(a) The institute shall maintain complete records of:
(1) the review of each grant application submitted to the institute, including the score assigned to each grant application reviewed by a research and prevention programs committee in accordance with rules adopted under § 102.251(a)(1), even if the grant application is not funded by the institute or is withdrawn after submission to the institute;
(2) each grant recipient’s financial reports, including the amount of matching funds dedicated to the research specified for the grant award;
(3) each grant recipient’s progress reports;
(4) for the purpose of determining any conflict of interest, the identity of each principal investor and owner of each grant recipient as provided by institute rules; and
(5) the institute’s review of the grant recipient’s financial reports and progress reports.
(b) The institute shall have periodic audits made of any electronic grant management system used to maintain records of grant applications and grant awards under this section. The institute shall address in a timely manner each weakness identified in an audit of the system.