OMB Uniform Guidance 2026: What University Procurement Teams Are Still Getting Wrong

OMB Uniform Guidance, under 2 CFR Part 200, has required documented, competitive procurement at every federally funded university. These Uniform Guidance procurement requirements have applied since 2014. OMB revised the procurement standards effective October 1, 2024. FAR reset the dollar thresholds beneath them effective October 1, 2025. These two resets reshaped university procurement compliance in 2026. Many procurement offices are still running the old rulebook. Some still apply the state-agency rule under §200.317 to their own institution. That section applies to states and Indian Tribes, not universities.

Procurement compliance splits into two risks. CPOs and VPs of Procurement own process risk: whether purchasing, PI purchasing cards, and central sourcing follow current 2 CFR 200 methods. Compliance officers own audit-exposure risk: whether that activity is documented well enough to survive review. For the platform-level view of these workflows, see JAGGAER’s higher education procurement platform overview. NSF procurement compliance at a university, plus NIH’s rules, adds further requirements. That overlay is covered next.

What 2 CFR 200 actually requires of university procurement

2 CFR Part 200, Subpart D governs procurement for any university receiving a federal award. As the opening noted, most universities are non-state, non-tribal recipients, so they fall under §§200.318–200.327, not §200.317. These are the core Uniform Guidance procurement requirements every non-state recipient must meet.

Section 200.318 requires a written procurement policy, contractor oversight, and a written conflict-of-interest policy. That policy is usually the first document a Single Audit reviewer asks a compliance officer to produce. Section 200.319 requires full and open competition. Any firm that helped draft the solicitation can’t bid on it. Section 200.320 splits procurement into two tracks: informal methods below the simplified acquisition threshold, formal methods above it. Section 200.321 directs recipients to include small, minority-owned, women-owned, and veteran-owned businesses when possible. One method is adding them directly to solicitation lists.

Under FAR, the current micro-purchase threshold is $15,000 and the simplified acquisition threshold is $350,000, both effective October 1, 2025. FAR sets that same $15,000 figure for institutions of higher education under a separate provision that allows agencies to authorize a higher ceiling — something the general threshold doesn’t allow. That higher ceiling requires a clean Single Audit record, an internal risk assessment, or state-law support.

Source: eCFR, 2 CFR 200.320; eCFR, 48 CFR 2.101

Where NSF and NIH add their own requirements on top

NSF and NIH each add a prior-approval step that 2 CFR 200 never requires. Both agencies build on 2 CFR 200’s baseline; neither replaces it.

NSF’s Grant General Conditions (GC-1) point straight back to §§ 200.317–327 for the baseline. NSF procurement compliance at a university hinges on one overlay: the Prior Approval Matrix, which adds Research.gov sign-offs 2 CFR 200 doesn’t require. Equipment purchases of $150,000 or more need NSF-logo marking. Construction materials on NSF-funded infrastructure must meet Build America, Buy America sourcing rules. 2 CFR 200 never imposes that requirement.

NIH changes the method, not just the paperwork. NIH-funded construction must use formal sealed bidding under NIHGPS §10.2.1. NIH must approve final construction documents before bids go out, and again before the institution signs the contract. As of June 2026, NIH also requires prior approval before adding a new domestic subaward after the award starts.

Both agencies do the same thing: they meet 2 CFR 200’s floor, then add their own prior-approval step on top. That’s the real story in NSF procurement compliance for universities and NIH grant procurement requirements alike.

The five procurement mistakes that keep showing up in federal audits

Two data points anchor this section, and they measure different things. A 2022 review by the Washington State Auditor’s Office found procurement was the single most common finding type across the state and local government Single Audits it reports. That’s about 26% of all findings. The figure is state-level and covers every kind of procurement gap, not a university-specific or federal-OIG-only count. A 2025 GAO topic-modeling analysis of federal Single Audit condition statements (GAO-25-107315) found a narrower slice: about 9% of the statements it modeled centered specifically on undocumented limits on competition. Different scope, different method, same signal — procurement documentation is where audits keep finding gaps. These five gaps are recurring failure points in 2 CFR 200 federal grant compliance. Each one below ties to the regulation and, where the record supports it, a named audit.

Inadequate competition documentation. 2 CFR 200.319 requires full and open competition, and recipients must keep records showing how that competition happened: who they asked, what came back, and why the winner won. Auditors ask for that file first. To an auditor, an undocumented purchase looks the same whether you competed it or not.

A sole-source justification that doesn’t meet the standard. 200.320(c) allows noncompetitive procurement in five narrow cases only. “We’ve used this vendor before” isn’t one of them. Auditors treat a vague justification the same as a missing one.

No cost or price analysis above the threshold. Any procurement over the simplified acquisition threshold ($350,000 as of October 2025) needs a documented cost or price analysis under 200.324. OMB’s 2025 Compliance Supplement lists this as a required test.

Conflict-of-interest policies not applied. 200.318(c) requires written standards of conduct for anyone involved in awarding a contract. A 2024 HHS-OIG review (Report No. A-04-20-03583) of New York Medical College found it couldn’t verify half of NIH-award staff had completed required conflict-of-interest training or disclosure forms.

Records that don’t survive the retention window. A 2021 NSF-OIG resolution memo (Report No. 19-1-013) found the University of Pennsylvania had $257,004 in sustained questioned costs, mostly unsupported expenses and misapplied indirect costs. A separate 2020 NSF-OIG audit (Report No. 20-1-001) of the University of Colorado Boulder found $79,831 in questioned costs, mostly purchases made near or after the award’s expiration date. Both point to the same root cause: documentation that existed at purchase time and didn’t survive to audit time.

Why fragmented procurement systems make this worse

Fragmented procurement systems break the single documentation trail that 2 CFR 200 federal grant compliance requires. That break is what turns fragmentation into audit risk.

Under 2 CFR §200.318(i), institutions must keep records detailing the full history of every procurement transaction. Federal grant procurement documentation must show the procurement method, the contract type, why the buyer selected or rejected a supplier, and how it set the price. Section 200.318(a) also requires recipients to maintain and use documented procurement procedures.

No single system holds all of that when purchasing is fragmented. Spending runs through central sourcing, individual departments, and PI purchasing cards at once. Each channel keeps its own records or keeps none. When an auditor asks for the transaction history, it’s scattered across fragmented systems and people.

Frequently Asked Questions

Next Steps

Abbreviations used in this article: OMB (Office of Management and Budget) · 2 CFR (Code of Federal Regulations, Title 2) · FAR (Federal Acquisition Regulation) · CPO (Chief Procurement Officer) · VP (Vice President) · PI (Principal Investigator) · NSF (National Science Foundation) · NIH (National Institutes of Health)

This post is for informational purposes only and does not constitute legal or compliance advice. Universities should consult their sponsored programs office and legal counsel for institution-specific guidance.