Direct CRA to revise its policies to require personnel to evaluate subawardee risk of non-compliance in accordance with 2 Code of Federal Regulations 200.331, Requirements for pass-through entities. Specifically, the updated policies should require: • Performing a risk assessment before executing a subaward agreement, as well as periodically updating the risk assessment. • Performing continuous monitoring of the subawardee based on the established level of risk determined in the latest risk assessment. • Reviewing the subawardee’s latest Single Audit review in support of the risk assessment and continuous monitoring.