San Francisco’s decision to place the Mission Economic Development Agency (MEDA) in its highest corrective-action tier is a useful test of what annual nonprofit monitoring can—and cannot—assure. The city’s fiscal-year 2025 monitoring report recorded expanded monitoring of MEDA with no findings. An October 21, 2026 report describes a subsequent Tier 3 designation amid financial-control concerns and allegations involving a former employee. These observations describe different periods and different oversight mechanisms; they should not be collapsed into a claim that the earlier review was necessarily wrong.
The judgment
Implication: A clean historical compliance review is not continuous assurance. Boards and funders need event-triggered monitoring between scheduled reviews, especially when spending irregularities, liquidity stress, or contract-performance concerns emerge.
What would change the conclusion: Public evidence that the reported problems were fully contained, independently reviewed, remediated, and did not expose broader financial controls or service continuity would materially narrow the lessons from this case. Allegations are not findings of individual wrongdoing.
Management action: Establish a single board-visible exception log tying unusual transactions, approval overrides, bank reconciliations, contract receivables, cash forecasts, and corrective-action owners to dates and evidence of closure.
What the two public records actually say
The Controller’s FY25 annual report, Appendix A, lists Mission Economic Development Agency as subject to expanded monitoring with no findings for FY25, compared with findings not in conformance in FY24. That is a result for a specified monitoring cycle, not a blanket certification of all transactions and future activity.
The San Francisco Chronicle’s October 21 reporting says the Controller placed MEDA in Tier 3 amid allegations of unauthorized expenses and self-dealing involving a former employee, along with reported financial-control and cash-flow concerns. The report also describes remedial efforts and MEDA’s cooperation. Those allegations and concerns should be attributed, investigated and assessed—not treated as adjudicated facts.
The Controller’s published nonprofit contracting policy resources explain the framework. The FY25 annual report says a corrective-action designation can arise not only from routine monitoring findings but also from other contract oversight, serious audits, legal noncompliance, or alleged serious misconduct. Therefore a later escalation and an earlier no-findings result are not logically inconsistent.
The monitoring gap is measured in events, not months
Annual monitoring usually tests defined documents, periods, samples, and compliance criteria. A control failure can begin immediately after testing, concern an activity outside the sample, or become visible only when staff report an exception. The decision question for a finance committee is not simply whether the organization passed its last review. It is whether emerging evidence can reach decision makers before cash, contracts, or services are impaired.
Useful triggers include unexplained expense reimbursements or vendor changes; repeated manual journal entries outside normal close procedures; late bank reconciliations; aged government receivables that pressure payroll liquidity; and management overrides without independent approval. A single exception is not proof of misconduct. Multiple exceptions without documented resolution are a reason for focused inquiry.
What a board can request next month
- Transaction controls: a sample of expense approvals and exception overrides, reconciled to policy, bank activity and supporting documentation.
- Cash: a rolling short-term forecast identifying receipts by contract, timing assumptions, payroll requirements and restricted versus available funds.
- Contract exposure: a schedule of funding agreements, billing status, notices, repayment exposure, and programs dependent on each stream.
- Corrective action: assigned owners, independent validation, evidence, deadlines and overdue items—not simply a narrative assurance that a policy was updated.
- Service continuity: practical scenarios showing how delayed reimbursement, funding restrictions, or unexpected remediation expense would affect beneficiaries.
These steps apply even to organizations with no allegations of misconduct. The proper response is not to presume every nonprofit is financially unstable, but to design monitoring so that evidence of a change in risk can change decisions quickly.
A more useful view of assurance
Boards should distinguish three forms of evidence: periodic compliance results (what the last review tested), current operating signals (what financial and program conditions show today), and verified corrective action (what management has actually fixed). Each answers a different question. Treating any one as a substitute for the others creates unnecessary blind spots.
For complementary reading, see Louisiana’s $3.2 Billion Nonprofit Ledger Needs Common Definitions on reconciled reporting, and WFP’s Gaza Funding Gap Forces Service Triage on liquidity and program continuity. This publication’s analysis is independent of MEDA and the city and is based on the linked public reporting and policy materials available on October 21, 2026.
The free 13-Week Cash Flow Forecast can help translate delayed receipts, remediation costs and funding restrictions into a weekly liquidity view with explicit action points.
Leave a Reply