions, and advisory support; the statute does not create new enforcement powers or financial penalties.

Section-by-Section Breakdown

Every bill we cover gets an analysis of its key sections. Expand all ↓

3–401

Definitions and scope

This section defines key terms used in the new subtitle—primarily ‘agency’ (Executive Branch entity) and ‘Unit’ (the Audit and Finance Compliance Unit). It limits the subtitle’s reach to Executive Branch agencies, which is important because the Judiciary and independent entities remain outside this statutory unit’s direct authority.

3–402

Establish the Unit in DBM

Statutorily creates the Audit and Finance Compliance Unit within the Department of Budget and Management. Placement inside DBM centralizes audit remediation oversight alongside budgetary authority, which affects how the Unit will interact with agency program and fiscal staff when assessing corrective plans.

3–403

Governor and Unit monitoring responsibilities

Makes explicit that the Governor must implement systems and processes to monitor agency corrective efforts under an existing State Government provision, and assigns the Unit the operational responsibility to monitor agencies' efforts to correct OLA findings. Practically this establishes both an executive-level obligation and a designated operational body to carry it out, but it does not enumerate enforcement mechanisms.

4 more sections
3–404

Assessment, monitoring, and proactive support

Requires the Unit to provide objective assessments of agency corrective actions and to monitor implementation progress. It also authorizes the Unit to take proactive measures—advice and support—to prevent audit findings, signaling that the Unit’s role includes technical assistance and not solely passive tracking.

3–405

Direct assistance threshold and specialized team

Specifies the triggers for targeted, hands-on assistance: agencies with four or more repeat findings or agencies referred by the Joint Audit and Evaluation Committee. The direct assistance duties include helping design corrective actions, reviewing resolution steps with emphasis on repeat/significant findings, sample testing implemented fixes, and monitoring progress. It requires formation of a specialized team that may draw on state employees, contractual staff, and external contractors—providing DBM flexibility to scale expertise but also creating procurement and supervision responsibilities.

3–406

Public dashboard content and deadline

Mandates a publicly accessible dashboard listing current and repeat audit findings by agency unit for each audited year. The dashboard must include OLA recommendations, years unresolved, projected completion dates, reasons for unresolved items, and a graphic status indicator. The statute sets a firm operational deadline—October 1, 2027—for the dashboard and prescribes transparency metrics that will drive how remediation progress is reported and interpreted.

3–407 / Act §§2–3

Regulatory authority, reporting, and effective date

Authorizes the Secretary to adopt regulations needed to implement the subtitle. Separately, the act requires DBM to report to the Joint Audit and Evaluation Committee on dashboard status by October 1, 2026 and October 1, 2027, and sets the act’s effective date as July 1, 2026. These implementation and reporting deadlines create near-term deliverables without prescribing funding or staffing levels in the statute.

At scale

This bill is one of many.

Codify tracks hundreds of bills on Government across all five countries.

Explore Government in Codify Search →

Who Benefits and Who Bears the Cost

Every bill creates winners and losers. Here's who stands to gain and who bears the cost.

Who Benefits

  • Agencies with repeat findings: Receive hands‑on help developing corrective actions, sample-testing fixes, and monitoring support—reducing the risk that problems persist and generating technical assistance they may otherwise lack.
  • Joint Audit and Evaluation Committee and legislators: Gain a centralized source of remediation data and a public dashboard to track agency progress, improving legislative oversight and targeting of oversight resources.
  • Office of Legislative Audits (OLA): Benefits from a focused entity that monitors agency follow‑up, which should improve closure rates and reduce the administrative burden of repeated findings.
  • Maryland taxpayers and service recipients: Stand to benefit indirectly from improved internal controls and reduced recurrence of audit findings that can impair program effectiveness or lead to waste.

Who Bears the Cost

  • Executive Branch agencies: Must expend staff time and resources to implement corrective actions, cooperate with Unit reviews and sample testing, and respond to public reporting—costs that may be substantial for under-resourced units.
  • Department of Budget and Management: Must staff and operate the Unit, stand up the dashboard, and potentially hire contractors—creating budget and personnel demands not addressed in the statute.
  • State procurement and contracting functions: Will likely face increased workload to engage external contractors for the specialized team and to procure dashboard development services, with attendant procurement oversight needs.
  • Agency leadership reputationally: Public dashboard disclosures can create reputational costs for agency leaders and program heads, incentivizing quick fixes that may not be durable if not properly resourced.

Key Issues

The Core Tension

The bill balances transparency and centralized assistance against agency capacity and autonomy: it increases public accountability by publishing unresolved findings and provides targeted help for repeat problems, but it does not provide enforcement tools or dedicated funding—so the central dilemma is whether reputational pressure and DBM technical support can reliably produce durable remediation without imposing new mandates or resources on agencies.

The statute creates a monitoring and assistance mechanism but stops short of granting enforcement authority (fines, budgetary penalties, or compulsory corrective directives). That design preserves agency discretion but raises the question of how DBM and the Unit will compel action when advice and monitoring are insufficient.

Because the law requires public reporting on unresolved findings and reasons for delay, agencies may face reputational pressure, but the statute does not require standardized definitions for key terms—such as what qualifies as a ‘repeat’ finding for purposes beyond the four‑finding trigger—nor does it define precise criteria for when a finding is ‘resolved’ versus ‘in progress.’

Operationalizing the Unit and the dashboard will require DBM to assemble technical staff or contractors, integrate OLA audit data into a dashboard format, and protect any sensitive information that could be embedded in audit findings. The bill allows the specialized team to include contractors, which offers flexibility but introduces procurement lead times, potential conflicts of interest, and cost variability.

Finally, the dashboard’s public nature can make remediation visible and politically potent, but it also risks oversimplifying complexity: a graphic status may not capture the quality of remediation work or fiscal constraints that legitimately delay corrective action.

Try it yourself.

Ask a question in plain English, or pick a topic below. Results in seconds.