the single audit requirement applies to: