Audit 11552

U.S. Department of Health and Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medical Assistance Program AL# 93.778 Grant Number: XIX-MAP22 / XIX-MAP23 Program Name: Foster Care AL# 93.658 Grant Number: 2201NCFOST / 2301NCFOST Program Name: Adoption Assistance AL# 93.659 Grant Number: 2201NCADPT / 2301NCADPT Program Name: Child Support Enforcement AL# 93.563 Grant Number: 2201NCCES / 2301NCCES Significant Deficiency Finding 2023-003 Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Name of Contact Person: Angela Karchmer, Social Services Director Views of Responsible Officials and Planned Corrective Actions: Management concurs with this finding and will adhere to the Corrective Action Plan in this audit report.

U.S. Department of Health and Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Foster Care, Adoption, and Guardianship Assistance Cluster AL# 93.658, 93.659 Grant Number: 2201NCFOST / 2301NCFOST; 2201NCADPT / 2301NCADPT Material Weakness Material Non-Compliance Finding 2023-001 Criteria: In order for costs to be allowable for purposes of reimbursement they must be allowable in accordance with 45 CFR section 1356.60 and the NC Division of Social Services Manual. All County Department of Social Services employees which provide direct services must maintain daysheets in accordance with the NC Department of Social Services Information System Policy. Condition: The County Department of Social Services failed to retain proper documentation regarding daysheet entries. Context: Of the 892 payroll charges valued at $1,287,503, we examined 55 daysheets ($44,716 value) and determined that nine daysheets (16% valued at $14,964 did not have documentation to substantiate time charged to the Foster Care, Adoption, and Guardianship Assistance Cluster program. Questioned Costs: In accordance with 2 CFR 200.516(a)(3), auditors are required to report known questioned costs when likely questioned costs are greater than $25,000. Even though the sample results only identified $14,964 (federal share of $13,844 and state share $1,120) in questioned costs, if tests were extended to the entire population, questioned costs could exceed $25,000. Effect: Caseworker time entry could be charged to the wrong program/grant causing administrative costs to be misallocated. Cause: Caseworker failed to retain documentation of time charged to program. Identification of a Repeat Finding: This is a modified, repeat finding from the immediate previous audit, 2022-002. Recommendation: Require the County Program Directors to implement procedures to ensure that daysheets are properly supported by documentation of time charged to each program. Name of Contact Person: Angela Karchmer, Social Services Director Views of Responsible Officials and Planned Corrective Actions: Management concurs with this finding and will adhere to the Corrective Action Plan in this audit report.

U.S. Department of Health and Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Foster Care, Adoption, and Guardianship Assistance Cluster AL# 93.658, 93.659 Grant Number: 2201NCFOST / 2301NCFOST; 2201NCADPT / 2301NCADPT Material Weakness Material Non-Compliance Finding 2023-001 Criteria: In order for costs to be allowable for purposes of reimbursement they must be allowable in accordance with 45 CFR section 1356.60 and the NC Division of Social Services Manual. All County Department of Social Services employees which provide direct services must maintain daysheets in accordance with the NC Department of Social Services Information System Policy. Condition: The County Department of Social Services failed to retain proper documentation regarding daysheet entries. Context: Of the 892 payroll charges valued at $1,287,503, we examined 55 daysheets ($44,716 value) and determined that nine daysheets (16% valued at $14,964 did not have documentation to substantiate time charged to the Foster Care, Adoption, and Guardianship Assistance Cluster program. Questioned Costs: In accordance with 2 CFR 200.516(a)(3), auditors are required to report known questioned costs when likely questioned costs are greater than $25,000. Even though the sample results only identified $14,964 (federal share of $13,844 and state share $1,120) in questioned costs, if tests were extended to the entire population, questioned costs could exceed $25,000. Effect: Caseworker time entry could be charged to the wrong program/grant causing administrative costs to be misallocated. Cause: Caseworker failed to retain documentation of time charged to program. Identification of a Repeat Finding: This is a modified, repeat finding from the immediate previous audit, 2022-002. Recommendation: Require the County Program Directors to implement procedures to ensure that daysheets are properly supported by documentation of time charged to each program. Name of Contact Person: Angela Karchmer, Social Services Director Views of Responsible Officials and Planned Corrective Actions: Management concurs with this finding and will adhere to the Corrective Action Plan in this audit report.

U.S. Department of Health and Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Foster Care, Adoption, and Guardianship Assistance Cluster AL# 93.658, 93.659 Grant Number: 2201NCFOST / 2301NCFOST; 2201NCADPT / 2301NCADPT Material Weakness Material Non-Compliance Finding 2023-001 Criteria: In order for costs to be allowable for purposes of reimbursement they must be allowable in accordance with 45 CFR section 1356.60 and the NC Division of Social Services Manual. All County Department of Social Services employees which provide direct services must maintain daysheets in accordance with the NC Department of Social Services Information System Policy. Condition: The County Department of Social Services failed to retain proper documentation regarding daysheet entries. Context: Of the 892 payroll charges valued at $1,287,503, we examined 55 daysheets ($44,716 value) and determined that nine daysheets (16% valued at $14,964 did not have documentation to substantiate time charged to the Foster Care, Adoption, and Guardianship Assistance Cluster program. Questioned Costs: In accordance with 2 CFR 200.516(a)(3), auditors are required to report known questioned costs when likely questioned costs are greater than $25,000. Even though the sample results only identified $14,964 (federal share of $13,844 and state share $1,120) in questioned costs, if tests were extended to the entire population, questioned costs could exceed $25,000. Effect: Caseworker time entry could be charged to the wrong program/grant causing administrative costs to be misallocated. Cause: Caseworker failed to retain documentation of time charged to program. Identification of a Repeat Finding: This is a modified, repeat finding from the immediate previous audit, 2022-002. Recommendation: Require the County Program Directors to implement procedures to ensure that daysheets are properly supported by documentation of time charged to each program. Name of Contact Person: Angela Karchmer, Social Services Director Views of Responsible Officials and Planned Corrective Actions: Management concurs with this finding and will adhere to the Corrective Action Plan in this audit report.

U.S. Department of Health and Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medical Assistance Program AL# 93.778 Grant Number: XIX-MAP22 / XIX-MAP23 Program Name: Foster Care AL# 93.658 Grant Number: 2201NCFOST / 2301NCFOST Program Name: Adoption Assistance AL# 93.659 Grant Number: 2201NCADPT / 2301NCADPT Program Name: Child Support Enforcement AL# 93.563 Grant Number: 2201NCCES / 2301NCCES Significant Deficiency Finding 2023-003 Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Name of Contact Person: Angela Karchmer, Social Services Director Views of Responsible Officials and Planned Corrective Actions: Management concurs with this finding and will adhere to the Corrective Action Plan in this audit report.

U.S. Department of Health and Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Foster Care, Adoption, and Guardianship Assistance Cluster AL# 93.658, 93.659 Grant Number: 2201NCFOST / 2301NCFOST; 2201NCADPT / 2301NCADPT Significant Deficiency, Eligibility Finding 2023-002 Criteria: In accordance with 45 CFR 1356 and the Child Welfare Funding Manual, documentation must be maintained to support eligibility determinations under the requirements of IV-E and the Development Disabilities Assistance and Bill of Rights Act of 2000. Condition: The County Department of Social Services failed to have caseworker sign the DSS-5120 document in two participants’ casefiles. Upon further review, both applicants were eligible. Context: Of the 371 casefiles, we examined 60 and determined that two (3%) applicants received benefits during the fiscal year without a signed DSS-5120 in the files. Effect: Casefiles were missing completed DSS-5120 documents, which could allow benefits to be provided to individuals who are not eligible. Cause: Caseworker failed to obtain or retain the completed eligibility documentation. Questioned Costs: None. The County was able to substantiate that the applicants were eligible to receive benefits. Recommendation: Caseworkers should verify all documents are completed and retained in the applicant’s casefile. Name of Contact Person: Angela Karchmer, Social Services Director Views of Responsible Officials and Planned Corrective Actions: Management concurs with this finding and will adhere to the Corrective Action Plan in this audit report.

U.S. Department of Health and Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Foster Care, Adoption, and Guardianship Assistance Cluster AL# 93.658, 93.659 Grant Number: 2201NCFOST / 2301NCFOST; 2201NCADPT / 2301NCADPT Significant Deficiency, Eligibility Finding 2023-002 Criteria: In accordance with 45 CFR 1356 and the Child Welfare Funding Manual, documentation must be maintained to support eligibility determinations under the requirements of IV-E and the Development Disabilities Assistance and Bill of Rights Act of 2000. Condition: The County Department of Social Services failed to have caseworker sign the DSS-5120 document in two participants’ casefiles. Upon further review, both applicants were eligible. Context: Of the 371 casefiles, we examined 60 and determined that two (3%) applicants received benefits during the fiscal year without a signed DSS-5120 in the files. Effect: Casefiles were missing completed DSS-5120 documents, which could allow benefits to be provided to individuals who are not eligible. Cause: Caseworker failed to obtain or retain the completed eligibility documentation. Questioned Costs: None. The County was able to substantiate that the applicants were eligible to receive benefits. Recommendation: Caseworkers should verify all documents are completed and retained in the applicant’s casefile. Name of Contact Person: Angela Karchmer, Social Services Director Views of Responsible Officials and Planned Corrective Actions: Management concurs with this finding and will adhere to the Corrective Action Plan in this audit report.

U.S. Department of Health and Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Foster Care, Adoption, and Guardianship Assistance Cluster AL# 93.658, 93.659 Grant Number: 2201NCFOST / 2301NCFOST; 2201NCADPT / 2301NCADPT Significant Deficiency, Eligibility Finding 2023-002 Criteria: In accordance with 45 CFR 1356 and the Child Welfare Funding Manual, documentation must be maintained to support eligibility determinations under the requirements of IV-E and the Development Disabilities Assistance and Bill of Rights Act of 2000. Condition: The County Department of Social Services failed to have caseworker sign the DSS-5120 document in two participants’ casefiles. Upon further review, both applicants were eligible. Context: Of the 371 casefiles, we examined 60 and determined that two (3%) applicants received benefits during the fiscal year without a signed DSS-5120 in the files. Effect: Casefiles were missing completed DSS-5120 documents, which could allow benefits to be provided to individuals who are not eligible. Cause: Caseworker failed to obtain or retain the completed eligibility documentation. Questioned Costs: None. The County was able to substantiate that the applicants were eligible to receive benefits. Recommendation: Caseworkers should verify all documents are completed and retained in the applicant’s casefile. Name of Contact Person: Angela Karchmer, Social Services Director Views of Responsible Officials and Planned Corrective Actions: Management concurs with this finding and will adhere to the Corrective Action Plan in this audit report.

U.S. Department of Health and Human Services Passed through the N.C. Dept. of Health and Human Services Grant Number: 2201NCADPT / 2301NCADPT Program Name: Child Support Enforcement AL# 93.563 Grant Number: 2201NCCES / 2301NCCES Significant Deficiency Non-Material Non-Compliance Finding 2023-004 Criteria: In accordance with 45 CFR 304 and the Division of Social Services Fiscal Manual, management should have an adequate system of internal control procedures in place to ensure that salaries are being paid at the approved rate in accordance with the county pay plan. Condition: The County Department of Social Services failed to pay one employee at the correct pay rate. Context: Of the 289 payroll charges valued at $1,294,572, we examined 40 payroll charges ($184,290 value) and determined that one employee (2.5% valued at $415) was not paid at the approved pay rate. Questioned Costs: In accordance with 2 CFR 200.516(a)(3), auditors are required to report known questioned costs when likely questioned costs are greater than $25,000. Costs are under the amount to be reported. Effect: Caseworker time could be charged at the incorrect pay rate causing administrative costs to be inaccurately reported to the state for reimbursement. Cause: The County failed to pay one employee at the correct pay rate. Recommendation: Require the Human Resources Department and County Program Directors to implement procedures to ensure that pay rates are properly entered into the payroll processing system at the time the pay rate is established. Name of Contact Person: Amia Massey, Director, Human Resources Views of Responsible Officials and Planned Corrective Actions: Management concurs with this finding and will adhere to the Corrective Action Plan in this audit report.

U.S. Department of Health and Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medical Assistance Program AL# 93.778 Grant Number: XIX-MAP22 / XIX-MAP23 Program Name: Foster Care AL# 93.658 Grant Number: 2201NCFOST / 2301NCFOST Program Name: Adoption Assistance AL# 93.659 Grant Number: 2201NCADPT / 2301NCADPT Program Name: Child Support Enforcement AL# 93.563 Grant Number: 2201NCCES / 2301NCCES Significant Deficiency Finding 2023-003 Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Name of Contact Person: Angela Karchmer, Social Services Director Views of Responsible Officials and Planned Corrective Actions: Management concurs with this finding and will adhere to the Corrective Action Plan in this audit report.

U.S. Department of Health and Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medical Assistance Program AL# 93.778 Grant Number: XIX-MAP22 / XIX-MAP23 Program Name: Foster Care AL# 93.658 Grant Number: 2201NCFOST / 2301NCFOST Program Name: Adoption Assistance AL# 93.659 Grant Number: 2201NCADPT / 2301NCADPT Program Name: Child Support Enforcement AL# 93.563 Grant Number: 2201NCCES / 2301NCCES Significant Deficiency Finding 2023-003 Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Name of Contact Person: Angela Karchmer, Social Services Director Views of Responsible Officials and Planned Corrective Actions: Management concurs with this finding and will adhere to the Corrective Action Plan in this audit report.

U.S. Department of Health and Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medical Assistance Program AL# 93.778 Grant Number: XIX-MAP22 / XIX-MAP23 Program Name: Foster Care AL# 93.658 Grant Number: 2201NCFOST / 2301NCFOST Program Name: Adoption Assistance AL# 93.659 Grant Number: 2201NCADPT / 2301NCADPT Program Name: Child Support Enforcement AL# 93.563 Grant Number: 2201NCCES / 2301NCCES Significant Deficiency Finding 2023-003 Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Name of Contact Person: Angela Karchmer, Social Services Director Views of Responsible Officials and Planned Corrective Actions: Management concurs with this finding and will adhere to the Corrective Action Plan in this audit report.

U.S. Department of Health and Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medical Assistance Program AL# 93.778 Grant Number: XIX-MAP22 / XIX-MAP23 Program Name: Foster Care AL# 93.658 Grant Number: 2201NCFOST / 2301NCFOST Program Name: Adoption Assistance AL# 93.659 Grant Number: 2201NCADPT / 2301NCADPT Program Name: Child Support Enforcement AL# 93.563 Grant Number: 2201NCCES / 2301NCCES Significant Deficiency Finding 2023-003 Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Name of Contact Person: Angela Karchmer, Social Services Director Views of Responsible Officials and Planned Corrective Actions: Management concurs with this finding and will adhere to the Corrective Action Plan in this audit report.

U.S. Department of Health and Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Foster Care, Adoption, and Guardianship Assistance Cluster AL# 93.658, 93.659 Grant Number: 2201NCFOST / 2301NCFOST; 2201NCADPT / 2301NCADPT Material Weakness Material Non-Compliance Finding 2023-001 Criteria: In order for costs to be allowable for purposes of reimbursement they must be allowable in accordance with 45 CFR section 1356.60 and the NC Division of Social Services Manual. All County Department of Social Services employees which provide direct services must maintain daysheets in accordance with the NC Department of Social Services Information System Policy. Condition: The County Department of Social Services failed to retain proper documentation regarding daysheet entries. Context: Of the 892 payroll charges valued at $1,287,503, we examined 55 daysheets ($44,716 value) and determined that nine daysheets (16% valued at $14,964 did not have documentation to substantiate time charged to the Foster Care, Adoption, and Guardianship Assistance Cluster program. Questioned Costs: In accordance with 2 CFR 200.516(a)(3), auditors are required to report known questioned costs when likely questioned costs are greater than $25,000. Even though the sample results only identified $14,964 (federal share of $13,844 and state share $1,120) in questioned costs, if tests were extended to the entire population, questioned costs could exceed $25,000. Effect: Caseworker time entry could be charged to the wrong program/grant causing administrative costs to be misallocated. Cause: Caseworker failed to retain documentation of time charged to program. Identification of a Repeat Finding: This is a modified, repeat finding from the immediate previous audit, 2022-002. Recommendation: Require the County Program Directors to implement procedures to ensure that daysheets are properly supported by documentation of time charged to each program. Name of Contact Person: Angela Karchmer, Social Services Director Views of Responsible Officials and Planned Corrective Actions: Management concurs with this finding and will adhere to the Corrective Action Plan in this audit report.

U.S. Department of Health and Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Foster Care, Adoption, and Guardianship Assistance Cluster AL# 93.658, 93.659 Grant Number: 2201NCFOST / 2301NCFOST; 2201NCADPT / 2301NCADPT Material Weakness Material Non-Compliance Finding 2023-001 Criteria: In order for costs to be allowable for purposes of reimbursement they must be allowable in accordance with 45 CFR section 1356.60 and the NC Division of Social Services Manual. All County Department of Social Services employees which provide direct services must maintain daysheets in accordance with the NC Department of Social Services Information System Policy. Condition: The County Department of Social Services failed to retain proper documentation regarding daysheet entries. Context: Of the 892 payroll charges valued at $1,287,503, we examined 55 daysheets ($44,716 value) and determined that nine daysheets (16% valued at $14,964 did not have documentation to substantiate time charged to the Foster Care, Adoption, and Guardianship Assistance Cluster program. Questioned Costs: In accordance with 2 CFR 200.516(a)(3), auditors are required to report known questioned costs when likely questioned costs are greater than $25,000. Even though the sample results only identified $14,964 (federal share of $13,844 and state share $1,120) in questioned costs, if tests were extended to the entire population, questioned costs could exceed $25,000. Effect: Caseworker time entry could be charged to the wrong program/grant causing administrative costs to be misallocated. Cause: Caseworker failed to retain documentation of time charged to program. Identification of a Repeat Finding: This is a modified, repeat finding from the immediate previous audit, 2022-002. Recommendation: Require the County Program Directors to implement procedures to ensure that daysheets are properly supported by documentation of time charged to each program. Name of Contact Person: Angela Karchmer, Social Services Director Views of Responsible Officials and Planned Corrective Actions: Management concurs with this finding and will adhere to the Corrective Action Plan in this audit report.

U.S. Department of Health and Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Foster Care, Adoption, and Guardianship Assistance Cluster AL# 93.658, 93.659 Grant Number: 2201NCFOST / 2301NCFOST; 2201NCADPT / 2301NCADPT Material Weakness Material Non-Compliance Finding 2023-001 Criteria: In order for costs to be allowable for purposes of reimbursement they must be allowable in accordance with 45 CFR section 1356.60 and the NC Division of Social Services Manual. All County Department of Social Services employees which provide direct services must maintain daysheets in accordance with the NC Department of Social Services Information System Policy. Condition: The County Department of Social Services failed to retain proper documentation regarding daysheet entries. Context: Of the 892 payroll charges valued at $1,287,503, we examined 55 daysheets ($44,716 value) and determined that nine daysheets (16% valued at $14,964 did not have documentation to substantiate time charged to the Foster Care, Adoption, and Guardianship Assistance Cluster program. Questioned Costs: In accordance with 2 CFR 200.516(a)(3), auditors are required to report known questioned costs when likely questioned costs are greater than $25,000. Even though the sample results only identified $14,964 (federal share of $13,844 and state share $1,120) in questioned costs, if tests were extended to the entire population, questioned costs could exceed $25,000. Effect: Caseworker time entry could be charged to the wrong program/grant causing administrative costs to be misallocated. Cause: Caseworker failed to retain documentation of time charged to program. Identification of a Repeat Finding: This is a modified, repeat finding from the immediate previous audit, 2022-002. Recommendation: Require the County Program Directors to implement procedures to ensure that daysheets are properly supported by documentation of time charged to each program. Name of Contact Person: Angela Karchmer, Social Services Director Views of Responsible Officials and Planned Corrective Actions: Management concurs with this finding and will adhere to the Corrective Action Plan in this audit report.

U.S. Department of Health and Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medical Assistance Program AL# 93.778 Grant Number: XIX-MAP22 / XIX-MAP23 Program Name: Foster Care AL# 93.658 Grant Number: 2201NCFOST / 2301NCFOST Program Name: Adoption Assistance AL# 93.659 Grant Number: 2201NCADPT / 2301NCADPT Program Name: Child Support Enforcement AL# 93.563 Grant Number: 2201NCCES / 2301NCCES Significant Deficiency Finding 2023-003 Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Name of Contact Person: Angela Karchmer, Social Services Director Views of Responsible Officials and Planned Corrective Actions: Management concurs with this finding and will adhere to the Corrective Action Plan in this audit report.

U.S. Department of Health and Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Foster Care, Adoption, and Guardianship Assistance Cluster AL# 93.658, 93.659 Grant Number: 2201NCFOST / 2301NCFOST; 2201NCADPT / 2301NCADPT Significant Deficiency, Eligibility Finding 2023-002 Criteria: In accordance with 45 CFR 1356 and the Child Welfare Funding Manual, documentation must be maintained to support eligibility determinations under the requirements of IV-E and the Development Disabilities Assistance and Bill of Rights Act of 2000. Condition: The County Department of Social Services failed to have caseworker sign the DSS-5120 document in two participants’ casefiles. Upon further review, both applicants were eligible. Context: Of the 371 casefiles, we examined 60 and determined that two (3%) applicants received benefits during the fiscal year without a signed DSS-5120 in the files. Effect: Casefiles were missing completed DSS-5120 documents, which could allow benefits to be provided to individuals who are not eligible. Cause: Caseworker failed to obtain or retain the completed eligibility documentation. Questioned Costs: None. The County was able to substantiate that the applicants were eligible to receive benefits. Recommendation: Caseworkers should verify all documents are completed and retained in the applicant’s casefile. Name of Contact Person: Angela Karchmer, Social Services Director Views of Responsible Officials and Planned Corrective Actions: Management concurs with this finding and will adhere to the Corrective Action Plan in this audit report.

U.S. Department of Health and Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Foster Care, Adoption, and Guardianship Assistance Cluster AL# 93.658, 93.659 Grant Number: 2201NCFOST / 2301NCFOST; 2201NCADPT / 2301NCADPT Significant Deficiency, Eligibility Finding 2023-002 Criteria: In accordance with 45 CFR 1356 and the Child Welfare Funding Manual, documentation must be maintained to support eligibility determinations under the requirements of IV-E and the Development Disabilities Assistance and Bill of Rights Act of 2000. Condition: The County Department of Social Services failed to have caseworker sign the DSS-5120 document in two participants’ casefiles. Upon further review, both applicants were eligible. Context: Of the 371 casefiles, we examined 60 and determined that two (3%) applicants received benefits during the fiscal year without a signed DSS-5120 in the files. Effect: Casefiles were missing completed DSS-5120 documents, which could allow benefits to be provided to individuals who are not eligible. Cause: Caseworker failed to obtain or retain the completed eligibility documentation. Questioned Costs: None. The County was able to substantiate that the applicants were eligible to receive benefits. Recommendation: Caseworkers should verify all documents are completed and retained in the applicant’s casefile. Name of Contact Person: Angela Karchmer, Social Services Director Views of Responsible Officials and Planned Corrective Actions: Management concurs with this finding and will adhere to the Corrective Action Plan in this audit report.

U.S. Department of Health and Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Foster Care, Adoption, and Guardianship Assistance Cluster AL# 93.658, 93.659 Grant Number: 2201NCFOST / 2301NCFOST; 2201NCADPT / 2301NCADPT Significant Deficiency, Eligibility Finding 2023-002 Criteria: In accordance with 45 CFR 1356 and the Child Welfare Funding Manual, documentation must be maintained to support eligibility determinations under the requirements of IV-E and the Development Disabilities Assistance and Bill of Rights Act of 2000. Condition: The County Department of Social Services failed to have caseworker sign the DSS-5120 document in two participants’ casefiles. Upon further review, both applicants were eligible. Context: Of the 371 casefiles, we examined 60 and determined that two (3%) applicants received benefits during the fiscal year without a signed DSS-5120 in the files. Effect: Casefiles were missing completed DSS-5120 documents, which could allow benefits to be provided to individuals who are not eligible. Cause: Caseworker failed to obtain or retain the completed eligibility documentation. Questioned Costs: None. The County was able to substantiate that the applicants were eligible to receive benefits. Recommendation: Caseworkers should verify all documents are completed and retained in the applicant’s casefile. Name of Contact Person: Angela Karchmer, Social Services Director Views of Responsible Officials and Planned Corrective Actions: Management concurs with this finding and will adhere to the Corrective Action Plan in this audit report.

U.S. Department of Health and Human Services Passed through the N.C. Dept. of Health and Human Services Grant Number: 2201NCADPT / 2301NCADPT Program Name: Child Support Enforcement AL# 93.563 Grant Number: 2201NCCES / 2301NCCES Significant Deficiency Non-Material Non-Compliance Finding 2023-004 Criteria: In accordance with 45 CFR 304 and the Division of Social Services Fiscal Manual, management should have an adequate system of internal control procedures in place to ensure that salaries are being paid at the approved rate in accordance with the county pay plan. Condition: The County Department of Social Services failed to pay one employee at the correct pay rate. Context: Of the 289 payroll charges valued at $1,294,572, we examined 40 payroll charges ($184,290 value) and determined that one employee (2.5% valued at $415) was not paid at the approved pay rate. Questioned Costs: In accordance with 2 CFR 200.516(a)(3), auditors are required to report known questioned costs when likely questioned costs are greater than $25,000. Costs are under the amount to be reported. Effect: Caseworker time could be charged at the incorrect pay rate causing administrative costs to be inaccurately reported to the state for reimbursement. Cause: The County failed to pay one employee at the correct pay rate. Recommendation: Require the Human Resources Department and County Program Directors to implement procedures to ensure that pay rates are properly entered into the payroll processing system at the time the pay rate is established. Name of Contact Person: Amia Massey, Director, Human Resources Views of Responsible Officials and Planned Corrective Actions: Management concurs with this finding and will adhere to the Corrective Action Plan in this audit report.

U.S. Department of Health and Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medical Assistance Program AL# 93.778 Grant Number: XIX-MAP22 / XIX-MAP23 Program Name: Foster Care AL# 93.658 Grant Number: 2201NCFOST / 2301NCFOST Program Name: Adoption Assistance AL# 93.659 Grant Number: 2201NCADPT / 2301NCADPT Program Name: Child Support Enforcement AL# 93.563 Grant Number: 2201NCCES / 2301NCCES Significant Deficiency Finding 2023-003 Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Name of Contact Person: Angela Karchmer, Social Services Director Views of Responsible Officials and Planned Corrective Actions: Management concurs with this finding and will adhere to the Corrective Action Plan in this audit report.

U.S. Department of Health and Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medical Assistance Program AL# 93.778 Grant Number: XIX-MAP22 / XIX-MAP23 Program Name: Foster Care AL# 93.658 Grant Number: 2201NCFOST / 2301NCFOST Program Name: Adoption Assistance AL# 93.659 Grant Number: 2201NCADPT / 2301NCADPT Program Name: Child Support Enforcement AL# 93.563 Grant Number: 2201NCCES / 2301NCCES Significant Deficiency Finding 2023-003 Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Name of Contact Person: Angela Karchmer, Social Services Director Views of Responsible Officials and Planned Corrective Actions: Management concurs with this finding and will adhere to the Corrective Action Plan in this audit report.

U.S. Department of Health and Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medical Assistance Program AL# 93.778 Grant Number: XIX-MAP22 / XIX-MAP23 Program Name: Foster Care AL# 93.658 Grant Number: 2201NCFOST / 2301NCFOST Program Name: Adoption Assistance AL# 93.659 Grant Number: 2201NCADPT / 2301NCADPT Program Name: Child Support Enforcement AL# 93.563 Grant Number: 2201NCCES / 2301NCCES Significant Deficiency Finding 2023-003 Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Name of Contact Person: Angela Karchmer, Social Services Director Views of Responsible Officials and Planned Corrective Actions: Management concurs with this finding and will adhere to the Corrective Action Plan in this audit report.