Audit 295958

Program: COVID-19 Activities to Support State, Tribal, Local and Territorial (STLT) Health Department Response to Public Health and Healthcare Crises Federal Financial Assistance Listing Number: 93.391 Federal Grantor: U.S. Department of Health and Human Services Award No. and Year: 2022 Compliance Requirements: Reporting Type of Finding: Significant Deficiency in Internal Control Over Compliance Criteria: 2 CFR Section 200.303(a), Internal Controls, states that the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Condition: During our testing of the Health Care Agency’s (HCA) compliance with reporting requirements, we noted that four (4) of four (4) reports the department did not retain evidence of the review and approval over the performance report. Cause: HCA personnel prepared program required performance reports and submitted the reports without retaining documented evidence that the reports were reviewed and approved by a separate individual prior to submission. Effect: The County did not document their review and approval of the report. Questioned Costs: No questioned costs were identified as a result of our procedures. Context/Sampling: The entire population of four (4) reports were selected for reporting testwork from HCA. Repeat Finding from Prior Years: No. Recommendation: We recommend the HCA to implement policies that ensure the review and approval of reports are clearly documented prior to the report’s submission. Views of Responsible Officials: Management agrees. See separately issued Corrective Action Plan.

Program: COVID-19 Activities to Support State, Tribal, Local and Territorial (STLT) Health Department Response to Public Health or Healthcare Crises Federal Financial Assistance Listing Number: 93.391 Federal Grantor: U.S. Department of Health and Human Services Award No. and Year: 2022 Compliance Requirements: Allowable Activities and Allowable Costs and Cost Principles Type of Finding: Significant Deficiency in Internal Control Over Compliance Criteria: 2 CFR Section 200.303(a), Internal Controls, states that the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Condition: During our testing of the Health Care Agency’s (HCA) compliance with allowable activities and allowable costs and cost principles requirements, we noted for one (1) of forty-seven (47) transactions HCA did not retain evidence of the review and approval over the transaction. Cause: The transaction was with a specific vendor that requires orders to be placed on the vendor’s portal. At the time the order was placed, the vendor’s portal did not have a system control set up to require a separate approver for the order and HCA did not retain any other evidence to document the order’s review and approval. The vendor portal was later updated during the year to add the segregation of duties system control. Effect: The County’s control was not consistently followed, which requires transactions to be reviewed and approved by a separate individual prior to payment. Questioned Costs: No questioned costs were identified as a result of our procedures. Context/Sampling: A nonstatistical sample of forty-seven (47) of two hundred thirty-six (236) transactions were selected for HCA. The condition above was identified during our testwork of the HCA’s internal controls over allowable activities and allowable costs and cost principles. Repeat Finding from Prior Years: No. Recommendation: We recommend the HCA adhere to their policies and ensure the review and approval of transactions are clearly documented prior payment. Views of Responsible Officials: Management agrees. See separately issued Corrective Action Plan.

Program: Foster Care Federal Financial Assistance Listing Number: 93.658 Federal Grantor: U.S. Department of Health and Human Services Pass-Through: California Department of Social Services Award No. and Year: 2301CAFOST and 2023, 2201CAFOST and 2022 Compliance Requirements: Subrecipient Monitoring Type of Finding: Material Weakness in Internal Control over Compliance and Material Instance of Noncompliance Criteria: In accordance with Title 2 U.S. Code of Federal Regulations (CFR) 200.332, pass-through entities must comply with the following: • 2 CFR Part 200.332(a), Requirements for Pass-Through Entities, states that all pass-through entities must ensure that every subaward is clearly identified to the subrecipient as a subaward and includes certain information as well as all the requirements imposed by the pass-through entity on the subrecipient so that the Federal award is used in accordance with Federal statutes, regulations, and the terms and conditions of the award. • 2 CFR 200.332(b) – Evaluate each subrecipient’s risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward. This evaluation of risk may include consideration of such factors listed in 2 CFR 200.332(b)(1) through (4). • 2 CFR 200.332(d)- Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include the information at 2 CFR 200.332(d)(1) through (4). • 2 CFR 200.332(f) – Verify that every subrecipient is audited as required by Subpart F of this part when it is expected that the subrecipient’s Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 200.501. The California Department of Social Services further clarifies in its County Fiscal Letter No. 22/23-91 that Foster Family Agency (FFA), Group Home, and Short Term Residential Therapeutic Programs (STRTP) are “considered subrecipients and subject to the same audit requirements and require the same degree of oversight as other subrecipients”. Further, while there are some licensing and oversight functions performed by the state over FFAs, group homes, and STRTPs, “counties are still ultimately responsible for review of these audits and their findings, any follow-up to ensure compliance, and any other form of monitoring and oversight required by federal and state laws and regulations.” 2 CFR Section 180.300a, Responsibilities of Participants Regarding Doing Business with Other Persons (and repeated in the California Department of Social Services - County Fiscal Letter No. 21/22 – 115) counties are required to verify that recipients or contracts have not been suspended or debarred by using the federal SAM (Systems for Award Management). Condition: The Social Services Agency (SSA) did not have any formal controls in place for evaluating each subrecipient’s risk of noncompliance or the purpose of determining the appropriate subrecipient monitoring or for subrecipient monitoring for the Foster Care program. Additionally, the following information was not provided at the time of the subaward for ten (10) of fourteen (14) subawards selected for testing from the SSA’s for the Foster Care program: • Subrecipient’s unique entity identifier • Federal award identification number • Federal award date of award to recipient by the Federal agency • Subaward period of performance • Amount of federal funds obligated to the subrecipient • Amount of federal funds committed to the subrecipient • Federal award project description • Name of federal awarding agency • CFDA/Assistance Listing number • Identification of whether the award is research and development • Indirect cost rate During our testing, we noted for four (4) of fourteen (14) subrecipients selected, SSA did not have documentation that the SAM clearance was performed prior to entering the contract with the subrecipient. The County’s policy was to verify the subrecipient was not suspended or debarred prior to entering the contract, but the County did not retain evidence of this check prior to entering the contract. Cause: The SSA’s procedures did not consistently ensure that the required award information and applicable requires were communicated to the subrecipients. The SSA did not follow their procedures to evaluate the risk of noncompliance or monitor the activities of each subrecipient, and the SSA did not maintain documentation of their verification that every subrecipient is audited, as required. Additionally, the SSA department did not follow their policy to retain documentation of the verification of the information prior to entering the contract. Effect: The County’s control policies were not consistently followed which require compliance with the Subrecipient Monitoring requirements in 2 CFR 200.332 and did not comply with subrecipient monitoring requirements related to the program. Additionally, the County’s control policies were not consistently followed, which required documentation of the verification prior to entering the contract. Questioned Costs: No questioned costs were identified as a result of our procedures. Context/Sampling: A nonstatistical sample of fourteen (14) out of seventy (70) subrecipients were sampled, which included seven (7) FFA, and seven (7) STRTP types. The condition noted above was identified during our procedures related to subrecipient monitoring and was pervasive to the program. Repeat Findings from Prior Years: Yes, Finding 2022-002,2022-005 and 2022-006. Recommendation: We recommend that the County adhere to their policies and procedures in accordance with 2 CFR 200.332 to ensure compliance with subrecipient monitoring requirements. We recommend that the County adhere to their procedures requiring documentation of the SAM clearance prior to entering the contract. Views of Responsible Officials: Management agrees. See separately issued Corrective Action Plan.

Program: Foster Care Federal Financial Assistance Listing Number: 93.658 Federal Grantor: U.S. Department of Health and Human Services Pass-Through: California Department of Social Services Award No. and Year: 2301CAFOST and 2023, 2201CAFOST and 2022 Compliance Requirements: Subrecipient Monitoring Type of Finding: Material Weakness in Internal Control over Compliance and Material Instance of Noncompliance Criteria: In accordance with Title 2 U.S. Code of Federal Regulations (CFR) 200.332, pass-through entities must comply with the following: • 2 CFR Part 200.332(a), Requirements for Pass-Through Entities, states that all pass-through entities must ensure that every subaward is clearly identified to the subrecipient as a subaward and includes certain information as well as all the requirements imposed by the pass-through entity on the subrecipient so that the Federal award is used in accordance with Federal statutes, regulations, and the terms and conditions of the award. • 2 CFR 200.332(b) – Evaluate each subrecipient’s risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward. This evaluation of risk may include consideration of such factors listed in 2 CFR 200.332(b)(1) through (4). • 2 CFR 200.332(d)- Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include the information at 2 CFR 200.332(d)(1) through (4). • 2 CFR 200.332(f) – Verify that every subrecipient is audited as required by Subpart F of this part when it is expected that the subrecipient’s Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 200.501. The California Department of Social Services further clarifies in its County Fiscal Letter No. 22/23-91 that Foster Family Agency (FFA), Group Home, and Short Term Residential Therapeutic Programs (STRTP) are “considered subrecipients and subject to the same audit requirements and require the same degree of oversight as other subrecipients”. Further, while there are some licensing and oversight functions performed by the state over FFAs, group homes, and STRTPs, “counties are still ultimately responsible for review of these audits and their findings, any follow-up to ensure compliance, and any other form of monitoring and oversight required by federal and state laws and regulations.” 2 CFR Section 180.300a, Responsibilities of Participants Regarding Doing Business with Other Persons (and repeated in the California Department of Social Services - County Fiscal Letter No. 21/22 – 115) counties are required to verify that recipients or contracts have not been suspended or debarred by using the federal SAM (Systems for Award Management). Condition: The Social Services Agency (SSA) did not have any formal controls in place for evaluating each subrecipient’s risk of noncompliance or the purpose of determining the appropriate subrecipient monitoring or for subrecipient monitoring for the Foster Care program. Additionally, the following information was not provided at the time of the subaward for ten (10) of fourteen (14) subawards selected for testing from the SSA’s for the Foster Care program: • Subrecipient’s unique entity identifier • Federal award identification number • Federal award date of award to recipient by the Federal agency • Subaward period of performance • Amount of federal funds obligated to the subrecipient • Amount of federal funds committed to the subrecipient • Federal award project description • Name of federal awarding agency • CFDA/Assistance Listing number • Identification of whether the award is research and development • Indirect cost rate During our testing, we noted for four (4) of fourteen (14) subrecipients selected, SSA did not have documentation that the SAM clearance was performed prior to entering the contract with the subrecipient. The County’s policy was to verify the subrecipient was not suspended or debarred prior to entering the contract, but the County did not retain evidence of this check prior to entering the contract. Cause: The SSA’s procedures did not consistently ensure that the required award information and applicable requires were communicated to the subrecipients. The SSA did not follow their procedures to evaluate the risk of noncompliance or monitor the activities of each subrecipient, and the SSA did not maintain documentation of their verification that every subrecipient is audited, as required. Additionally, the SSA department did not follow their policy to retain documentation of the verification of the information prior to entering the contract. Effect: The County’s control policies were not consistently followed which require compliance with the Subrecipient Monitoring requirements in 2 CFR 200.332 and did not comply with subrecipient monitoring requirements related to the program. Additionally, the County’s control policies were not consistently followed, which required documentation of the verification prior to entering the contract. Questioned Costs: No questioned costs were identified as a result of our procedures. Context/Sampling: A nonstatistical sample of fourteen (14) out of seventy (70) subrecipients were sampled, which included seven (7) FFA, and seven (7) STRTP types. The condition noted above was identified during our procedures related to subrecipient monitoring and was pervasive to the program. Repeat Findings from Prior Years: Yes, Finding 2022-002,2022-005 and 2022-006. Recommendation: We recommend that the County adhere to their policies and procedures in accordance with 2 CFR 200.332 to ensure compliance with subrecipient monitoring requirements. We recommend that the County adhere to their procedures requiring documentation of the SAM clearance prior to entering the contract. Views of Responsible Officials: Management agrees. See separately issued Corrective Action Plan.

Program: Foster Care Federal Financial Assistance Listing Number: 93.658 Federal Grantor: U.S. Department of Health and Human Services Pass-Through: California Department of Social Services Award No. and Year: 2301CAFOST and 2023, 2201CAFOST and 2022 Compliance Requirements: Subrecipient Monitoring Type of Finding: Material Weakness in Internal Control over Compliance and Material Instance of Noncompliance Criteria: In accordance with Title 2 U.S. Code of Federal Regulations (CFR) 200.332, pass-through entities must comply with the following: • 2 CFR Part 200.332(a), Requirements for Pass-Through Entities, states that all pass-through entities must ensure that every subaward is clearly identified to the subrecipient as a subaward and includes certain information as well as all the requirements imposed by the pass-through entity on the subrecipient so that the Federal award is used in accordance with Federal statutes, regulations, and the terms and conditions of the award. • 2 CFR 200.332(b) – Evaluate each subrecipient’s risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward. This evaluation of risk may include consideration of such factors listed in 2 CFR 200.332(b)(1) through (4). • 2 CFR 200.332(d)- Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include the information at 2 CFR 200.332(d)(1) through (4). • 2 CFR 200.332(f) – Verify that every subrecipient is audited as required by Subpart F of this part when it is expected that the subrecipient’s Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 200.501. The California Department of Social Services further clarifies in its County Fiscal Letter No. 22/23-91 that Foster Family Agency (FFA), Group Home, and Short Term Residential Therapeutic Programs (STRTP) are “considered subrecipients and subject to the same audit requirements and require the same degree of oversight as other subrecipients”. Further, while there are some licensing and oversight functions performed by the state over FFAs, group homes, and STRTPs, “counties are still ultimately responsible for review of these audits and their findings, any follow-up to ensure compliance, and any other form of monitoring and oversight required by federal and state laws and regulations.” 2 CFR Section 180.300a, Responsibilities of Participants Regarding Doing Business with Other Persons (and repeated in the California Department of Social Services - County Fiscal Letter No. 21/22 – 115) counties are required to verify that recipients or contracts have not been suspended or debarred by using the federal SAM (Systems for Award Management). Condition: The Social Services Agency (SSA) did not have any formal controls in place for evaluating each subrecipient’s risk of noncompliance or the purpose of determining the appropriate subrecipient monitoring or for subrecipient monitoring for the Foster Care program. Additionally, the following information was not provided at the time of the subaward for ten (10) of fourteen (14) subawards selected for testing from the SSA’s for the Foster Care program: • Subrecipient’s unique entity identifier • Federal award identification number • Federal award date of award to recipient by the Federal agency • Subaward period of performance • Amount of federal funds obligated to the subrecipient • Amount of federal funds committed to the subrecipient • Federal award project description • Name of federal awarding agency • CFDA/Assistance Listing number • Identification of whether the award is research and development • Indirect cost rate During our testing, we noted for four (4) of fourteen (14) subrecipients selected, SSA did not have documentation that the SAM clearance was performed prior to entering the contract with the subrecipient. The County’s policy was to verify the subrecipient was not suspended or debarred prior to entering the contract, but the County did not retain evidence of this check prior to entering the contract. Cause: The SSA’s procedures did not consistently ensure that the required award information and applicable requires were communicated to the subrecipients. The SSA did not follow their procedures to evaluate the risk of noncompliance or monitor the activities of each subrecipient, and the SSA did not maintain documentation of their verification that every subrecipient is audited, as required. Additionally, the SSA department did not follow their policy to retain documentation of the verification of the information prior to entering the contract. Effect: The County’s control policies were not consistently followed which require compliance with the Subrecipient Monitoring requirements in 2 CFR 200.332 and did not comply with subrecipient monitoring requirements related to the program. Additionally, the County’s control policies were not consistently followed, which required documentation of the verification prior to entering the contract. Questioned Costs: No questioned costs were identified as a result of our procedures. Context/Sampling: A nonstatistical sample of fourteen (14) out of seventy (70) subrecipients were sampled, which included seven (7) FFA, and seven (7) STRTP types. The condition noted above was identified during our procedures related to subrecipient monitoring and was pervasive to the program. Repeat Findings from Prior Years: Yes, Finding 2022-002,2022-005 and 2022-006. Recommendation: We recommend that the County adhere to their policies and procedures in accordance with 2 CFR 200.332 to ensure compliance with subrecipient monitoring requirements. We recommend that the County adhere to their procedures requiring documentation of the SAM clearance prior to entering the contract. Views of Responsible Officials: Management agrees. See separately issued Corrective Action Plan.

Program: Foster Care Federal Financial Assistance Listing Number: 93.658 Federal Grantor: U.S. Department of Health and Human Services Pass-Through: California Department of Social Services Award No. and Year: 2301CAFOST and 2023, 2201CAFOST and 2022 Compliance Requirements: Subrecipient Monitoring Type of Finding: Material Weakness in Internal Control over Compliance and Material Instance of Noncompliance Criteria: In accordance with Title 2 U.S. Code of Federal Regulations (CFR) 200.332, pass-through entities must comply with the following: • 2 CFR Part 200.332(a), Requirements for Pass-Through Entities, states that all pass-through entities must ensure that every subaward is clearly identified to the subrecipient as a subaward and includes certain information as well as all the requirements imposed by the pass-through entity on the subrecipient so that the Federal award is used in accordance with Federal statutes, regulations, and the terms and conditions of the award. • 2 CFR 200.332(b) – Evaluate each subrecipient’s risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward. This evaluation of risk may include consideration of such factors listed in 2 CFR 200.332(b)(1) through (4). • 2 CFR 200.332(d)- Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include the information at 2 CFR 200.332(d)(1) through (4). • 2 CFR 200.332(f) – Verify that every subrecipient is audited as required by Subpart F of this part when it is expected that the subrecipient’s Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 200.501. The California Department of Social Services further clarifies in its County Fiscal Letter No. 22/23-91 that Foster Family Agency (FFA), Group Home, and Short Term Residential Therapeutic Programs (STRTP) are “considered subrecipients and subject to the same audit requirements and require the same degree of oversight as other subrecipients”. Further, while there are some licensing and oversight functions performed by the state over FFAs, group homes, and STRTPs, “counties are still ultimately responsible for review of these audits and their findings, any follow-up to ensure compliance, and any other form of monitoring and oversight required by federal and state laws and regulations.” 2 CFR Section 180.300a, Responsibilities of Participants Regarding Doing Business with Other Persons (and repeated in the California Department of Social Services - County Fiscal Letter No. 21/22 – 115) counties are required to verify that recipients or contracts have not been suspended or debarred by using the federal SAM (Systems for Award Management). Condition: The Social Services Agency (SSA) did not have any formal controls in place for evaluating each subrecipient’s risk of noncompliance or the purpose of determining the appropriate subrecipient monitoring or for subrecipient monitoring for the Foster Care program. Additionally, the following information was not provided at the time of the subaward for ten (10) of fourteen (14) subawards selected for testing from the SSA’s for the Foster Care program: • Subrecipient’s unique entity identifier • Federal award identification number • Federal award date of award to recipient by the Federal agency • Subaward period of performance • Amount of federal funds obligated to the subrecipient • Amount of federal funds committed to the subrecipient • Federal award project description • Name of federal awarding agency • CFDA/Assistance Listing number • Identification of whether the award is research and development • Indirect cost rate During our testing, we noted for four (4) of fourteen (14) subrecipients selected, SSA did not have documentation that the SAM clearance was performed prior to entering the contract with the subrecipient. The County’s policy was to verify the subrecipient was not suspended or debarred prior to entering the contract, but the County did not retain evidence of this check prior to entering the contract. Cause: The SSA’s procedures did not consistently ensure that the required award information and applicable requires were communicated to the subrecipients. The SSA did not follow their procedures to evaluate the risk of noncompliance or monitor the activities of each subrecipient, and the SSA did not maintain documentation of their verification that every subrecipient is audited, as required. Additionally, the SSA department did not follow their policy to retain documentation of the verification of the information prior to entering the contract. Effect: The County’s control policies were not consistently followed which require compliance with the Subrecipient Monitoring requirements in 2 CFR 200.332 and did not comply with subrecipient monitoring requirements related to the program. Additionally, the County’s control policies were not consistently followed, which required documentation of the verification prior to entering the contract. Questioned Costs: No questioned costs were identified as a result of our procedures. Context/Sampling: A nonstatistical sample of fourteen (14) out of seventy (70) subrecipients were sampled, which included seven (7) FFA, and seven (7) STRTP types. The condition noted above was identified during our procedures related to subrecipient monitoring and was pervasive to the program. Repeat Findings from Prior Years: Yes, Finding 2022-002,2022-005 and 2022-006. Recommendation: We recommend that the County adhere to their policies and procedures in accordance with 2 CFR 200.332 to ensure compliance with subrecipient monitoring requirements. We recommend that the County adhere to their procedures requiring documentation of the SAM clearance prior to entering the contract. Views of Responsible Officials: Management agrees. See separately issued Corrective Action Plan.

Program: COVID-19 Coronavirus State and Local Fiscal Recovery Funds Federal Financial Assistance Listing Number: 21.027 Federal Grantor: U.S. Department of Treasury Award No. and Year: 2021 Compliance Requirements: Procurement and Suspension and Debarment Type of Finding: Significant Deficiency in Internal Control Over Compliance and Instance of Noncompliance Criteria: 2 CFR section 200.303(a), Internal Controls, states that the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Title 2 CFR Section 200.214 of the Uniform Guidance states that the County must comply with 2 CFR part 180, which implements Executive Orders 12549 and 12689. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities. Per 2 CFR Section 180.300, when a non-Federal entity enters into a covered transaction with an entity at a lower tier, the non-Federal entity must verify that the entity, as defined in 2 CFR section 180.995 and agency adopting regulations, is not suspended or debarred or otherwise excluded from participating in the transaction. This verification may be accomplished by (1) checking the System for Award Management (SAM) Exclusions maintained by the General Services Administration (GSA) and available at https://www.sam.gov/SAM/, (2) collecting a certification from the entity, or (3) adding a clause or condition to the covered transaction with that entity. 2 CFR section Appendix II to Part 200, Contract Provisions for Non-Federal Entity Contracts Under Federal Awards states that in addition to other provisions required by the Federal agency or non-Federal entity, all contracts made by the non-Federal entity under the Federal award must contain certain provisions, as applicable. Condition: During our testing of the Orange County Public Works (OCPW), Orange County Community Resources (OCCR) and the Social Services Agency’s (SSA) provisions for procurement requirements under the COVID-19 Coronavirus State and Local Fiscal Recovery Funds, we noted the following instances where there was no evidence that the OCPW, OCCR or SSA departments verified the entity was not suspended or debarred or otherwise excluded from participating in the transaction, prior to entering the contract, in accordance with County policy: • Four (4) of four (4) contracts through the OCPW department selected for testing. • Three (3) of eight (8) contracts through the OCCR department selected for testing. • One (1) of one (1) contract through the SSA department selected for testing. The following information was not provided at the time of the contract award for four (4) of four (4) contracts selected for testing within the OCPW department, one (1) of one (1) contract selected within SSA, and five (5) of eight (8) contracts selected for testing within the OCCR department: • Byrd Anti-Lobbying Amendment • Clean Air Act and Federal Pollution Control Act provision The following information was not provided at the time of the contract award for two (2) of four (4) contracts selected for testing within the OCPW department and one (1) of one (1) contract selected for testing within SSA: • Contract Work Hours and Safety Standards Act provision The following information was not provided at the time of the contract award for one (1) of one contract selected for testing within SSA: • Davis-Bacon Act provision • Equal Employment Opportunity provision Cause: The OCPW, OCCR and SSA departments did not follow their policy to verify the information described in the condition prior to entering the transactions and did not consistently ensure that the applicable required provisions were communicated to contractors. Effect: The County’s control and compliance were not consistently followed, which required verification of suspension or debarment prior to entering the contract. EB reviewed the vendor’s status on SAM.gov and verified the vendors selected for testing were not suspended and debarred at the date of the audit. Additionally, the OCPW, SSA and OCCR departments did not identify the applicable required provisions of the contract to the contractors at the time of the contract award. Questioned Costs: No questioned costs were identified as a result of our procedures. Context/Sampling: A nonstatistical sample of four (4) out of twelve (12) procurement contracts were sampled from OCPW and eight (8) out of nineteen (19) procurement contracts were sampled from OCCR for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. The entire population of 1 (contract) was tested from SSA for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. Repeat Finding from Prior Years: Yes, Finding 2022-003 and 2022-009. Recommendation: We recommend that the OCPW, OCCR and SSA departments adhere to their procurement procedures requiring the suspension or debarment verification is performed prior to entering into a covered transaction. Additionally, we recommend the OCPW, SSA and OCCR departments modify and strengthen its current policies and procedures to ensure that all applicable required provisions are communicated to contractors in accordance with 2 CFR Appendix II to Part 200. Views of Responsible Officials: Management agrees. See separately issued Corrective Action Plan.

Program: COVID-19 Coronavirus State and Local Fiscal Recovery Funds Federal Financial Assistance Listing Number: 21.027 Federal Grantor: U.S. Department of Treasury Award No. and Year: 2021 Compliance Requirements: Procurement and Suspension and Debarment Type of Finding: Significant Deficiency in Internal Control Over Compliance and Instance of Noncompliance Criteria: 2 CFR section 200.303(a), Internal Controls, states that the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Title 2 CFR Section 200.214 of the Uniform Guidance states that the County must comply with 2 CFR part 180, which implements Executive Orders 12549 and 12689. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities. Per 2 CFR Section 180.300, when a non-Federal entity enters into a covered transaction with an entity at a lower tier, the non-Federal entity must verify that the entity, as defined in 2 CFR section 180.995 and agency adopting regulations, is not suspended or debarred or otherwise excluded from participating in the transaction. This verification may be accomplished by (1) checking the System for Award Management (SAM) Exclusions maintained by the General Services Administration (GSA) and available at https://www.sam.gov/SAM/, (2) collecting a certification from the entity, or (3) adding a clause or condition to the covered transaction with that entity. 2 CFR section Appendix II to Part 200, Contract Provisions for Non-Federal Entity Contracts Under Federal Awards states that in addition to other provisions required by the Federal agency or non-Federal entity, all contracts made by the non-Federal entity under the Federal award must contain certain provisions, as applicable. Condition: During our testing of the Orange County Public Works (OCPW), Orange County Community Resources (OCCR) and the Social Services Agency’s (SSA) provisions for procurement requirements under the COVID-19 Coronavirus State and Local Fiscal Recovery Funds, we noted the following instances where there was no evidence that the OCPW, OCCR or SSA departments verified the entity was not suspended or debarred or otherwise excluded from participating in the transaction, prior to entering the contract, in accordance with County policy: • Four (4) of four (4) contracts through the OCPW department selected for testing. • Three (3) of eight (8) contracts through the OCCR department selected for testing. • One (1) of one (1) contract through the SSA department selected for testing. The following information was not provided at the time of the contract award for four (4) of four (4) contracts selected for testing within the OCPW department, one (1) of one (1) contract selected within SSA, and five (5) of eight (8) contracts selected for testing within the OCCR department: • Byrd Anti-Lobbying Amendment • Clean Air Act and Federal Pollution Control Act provision The following information was not provided at the time of the contract award for two (2) of four (4) contracts selected for testing within the OCPW department and one (1) of one (1) contract selected for testing within SSA: • Contract Work Hours and Safety Standards Act provision The following information was not provided at the time of the contract award for one (1) of one contract selected for testing within SSA: • Davis-Bacon Act provision • Equal Employment Opportunity provision Cause: The OCPW, OCCR and SSA departments did not follow their policy to verify the information described in the condition prior to entering the transactions and did not consistently ensure that the applicable required provisions were communicated to contractors. Effect: The County’s control and compliance were not consistently followed, which required verification of suspension or debarment prior to entering the contract. EB reviewed the vendor’s status on SAM.gov and verified the vendors selected for testing were not suspended and debarred at the date of the audit. Additionally, the OCPW, SSA and OCCR departments did not identify the applicable required provisions of the contract to the contractors at the time of the contract award. Questioned Costs: No questioned costs were identified as a result of our procedures. Context/Sampling: A nonstatistical sample of four (4) out of twelve (12) procurement contracts were sampled from OCPW and eight (8) out of nineteen (19) procurement contracts were sampled from OCCR for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. The entire population of 1 (contract) was tested from SSA for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. Repeat Finding from Prior Years: Yes, Finding 2022-003 and 2022-009. Recommendation: We recommend that the OCPW, OCCR and SSA departments adhere to their procurement procedures requiring the suspension or debarment verification is performed prior to entering into a covered transaction. Additionally, we recommend the OCPW, SSA and OCCR departments modify and strengthen its current policies and procedures to ensure that all applicable required provisions are communicated to contractors in accordance with 2 CFR Appendix II to Part 200. Views of Responsible Officials: Management agrees. See separately issued Corrective Action Plan.

Program: COVID-19 Coronavirus State and Local Fiscal Recovery Funds Federal Financial Assistance Listing Number: 21.027 Federal Grantor: U.S. Department of Treasury Award No. and Year: 2021 Compliance Requirements: Procurement and Suspension and Debarment Type of Finding: Significant Deficiency in Internal Control Over Compliance and Instance of Noncompliance Criteria: 2 CFR section 200.303(a), Internal Controls, states that the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Title 2 CFR Section 200.214 of the Uniform Guidance states that the County must comply with 2 CFR part 180, which implements Executive Orders 12549 and 12689. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities. Per 2 CFR Section 180.300, when a non-Federal entity enters into a covered transaction with an entity at a lower tier, the non-Federal entity must verify that the entity, as defined in 2 CFR section 180.995 and agency adopting regulations, is not suspended or debarred or otherwise excluded from participating in the transaction. This verification may be accomplished by (1) checking the System for Award Management (SAM) Exclusions maintained by the General Services Administration (GSA) and available at https://www.sam.gov/SAM/, (2) collecting a certification from the entity, or (3) adding a clause or condition to the covered transaction with that entity. 2 CFR section Appendix II to Part 200, Contract Provisions for Non-Federal Entity Contracts Under Federal Awards states that in addition to other provisions required by the Federal agency or non-Federal entity, all contracts made by the non-Federal entity under the Federal award must contain certain provisions, as applicable. Condition: During our testing of the Orange County Public Works (OCPW), Orange County Community Resources (OCCR) and the Social Services Agency’s (SSA) provisions for procurement requirements under the COVID-19 Coronavirus State and Local Fiscal Recovery Funds, we noted the following instances where there was no evidence that the OCPW, OCCR or SSA departments verified the entity was not suspended or debarred or otherwise excluded from participating in the transaction, prior to entering the contract, in accordance with County policy: • Four (4) of four (4) contracts through the OCPW department selected for testing. • Three (3) of eight (8) contracts through the OCCR department selected for testing. • One (1) of one (1) contract through the SSA department selected for testing. The following information was not provided at the time of the contract award for four (4) of four (4) contracts selected for testing within the OCPW department, one (1) of one (1) contract selected within SSA, and five (5) of eight (8) contracts selected for testing within the OCCR department: • Byrd Anti-Lobbying Amendment • Clean Air Act and Federal Pollution Control Act provision The following information was not provided at the time of the contract award for two (2) of four (4) contracts selected for testing within the OCPW department and one (1) of one (1) contract selected for testing within SSA: • Contract Work Hours and Safety Standards Act provision The following information was not provided at the time of the contract award for one (1) of one contract selected for testing within SSA: • Davis-Bacon Act provision • Equal Employment Opportunity provision Cause: The OCPW, OCCR and SSA departments did not follow their policy to verify the information described in the condition prior to entering the transactions and did not consistently ensure that the applicable required provisions were communicated to contractors. Effect: The County’s control and compliance were not consistently followed, which required verification of suspension or debarment prior to entering the contract. EB reviewed the vendor’s status on SAM.gov and verified the vendors selected for testing were not suspended and debarred at the date of the audit. Additionally, the OCPW, SSA and OCCR departments did not identify the applicable required provisions of the contract to the contractors at the time of the contract award. Questioned Costs: No questioned costs were identified as a result of our procedures. Context/Sampling: A nonstatistical sample of four (4) out of twelve (12) procurement contracts were sampled from OCPW and eight (8) out of nineteen (19) procurement contracts were sampled from OCCR for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. The entire population of 1 (contract) was tested from SSA for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. Repeat Finding from Prior Years: Yes, Finding 2022-003 and 2022-009. Recommendation: We recommend that the OCPW, OCCR and SSA departments adhere to their procurement procedures requiring the suspension or debarment verification is performed prior to entering into a covered transaction. Additionally, we recommend the OCPW, SSA and OCCR departments modify and strengthen its current policies and procedures to ensure that all applicable required provisions are communicated to contractors in accordance with 2 CFR Appendix II to Part 200. Views of Responsible Officials: Management agrees. See separately issued Corrective Action Plan.

Program: COVID-19 Coronavirus State and Local Fiscal Recovery Funds Federal Financial Assistance Listing Number: 21.027 Federal Grantor: U.S. Department of Treasury Award No. and Year: 2021 Compliance Requirements: Procurement and Suspension and Debarment Type of Finding: Significant Deficiency in Internal Control Over Compliance and Instance of Noncompliance Criteria: 2 CFR section 200.303(a), Internal Controls, states that the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Title 2 CFR Section 200.214 of the Uniform Guidance states that the County must comply with 2 CFR part 180, which implements Executive Orders 12549 and 12689. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities. Per 2 CFR Section 180.300, when a non-Federal entity enters into a covered transaction with an entity at a lower tier, the non-Federal entity must verify that the entity, as defined in 2 CFR section 180.995 and agency adopting regulations, is not suspended or debarred or otherwise excluded from participating in the transaction. This verification may be accomplished by (1) checking the System for Award Management (SAM) Exclusions maintained by the General Services Administration (GSA) and available at https://www.sam.gov/SAM/, (2) collecting a certification from the entity, or (3) adding a clause or condition to the covered transaction with that entity. 2 CFR section Appendix II to Part 200, Contract Provisions for Non-Federal Entity Contracts Under Federal Awards states that in addition to other provisions required by the Federal agency or non-Federal entity, all contracts made by the non-Federal entity under the Federal award must contain certain provisions, as applicable. Condition: During our testing of the Orange County Public Works (OCPW), Orange County Community Resources (OCCR) and the Social Services Agency’s (SSA) provisions for procurement requirements under the COVID-19 Coronavirus State and Local Fiscal Recovery Funds, we noted the following instances where there was no evidence that the OCPW, OCCR or SSA departments verified the entity was not suspended or debarred or otherwise excluded from participating in the transaction, prior to entering the contract, in accordance with County policy: • Four (4) of four (4) contracts through the OCPW department selected for testing. • Three (3) of eight (8) contracts through the OCCR department selected for testing. • One (1) of one (1) contract through the SSA department selected for testing. The following information was not provided at the time of the contract award for four (4) of four (4) contracts selected for testing within the OCPW department, one (1) of one (1) contract selected within SSA, and five (5) of eight (8) contracts selected for testing within the OCCR department: • Byrd Anti-Lobbying Amendment • Clean Air Act and Federal Pollution Control Act provision The following information was not provided at the time of the contract award for two (2) of four (4) contracts selected for testing within the OCPW department and one (1) of one (1) contract selected for testing within SSA: • Contract Work Hours and Safety Standards Act provision The following information was not provided at the time of the contract award for one (1) of one contract selected for testing within SSA: • Davis-Bacon Act provision • Equal Employment Opportunity provision Cause: The OCPW, OCCR and SSA departments did not follow their policy to verify the information described in the condition prior to entering the transactions and did not consistently ensure that the applicable required provisions were communicated to contractors. Effect: The County’s control and compliance were not consistently followed, which required verification of suspension or debarment prior to entering the contract. EB reviewed the vendor’s status on SAM.gov and verified the vendors selected for testing were not suspended and debarred at the date of the audit. Additionally, the OCPW, SSA and OCCR departments did not identify the applicable required provisions of the contract to the contractors at the time of the contract award. Questioned Costs: No questioned costs were identified as a result of our procedures. Context/Sampling: A nonstatistical sample of four (4) out of twelve (12) procurement contracts were sampled from OCPW and eight (8) out of nineteen (19) procurement contracts were sampled from OCCR for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. The entire population of 1 (contract) was tested from SSA for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. Repeat Finding from Prior Years: Yes, Finding 2022-003 and 2022-009. Recommendation: We recommend that the OCPW, OCCR and SSA departments adhere to their procurement procedures requiring the suspension or debarment verification is performed prior to entering into a covered transaction. Additionally, we recommend the OCPW, SSA and OCCR departments modify and strengthen its current policies and procedures to ensure that all applicable required provisions are communicated to contractors in accordance with 2 CFR Appendix II to Part 200. Views of Responsible Officials: Management agrees. See separately issued Corrective Action Plan.

Program: COVID-19 Coronavirus State and Local Fiscal Recovery Funds Federal Financial Assistance Listing Number: 21.027 Federal Grantor: U.S. Department of Treasury Award No. and Year: 2021 Compliance Requirements: Procurement and Suspension and Debarment Type of Finding: Significant Deficiency in Internal Control Over Compliance and Instance of Noncompliance Criteria: 2 CFR section 200.303(a), Internal Controls, states that the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Title 2 CFR Section 200.214 of the Uniform Guidance states that the County must comply with 2 CFR part 180, which implements Executive Orders 12549 and 12689. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities. Per 2 CFR Section 180.300, when a non-Federal entity enters into a covered transaction with an entity at a lower tier, the non-Federal entity must verify that the entity, as defined in 2 CFR section 180.995 and agency adopting regulations, is not suspended or debarred or otherwise excluded from participating in the transaction. This verification may be accomplished by (1) checking the System for Award Management (SAM) Exclusions maintained by the General Services Administration (GSA) and available at https://www.sam.gov/SAM/, (2) collecting a certification from the entity, or (3) adding a clause or condition to the covered transaction with that entity. 2 CFR section Appendix II to Part 200, Contract Provisions for Non-Federal Entity Contracts Under Federal Awards states that in addition to other provisions required by the Federal agency or non-Federal entity, all contracts made by the non-Federal entity under the Federal award must contain certain provisions, as applicable. Condition: During our testing of the Orange County Public Works (OCPW), Orange County Community Resources (OCCR) and the Social Services Agency’s (SSA) provisions for procurement requirements under the COVID-19 Coronavirus State and Local Fiscal Recovery Funds, we noted the following instances where there was no evidence that the OCPW, OCCR or SSA departments verified the entity was not suspended or debarred or otherwise excluded from participating in the transaction, prior to entering the contract, in accordance with County policy: • Four (4) of four (4) contracts through the OCPW department selected for testing. • Three (3) of eight (8) contracts through the OCCR department selected for testing. • One (1) of one (1) contract through the SSA department selected for testing. The following information was not provided at the time of the contract award for four (4) of four (4) contracts selected for testing within the OCPW department, one (1) of one (1) contract selected within SSA, and five (5) of eight (8) contracts selected for testing within the OCCR department: • Byrd Anti-Lobbying Amendment • Clean Air Act and Federal Pollution Control Act provision The following information was not provided at the time of the contract award for two (2) of four (4) contracts selected for testing within the OCPW department and one (1) of one (1) contract selected for testing within SSA: • Contract Work Hours and Safety Standards Act provision The following information was not provided at the time of the contract award for one (1) of one contract selected for testing within SSA: • Davis-Bacon Act provision • Equal Employment Opportunity provision Cause: The OCPW, OCCR and SSA departments did not follow their policy to verify the information described in the condition prior to entering the transactions and did not consistently ensure that the applicable required provisions were communicated to contractors. Effect: The County’s control and compliance were not consistently followed, which required verification of suspension or debarment prior to entering the contract. EB reviewed the vendor’s status on SAM.gov and verified the vendors selected for testing were not suspended and debarred at the date of the audit. Additionally, the OCPW, SSA and OCCR departments did not identify the applicable required provisions of the contract to the contractors at the time of the contract award. Questioned Costs: No questioned costs were identified as a result of our procedures. Context/Sampling: A nonstatistical sample of four (4) out of twelve (12) procurement contracts were sampled from OCPW and eight (8) out of nineteen (19) procurement contracts were sampled from OCCR for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. The entire population of 1 (contract) was tested from SSA for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. Repeat Finding from Prior Years: Yes, Finding 2022-003 and 2022-009. Recommendation: We recommend that the OCPW, OCCR and SSA departments adhere to their procurement procedures requiring the suspension or debarment verification is performed prior to entering into a covered transaction. Additionally, we recommend the OCPW, SSA and OCCR departments modify and strengthen its current policies and procedures to ensure that all applicable required provisions are communicated to contractors in accordance with 2 CFR Appendix II to Part 200. Views of Responsible Officials: Management agrees. See separately issued Corrective Action Plan.

Program: COVID-19 Coronavirus State and Local Fiscal Recovery Funds Federal Financial Assistance Listing Number: 21.027 Federal Grantor: U.S. Department of Treasury Award No. and Year: 2021 Compliance Requirements: Procurement and Suspension and Debarment Type of Finding: Significant Deficiency in Internal Control Over Compliance and Instance of Noncompliance Criteria: 2 CFR section 200.303(a), Internal Controls, states that the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Title 2 CFR Section 200.214 of the Uniform Guidance states that the County must comply with 2 CFR part 180, which implements Executive Orders 12549 and 12689. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities. Per 2 CFR Section 180.300, when a non-Federal entity enters into a covered transaction with an entity at a lower tier, the non-Federal entity must verify that the entity, as defined in 2 CFR section 180.995 and agency adopting regulations, is not suspended or debarred or otherwise excluded from participating in the transaction. This verification may be accomplished by (1) checking the System for Award Management (SAM) Exclusions maintained by the General Services Administration (GSA) and available at https://www.sam.gov/SAM/, (2) collecting a certification from the entity, or (3) adding a clause or condition to the covered transaction with that entity. 2 CFR section Appendix II to Part 200, Contract Provisions for Non-Federal Entity Contracts Under Federal Awards states that in addition to other provisions required by the Federal agency or non-Federal entity, all contracts made by the non-Federal entity under the Federal award must contain certain provisions, as applicable. Condition: During our testing of the Orange County Public Works (OCPW), Orange County Community Resources (OCCR) and the Social Services Agency’s (SSA) provisions for procurement requirements under the COVID-19 Coronavirus State and Local Fiscal Recovery Funds, we noted the following instances where there was no evidence that the OCPW, OCCR or SSA departments verified the entity was not suspended or debarred or otherwise excluded from participating in the transaction, prior to entering the contract, in accordance with County policy: • Four (4) of four (4) contracts through the OCPW department selected for testing. • Three (3) of eight (8) contracts through the OCCR department selected for testing. • One (1) of one (1) contract through the SSA department selected for testing. The following information was not provided at the time of the contract award for four (4) of four (4) contracts selected for testing within the OCPW department, one (1) of one (1) contract selected within SSA, and five (5) of eight (8) contracts selected for testing within the OCCR department: • Byrd Anti-Lobbying Amendment • Clean Air Act and Federal Pollution Control Act provision The following information was not provided at the time of the contract award for two (2) of four (4) contracts selected for testing within the OCPW department and one (1) of one (1) contract selected for testing within SSA: • Contract Work Hours and Safety Standards Act provision The following information was not provided at the time of the contract award for one (1) of one contract selected for testing within SSA: • Davis-Bacon Act provision • Equal Employment Opportunity provision Cause: The OCPW, OCCR and SSA departments did not follow their policy to verify the information described in the condition prior to entering the transactions and did not consistently ensure that the applicable required provisions were communicated to contractors. Effect: The County’s control and compliance were not consistently followed, which required verification of suspension or debarment prior to entering the contract. EB reviewed the vendor’s status on SAM.gov and verified the vendors selected for testing were not suspended and debarred at the date of the audit. Additionally, the OCPW, SSA and OCCR departments did not identify the applicable required provisions of the contract to the contractors at the time of the contract award. Questioned Costs: No questioned costs were identified as a result of our procedures. Context/Sampling: A nonstatistical sample of four (4) out of twelve (12) procurement contracts were sampled from OCPW and eight (8) out of nineteen (19) procurement contracts were sampled from OCCR for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. The entire population of 1 (contract) was tested from SSA for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. Repeat Finding from Prior Years: Yes, Finding 2022-003 and 2022-009. Recommendation: We recommend that the OCPW, OCCR and SSA departments adhere to their procurement procedures requiring the suspension or debarment verification is performed prior to entering into a covered transaction. Additionally, we recommend the OCPW, SSA and OCCR departments modify and strengthen its current policies and procedures to ensure that all applicable required provisions are communicated to contractors in accordance with 2 CFR Appendix II to Part 200. Views of Responsible Officials: Management agrees. See separately issued Corrective Action Plan.

Program: COVID-19 Coronavirus State and Local Fiscal Recovery Funds Federal Financial Assistance Listing Number: 21.027 Federal Grantor: U.S. Department of Treasury Award No. and Year: 2021 Compliance Requirements: Procurement and Suspension and Debarment Type of Finding: Significant Deficiency in Internal Control Over Compliance and Instance of Noncompliance Criteria: 2 CFR section 200.303(a), Internal Controls, states that the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Title 2 CFR Section 200.214 of the Uniform Guidance states that the County must comply with 2 CFR part 180, which implements Executive Orders 12549 and 12689. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities. Per 2 CFR Section 180.300, when a non-Federal entity enters into a covered transaction with an entity at a lower tier, the non-Federal entity must verify that the entity, as defined in 2 CFR section 180.995 and agency adopting regulations, is not suspended or debarred or otherwise excluded from participating in the transaction. This verification may be accomplished by (1) checking the System for Award Management (SAM) Exclusions maintained by the General Services Administration (GSA) and available at https://www.sam.gov/SAM/, (2) collecting a certification from the entity, or (3) adding a clause or condition to the covered transaction with that entity. 2 CFR section Appendix II to Part 200, Contract Provisions for Non-Federal Entity Contracts Under Federal Awards states that in addition to other provisions required by the Federal agency or non-Federal entity, all contracts made by the non-Federal entity under the Federal award must contain certain provisions, as applicable. Condition: During our testing of the Orange County Public Works (OCPW), Orange County Community Resources (OCCR) and the Social Services Agency’s (SSA) provisions for procurement requirements under the COVID-19 Coronavirus State and Local Fiscal Recovery Funds, we noted the following instances where there was no evidence that the OCPW, OCCR or SSA departments verified the entity was not suspended or debarred or otherwise excluded from participating in the transaction, prior to entering the contract, in accordance with County policy: • Four (4) of four (4) contracts through the OCPW department selected for testing. • Three (3) of eight (8) contracts through the OCCR department selected for testing. • One (1) of one (1) contract through the SSA department selected for testing. The following information was not provided at the time of the contract award for four (4) of four (4) contracts selected for testing within the OCPW department, one (1) of one (1) contract selected within SSA, and five (5) of eight (8) contracts selected for testing within the OCCR department: • Byrd Anti-Lobbying Amendment • Clean Air Act and Federal Pollution Control Act provision The following information was not provided at the time of the contract award for two (2) of four (4) contracts selected for testing within the OCPW department and one (1) of one (1) contract selected for testing within SSA: • Contract Work Hours and Safety Standards Act provision The following information was not provided at the time of the contract award for one (1) of one contract selected for testing within SSA: • Davis-Bacon Act provision • Equal Employment Opportunity provision Cause: The OCPW, OCCR and SSA departments did not follow their policy to verify the information described in the condition prior to entering the transactions and did not consistently ensure that the applicable required provisions were communicated to contractors. Effect: The County’s control and compliance were not consistently followed, which required verification of suspension or debarment prior to entering the contract. EB reviewed the vendor’s status on SAM.gov and verified the vendors selected for testing were not suspended and debarred at the date of the audit. Additionally, the OCPW, SSA and OCCR departments did not identify the applicable required provisions of the contract to the contractors at the time of the contract award. Questioned Costs: No questioned costs were identified as a result of our procedures. Context/Sampling: A nonstatistical sample of four (4) out of twelve (12) procurement contracts were sampled from OCPW and eight (8) out of nineteen (19) procurement contracts were sampled from OCCR for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. The entire population of 1 (contract) was tested from SSA for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. Repeat Finding from Prior Years: Yes, Finding 2022-003 and 2022-009. Recommendation: We recommend that the OCPW, OCCR and SSA departments adhere to their procurement procedures requiring the suspension or debarment verification is performed prior to entering into a covered transaction. Additionally, we recommend the OCPW, SSA and OCCR departments modify and strengthen its current policies and procedures to ensure that all applicable required provisions are communicated to contractors in accordance with 2 CFR Appendix II to Part 200. Views of Responsible Officials: Management agrees. See separately issued Corrective Action Plan.

Program: COVID-19 Coronavirus State and Local Fiscal Recovery Funds Federal Financial Assistance Listing Number: 21.027 Federal Grantor: U.S. Department of Treasury Award No. and Year: 2021 Compliance Requirements: Procurement and Suspension and Debarment Type of Finding: Significant Deficiency in Internal Control Over Compliance and Instance of Noncompliance Criteria: 2 CFR section 200.303(a), Internal Controls, states that the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Title 2 CFR Section 200.214 of the Uniform Guidance states that the County must comply with 2 CFR part 180, which implements Executive Orders 12549 and 12689. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities. Per 2 CFR Section 180.300, when a non-Federal entity enters into a covered transaction with an entity at a lower tier, the non-Federal entity must verify that the entity, as defined in 2 CFR section 180.995 and agency adopting regulations, is not suspended or debarred or otherwise excluded from participating in the transaction. This verification may be accomplished by (1) checking the System for Award Management (SAM) Exclusions maintained by the General Services Administration (GSA) and available at https://www.sam.gov/SAM/, (2) collecting a certification from the entity, or (3) adding a clause or condition to the covered transaction with that entity. 2 CFR section Appendix II to Part 200, Contract Provisions for Non-Federal Entity Contracts Under Federal Awards states that in addition to other provisions required by the Federal agency or non-Federal entity, all contracts made by the non-Federal entity under the Federal award must contain certain provisions, as applicable. Condition: During our testing of the Orange County Public Works (OCPW), Orange County Community Resources (OCCR) and the Social Services Agency’s (SSA) provisions for procurement requirements under the COVID-19 Coronavirus State and Local Fiscal Recovery Funds, we noted the following instances where there was no evidence that the OCPW, OCCR or SSA departments verified the entity was not suspended or debarred or otherwise excluded from participating in the transaction, prior to entering the contract, in accordance with County policy: • Four (4) of four (4) contracts through the OCPW department selected for testing. • Three (3) of eight (8) contracts through the OCCR department selected for testing. • One (1) of one (1) contract through the SSA department selected for testing. The following information was not provided at the time of the contract award for four (4) of four (4) contracts selected for testing within the OCPW department, one (1) of one (1) contract selected within SSA, and five (5) of eight (8) contracts selected for testing within the OCCR department: • Byrd Anti-Lobbying Amendment • Clean Air Act and Federal Pollution Control Act provision The following information was not provided at the time of the contract award for two (2) of four (4) contracts selected for testing within the OCPW department and one (1) of one (1) contract selected for testing within SSA: • Contract Work Hours and Safety Standards Act provision The following information was not provided at the time of the contract award for one (1) of one contract selected for testing within SSA: • Davis-Bacon Act provision • Equal Employment Opportunity provision Cause: The OCPW, OCCR and SSA departments did not follow their policy to verify the information described in the condition prior to entering the transactions and did not consistently ensure that the applicable required provisions were communicated to contractors. Effect: The County’s control and compliance were not consistently followed, which required verification of suspension or debarment prior to entering the contract. EB reviewed the vendor’s status on SAM.gov and verified the vendors selected for testing were not suspended and debarred at the date of the audit. Additionally, the OCPW, SSA and OCCR departments did not identify the applicable required provisions of the contract to the contractors at the time of the contract award. Questioned Costs: No questioned costs were identified as a result of our procedures. Context/Sampling: A nonstatistical sample of four (4) out of twelve (12) procurement contracts were sampled from OCPW and eight (8) out of nineteen (19) procurement contracts were sampled from OCCR for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. The entire population of 1 (contract) was tested from SSA for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. Repeat Finding from Prior Years: Yes, Finding 2022-003 and 2022-009. Recommendation: We recommend that the OCPW, OCCR and SSA departments adhere to their procurement procedures requiring the suspension or debarment verification is performed prior to entering into a covered transaction. Additionally, we recommend the OCPW, SSA and OCCR departments modify and strengthen its current policies and procedures to ensure that all applicable required provisions are communicated to contractors in accordance with 2 CFR Appendix II to Part 200. Views of Responsible Officials: Management agrees. See separately issued Corrective Action Plan.

Program: COVID-19 Coronavirus State and Local Fiscal Recovery Funds Federal Financial Assistance Listing Number: 21.027 Federal Grantor: U.S. Department of Treasury Award No. and Year: 2021 Compliance Requirements: Procurement and Suspension and Debarment Type of Finding: Significant Deficiency in Internal Control Over Compliance and Instance of Noncompliance Criteria: 2 CFR section 200.303(a), Internal Controls, states that the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Title 2 CFR Section 200.214 of the Uniform Guidance states that the County must comply with 2 CFR part 180, which implements Executive Orders 12549 and 12689. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities. Per 2 CFR Section 180.300, when a non-Federal entity enters into a covered transaction with an entity at a lower tier, the non-Federal entity must verify that the entity, as defined in 2 CFR section 180.995 and agency adopting regulations, is not suspended or debarred or otherwise excluded from participating in the transaction. This verification may be accomplished by (1) checking the System for Award Management (SAM) Exclusions maintained by the General Services Administration (GSA) and available at https://www.sam.gov/SAM/, (2) collecting a certification from the entity, or (3) adding a clause or condition to the covered transaction with that entity. 2 CFR section Appendix II to Part 200, Contract Provisions for Non-Federal Entity Contracts Under Federal Awards states that in addition to other provisions required by the Federal agency or non-Federal entity, all contracts made by the non-Federal entity under the Federal award must contain certain provisions, as applicable. Condition: During our testing of the Orange County Public Works (OCPW), Orange County Community Resources (OCCR) and the Social Services Agency’s (SSA) provisions for procurement requirements under the COVID-19 Coronavirus State and Local Fiscal Recovery Funds, we noted the following instances where there was no evidence that the OCPW, OCCR or SSA departments verified the entity was not suspended or debarred or otherwise excluded from participating in the transaction, prior to entering the contract, in accordance with County policy: • Four (4) of four (4) contracts through the OCPW department selected for testing. • Three (3) of eight (8) contracts through the OCCR department selected for testing. • One (1) of one (1) contract through the SSA department selected for testing. The following information was not provided at the time of the contract award for four (4) of four (4) contracts selected for testing within the OCPW department, one (1) of one (1) contract selected within SSA, and five (5) of eight (8) contracts selected for testing within the OCCR department: • Byrd Anti-Lobbying Amendment • Clean Air Act and Federal Pollution Control Act provision The following information was not provided at the time of the contract award for two (2) of four (4) contracts selected for testing within the OCPW department and one (1) of one (1) contract selected for testing within SSA: • Contract Work Hours and Safety Standards Act provision The following information was not provided at the time of the contract award for one (1) of one contract selected for testing within SSA: • Davis-Bacon Act provision • Equal Employment Opportunity provision Cause: The OCPW, OCCR and SSA departments did not follow their policy to verify the information described in the condition prior to entering the transactions and did not consistently ensure that the applicable required provisions were communicated to contractors. Effect: The County’s control and compliance were not consistently followed, which required verification of suspension or debarment prior to entering the contract. EB reviewed the vendor’s status on SAM.gov and verified the vendors selected for testing were not suspended and debarred at the date of the audit. Additionally, the OCPW, SSA and OCCR departments did not identify the applicable required provisions of the contract to the contractors at the time of the contract award. Questioned Costs: No questioned costs were identified as a result of our procedures. Context/Sampling: A nonstatistical sample of four (4) out of twelve (12) procurement contracts were sampled from OCPW and eight (8) out of nineteen (19) procurement contracts were sampled from OCCR for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. The entire population of 1 (contract) was tested from SSA for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. Repeat Finding from Prior Years: Yes, Finding 2022-003 and 2022-009. Recommendation: We recommend that the OCPW, OCCR and SSA departments adhere to their procurement procedures requiring the suspension or debarment verification is performed prior to entering into a covered transaction. Additionally, we recommend the OCPW, SSA and OCCR departments modify and strengthen its current policies and procedures to ensure that all applicable required provisions are communicated to contractors in accordance with 2 CFR Appendix II to Part 200. Views of Responsible Officials: Management agrees. See separately issued Corrective Action Plan.

Program: COVID-19 Coronavirus State and Local Fiscal Recovery Funds Federal Financial Assistance Listing Number: 21.027 Federal Grantor: U.S. Department of Treasury Award No. and Year: 2021 Compliance Requirements: Procurement and Suspension and Debarment Type of Finding: Significant Deficiency in Internal Control Over Compliance and Instance of Noncompliance Criteria: 2 CFR section 200.303(a), Internal Controls, states that the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Title 2 CFR Section 200.214 of the Uniform Guidance states that the County must comply with 2 CFR part 180, which implements Executive Orders 12549 and 12689. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities. Per 2 CFR Section 180.300, when a non-Federal entity enters into a covered transaction with an entity at a lower tier, the non-Federal entity must verify that the entity, as defined in 2 CFR section 180.995 and agency adopting regulations, is not suspended or debarred or otherwise excluded from participating in the transaction. This verification may be accomplished by (1) checking the System for Award Management (SAM) Exclusions maintained by the General Services Administration (GSA) and available at https://www.sam.gov/SAM/, (2) collecting a certification from the entity, or (3) adding a clause or condition to the covered transaction with that entity. 2 CFR section Appendix II to Part 200, Contract Provisions for Non-Federal Entity Contracts Under Federal Awards states that in addition to other provisions required by the Federal agency or non-Federal entity, all contracts made by the non-Federal entity under the Federal award must contain certain provisions, as applicable. Condition: During our testing of the Orange County Public Works (OCPW), Orange County Community Resources (OCCR) and the Social Services Agency’s (SSA) provisions for procurement requirements under the COVID-19 Coronavirus State and Local Fiscal Recovery Funds, we noted the following instances where there was no evidence that the OCPW, OCCR or SSA departments verified the entity was not suspended or debarred or otherwise excluded from participating in the transaction, prior to entering the contract, in accordance with County policy: • Four (4) of four (4) contracts through the OCPW department selected for testing. • Three (3) of eight (8) contracts through the OCCR department selected for testing. • One (1) of one (1) contract through the SSA department selected for testing. The following information was not provided at the time of the contract award for four (4) of four (4) contracts selected for testing within the OCPW department, one (1) of one (1) contract selected within SSA, and five (5) of eight (8) contracts selected for testing within the OCCR department: • Byrd Anti-Lobbying Amendment • Clean Air Act and Federal Pollution Control Act provision The following information was not provided at the time of the contract award for two (2) of four (4) contracts selected for testing within the OCPW department and one (1) of one (1) contract selected for testing within SSA: • Contract Work Hours and Safety Standards Act provision The following information was not provided at the time of the contract award for one (1) of one contract selected for testing within SSA: • Davis-Bacon Act provision • Equal Employment Opportunity provision Cause: The OCPW, OCCR and SSA departments did not follow their policy to verify the information described in the condition prior to entering the transactions and did not consistently ensure that the applicable required provisions were communicated to contractors. Effect: The County’s control and compliance were not consistently followed, which required verification of suspension or debarment prior to entering the contract. EB reviewed the vendor’s status on SAM.gov and verified the vendors selected for testing were not suspended and debarred at the date of the audit. Additionally, the OCPW, SSA and OCCR departments did not identify the applicable required provisions of the contract to the contractors at the time of the contract award. Questioned Costs: No questioned costs were identified as a result of our procedures. Context/Sampling: A nonstatistical sample of four (4) out of twelve (12) procurement contracts were sampled from OCPW and eight (8) out of nineteen (19) procurement contracts were sampled from OCCR for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. The entire population of 1 (contract) was tested from SSA for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. Repeat Finding from Prior Years: Yes, Finding 2022-003 and 2022-009. Recommendation: We recommend that the OCPW, OCCR and SSA departments adhere to their procurement procedures requiring the suspension or debarment verification is performed prior to entering into a covered transaction. Additionally, we recommend the OCPW, SSA and OCCR departments modify and strengthen its current policies and procedures to ensure that all applicable required provisions are communicated to contractors in accordance with 2 CFR Appendix II to Part 200. Views of Responsible Officials: Management agrees. See separately issued Corrective Action Plan.

Program: COVID-19 Coronavirus State and Local Fiscal Recovery Funds Federal Financial Assistance Listing Number: 21.027 Federal Grantor: U.S. Department of Treasury Award No. and Year: 2021 Compliance Requirements: Procurement and Suspension and Debarment Type of Finding: Significant Deficiency in Internal Control Over Compliance and Instance of Noncompliance Criteria: 2 CFR section 200.303(a), Internal Controls, states that the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Title 2 CFR Section 200.214 of the Uniform Guidance states that the County must comply with 2 CFR part 180, which implements Executive Orders 12549 and 12689. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities. Per 2 CFR Section 180.300, when a non-Federal entity enters into a covered transaction with an entity at a lower tier, the non-Federal entity must verify that the entity, as defined in 2 CFR section 180.995 and agency adopting regulations, is not suspended or debarred or otherwise excluded from participating in the transaction. This verification may be accomplished by (1) checking the System for Award Management (SAM) Exclusions maintained by the General Services Administration (GSA) and available at https://www.sam.gov/SAM/, (2) collecting a certification from the entity, or (3) adding a clause or condition to the covered transaction with that entity. 2 CFR section Appendix II to Part 200, Contract Provisions for Non-Federal Entity Contracts Under Federal Awards states that in addition to other provisions required by the Federal agency or non-Federal entity, all contracts made by the non-Federal entity under the Federal award must contain certain provisions, as applicable. Condition: During our testing of the Orange County Public Works (OCPW), Orange County Community Resources (OCCR) and the Social Services Agency’s (SSA) provisions for procurement requirements under the COVID-19 Coronavirus State and Local Fiscal Recovery Funds, we noted the following instances where there was no evidence that the OCPW, OCCR or SSA departments verified the entity was not suspended or debarred or otherwise excluded from participating in the transaction, prior to entering the contract, in accordance with County policy: • Four (4) of four (4) contracts through the OCPW department selected for testing. • Three (3) of eight (8) contracts through the OCCR department selected for testing. • One (1) of one (1) contract through the SSA department selected for testing. The following information was not provided at the time of the contract award for four (4) of four (4) contracts selected for testing within the OCPW department, one (1) of one (1) contract selected within SSA, and five (5) of eight (8) contracts selected for testing within the OCCR department: • Byrd Anti-Lobbying Amendment • Clean Air Act and Federal Pollution Control Act provision The following information was not provided at the time of the contract award for two (2) of four (4) contracts selected for testing within the OCPW department and one (1) of one (1) contract selected for testing within SSA: • Contract Work Hours and Safety Standards Act provision The following information was not provided at the time of the contract award for one (1) of one contract selected for testing within SSA: • Davis-Bacon Act provision • Equal Employment Opportunity provision Cause: The OCPW, OCCR and SSA departments did not follow their policy to verify the information described in the condition prior to entering the transactions and did not consistently ensure that the applicable required provisions were communicated to contractors. Effect: The County’s control and compliance were not consistently followed, which required verification of suspension or debarment prior to entering the contract. EB reviewed the vendor’s status on SAM.gov and verified the vendors selected for testing were not suspended and debarred at the date of the audit. Additionally, the OCPW, SSA and OCCR departments did not identify the applicable required provisions of the contract to the contractors at the time of the contract award. Questioned Costs: No questioned costs were identified as a result of our procedures. Context/Sampling: A nonstatistical sample of four (4) out of twelve (12) procurement contracts were sampled from OCPW and eight (8) out of nineteen (19) procurement contracts were sampled from OCCR for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. The entire population of 1 (contract) was tested from SSA for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. Repeat Finding from Prior Years: Yes, Finding 2022-003 and 2022-009. Recommendation: We recommend that the OCPW, OCCR and SSA departments adhere to their procurement procedures requiring the suspension or debarment verification is performed prior to entering into a covered transaction. Additionally, we recommend the OCPW, SSA and OCCR departments modify and strengthen its current policies and procedures to ensure that all applicable required provisions are communicated to contractors in accordance with 2 CFR Appendix II to Part 200. Views of Responsible Officials: Management agrees. See separately issued Corrective Action Plan.

Program: COVID-19 Coronavirus State and Local Fiscal Recovery Funds Federal Financial Assistance Listing Number: 21.027 Federal Grantor: U.S. Department of Treasury Award No. and Year: 2021 Compliance Requirements: Procurement and Suspension and Debarment Type of Finding: Significant Deficiency in Internal Control Over Compliance and Instance of Noncompliance Criteria: 2 CFR section 200.303(a), Internal Controls, states that the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Title 2 CFR Section 200.214 of the Uniform Guidance states that the County must comply with 2 CFR part 180, which implements Executive Orders 12549 and 12689. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities. Per 2 CFR Section 180.300, when a non-Federal entity enters into a covered transaction with an entity at a lower tier, the non-Federal entity must verify that the entity, as defined in 2 CFR section 180.995 and agency adopting regulations, is not suspended or debarred or otherwise excluded from participating in the transaction. This verification may be accomplished by (1) checking the System for Award Management (SAM) Exclusions maintained by the General Services Administration (GSA) and available at https://www.sam.gov/SAM/, (2) collecting a certification from the entity, or (3) adding a clause or condition to the covered transaction with that entity. 2 CFR section Appendix II to Part 200, Contract Provisions for Non-Federal Entity Contracts Under Federal Awards states that in addition to other provisions required by the Federal agency or non-Federal entity, all contracts made by the non-Federal entity under the Federal award must contain certain provisions, as applicable. Condition: During our testing of the Orange County Public Works (OCPW), Orange County Community Resources (OCCR) and the Social Services Agency’s (SSA) provisions for procurement requirements under the COVID-19 Coronavirus State and Local Fiscal Recovery Funds, we noted the following instances where there was no evidence that the OCPW, OCCR or SSA departments verified the entity was not suspended or debarred or otherwise excluded from participating in the transaction, prior to entering the contract, in accordance with County policy: • Four (4) of four (4) contracts through the OCPW department selected for testing. • Three (3) of eight (8) contracts through the OCCR department selected for testing. • One (1) of one (1) contract through the SSA department selected for testing. The following information was not provided at the time of the contract award for four (4) of four (4) contracts selected for testing within the OCPW department, one (1) of one (1) contract selected within SSA, and five (5) of eight (8) contracts selected for testing within the OCCR department: • Byrd Anti-Lobbying Amendment • Clean Air Act and Federal Pollution Control Act provision The following information was not provided at the time of the contract award for two (2) of four (4) contracts selected for testing within the OCPW department and one (1) of one (1) contract selected for testing within SSA: • Contract Work Hours and Safety Standards Act provision The following information was not provided at the time of the contract award for one (1) of one contract selected for testing within SSA: • Davis-Bacon Act provision • Equal Employment Opportunity provision Cause: The OCPW, OCCR and SSA departments did not follow their policy to verify the information described in the condition prior to entering the transactions and did not consistently ensure that the applicable required provisions were communicated to contractors. Effect: The County’s control and compliance were not consistently followed, which required verification of suspension or debarment prior to entering the contract. EB reviewed the vendor’s status on SAM.gov and verified the vendors selected for testing were not suspended and debarred at the date of the audit. Additionally, the OCPW, SSA and OCCR departments did not identify the applicable required provisions of the contract to the contractors at the time of the contract award. Questioned Costs: No questioned costs were identified as a result of our procedures. Context/Sampling: A nonstatistical sample of four (4) out of twelve (12) procurement contracts were sampled from OCPW and eight (8) out of nineteen (19) procurement contracts were sampled from OCCR for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. The entire population of 1 (contract) was tested from SSA for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. Repeat Finding from Prior Years: Yes, Finding 2022-003 and 2022-009. Recommendation: We recommend that the OCPW, OCCR and SSA departments adhere to their procurement procedures requiring the suspension or debarment verification is performed prior to entering into a covered transaction. Additionally, we recommend the OCPW, SSA and OCCR departments modify and strengthen its current policies and procedures to ensure that all applicable required provisions are communicated to contractors in accordance with 2 CFR Appendix II to Part 200. Views of Responsible Officials: Management agrees. See separately issued Corrective Action Plan.

Program: COVID-19 Coronavirus State and Local Fiscal Recovery Funds Federal Financial Assistance Listing Number: 21.027 Federal Grantor: U.S. Department of Treasury Award No. and Year: 2021 Compliance Requirements: Procurement and Suspension and Debarment Type of Finding: Significant Deficiency in Internal Control Over Compliance and Instance of Noncompliance Criteria: 2 CFR section 200.303(a), Internal Controls, states that the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Title 2 CFR Section 200.214 of the Uniform Guidance states that the County must comply with 2 CFR part 180, which implements Executive Orders 12549 and 12689. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities. Per 2 CFR Section 180.300, when a non-Federal entity enters into a covered transaction with an entity at a lower tier, the non-Federal entity must verify that the entity, as defined in 2 CFR section 180.995 and agency adopting regulations, is not suspended or debarred or otherwise excluded from participating in the transaction. This verification may be accomplished by (1) checking the System for Award Management (SAM) Exclusions maintained by the General Services Administration (GSA) and available at https://www.sam.gov/SAM/, (2) collecting a certification from the entity, or (3) adding a clause or condition to the covered transaction with that entity. 2 CFR section Appendix II to Part 200, Contract Provisions for Non-Federal Entity Contracts Under Federal Awards states that in addition to other provisions required by the Federal agency or non-Federal entity, all contracts made by the non-Federal entity under the Federal award must contain certain provisions, as applicable. Condition: During our testing of the Orange County Public Works (OCPW), Orange County Community Resources (OCCR) and the Social Services Agency’s (SSA) provisions for procurement requirements under the COVID-19 Coronavirus State and Local Fiscal Recovery Funds, we noted the following instances where there was no evidence that the OCPW, OCCR or SSA departments verified the entity was not suspended or debarred or otherwise excluded from participating in the transaction, prior to entering the contract, in accordance with County policy: • Four (4) of four (4) contracts through the OCPW department selected for testing. • Three (3) of eight (8) contracts through the OCCR department selected for testing. • One (1) of one (1) contract through the SSA department selected for testing. The following information was not provided at the time of the contract award for four (4) of four (4) contracts selected for testing within the OCPW department, one (1) of one (1) contract selected within SSA, and five (5) of eight (8) contracts selected for testing within the OCCR department: • Byrd Anti-Lobbying Amendment • Clean Air Act and Federal Pollution Control Act provision The following information was not provided at the time of the contract award for two (2) of four (4) contracts selected for testing within the OCPW department and one (1) of one (1) contract selected for testing within SSA: • Contract Work Hours and Safety Standards Act provision The following information was not provided at the time of the contract award for one (1) of one contract selected for testing within SSA: • Davis-Bacon Act provision • Equal Employment Opportunity provision Cause: The OCPW, OCCR and SSA departments did not follow their policy to verify the information described in the condition prior to entering the transactions and did not consistently ensure that the applicable required provisions were communicated to contractors. Effect: The County’s control and compliance were not consistently followed, which required verification of suspension or debarment prior to entering the contract. EB reviewed the vendor’s status on SAM.gov and verified the vendors selected for testing were not suspended and debarred at the date of the audit. Additionally, the OCPW, SSA and OCCR departments did not identify the applicable required provisions of the contract to the contractors at the time of the contract award. Questioned Costs: No questioned costs were identified as a result of our procedures. Context/Sampling: A nonstatistical sample of four (4) out of twelve (12) procurement contracts were sampled from OCPW and eight (8) out of nineteen (19) procurement contracts were sampled from OCCR for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. The entire population of 1 (contract) was tested from SSA for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. Repeat Finding from Prior Years: Yes, Finding 2022-003 and 2022-009. Recommendation: We recommend that the OCPW, OCCR and SSA departments adhere to their procurement procedures requiring the suspension or debarment verification is performed prior to entering into a covered transaction. Additionally, we recommend the OCPW, SSA and OCCR departments modify and strengthen its current policies and procedures to ensure that all applicable required provisions are communicated to contractors in accordance with 2 CFR Appendix II to Part 200. Views of Responsible Officials: Management agrees. See separately issued Corrective Action Plan.

Program: COVID-19 Coronavirus State and Local Fiscal Recovery Funds Federal Financial Assistance Listing Number: 21.027 Federal Grantor: U.S. Department of Treasury Award No. and Year: 2021 Compliance Requirements: Procurement and Suspension and Debarment Type of Finding: Significant Deficiency in Internal Control Over Compliance and Instance of Noncompliance Criteria: 2 CFR section 200.303(a), Internal Controls, states that the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Title 2 CFR Section 200.214 of the Uniform Guidance states that the County must comply with 2 CFR part 180, which implements Executive Orders 12549 and 12689. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities. Per 2 CFR Section 180.300, when a non-Federal entity enters into a covered transaction with an entity at a lower tier, the non-Federal entity must verify that the entity, as defined in 2 CFR section 180.995 and agency adopting regulations, is not suspended or debarred or otherwise excluded from participating in the transaction. This verification may be accomplished by (1) checking the System for Award Management (SAM) Exclusions maintained by the General Services Administration (GSA) and available at https://www.sam.gov/SAM/, (2) collecting a certification from the entity, or (3) adding a clause or condition to the covered transaction with that entity. 2 CFR section Appendix II to Part 200, Contract Provisions for Non-Federal Entity Contracts Under Federal Awards states that in addition to other provisions required by the Federal agency or non-Federal entity, all contracts made by the non-Federal entity under the Federal award must contain certain provisions, as applicable. Condition: During our testing of the Orange County Public Works (OCPW), Orange County Community Resources (OCCR) and the Social Services Agency’s (SSA) provisions for procurement requirements under the COVID-19 Coronavirus State and Local Fiscal Recovery Funds, we noted the following instances where there was no evidence that the OCPW, OCCR or SSA departments verified the entity was not suspended or debarred or otherwise excluded from participating in the transaction, prior to entering the contract, in accordance with County policy: • Four (4) of four (4) contracts through the OCPW department selected for testing. • Three (3) of eight (8) contracts through the OCCR department selected for testing. • One (1) of one (1) contract through the SSA department selected for testing. The following information was not provided at the time of the contract award for four (4) of four (4) contracts selected for testing within the OCPW department, one (1) of one (1) contract selected within SSA, and five (5) of eight (8) contracts selected for testing within the OCCR department: • Byrd Anti-Lobbying Amendment • Clean Air Act and Federal Pollution Control Act provision The following information was not provided at the time of the contract award for two (2) of four (4) contracts selected for testing within the OCPW department and one (1) of one (1) contract selected for testing within SSA: • Contract Work Hours and Safety Standards Act provision The following information was not provided at the time of the contract award for one (1) of one contract selected for testing within SSA: • Davis-Bacon Act provision • Equal Employment Opportunity provision Cause: The OCPW, OCCR and SSA departments did not follow their policy to verify the information described in the condition prior to entering the transactions and did not consistently ensure that the applicable required provisions were communicated to contractors. Effect: The County’s control and compliance were not consistently followed, which required verification of suspension or debarment prior to entering the contract. EB reviewed the vendor’s status on SAM.gov and verified the vendors selected for testing were not suspended and debarred at the date of the audit. Additionally, the OCPW, SSA and OCCR departments did not identify the applicable required provisions of the contract to the contractors at the time of the contract award. Questioned Costs: No questioned costs were identified as a result of our procedures. Context/Sampling: A nonstatistical sample of four (4) out of twelve (12) procurement contracts were sampled from OCPW and eight (8) out of nineteen (19) procurement contracts were sampled from OCCR for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. The entire population of 1 (contract) was tested from SSA for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. Repeat Finding from Prior Years: Yes, Finding 2022-003 and 2022-009. Recommendation: We recommend that the OCPW, OCCR and SSA departments adhere to their procurement procedures requiring the suspension or debarment verification is performed prior to entering into a covered transaction. Additionally, we recommend the OCPW, SSA and OCCR departments modify and strengthen its current policies and procedures to ensure that all applicable required provisions are communicated to contractors in accordance with 2 CFR Appendix II to Part 200. Views of Responsible Officials: Management agrees. See separately issued Corrective Action Plan.

Program: COVID-19 Coronavirus State and Local Fiscal Recovery Funds Federal Financial Assistance Listing Number: 21.027 Federal Grantor: U.S. Department of Treasury Award No. and Year: 2021 Compliance Requirements: Procurement and Suspension and Debarment Type of Finding: Significant Deficiency in Internal Control Over Compliance and Instance of Noncompliance Criteria: 2 CFR section 200.303(a), Internal Controls, states that the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Title 2 CFR Section 200.214 of the Uniform Guidance states that the County must comply with 2 CFR part 180, which implements Executive Orders 12549 and 12689. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities. Per 2 CFR Section 180.300, when a non-Federal entity enters into a covered transaction with an entity at a lower tier, the non-Federal entity must verify that the entity, as defined in 2 CFR section 180.995 and agency adopting regulations, is not suspended or debarred or otherwise excluded from participating in the transaction. This verification may be accomplished by (1) checking the System for Award Management (SAM) Exclusions maintained by the General Services Administration (GSA) and available at https://www.sam.gov/SAM/, (2) collecting a certification from the entity, or (3) adding a clause or condition to the covered transaction with that entity. 2 CFR section Appendix II to Part 200, Contract Provisions for Non-Federal Entity Contracts Under Federal Awards states that in addition to other provisions required by the Federal agency or non-Federal entity, all contracts made by the non-Federal entity under the Federal award must contain certain provisions, as applicable. Condition: During our testing of the Orange County Public Works (OCPW), Orange County Community Resources (OCCR) and the Social Services Agency’s (SSA) provisions for procurement requirements under the COVID-19 Coronavirus State and Local Fiscal Recovery Funds, we noted the following instances where there was no evidence that the OCPW, OCCR or SSA departments verified the entity was not suspended or debarred or otherwise excluded from participating in the transaction, prior to entering the contract, in accordance with County policy: • Four (4) of four (4) contracts through the OCPW department selected for testing. • Three (3) of eight (8) contracts through the OCCR department selected for testing. • One (1) of one (1) contract through the SSA department selected for testing. The following information was not provided at the time of the contract award for four (4) of four (4) contracts selected for testing within the OCPW department, one (1) of one (1) contract selected within SSA, and five (5) of eight (8) contracts selected for testing within the OCCR department: • Byrd Anti-Lobbying Amendment • Clean Air Act and Federal Pollution Control Act provision The following information was not provided at the time of the contract award for two (2) of four (4) contracts selected for testing within the OCPW department and one (1) of one (1) contract selected for testing within SSA: • Contract Work Hours and Safety Standards Act provision The following information was not provided at the time of the contract award for one (1) of one contract selected for testing within SSA: • Davis-Bacon Act provision • Equal Employment Opportunity provision Cause: The OCPW, OCCR and SSA departments did not follow their policy to verify the information described in the condition prior to entering the transactions and did not consistently ensure that the applicable required provisions were communicated to contractors. Effect: The County’s control and compliance were not consistently followed, which required verification of suspension or debarment prior to entering the contract. EB reviewed the vendor’s status on SAM.gov and verified the vendors selected for testing were not suspended and debarred at the date of the audit. Additionally, the OCPW, SSA and OCCR departments did not identify the applicable required provisions of the contract to the contractors at the time of the contract award. Questioned Costs: No questioned costs were identified as a result of our procedures. Context/Sampling: A nonstatistical sample of four (4) out of twelve (12) procurement contracts were sampled from OCPW and eight (8) out of nineteen (19) procurement contracts were sampled from OCCR for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. The entire population of 1 (contract) was tested from SSA for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. Repeat Finding from Prior Years: Yes, Finding 2022-003 and 2022-009. Recommendation: We recommend that the OCPW, OCCR and SSA departments adhere to their procurement procedures requiring the suspension or debarment verification is performed prior to entering into a covered transaction. Additionally, we recommend the OCPW, SSA and OCCR departments modify and strengthen its current policies and procedures to ensure that all applicable required provisions are communicated to contractors in accordance with 2 CFR Appendix II to Part 200. Views of Responsible Officials: Management agrees. See separately issued Corrective Action Plan.

Program: COVID-19 Coronavirus State and Local Fiscal Recovery Funds Federal Financial Assistance Listing Number: 21.027 Federal Grantor: U.S. Department of Treasury Award No. and Year: 2021 Compliance Requirements: Procurement and Suspension and Debarment Type of Finding: Significant Deficiency in Internal Control Over Compliance and Instance of Noncompliance Criteria: 2 CFR section 200.303(a), Internal Controls, states that the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Title 2 CFR Section 200.214 of the Uniform Guidance states that the County must comply with 2 CFR part 180, which implements Executive Orders 12549 and 12689. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities. Per 2 CFR Section 180.300, when a non-Federal entity enters into a covered transaction with an entity at a lower tier, the non-Federal entity must verify that the entity, as defined in 2 CFR section 180.995 and agency adopting regulations, is not suspended or debarred or otherwise excluded from participating in the transaction. This verification may be accomplished by (1) checking the System for Award Management (SAM) Exclusions maintained by the General Services Administration (GSA) and available at https://www.sam.gov/SAM/, (2) collecting a certification from the entity, or (3) adding a clause or condition to the covered transaction with that entity. 2 CFR section Appendix II to Part 200, Contract Provisions for Non-Federal Entity Contracts Under Federal Awards states that in addition to other provisions required by the Federal agency or non-Federal entity, all contracts made by the non-Federal entity under the Federal award must contain certain provisions, as applicable. Condition: During our testing of the Orange County Public Works (OCPW), Orange County Community Resources (OCCR) and the Social Services Agency’s (SSA) provisions for procurement requirements under the COVID-19 Coronavirus State and Local Fiscal Recovery Funds, we noted the following instances where there was no evidence that the OCPW, OCCR or SSA departments verified the entity was not suspended or debarred or otherwise excluded from participating in the transaction, prior to entering the contract, in accordance with County policy: • Four (4) of four (4) contracts through the OCPW department selected for testing. • Three (3) of eight (8) contracts through the OCCR department selected for testing. • One (1) of one (1) contract through the SSA department selected for testing. The following information was not provided at the time of the contract award for four (4) of four (4) contracts selected for testing within the OCPW department, one (1) of one (1) contract selected within SSA, and five (5) of eight (8) contracts selected for testing within the OCCR department: • Byrd Anti-Lobbying Amendment • Clean Air Act and Federal Pollution Control Act provision The following information was not provided at the time of the contract award for two (2) of four (4) contracts selected for testing within the OCPW department and one (1) of one (1) contract selected for testing within SSA: • Contract Work Hours and Safety Standards Act provision The following information was not provided at the time of the contract award for one (1) of one contract selected for testing within SSA: • Davis-Bacon Act provision • Equal Employment Opportunity provision Cause: The OCPW, OCCR and SSA departments did not follow their policy to verify the information described in the condition prior to entering the transactions and did not consistently ensure that the applicable required provisions were communicated to contractors. Effect: The County’s control and compliance were not consistently followed, which required verification of suspension or debarment prior to entering the contract. EB reviewed the vendor’s status on SAM.gov and verified the vendors selected for testing were not suspended and debarred at the date of the audit. Additionally, the OCPW, SSA and OCCR departments did not identify the applicable required provisions of the contract to the contractors at the time of the contract award. Questioned Costs: No questioned costs were identified as a result of our procedures. Context/Sampling: A nonstatistical sample of four (4) out of twelve (12) procurement contracts were sampled from OCPW and eight (8) out of nineteen (19) procurement contracts were sampled from OCCR for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. The entire population of 1 (contract) was tested from SSA for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. Repeat Finding from Prior Years: Yes, Finding 2022-003 and 2022-009. Recommendation: We recommend that the OCPW, OCCR and SSA departments adhere to their procurement procedures requiring the suspension or debarment verification is performed prior to entering into a covered transaction. Additionally, we recommend the OCPW, SSA and OCCR departments modify and strengthen its current policies and procedures to ensure that all applicable required provisions are communicated to contractors in accordance with 2 CFR Appendix II to Part 200. Views of Responsible Officials: Management agrees. See separately issued Corrective Action Plan.

Program: COVID-19 Activities to Support State, Tribal, Local and Territorial (STLT) Health Department Response to Public Health and Healthcare Crises Federal Financial Assistance Listing Number: 93.391 Federal Grantor: U.S. Department of Health and Human Services Award No. and Year: 2022 Compliance Requirements: Reporting Type of Finding: Significant Deficiency in Internal Control Over Compliance Criteria: 2 CFR Section 200.303(a), Internal Controls, states that the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Condition: During our testing of the Health Care Agency’s (HCA) compliance with reporting requirements, we noted that four (4) of four (4) reports the department did not retain evidence of the review and approval over the performance report. Cause: HCA personnel prepared program required performance reports and submitted the reports without retaining documented evidence that the reports were reviewed and approved by a separate individual prior to submission. Effect: The County did not document their review and approval of the report. Questioned Costs: No questioned costs were identified as a result of our procedures. Context/Sampling: The entire population of four (4) reports were selected for reporting testwork from HCA. Repeat Finding from Prior Years: No. Recommendation: We recommend the HCA to implement policies that ensure the review and approval of reports are clearly documented prior to the report’s submission. Views of Responsible Officials: Management agrees. See separately issued Corrective Action Plan.

Program: COVID-19 Activities to Support State, Tribal, Local and Territorial (STLT) Health Department Response to Public Health or Healthcare Crises Federal Financial Assistance Listing Number: 93.391 Federal Grantor: U.S. Department of Health and Human Services Award No. and Year: 2022 Compliance Requirements: Allowable Activities and Allowable Costs and Cost Principles Type of Finding: Significant Deficiency in Internal Control Over Compliance Criteria: 2 CFR Section 200.303(a), Internal Controls, states that the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Condition: During our testing of the Health Care Agency’s (HCA) compliance with allowable activities and allowable costs and cost principles requirements, we noted for one (1) of forty-seven (47) transactions HCA did not retain evidence of the review and approval over the transaction. Cause: The transaction was with a specific vendor that requires orders to be placed on the vendor’s portal. At the time the order was placed, the vendor’s portal did not have a system control set up to require a separate approver for the order and HCA did not retain any other evidence to document the order’s review and approval. The vendor portal was later updated during the year to add the segregation of duties system control. Effect: The County’s control was not consistently followed, which requires transactions to be reviewed and approved by a separate individual prior to payment. Questioned Costs: No questioned costs were identified as a result of our procedures. Context/Sampling: A nonstatistical sample of forty-seven (47) of two hundred thirty-six (236) transactions were selected for HCA. The condition above was identified during our testwork of the HCA’s internal controls over allowable activities and allowable costs and cost principles. Repeat Finding from Prior Years: No. Recommendation: We recommend the HCA adhere to their policies and ensure the review and approval of transactions are clearly documented prior payment. Views of Responsible Officials: Management agrees. See separately issued Corrective Action Plan.

Program: Foster Care Federal Financial Assistance Listing Number: 93.658 Federal Grantor: U.S. Department of Health and Human Services Pass-Through: California Department of Social Services Award No. and Year: 2301CAFOST and 2023, 2201CAFOST and 2022 Compliance Requirements: Subrecipient Monitoring Type of Finding: Material Weakness in Internal Control over Compliance and Material Instance of Noncompliance Criteria: In accordance with Title 2 U.S. Code of Federal Regulations (CFR) 200.332, pass-through entities must comply with the following: • 2 CFR Part 200.332(a), Requirements for Pass-Through Entities, states that all pass-through entities must ensure that every subaward is clearly identified to the subrecipient as a subaward and includes certain information as well as all the requirements imposed by the pass-through entity on the subrecipient so that the Federal award is used in accordance with Federal statutes, regulations, and the terms and conditions of the award. • 2 CFR 200.332(b) – Evaluate each subrecipient’s risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward. This evaluation of risk may include consideration of such factors listed in 2 CFR 200.332(b)(1) through (4). • 2 CFR 200.332(d)- Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include the information at 2 CFR 200.332(d)(1) through (4). • 2 CFR 200.332(f) – Verify that every subrecipient is audited as required by Subpart F of this part when it is expected that the subrecipient’s Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 200.501. The California Department of Social Services further clarifies in its County Fiscal Letter No. 22/23-91 that Foster Family Agency (FFA), Group Home, and Short Term Residential Therapeutic Programs (STRTP) are “considered subrecipients and subject to the same audit requirements and require the same degree of oversight as other subrecipients”. Further, while there are some licensing and oversight functions performed by the state over FFAs, group homes, and STRTPs, “counties are still ultimately responsible for review of these audits and their findings, any follow-up to ensure compliance, and any other form of monitoring and oversight required by federal and state laws and regulations.” 2 CFR Section 180.300a, Responsibilities of Participants Regarding Doing Business with Other Persons (and repeated in the California Department of Social Services - County Fiscal Letter No. 21/22 – 115) counties are required to verify that recipients or contracts have not been suspended or debarred by using the federal SAM (Systems for Award Management). Condition: The Social Services Agency (SSA) did not have any formal controls in place for evaluating each subrecipient’s risk of noncompliance or the purpose of determining the appropriate subrecipient monitoring or for subrecipient monitoring for the Foster Care program. Additionally, the following information was not provided at the time of the subaward for ten (10) of fourteen (14) subawards selected for testing from the SSA’s for the Foster Care program: • Subrecipient’s unique entity identifier • Federal award identification number • Federal award date of award to recipient by the Federal agency • Subaward period of performance • Amount of federal funds obligated to the subrecipient • Amount of federal funds committed to the subrecipient • Federal award project description • Name of federal awarding agency • CFDA/Assistance Listing number • Identification of whether the award is research and development • Indirect cost rate During our testing, we noted for four (4) of fourteen (14) subrecipients selected, SSA did not have documentation that the SAM clearance was performed prior to entering the contract with the subrecipient. The County’s policy was to verify the subrecipient was not suspended or debarred prior to entering the contract, but the County did not retain evidence of this check prior to entering the contract. Cause: The SSA’s procedures did not consistently ensure that the required award information and applicable requires were communicated to the subrecipients. The SSA did not follow their procedures to evaluate the risk of noncompliance or monitor the activities of each subrecipient, and the SSA did not maintain documentation of their verification that every subrecipient is audited, as required. Additionally, the SSA department did not follow their policy to retain documentation of the verification of the information prior to entering the contract. Effect: The County’s control policies were not consistently followed which require compliance with the Subrecipient Monitoring requirements in 2 CFR 200.332 and did not comply with subrecipient monitoring requirements related to the program. Additionally, the County’s control policies were not consistently followed, which required documentation of the verification prior to entering the contract. Questioned Costs: No questioned costs were identified as a result of our procedures. Context/Sampling: A nonstatistical sample of fourteen (14) out of seventy (70) subrecipients were sampled, which included seven (7) FFA, and seven (7) STRTP types. The condition noted above was identified during our procedures related to subrecipient monitoring and was pervasive to the program. Repeat Findings from Prior Years: Yes, Finding 2022-002,2022-005 and 2022-006. Recommendation: We recommend that the County adhere to their policies and procedures in accordance with 2 CFR 200.332 to ensure compliance with subrecipient monitoring requirements. We recommend that the County adhere to their procedures requiring documentation of the SAM clearance prior to entering the contract. Views of Responsible Officials: Management agrees. See separately issued Corrective Action Plan.

Program: Foster Care Federal Financial Assistance Listing Number: 93.658 Federal Grantor: U.S. Department of Health and Human Services Pass-Through: California Department of Social Services Award No. and Year: 2301CAFOST and 2023, 2201CAFOST and 2022 Compliance Requirements: Subrecipient Monitoring Type of Finding: Material Weakness in Internal Control over Compliance and Material Instance of Noncompliance Criteria: In accordance with Title 2 U.S. Code of Federal Regulations (CFR) 200.332, pass-through entities must comply with the following: • 2 CFR Part 200.332(a), Requirements for Pass-Through Entities, states that all pass-through entities must ensure that every subaward is clearly identified to the subrecipient as a subaward and includes certain information as well as all the requirements imposed by the pass-through entity on the subrecipient so that the Federal award is used in accordance with Federal statutes, regulations, and the terms and conditions of the award. • 2 CFR 200.332(b) – Evaluate each subrecipient’s risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward. This evaluation of risk may include consideration of such factors listed in 2 CFR 200.332(b)(1) through (4). • 2 CFR 200.332(d)- Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include the information at 2 CFR 200.332(d)(1) through (4). • 2 CFR 200.332(f) – Verify that every subrecipient is audited as required by Subpart F of this part when it is expected that the subrecipient’s Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 200.501. The California Department of Social Services further clarifies in its County Fiscal Letter No. 22/23-91 that Foster Family Agency (FFA), Group Home, and Short Term Residential Therapeutic Programs (STRTP) are “considered subrecipients and subject to the same audit requirements and require the same degree of oversight as other subrecipients”. Further, while there are some licensing and oversight functions performed by the state over FFAs, group homes, and STRTPs, “counties are still ultimately responsible for review of these audits and their findings, any follow-up to ensure compliance, and any other form of monitoring and oversight required by federal and state laws and regulations.” 2 CFR Section 180.300a, Responsibilities of Participants Regarding Doing Business with Other Persons (and repeated in the California Department of Social Services - County Fiscal Letter No. 21/22 – 115) counties are required to verify that recipients or contracts have not been suspended or debarred by using the federal SAM (Systems for Award Management). Condition: The Social Services Agency (SSA) did not have any formal controls in place for evaluating each subrecipient’s risk of noncompliance or the purpose of determining the appropriate subrecipient monitoring or for subrecipient monitoring for the Foster Care program. Additionally, the following information was not provided at the time of the subaward for ten (10) of fourteen (14) subawards selected for testing from the SSA’s for the Foster Care program: • Subrecipient’s unique entity identifier • Federal award identification number • Federal award date of award to recipient by the Federal agency • Subaward period of performance • Amount of federal funds obligated to the subrecipient • Amount of federal funds committed to the subrecipient • Federal award project description • Name of federal awarding agency • CFDA/Assistance Listing number • Identification of whether the award is research and development • Indirect cost rate During our testing, we noted for four (4) of fourteen (14) subrecipients selected, SSA did not have documentation that the SAM clearance was performed prior to entering the contract with the subrecipient. The County’s policy was to verify the subrecipient was not suspended or debarred prior to entering the contract, but the County did not retain evidence of this check prior to entering the contract. Cause: The SSA’s procedures did not consistently ensure that the required award information and applicable requires were communicated to the subrecipients. The SSA did not follow their procedures to evaluate the risk of noncompliance or monitor the activities of each subrecipient, and the SSA did not maintain documentation of their verification that every subrecipient is audited, as required. Additionally, the SSA department did not follow their policy to retain documentation of the verification of the information prior to entering the contract. Effect: The County’s control policies were not consistently followed which require compliance with the Subrecipient Monitoring requirements in 2 CFR 200.332 and did not comply with subrecipient monitoring requirements related to the program. Additionally, the County’s control policies were not consistently followed, which required documentation of the verification prior to entering the contract. Questioned Costs: No questioned costs were identified as a result of our procedures. Context/Sampling: A nonstatistical sample of fourteen (14) out of seventy (70) subrecipients were sampled, which included seven (7) FFA, and seven (7) STRTP types. The condition noted above was identified during our procedures related to subrecipient monitoring and was pervasive to the program. Repeat Findings from Prior Years: Yes, Finding 2022-002,2022-005 and 2022-006. Recommendation: We recommend that the County adhere to their policies and procedures in accordance with 2 CFR 200.332 to ensure compliance with subrecipient monitoring requirements. We recommend that the County adhere to their procedures requiring documentation of the SAM clearance prior to entering the contract. Views of Responsible Officials: Management agrees. See separately issued Corrective Action Plan.

Program: Foster Care Federal Financial Assistance Listing Number: 93.658 Federal Grantor: U.S. Department of Health and Human Services Pass-Through: California Department of Social Services Award No. and Year: 2301CAFOST and 2023, 2201CAFOST and 2022 Compliance Requirements: Subrecipient Monitoring Type of Finding: Material Weakness in Internal Control over Compliance and Material Instance of Noncompliance Criteria: In accordance with Title 2 U.S. Code of Federal Regulations (CFR) 200.332, pass-through entities must comply with the following: • 2 CFR Part 200.332(a), Requirements for Pass-Through Entities, states that all pass-through entities must ensure that every subaward is clearly identified to the subrecipient as a subaward and includes certain information as well as all the requirements imposed by the pass-through entity on the subrecipient so that the Federal award is used in accordance with Federal statutes, regulations, and the terms and conditions of the award. • 2 CFR 200.332(b) – Evaluate each subrecipient’s risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward. This evaluation of risk may include consideration of such factors listed in 2 CFR 200.332(b)(1) through (4). • 2 CFR 200.332(d)- Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include the information at 2 CFR 200.332(d)(1) through (4). • 2 CFR 200.332(f) – Verify that every subrecipient is audited as required by Subpart F of this part when it is expected that the subrecipient’s Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 200.501. The California Department of Social Services further clarifies in its County Fiscal Letter No. 22/23-91 that Foster Family Agency (FFA), Group Home, and Short Term Residential Therapeutic Programs (STRTP) are “considered subrecipients and subject to the same audit requirements and require the same degree of oversight as other subrecipients”. Further, while there are some licensing and oversight functions performed by the state over FFAs, group homes, and STRTPs, “counties are still ultimately responsible for review of these audits and their findings, any follow-up to ensure compliance, and any other form of monitoring and oversight required by federal and state laws and regulations.” 2 CFR Section 180.300a, Responsibilities of Participants Regarding Doing Business with Other Persons (and repeated in the California Department of Social Services - County Fiscal Letter No. 21/22 – 115) counties are required to verify that recipients or contracts have not been suspended or debarred by using the federal SAM (Systems for Award Management). Condition: The Social Services Agency (SSA) did not have any formal controls in place for evaluating each subrecipient’s risk of noncompliance or the purpose of determining the appropriate subrecipient monitoring or for subrecipient monitoring for the Foster Care program. Additionally, the following information was not provided at the time of the subaward for ten (10) of fourteen (14) subawards selected for testing from the SSA’s for the Foster Care program: • Subrecipient’s unique entity identifier • Federal award identification number • Federal award date of award to recipient by the Federal agency • Subaward period of performance • Amount of federal funds obligated to the subrecipient • Amount of federal funds committed to the subrecipient • Federal award project description • Name of federal awarding agency • CFDA/Assistance Listing number • Identification of whether the award is research and development • Indirect cost rate During our testing, we noted for four (4) of fourteen (14) subrecipients selected, SSA did not have documentation that the SAM clearance was performed prior to entering the contract with the subrecipient. The County’s policy was to verify the subrecipient was not suspended or debarred prior to entering the contract, but the County did not retain evidence of this check prior to entering the contract. Cause: The SSA’s procedures did not consistently ensure that the required award information and applicable requires were communicated to the subrecipients. The SSA did not follow their procedures to evaluate the risk of noncompliance or monitor the activities of each subrecipient, and the SSA did not maintain documentation of their verification that every subrecipient is audited, as required. Additionally, the SSA department did not follow their policy to retain documentation of the verification of the information prior to entering the contract. Effect: The County’s control policies were not consistently followed which require compliance with the Subrecipient Monitoring requirements in 2 CFR 200.332 and did not comply with subrecipient monitoring requirements related to the program. Additionally, the County’s control policies were not consistently followed, which required documentation of the verification prior to entering the contract. Questioned Costs: No questioned costs were identified as a result of our procedures. Context/Sampling: A nonstatistical sample of fourteen (14) out of seventy (70) subrecipients were sampled, which included seven (7) FFA, and seven (7) STRTP types. The condition noted above was identified during our procedures related to subrecipient monitoring and was pervasive to the program. Repeat Findings from Prior Years: Yes, Finding 2022-002,2022-005 and 2022-006. Recommendation: We recommend that the County adhere to their policies and procedures in accordance with 2 CFR 200.332 to ensure compliance with subrecipient monitoring requirements. We recommend that the County adhere to their procedures requiring documentation of the SAM clearance prior to entering the contract. Views of Responsible Officials: Management agrees. See separately issued Corrective Action Plan.

Program: Foster Care Federal Financial Assistance Listing Number: 93.658 Federal Grantor: U.S. Department of Health and Human Services Pass-Through: California Department of Social Services Award No. and Year: 2301CAFOST and 2023, 2201CAFOST and 2022 Compliance Requirements: Subrecipient Monitoring Type of Finding: Material Weakness in Internal Control over Compliance and Material Instance of Noncompliance Criteria: In accordance with Title 2 U.S. Code of Federal Regulations (CFR) 200.332, pass-through entities must comply with the following: • 2 CFR Part 200.332(a), Requirements for Pass-Through Entities, states that all pass-through entities must ensure that every subaward is clearly identified to the subrecipient as a subaward and includes certain information as well as all the requirements imposed by the pass-through entity on the subrecipient so that the Federal award is used in accordance with Federal statutes, regulations, and the terms and conditions of the award. • 2 CFR 200.332(b) – Evaluate each subrecipient’s risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward. This evaluation of risk may include consideration of such factors listed in 2 CFR 200.332(b)(1) through (4). • 2 CFR 200.332(d)- Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include the information at 2 CFR 200.332(d)(1) through (4). • 2 CFR 200.332(f) – Verify that every subrecipient is audited as required by Subpart F of this part when it is expected that the subrecipient’s Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 200.501. The California Department of Social Services further clarifies in its County Fiscal Letter No. 22/23-91 that Foster Family Agency (FFA), Group Home, and Short Term Residential Therapeutic Programs (STRTP) are “considered subrecipients and subject to the same audit requirements and require the same degree of oversight as other subrecipients”. Further, while there are some licensing and oversight functions performed by the state over FFAs, group homes, and STRTPs, “counties are still ultimately responsible for review of these audits and their findings, any follow-up to ensure compliance, and any other form of monitoring and oversight required by federal and state laws and regulations.” 2 CFR Section 180.300a, Responsibilities of Participants Regarding Doing Business with Other Persons (and repeated in the California Department of Social Services - County Fiscal Letter No. 21/22 – 115) counties are required to verify that recipients or contracts have not been suspended or debarred by using the federal SAM (Systems for Award Management). Condition: The Social Services Agency (SSA) did not have any formal controls in place for evaluating each subrecipient’s risk of noncompliance or the purpose of determining the appropriate subrecipient monitoring or for subrecipient monitoring for the Foster Care program. Additionally, the following information was not provided at the time of the subaward for ten (10) of fourteen (14) subawards selected for testing from the SSA’s for the Foster Care program: • Subrecipient’s unique entity identifier • Federal award identification number • Federal award date of award to recipient by the Federal agency • Subaward period of performance • Amount of federal funds obligated to the subrecipient • Amount of federal funds committed to the subrecipient • Federal award project description • Name of federal awarding agency • CFDA/Assistance Listing number • Identification of whether the award is research and development • Indirect cost rate During our testing, we noted for four (4) of fourteen (14) subrecipients selected, SSA did not have documentation that the SAM clearance was performed prior to entering the contract with the subrecipient. The County’s policy was to verify the subrecipient was not suspended or debarred prior to entering the contract, but the County did not retain evidence of this check prior to entering the contract. Cause: The SSA’s procedures did not consistently ensure that the required award information and applicable requires were communicated to the subrecipients. The SSA did not follow their procedures to evaluate the risk of noncompliance or monitor the activities of each subrecipient, and the SSA did not maintain documentation of their verification that every subrecipient is audited, as required. Additionally, the SSA department did not follow their policy to retain documentation of the verification of the information prior to entering the contract. Effect: The County’s control policies were not consistently followed which require compliance with the Subrecipient Monitoring requirements in 2 CFR 200.332 and did not comply with subrecipient monitoring requirements related to the program. Additionally, the County’s control policies were not consistently followed, which required documentation of the verification prior to entering the contract. Questioned Costs: No questioned costs were identified as a result of our procedures. Context/Sampling: A nonstatistical sample of fourteen (14) out of seventy (70) subrecipients were sampled, which included seven (7) FFA, and seven (7) STRTP types. The condition noted above was identified during our procedures related to subrecipient monitoring and was pervasive to the program. Repeat Findings from Prior Years: Yes, Finding 2022-002,2022-005 and 2022-006. Recommendation: We recommend that the County adhere to their policies and procedures in accordance with 2 CFR 200.332 to ensure compliance with subrecipient monitoring requirements. We recommend that the County adhere to their procedures requiring documentation of the SAM clearance prior to entering the contract. Views of Responsible Officials: Management agrees. See separately issued Corrective Action Plan.

Program: COVID-19 Coronavirus State and Local Fiscal Recovery Funds Federal Financial Assistance Listing Number: 21.027 Federal Grantor: U.S. Department of Treasury Award No. and Year: 2021 Compliance Requirements: Procurement and Suspension and Debarment Type of Finding: Significant Deficiency in Internal Control Over Compliance and Instance of Noncompliance Criteria: 2 CFR section 200.303(a), Internal Controls, states that the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Title 2 CFR Section 200.214 of the Uniform Guidance states that the County must comply with 2 CFR part 180, which implements Executive Orders 12549 and 12689. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities. Per 2 CFR Section 180.300, when a non-Federal entity enters into a covered transaction with an entity at a lower tier, the non-Federal entity must verify that the entity, as defined in 2 CFR section 180.995 and agency adopting regulations, is not suspended or debarred or otherwise excluded from participating in the transaction. This verification may be accomplished by (1) checking the System for Award Management (SAM) Exclusions maintained by the General Services Administration (GSA) and available at https://www.sam.gov/SAM/, (2) collecting a certification from the entity, or (3) adding a clause or condition to the covered transaction with that entity. 2 CFR section Appendix II to Part 200, Contract Provisions for Non-Federal Entity Contracts Under Federal Awards states that in addition to other provisions required by the Federal agency or non-Federal entity, all contracts made by the non-Federal entity under the Federal award must contain certain provisions, as applicable. Condition: During our testing of the Orange County Public Works (OCPW), Orange County Community Resources (OCCR) and the Social Services Agency’s (SSA) provisions for procurement requirements under the COVID-19 Coronavirus State and Local Fiscal Recovery Funds, we noted the following instances where there was no evidence that the OCPW, OCCR or SSA departments verified the entity was not suspended or debarred or otherwise excluded from participating in the transaction, prior to entering the contract, in accordance with County policy: • Four (4) of four (4) contracts through the OCPW department selected for testing. • Three (3) of eight (8) contracts through the OCCR department selected for testing. • One (1) of one (1) contract through the SSA department selected for testing. The following information was not provided at the time of the contract award for four (4) of four (4) contracts selected for testing within the OCPW department, one (1) of one (1) contract selected within SSA, and five (5) of eight (8) contracts selected for testing within the OCCR department: • Byrd Anti-Lobbying Amendment • Clean Air Act and Federal Pollution Control Act provision The following information was not provided at the time of the contract award for two (2) of four (4) contracts selected for testing within the OCPW department and one (1) of one (1) contract selected for testing within SSA: • Contract Work Hours and Safety Standards Act provision The following information was not provided at the time of the contract award for one (1) of one contract selected for testing within SSA: • Davis-Bacon Act provision • Equal Employment Opportunity provision Cause: The OCPW, OCCR and SSA departments did not follow their policy to verify the information described in the condition prior to entering the transactions and did not consistently ensure that the applicable required provisions were communicated to contractors. Effect: The County’s control and compliance were not consistently followed, which required verification of suspension or debarment prior to entering the contract. EB reviewed the vendor’s status on SAM.gov and verified the vendors selected for testing were not suspended and debarred at the date of the audit. Additionally, the OCPW, SSA and OCCR departments did not identify the applicable required provisions of the contract to the contractors at the time of the contract award. Questioned Costs: No questioned costs were identified as a result of our procedures. Context/Sampling: A nonstatistical sample of four (4) out of twelve (12) procurement contracts were sampled from OCPW and eight (8) out of nineteen (19) procurement contracts were sampled from OCCR for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. The entire population of 1 (contract) was tested from SSA for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. Repeat Finding from Prior Years: Yes, Finding 2022-003 and 2022-009. Recommendation: We recommend that the OCPW, OCCR and SSA departments adhere to their procurement procedures requiring the suspension or debarment verification is performed prior to entering into a covered transaction. Additionally, we recommend the OCPW, SSA and OCCR departments modify and strengthen its current policies and procedures to ensure that all applicable required provisions are communicated to contractors in accordance with 2 CFR Appendix II to Part 200. Views of Responsible Officials: Management agrees. See separately issued Corrective Action Plan.

Program: COVID-19 Coronavirus State and Local Fiscal Recovery Funds Federal Financial Assistance Listing Number: 21.027 Federal Grantor: U.S. Department of Treasury Award No. and Year: 2021 Compliance Requirements: Procurement and Suspension and Debarment Type of Finding: Significant Deficiency in Internal Control Over Compliance and Instance of Noncompliance Criteria: 2 CFR section 200.303(a), Internal Controls, states that the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Title 2 CFR Section 200.214 of the Uniform Guidance states that the County must comply with 2 CFR part 180, which implements Executive Orders 12549 and 12689. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities. Per 2 CFR Section 180.300, when a non-Federal entity enters into a covered transaction with an entity at a lower tier, the non-Federal entity must verify that the entity, as defined in 2 CFR section 180.995 and agency adopting regulations, is not suspended or debarred or otherwise excluded from participating in the transaction. This verification may be accomplished by (1) checking the System for Award Management (SAM) Exclusions maintained by the General Services Administration (GSA) and available at https://www.sam.gov/SAM/, (2) collecting a certification from the entity, or (3) adding a clause or condition to the covered transaction with that entity. 2 CFR section Appendix II to Part 200, Contract Provisions for Non-Federal Entity Contracts Under Federal Awards states that in addition to other provisions required by the Federal agency or non-Federal entity, all contracts made by the non-Federal entity under the Federal award must contain certain provisions, as applicable. Condition: During our testing of the Orange County Public Works (OCPW), Orange County Community Resources (OCCR) and the Social Services Agency’s (SSA) provisions for procurement requirements under the COVID-19 Coronavirus State and Local Fiscal Recovery Funds, we noted the following instances where there was no evidence that the OCPW, OCCR or SSA departments verified the entity was not suspended or debarred or otherwise excluded from participating in the transaction, prior to entering the contract, in accordance with County policy: • Four (4) of four (4) contracts through the OCPW department selected for testing. • Three (3) of eight (8) contracts through the OCCR department selected for testing. • One (1) of one (1) contract through the SSA department selected for testing. The following information was not provided at the time of the contract award for four (4) of four (4) contracts selected for testing within the OCPW department, one (1) of one (1) contract selected within SSA, and five (5) of eight (8) contracts selected for testing within the OCCR department: • Byrd Anti-Lobbying Amendment • Clean Air Act and Federal Pollution Control Act provision The following information was not provided at the time of the contract award for two (2) of four (4) contracts selected for testing within the OCPW department and one (1) of one (1) contract selected for testing within SSA: • Contract Work Hours and Safety Standards Act provision The following information was not provided at the time of the contract award for one (1) of one contract selected for testing within SSA: • Davis-Bacon Act provision • Equal Employment Opportunity provision Cause: The OCPW, OCCR and SSA departments did not follow their policy to verify the information described in the condition prior to entering the transactions and did not consistently ensure that the applicable required provisions were communicated to contractors. Effect: The County’s control and compliance were not consistently followed, which required verification of suspension or debarment prior to entering the contract. EB reviewed the vendor’s status on SAM.gov and verified the vendors selected for testing were not suspended and debarred at the date of the audit. Additionally, the OCPW, SSA and OCCR departments did not identify the applicable required provisions of the contract to the contractors at the time of the contract award. Questioned Costs: No questioned costs were identified as a result of our procedures. Context/Sampling: A nonstatistical sample of four (4) out of twelve (12) procurement contracts were sampled from OCPW and eight (8) out of nineteen (19) procurement contracts were sampled from OCCR for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. The entire population of 1 (contract) was tested from SSA for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. Repeat Finding from Prior Years: Yes, Finding 2022-003 and 2022-009. Recommendation: We recommend that the OCPW, OCCR and SSA departments adhere to their procurement procedures requiring the suspension or debarment verification is performed prior to entering into a covered transaction. Additionally, we recommend the OCPW, SSA and OCCR departments modify and strengthen its current policies and procedures to ensure that all applicable required provisions are communicated to contractors in accordance with 2 CFR Appendix II to Part 200. Views of Responsible Officials: Management agrees. See separately issued Corrective Action Plan.

Program: COVID-19 Coronavirus State and Local Fiscal Recovery Funds Federal Financial Assistance Listing Number: 21.027 Federal Grantor: U.S. Department of Treasury Award No. and Year: 2021 Compliance Requirements: Procurement and Suspension and Debarment Type of Finding: Significant Deficiency in Internal Control Over Compliance and Instance of Noncompliance Criteria: 2 CFR section 200.303(a), Internal Controls, states that the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Title 2 CFR Section 200.214 of the Uniform Guidance states that the County must comply with 2 CFR part 180, which implements Executive Orders 12549 and 12689. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities. Per 2 CFR Section 180.300, when a non-Federal entity enters into a covered transaction with an entity at a lower tier, the non-Federal entity must verify that the entity, as defined in 2 CFR section 180.995 and agency adopting regulations, is not suspended or debarred or otherwise excluded from participating in the transaction. This verification may be accomplished by (1) checking the System for Award Management (SAM) Exclusions maintained by the General Services Administration (GSA) and available at https://www.sam.gov/SAM/, (2) collecting a certification from the entity, or (3) adding a clause or condition to the covered transaction with that entity. 2 CFR section Appendix II to Part 200, Contract Provisions for Non-Federal Entity Contracts Under Federal Awards states that in addition to other provisions required by the Federal agency or non-Federal entity, all contracts made by the non-Federal entity under the Federal award must contain certain provisions, as applicable. Condition: During our testing of the Orange County Public Works (OCPW), Orange County Community Resources (OCCR) and the Social Services Agency’s (SSA) provisions for procurement requirements under the COVID-19 Coronavirus State and Local Fiscal Recovery Funds, we noted the following instances where there was no evidence that the OCPW, OCCR or SSA departments verified the entity was not suspended or debarred or otherwise excluded from participating in the transaction, prior to entering the contract, in accordance with County policy: • Four (4) of four (4) contracts through the OCPW department selected for testing. • Three (3) of eight (8) contracts through the OCCR department selected for testing. • One (1) of one (1) contract through the SSA department selected for testing. The following information was not provided at the time of the contract award for four (4) of four (4) contracts selected for testing within the OCPW department, one (1) of one (1) contract selected within SSA, and five (5) of eight (8) contracts selected for testing within the OCCR department: • Byrd Anti-Lobbying Amendment • Clean Air Act and Federal Pollution Control Act provision The following information was not provided at the time of the contract award for two (2) of four (4) contracts selected for testing within the OCPW department and one (1) of one (1) contract selected for testing within SSA: • Contract Work Hours and Safety Standards Act provision The following information was not provided at the time of the contract award for one (1) of one contract selected for testing within SSA: • Davis-Bacon Act provision • Equal Employment Opportunity provision Cause: The OCPW, OCCR and SSA departments did not follow their policy to verify the information described in the condition prior to entering the transactions and did not consistently ensure that the applicable required provisions were communicated to contractors. Effect: The County’s control and compliance were not consistently followed, which required verification of suspension or debarment prior to entering the contract. EB reviewed the vendor’s status on SAM.gov and verified the vendors selected for testing were not suspended and debarred at the date of the audit. Additionally, the OCPW, SSA and OCCR departments did not identify the applicable required provisions of the contract to the contractors at the time of the contract award. Questioned Costs: No questioned costs were identified as a result of our procedures. Context/Sampling: A nonstatistical sample of four (4) out of twelve (12) procurement contracts were sampled from OCPW and eight (8) out of nineteen (19) procurement contracts were sampled from OCCR for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. The entire population of 1 (contract) was tested from SSA for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. Repeat Finding from Prior Years: Yes, Finding 2022-003 and 2022-009. Recommendation: We recommend that the OCPW, OCCR and SSA departments adhere to their procurement procedures requiring the suspension or debarment verification is performed prior to entering into a covered transaction. Additionally, we recommend the OCPW, SSA and OCCR departments modify and strengthen its current policies and procedures to ensure that all applicable required provisions are communicated to contractors in accordance with 2 CFR Appendix II to Part 200. Views of Responsible Officials: Management agrees. See separately issued Corrective Action Plan.

Program: COVID-19 Coronavirus State and Local Fiscal Recovery Funds Federal Financial Assistance Listing Number: 21.027 Federal Grantor: U.S. Department of Treasury Award No. and Year: 2021 Compliance Requirements: Procurement and Suspension and Debarment Type of Finding: Significant Deficiency in Internal Control Over Compliance and Instance of Noncompliance Criteria: 2 CFR section 200.303(a), Internal Controls, states that the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Title 2 CFR Section 200.214 of the Uniform Guidance states that the County must comply with 2 CFR part 180, which implements Executive Orders 12549 and 12689. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities. Per 2 CFR Section 180.300, when a non-Federal entity enters into a covered transaction with an entity at a lower tier, the non-Federal entity must verify that the entity, as defined in 2 CFR section 180.995 and agency adopting regulations, is not suspended or debarred or otherwise excluded from participating in the transaction. This verification may be accomplished by (1) checking the System for Award Management (SAM) Exclusions maintained by the General Services Administration (GSA) and available at https://www.sam.gov/SAM/, (2) collecting a certification from the entity, or (3) adding a clause or condition to the covered transaction with that entity. 2 CFR section Appendix II to Part 200, Contract Provisions for Non-Federal Entity Contracts Under Federal Awards states that in addition to other provisions required by the Federal agency or non-Federal entity, all contracts made by the non-Federal entity under the Federal award must contain certain provisions, as applicable. Condition: During our testing of the Orange County Public Works (OCPW), Orange County Community Resources (OCCR) and the Social Services Agency’s (SSA) provisions for procurement requirements under the COVID-19 Coronavirus State and Local Fiscal Recovery Funds, we noted the following instances where there was no evidence that the OCPW, OCCR or SSA departments verified the entity was not suspended or debarred or otherwise excluded from participating in the transaction, prior to entering the contract, in accordance with County policy: • Four (4) of four (4) contracts through the OCPW department selected for testing. • Three (3) of eight (8) contracts through the OCCR department selected for testing. • One (1) of one (1) contract through the SSA department selected for testing. The following information was not provided at the time of the contract award for four (4) of four (4) contracts selected for testing within the OCPW department, one (1) of one (1) contract selected within SSA, and five (5) of eight (8) contracts selected for testing within the OCCR department: • Byrd Anti-Lobbying Amendment • Clean Air Act and Federal Pollution Control Act provision The following information was not provided at the time of the contract award for two (2) of four (4) contracts selected for testing within the OCPW department and one (1) of one (1) contract selected for testing within SSA: • Contract Work Hours and Safety Standards Act provision The following information was not provided at the time of the contract award for one (1) of one contract selected for testing within SSA: • Davis-Bacon Act provision • Equal Employment Opportunity provision Cause: The OCPW, OCCR and SSA departments did not follow their policy to verify the information described in the condition prior to entering the transactions and did not consistently ensure that the applicable required provisions were communicated to contractors. Effect: The County’s control and compliance were not consistently followed, which required verification of suspension or debarment prior to entering the contract. EB reviewed the vendor’s status on SAM.gov and verified the vendors selected for testing were not suspended and debarred at the date of the audit. Additionally, the OCPW, SSA and OCCR departments did not identify the applicable required provisions of the contract to the contractors at the time of the contract award. Questioned Costs: No questioned costs were identified as a result of our procedures. Context/Sampling: A nonstatistical sample of four (4) out of twelve (12) procurement contracts were sampled from OCPW and eight (8) out of nineteen (19) procurement contracts were sampled from OCCR for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. The entire population of 1 (contract) was tested from SSA for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. Repeat Finding from Prior Years: Yes, Finding 2022-003 and 2022-009. Recommendation: We recommend that the OCPW, OCCR and SSA departments adhere to their procurement procedures requiring the suspension or debarment verification is performed prior to entering into a covered transaction. Additionally, we recommend the OCPW, SSA and OCCR departments modify and strengthen its current policies and procedures to ensure that all applicable required provisions are communicated to contractors in accordance with 2 CFR Appendix II to Part 200. Views of Responsible Officials: Management agrees. See separately issued Corrective Action Plan.

Program: COVID-19 Coronavirus State and Local Fiscal Recovery Funds Federal Financial Assistance Listing Number: 21.027 Federal Grantor: U.S. Department of Treasury Award No. and Year: 2021 Compliance Requirements: Procurement and Suspension and Debarment Type of Finding: Significant Deficiency in Internal Control Over Compliance and Instance of Noncompliance Criteria: 2 CFR section 200.303(a), Internal Controls, states that the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Title 2 CFR Section 200.214 of the Uniform Guidance states that the County must comply with 2 CFR part 180, which implements Executive Orders 12549 and 12689. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities. Per 2 CFR Section 180.300, when a non-Federal entity enters into a covered transaction with an entity at a lower tier, the non-Federal entity must verify that the entity, as defined in 2 CFR section 180.995 and agency adopting regulations, is not suspended or debarred or otherwise excluded from participating in the transaction. This verification may be accomplished by (1) checking the System for Award Management (SAM) Exclusions maintained by the General Services Administration (GSA) and available at https://www.sam.gov/SAM/, (2) collecting a certification from the entity, or (3) adding a clause or condition to the covered transaction with that entity. 2 CFR section Appendix II to Part 200, Contract Provisions for Non-Federal Entity Contracts Under Federal Awards states that in addition to other provisions required by the Federal agency or non-Federal entity, all contracts made by the non-Federal entity under the Federal award must contain certain provisions, as applicable. Condition: During our testing of the Orange County Public Works (OCPW), Orange County Community Resources (OCCR) and the Social Services Agency’s (SSA) provisions for procurement requirements under the COVID-19 Coronavirus State and Local Fiscal Recovery Funds, we noted the following instances where there was no evidence that the OCPW, OCCR or SSA departments verified the entity was not suspended or debarred or otherwise excluded from participating in the transaction, prior to entering the contract, in accordance with County policy: • Four (4) of four (4) contracts through the OCPW department selected for testing. • Three (3) of eight (8) contracts through the OCCR department selected for testing. • One (1) of one (1) contract through the SSA department selected for testing. The following information was not provided at the time of the contract award for four (4) of four (4) contracts selected for testing within the OCPW department, one (1) of one (1) contract selected within SSA, and five (5) of eight (8) contracts selected for testing within the OCCR department: • Byrd Anti-Lobbying Amendment • Clean Air Act and Federal Pollution Control Act provision The following information was not provided at the time of the contract award for two (2) of four (4) contracts selected for testing within the OCPW department and one (1) of one (1) contract selected for testing within SSA: • Contract Work Hours and Safety Standards Act provision The following information was not provided at the time of the contract award for one (1) of one contract selected for testing within SSA: • Davis-Bacon Act provision • Equal Employment Opportunity provision Cause: The OCPW, OCCR and SSA departments did not follow their policy to verify the information described in the condition prior to entering the transactions and did not consistently ensure that the applicable required provisions were communicated to contractors. Effect: The County’s control and compliance were not consistently followed, which required verification of suspension or debarment prior to entering the contract. EB reviewed the vendor’s status on SAM.gov and verified the vendors selected for testing were not suspended and debarred at the date of the audit. Additionally, the OCPW, SSA and OCCR departments did not identify the applicable required provisions of the contract to the contractors at the time of the contract award. Questioned Costs: No questioned costs were identified as a result of our procedures. Context/Sampling: A nonstatistical sample of four (4) out of twelve (12) procurement contracts were sampled from OCPW and eight (8) out of nineteen (19) procurement contracts were sampled from OCCR for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. The entire population of 1 (contract) was tested from SSA for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. Repeat Finding from Prior Years: Yes, Finding 2022-003 and 2022-009. Recommendation: We recommend that the OCPW, OCCR and SSA departments adhere to their procurement procedures requiring the suspension or debarment verification is performed prior to entering into a covered transaction. Additionally, we recommend the OCPW, SSA and OCCR departments modify and strengthen its current policies and procedures to ensure that all applicable required provisions are communicated to contractors in accordance with 2 CFR Appendix II to Part 200. Views of Responsible Officials: Management agrees. See separately issued Corrective Action Plan.

Program: COVID-19 Coronavirus State and Local Fiscal Recovery Funds Federal Financial Assistance Listing Number: 21.027 Federal Grantor: U.S. Department of Treasury Award No. and Year: 2021 Compliance Requirements: Procurement and Suspension and Debarment Type of Finding: Significant Deficiency in Internal Control Over Compliance and Instance of Noncompliance Criteria: 2 CFR section 200.303(a), Internal Controls, states that the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Title 2 CFR Section 200.214 of the Uniform Guidance states that the County must comply with 2 CFR part 180, which implements Executive Orders 12549 and 12689. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities. Per 2 CFR Section 180.300, when a non-Federal entity enters into a covered transaction with an entity at a lower tier, the non-Federal entity must verify that the entity, as defined in 2 CFR section 180.995 and agency adopting regulations, is not suspended or debarred or otherwise excluded from participating in the transaction. This verification may be accomplished by (1) checking the System for Award Management (SAM) Exclusions maintained by the General Services Administration (GSA) and available at https://www.sam.gov/SAM/, (2) collecting a certification from the entity, or (3) adding a clause or condition to the covered transaction with that entity. 2 CFR section Appendix II to Part 200, Contract Provisions for Non-Federal Entity Contracts Under Federal Awards states that in addition to other provisions required by the Federal agency or non-Federal entity, all contracts made by the non-Federal entity under the Federal award must contain certain provisions, as applicable. Condition: During our testing of the Orange County Public Works (OCPW), Orange County Community Resources (OCCR) and the Social Services Agency’s (SSA) provisions for procurement requirements under the COVID-19 Coronavirus State and Local Fiscal Recovery Funds, we noted the following instances where there was no evidence that the OCPW, OCCR or SSA departments verified the entity was not suspended or debarred or otherwise excluded from participating in the transaction, prior to entering the contract, in accordance with County policy: • Four (4) of four (4) contracts through the OCPW department selected for testing. • Three (3) of eight (8) contracts through the OCCR department selected for testing. • One (1) of one (1) contract through the SSA department selected for testing. The following information was not provided at the time of the contract award for four (4) of four (4) contracts selected for testing within the OCPW department, one (1) of one (1) contract selected within SSA, and five (5) of eight (8) contracts selected for testing within the OCCR department: • Byrd Anti-Lobbying Amendment • Clean Air Act and Federal Pollution Control Act provision The following information was not provided at the time of the contract award for two (2) of four (4) contracts selected for testing within the OCPW department and one (1) of one (1) contract selected for testing within SSA: • Contract Work Hours and Safety Standards Act provision The following information was not provided at the time of the contract award for one (1) of one contract selected for testing within SSA: • Davis-Bacon Act provision • Equal Employment Opportunity provision Cause: The OCPW, OCCR and SSA departments did not follow their policy to verify the information described in the condition prior to entering the transactions and did not consistently ensure that the applicable required provisions were communicated to contractors. Effect: The County’s control and compliance were not consistently followed, which required verification of suspension or debarment prior to entering the contract. EB reviewed the vendor’s status on SAM.gov and verified the vendors selected for testing were not suspended and debarred at the date of the audit. Additionally, the OCPW, SSA and OCCR departments did not identify the applicable required provisions of the contract to the contractors at the time of the contract award. Questioned Costs: No questioned costs were identified as a result of our procedures. Context/Sampling: A nonstatistical sample of four (4) out of twelve (12) procurement contracts were sampled from OCPW and eight (8) out of nineteen (19) procurement contracts were sampled from OCCR for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. The entire population of 1 (contract) was tested from SSA for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. Repeat Finding from Prior Years: Yes, Finding 2022-003 and 2022-009. Recommendation: We recommend that the OCPW, OCCR and SSA departments adhere to their procurement procedures requiring the suspension or debarment verification is performed prior to entering into a covered transaction. Additionally, we recommend the OCPW, SSA and OCCR departments modify and strengthen its current policies and procedures to ensure that all applicable required provisions are communicated to contractors in accordance with 2 CFR Appendix II to Part 200. Views of Responsible Officials: Management agrees. See separately issued Corrective Action Plan.

Program: COVID-19 Coronavirus State and Local Fiscal Recovery Funds Federal Financial Assistance Listing Number: 21.027 Federal Grantor: U.S. Department of Treasury Award No. and Year: 2021 Compliance Requirements: Procurement and Suspension and Debarment Type of Finding: Significant Deficiency in Internal Control Over Compliance and Instance of Noncompliance Criteria: 2 CFR section 200.303(a), Internal Controls, states that the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Title 2 CFR Section 200.214 of the Uniform Guidance states that the County must comply with 2 CFR part 180, which implements Executive Orders 12549 and 12689. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities. Per 2 CFR Section 180.300, when a non-Federal entity enters into a covered transaction with an entity at a lower tier, the non-Federal entity must verify that the entity, as defined in 2 CFR section 180.995 and agency adopting regulations, is not suspended or debarred or otherwise excluded from participating in the transaction. This verification may be accomplished by (1) checking the System for Award Management (SAM) Exclusions maintained by the General Services Administration (GSA) and available at https://www.sam.gov/SAM/, (2) collecting a certification from the entity, or (3) adding a clause or condition to the covered transaction with that entity. 2 CFR section Appendix II to Part 200, Contract Provisions for Non-Federal Entity Contracts Under Federal Awards states that in addition to other provisions required by the Federal agency or non-Federal entity, all contracts made by the non-Federal entity under the Federal award must contain certain provisions, as applicable. Condition: During our testing of the Orange County Public Works (OCPW), Orange County Community Resources (OCCR) and the Social Services Agency’s (SSA) provisions for procurement requirements under the COVID-19 Coronavirus State and Local Fiscal Recovery Funds, we noted the following instances where there was no evidence that the OCPW, OCCR or SSA departments verified the entity was not suspended or debarred or otherwise excluded from participating in the transaction, prior to entering the contract, in accordance with County policy: • Four (4) of four (4) contracts through the OCPW department selected for testing. • Three (3) of eight (8) contracts through the OCCR department selected for testing. • One (1) of one (1) contract through the SSA department selected for testing. The following information was not provided at the time of the contract award for four (4) of four (4) contracts selected for testing within the OCPW department, one (1) of one (1) contract selected within SSA, and five (5) of eight (8) contracts selected for testing within the OCCR department: • Byrd Anti-Lobbying Amendment • Clean Air Act and Federal Pollution Control Act provision The following information was not provided at the time of the contract award for two (2) of four (4) contracts selected for testing within the OCPW department and one (1) of one (1) contract selected for testing within SSA: • Contract Work Hours and Safety Standards Act provision The following information was not provided at the time of the contract award for one (1) of one contract selected for testing within SSA: • Davis-Bacon Act provision • Equal Employment Opportunity provision Cause: The OCPW, OCCR and SSA departments did not follow their policy to verify the information described in the condition prior to entering the transactions and did not consistently ensure that the applicable required provisions were communicated to contractors. Effect: The County’s control and compliance were not consistently followed, which required verification of suspension or debarment prior to entering the contract. EB reviewed the vendor’s status on SAM.gov and verified the vendors selected for testing were not suspended and debarred at the date of the audit. Additionally, the OCPW, SSA and OCCR departments did not identify the applicable required provisions of the contract to the contractors at the time of the contract award. Questioned Costs: No questioned costs were identified as a result of our procedures. Context/Sampling: A nonstatistical sample of four (4) out of twelve (12) procurement contracts were sampled from OCPW and eight (8) out of nineteen (19) procurement contracts were sampled from OCCR for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. The entire population of 1 (contract) was tested from SSA for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. Repeat Finding from Prior Years: Yes, Finding 2022-003 and 2022-009. Recommendation: We recommend that the OCPW, OCCR and SSA departments adhere to their procurement procedures requiring the suspension or debarment verification is performed prior to entering into a covered transaction. Additionally, we recommend the OCPW, SSA and OCCR departments modify and strengthen its current policies and procedures to ensure that all applicable required provisions are communicated to contractors in accordance with 2 CFR Appendix II to Part 200. Views of Responsible Officials: Management agrees. See separately issued Corrective Action Plan.

Program: COVID-19 Coronavirus State and Local Fiscal Recovery Funds Federal Financial Assistance Listing Number: 21.027 Federal Grantor: U.S. Department of Treasury Award No. and Year: 2021 Compliance Requirements: Procurement and Suspension and Debarment Type of Finding: Significant Deficiency in Internal Control Over Compliance and Instance of Noncompliance Criteria: 2 CFR section 200.303(a), Internal Controls, states that the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Title 2 CFR Section 200.214 of the Uniform Guidance states that the County must comply with 2 CFR part 180, which implements Executive Orders 12549 and 12689. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities. Per 2 CFR Section 180.300, when a non-Federal entity enters into a covered transaction with an entity at a lower tier, the non-Federal entity must verify that the entity, as defined in 2 CFR section 180.995 and agency adopting regulations, is not suspended or debarred or otherwise excluded from participating in the transaction. This verification may be accomplished by (1) checking the System for Award Management (SAM) Exclusions maintained by the General Services Administration (GSA) and available at https://www.sam.gov/SAM/, (2) collecting a certification from the entity, or (3) adding a clause or condition to the covered transaction with that entity. 2 CFR section Appendix II to Part 200, Contract Provisions for Non-Federal Entity Contracts Under Federal Awards states that in addition to other provisions required by the Federal agency or non-Federal entity, all contracts made by the non-Federal entity under the Federal award must contain certain provisions, as applicable. Condition: During our testing of the Orange County Public Works (OCPW), Orange County Community Resources (OCCR) and the Social Services Agency’s (SSA) provisions for procurement requirements under the COVID-19 Coronavirus State and Local Fiscal Recovery Funds, we noted the following instances where there was no evidence that the OCPW, OCCR or SSA departments verified the entity was not suspended or debarred or otherwise excluded from participating in the transaction, prior to entering the contract, in accordance with County policy: • Four (4) of four (4) contracts through the OCPW department selected for testing. • Three (3) of eight (8) contracts through the OCCR department selected for testing. • One (1) of one (1) contract through the SSA department selected for testing. The following information was not provided at the time of the contract award for four (4) of four (4) contracts selected for testing within the OCPW department, one (1) of one (1) contract selected within SSA, and five (5) of eight (8) contracts selected for testing within the OCCR department: • Byrd Anti-Lobbying Amendment • Clean Air Act and Federal Pollution Control Act provision The following information was not provided at the time of the contract award for two (2) of four (4) contracts selected for testing within the OCPW department and one (1) of one (1) contract selected for testing within SSA: • Contract Work Hours and Safety Standards Act provision The following information was not provided at the time of the contract award for one (1) of one contract selected for testing within SSA: • Davis-Bacon Act provision • Equal Employment Opportunity provision Cause: The OCPW, OCCR and SSA departments did not follow their policy to verify the information described in the condition prior to entering the transactions and did not consistently ensure that the applicable required provisions were communicated to contractors. Effect: The County’s control and compliance were not consistently followed, which required verification of suspension or debarment prior to entering the contract. EB reviewed the vendor’s status on SAM.gov and verified the vendors selected for testing were not suspended and debarred at the date of the audit. Additionally, the OCPW, SSA and OCCR departments did not identify the applicable required provisions of the contract to the contractors at the time of the contract award. Questioned Costs: No questioned costs were identified as a result of our procedures. Context/Sampling: A nonstatistical sample of four (4) out of twelve (12) procurement contracts were sampled from OCPW and eight (8) out of nineteen (19) procurement contracts were sampled from OCCR for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. The entire population of 1 (contract) was tested from SSA for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. Repeat Finding from Prior Years: Yes, Finding 2022-003 and 2022-009. Recommendation: We recommend that the OCPW, OCCR and SSA departments adhere to their procurement procedures requiring the suspension or debarment verification is performed prior to entering into a covered transaction. Additionally, we recommend the OCPW, SSA and OCCR departments modify and strengthen its current policies and procedures to ensure that all applicable required provisions are communicated to contractors in accordance with 2 CFR Appendix II to Part 200. Views of Responsible Officials: Management agrees. See separately issued Corrective Action Plan.

Program: COVID-19 Coronavirus State and Local Fiscal Recovery Funds Federal Financial Assistance Listing Number: 21.027 Federal Grantor: U.S. Department of Treasury Award No. and Year: 2021 Compliance Requirements: Procurement and Suspension and Debarment Type of Finding: Significant Deficiency in Internal Control Over Compliance and Instance of Noncompliance Criteria: 2 CFR section 200.303(a), Internal Controls, states that the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Title 2 CFR Section 200.214 of the Uniform Guidance states that the County must comply with 2 CFR part 180, which implements Executive Orders 12549 and 12689. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities. Per 2 CFR Section 180.300, when a non-Federal entity enters into a covered transaction with an entity at a lower tier, the non-Federal entity must verify that the entity, as defined in 2 CFR section 180.995 and agency adopting regulations, is not suspended or debarred or otherwise excluded from participating in the transaction. This verification may be accomplished by (1) checking the System for Award Management (SAM) Exclusions maintained by the General Services Administration (GSA) and available at https://www.sam.gov/SAM/, (2) collecting a certification from the entity, or (3) adding a clause or condition to the covered transaction with that entity. 2 CFR section Appendix II to Part 200, Contract Provisions for Non-Federal Entity Contracts Under Federal Awards states that in addition to other provisions required by the Federal agency or non-Federal entity, all contracts made by the non-Federal entity under the Federal award must contain certain provisions, as applicable. Condition: During our testing of the Orange County Public Works (OCPW), Orange County Community Resources (OCCR) and the Social Services Agency’s (SSA) provisions for procurement requirements under the COVID-19 Coronavirus State and Local Fiscal Recovery Funds, we noted the following instances where there was no evidence that the OCPW, OCCR or SSA departments verified the entity was not suspended or debarred or otherwise excluded from participating in the transaction, prior to entering the contract, in accordance with County policy: • Four (4) of four (4) contracts through the OCPW department selected for testing. • Three (3) of eight (8) contracts through the OCCR department selected for testing. • One (1) of one (1) contract through the SSA department selected for testing. The following information was not provided at the time of the contract award for four (4) of four (4) contracts selected for testing within the OCPW department, one (1) of one (1) contract selected within SSA, and five (5) of eight (8) contracts selected for testing within the OCCR department: • Byrd Anti-Lobbying Amendment • Clean Air Act and Federal Pollution Control Act provision The following information was not provided at the time of the contract award for two (2) of four (4) contracts selected for testing within the OCPW department and one (1) of one (1) contract selected for testing within SSA: • Contract Work Hours and Safety Standards Act provision The following information was not provided at the time of the contract award for one (1) of one contract selected for testing within SSA: • Davis-Bacon Act provision • Equal Employment Opportunity provision Cause: The OCPW, OCCR and SSA departments did not follow their policy to verify the information described in the condition prior to entering the transactions and did not consistently ensure that the applicable required provisions were communicated to contractors. Effect: The County’s control and compliance were not consistently followed, which required verification of suspension or debarment prior to entering the contract. EB reviewed the vendor’s status on SAM.gov and verified the vendors selected for testing were not suspended and debarred at the date of the audit. Additionally, the OCPW, SSA and OCCR departments did not identify the applicable required provisions of the contract to the contractors at the time of the contract award. Questioned Costs: No questioned costs were identified as a result of our procedures. Context/Sampling: A nonstatistical sample of four (4) out of twelve (12) procurement contracts were sampled from OCPW and eight (8) out of nineteen (19) procurement contracts were sampled from OCCR for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. The entire population of 1 (contract) was tested from SSA for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. Repeat Finding from Prior Years: Yes, Finding 2022-003 and 2022-009. Recommendation: We recommend that the OCPW, OCCR and SSA departments adhere to their procurement procedures requiring the suspension or debarment verification is performed prior to entering into a covered transaction. Additionally, we recommend the OCPW, SSA and OCCR departments modify and strengthen its current policies and procedures to ensure that all applicable required provisions are communicated to contractors in accordance with 2 CFR Appendix II to Part 200. Views of Responsible Officials: Management agrees. See separately issued Corrective Action Plan.

Program: COVID-19 Coronavirus State and Local Fiscal Recovery Funds Federal Financial Assistance Listing Number: 21.027 Federal Grantor: U.S. Department of Treasury Award No. and Year: 2021 Compliance Requirements: Procurement and Suspension and Debarment Type of Finding: Significant Deficiency in Internal Control Over Compliance and Instance of Noncompliance Criteria: 2 CFR section 200.303(a), Internal Controls, states that the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Title 2 CFR Section 200.214 of the Uniform Guidance states that the County must comply with 2 CFR part 180, which implements Executive Orders 12549 and 12689. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities. Per 2 CFR Section 180.300, when a non-Federal entity enters into a covered transaction with an entity at a lower tier, the non-Federal entity must verify that the entity, as defined in 2 CFR section 180.995 and agency adopting regulations, is not suspended or debarred or otherwise excluded from participating in the transaction. This verification may be accomplished by (1) checking the System for Award Management (SAM) Exclusions maintained by the General Services Administration (GSA) and available at https://www.sam.gov/SAM/, (2) collecting a certification from the entity, or (3) adding a clause or condition to the covered transaction with that entity. 2 CFR section Appendix II to Part 200, Contract Provisions for Non-Federal Entity Contracts Under Federal Awards states that in addition to other provisions required by the Federal agency or non-Federal entity, all contracts made by the non-Federal entity under the Federal award must contain certain provisions, as applicable. Condition: During our testing of the Orange County Public Works (OCPW), Orange County Community Resources (OCCR) and the Social Services Agency’s (SSA) provisions for procurement requirements under the COVID-19 Coronavirus State and Local Fiscal Recovery Funds, we noted the following instances where there was no evidence that the OCPW, OCCR or SSA departments verified the entity was not suspended or debarred or otherwise excluded from participating in the transaction, prior to entering the contract, in accordance with County policy: • Four (4) of four (4) contracts through the OCPW department selected for testing. • Three (3) of eight (8) contracts through the OCCR department selected for testing. • One (1) of one (1) contract through the SSA department selected for testing. The following information was not provided at the time of the contract award for four (4) of four (4) contracts selected for testing within the OCPW department, one (1) of one (1) contract selected within SSA, and five (5) of eight (8) contracts selected for testing within the OCCR department: • Byrd Anti-Lobbying Amendment • Clean Air Act and Federal Pollution Control Act provision The following information was not provided at the time of the contract award for two (2) of four (4) contracts selected for testing within the OCPW department and one (1) of one (1) contract selected for testing within SSA: • Contract Work Hours and Safety Standards Act provision The following information was not provided at the time of the contract award for one (1) of one contract selected for testing within SSA: • Davis-Bacon Act provision • Equal Employment Opportunity provision Cause: The OCPW, OCCR and SSA departments did not follow their policy to verify the information described in the condition prior to entering the transactions and did not consistently ensure that the applicable required provisions were communicated to contractors. Effect: The County’s control and compliance were not consistently followed, which required verification of suspension or debarment prior to entering the contract. EB reviewed the vendor’s status on SAM.gov and verified the vendors selected for testing were not suspended and debarred at the date of the audit. Additionally, the OCPW, SSA and OCCR departments did not identify the applicable required provisions of the contract to the contractors at the time of the contract award. Questioned Costs: No questioned costs were identified as a result of our procedures. Context/Sampling: A nonstatistical sample of four (4) out of twelve (12) procurement contracts were sampled from OCPW and eight (8) out of nineteen (19) procurement contracts were sampled from OCCR for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. The entire population of 1 (contract) was tested from SSA for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. Repeat Finding from Prior Years: Yes, Finding 2022-003 and 2022-009. Recommendation: We recommend that the OCPW, OCCR and SSA departments adhere to their procurement procedures requiring the suspension or debarment verification is performed prior to entering into a covered transaction. Additionally, we recommend the OCPW, SSA and OCCR departments modify and strengthen its current policies and procedures to ensure that all applicable required provisions are communicated to contractors in accordance with 2 CFR Appendix II to Part 200. Views of Responsible Officials: Management agrees. See separately issued Corrective Action Plan.

Program: COVID-19 Coronavirus State and Local Fiscal Recovery Funds Federal Financial Assistance Listing Number: 21.027 Federal Grantor: U.S. Department of Treasury Award No. and Year: 2021 Compliance Requirements: Procurement and Suspension and Debarment Type of Finding: Significant Deficiency in Internal Control Over Compliance and Instance of Noncompliance Criteria: 2 CFR section 200.303(a), Internal Controls, states that the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Title 2 CFR Section 200.214 of the Uniform Guidance states that the County must comply with 2 CFR part 180, which implements Executive Orders 12549 and 12689. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities. Per 2 CFR Section 180.300, when a non-Federal entity enters into a covered transaction with an entity at a lower tier, the non-Federal entity must verify that the entity, as defined in 2 CFR section 180.995 and agency adopting regulations, is not suspended or debarred or otherwise excluded from participating in the transaction. This verification may be accomplished by (1) checking the System for Award Management (SAM) Exclusions maintained by the General Services Administration (GSA) and available at https://www.sam.gov/SAM/, (2) collecting a certification from the entity, or (3) adding a clause or condition to the covered transaction with that entity. 2 CFR section Appendix II to Part 200, Contract Provisions for Non-Federal Entity Contracts Under Federal Awards states that in addition to other provisions required by the Federal agency or non-Federal entity, all contracts made by the non-Federal entity under the Federal award must contain certain provisions, as applicable. Condition: During our testing of the Orange County Public Works (OCPW), Orange County Community Resources (OCCR) and the Social Services Agency’s (SSA) provisions for procurement requirements under the COVID-19 Coronavirus State and Local Fiscal Recovery Funds, we noted the following instances where there was no evidence that the OCPW, OCCR or SSA departments verified the entity was not suspended or debarred or otherwise excluded from participating in the transaction, prior to entering the contract, in accordance with County policy: • Four (4) of four (4) contracts through the OCPW department selected for testing. • Three (3) of eight (8) contracts through the OCCR department selected for testing. • One (1) of one (1) contract through the SSA department selected for testing. The following information was not provided at the time of the contract award for four (4) of four (4) contracts selected for testing within the OCPW department, one (1) of one (1) contract selected within SSA, and five (5) of eight (8) contracts selected for testing within the OCCR department: • Byrd Anti-Lobbying Amendment • Clean Air Act and Federal Pollution Control Act provision The following information was not provided at the time of the contract award for two (2) of four (4) contracts selected for testing within the OCPW department and one (1) of one (1) contract selected for testing within SSA: • Contract Work Hours and Safety Standards Act provision The following information was not provided at the time of the contract award for one (1) of one contract selected for testing within SSA: • Davis-Bacon Act provision • Equal Employment Opportunity provision Cause: The OCPW, OCCR and SSA departments did not follow their policy to verify the information described in the condition prior to entering the transactions and did not consistently ensure that the applicable required provisions were communicated to contractors. Effect: The County’s control and compliance were not consistently followed, which required verification of suspension or debarment prior to entering the contract. EB reviewed the vendor’s status on SAM.gov and verified the vendors selected for testing were not suspended and debarred at the date of the audit. Additionally, the OCPW, SSA and OCCR departments did not identify the applicable required provisions of the contract to the contractors at the time of the contract award. Questioned Costs: No questioned costs were identified as a result of our procedures. Context/Sampling: A nonstatistical sample of four (4) out of twelve (12) procurement contracts were sampled from OCPW and eight (8) out of nineteen (19) procurement contracts were sampled from OCCR for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. The entire population of 1 (contract) was tested from SSA for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. Repeat Finding from Prior Years: Yes, Finding 2022-003 and 2022-009. Recommendation: We recommend that the OCPW, OCCR and SSA departments adhere to their procurement procedures requiring the suspension or debarment verification is performed prior to entering into a covered transaction. Additionally, we recommend the OCPW, SSA and OCCR departments modify and strengthen its current policies and procedures to ensure that all applicable required provisions are communicated to contractors in accordance with 2 CFR Appendix II to Part 200. Views of Responsible Officials: Management agrees. See separately issued Corrective Action Plan.

Program: COVID-19 Coronavirus State and Local Fiscal Recovery Funds Federal Financial Assistance Listing Number: 21.027 Federal Grantor: U.S. Department of Treasury Award No. and Year: 2021 Compliance Requirements: Procurement and Suspension and Debarment Type of Finding: Significant Deficiency in Internal Control Over Compliance and Instance of Noncompliance Criteria: 2 CFR section 200.303(a), Internal Controls, states that the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Title 2 CFR Section 200.214 of the Uniform Guidance states that the County must comply with 2 CFR part 180, which implements Executive Orders 12549 and 12689. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities. Per 2 CFR Section 180.300, when a non-Federal entity enters into a covered transaction with an entity at a lower tier, the non-Federal entity must verify that the entity, as defined in 2 CFR section 180.995 and agency adopting regulations, is not suspended or debarred or otherwise excluded from participating in the transaction. This verification may be accomplished by (1) checking the System for Award Management (SAM) Exclusions maintained by the General Services Administration (GSA) and available at https://www.sam.gov/SAM/, (2) collecting a certification from the entity, or (3) adding a clause or condition to the covered transaction with that entity. 2 CFR section Appendix II to Part 200, Contract Provisions for Non-Federal Entity Contracts Under Federal Awards states that in addition to other provisions required by the Federal agency or non-Federal entity, all contracts made by the non-Federal entity under the Federal award must contain certain provisions, as applicable. Condition: During our testing of the Orange County Public Works (OCPW), Orange County Community Resources (OCCR) and the Social Services Agency’s (SSA) provisions for procurement requirements under the COVID-19 Coronavirus State and Local Fiscal Recovery Funds, we noted the following instances where there was no evidence that the OCPW, OCCR or SSA departments verified the entity was not suspended or debarred or otherwise excluded from participating in the transaction, prior to entering the contract, in accordance with County policy: • Four (4) of four (4) contracts through the OCPW department selected for testing. • Three (3) of eight (8) contracts through the OCCR department selected for testing. • One (1) of one (1) contract through the SSA department selected for testing. The following information was not provided at the time of the contract award for four (4) of four (4) contracts selected for testing within the OCPW department, one (1) of one (1) contract selected within SSA, and five (5) of eight (8) contracts selected for testing within the OCCR department: • Byrd Anti-Lobbying Amendment • Clean Air Act and Federal Pollution Control Act provision The following information was not provided at the time of the contract award for two (2) of four (4) contracts selected for testing within the OCPW department and one (1) of one (1) contract selected for testing within SSA: • Contract Work Hours and Safety Standards Act provision The following information was not provided at the time of the contract award for one (1) of one contract selected for testing within SSA: • Davis-Bacon Act provision • Equal Employment Opportunity provision Cause: The OCPW, OCCR and SSA departments did not follow their policy to verify the information described in the condition prior to entering the transactions and did not consistently ensure that the applicable required provisions were communicated to contractors. Effect: The County’s control and compliance were not consistently followed, which required verification of suspension or debarment prior to entering the contract. EB reviewed the vendor’s status on SAM.gov and verified the vendors selected for testing were not suspended and debarred at the date of the audit. Additionally, the OCPW, SSA and OCCR departments did not identify the applicable required provisions of the contract to the contractors at the time of the contract award. Questioned Costs: No questioned costs were identified as a result of our procedures. Context/Sampling: A nonstatistical sample of four (4) out of twelve (12) procurement contracts were sampled from OCPW and eight (8) out of nineteen (19) procurement contracts were sampled from OCCR for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. The entire population of 1 (contract) was tested from SSA for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. Repeat Finding from Prior Years: Yes, Finding 2022-003 and 2022-009. Recommendation: We recommend that the OCPW, OCCR and SSA departments adhere to their procurement procedures requiring the suspension or debarment verification is performed prior to entering into a covered transaction. Additionally, we recommend the OCPW, SSA and OCCR departments modify and strengthen its current policies and procedures to ensure that all applicable required provisions are communicated to contractors in accordance with 2 CFR Appendix II to Part 200. Views of Responsible Officials: Management agrees. See separately issued Corrective Action Plan.

Program: COVID-19 Coronavirus State and Local Fiscal Recovery Funds Federal Financial Assistance Listing Number: 21.027 Federal Grantor: U.S. Department of Treasury Award No. and Year: 2021 Compliance Requirements: Procurement and Suspension and Debarment Type of Finding: Significant Deficiency in Internal Control Over Compliance and Instance of Noncompliance Criteria: 2 CFR section 200.303(a), Internal Controls, states that the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Title 2 CFR Section 200.214 of the Uniform Guidance states that the County must comply with 2 CFR part 180, which implements Executive Orders 12549 and 12689. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities. Per 2 CFR Section 180.300, when a non-Federal entity enters into a covered transaction with an entity at a lower tier, the non-Federal entity must verify that the entity, as defined in 2 CFR section 180.995 and agency adopting regulations, is not suspended or debarred or otherwise excluded from participating in the transaction. This verification may be accomplished by (1) checking the System for Award Management (SAM) Exclusions maintained by the General Services Administration (GSA) and available at https://www.sam.gov/SAM/, (2) collecting a certification from the entity, or (3) adding a clause or condition to the covered transaction with that entity. 2 CFR section Appendix II to Part 200, Contract Provisions for Non-Federal Entity Contracts Under Federal Awards states that in addition to other provisions required by the Federal agency or non-Federal entity, all contracts made by the non-Federal entity under the Federal award must contain certain provisions, as applicable. Condition: During our testing of the Orange County Public Works (OCPW), Orange County Community Resources (OCCR) and the Social Services Agency’s (SSA) provisions for procurement requirements under the COVID-19 Coronavirus State and Local Fiscal Recovery Funds, we noted the following instances where there was no evidence that the OCPW, OCCR or SSA departments verified the entity was not suspended or debarred or otherwise excluded from participating in the transaction, prior to entering the contract, in accordance with County policy: • Four (4) of four (4) contracts through the OCPW department selected for testing. • Three (3) of eight (8) contracts through the OCCR department selected for testing. • One (1) of one (1) contract through the SSA department selected for testing. The following information was not provided at the time of the contract award for four (4) of four (4) contracts selected for testing within the OCPW department, one (1) of one (1) contract selected within SSA, and five (5) of eight (8) contracts selected for testing within the OCCR department: • Byrd Anti-Lobbying Amendment • Clean Air Act and Federal Pollution Control Act provision The following information was not provided at the time of the contract award for two (2) of four (4) contracts selected for testing within the OCPW department and one (1) of one (1) contract selected for testing within SSA: • Contract Work Hours and Safety Standards Act provision The following information was not provided at the time of the contract award for one (1) of one contract selected for testing within SSA: • Davis-Bacon Act provision • Equal Employment Opportunity provision Cause: The OCPW, OCCR and SSA departments did not follow their policy to verify the information described in the condition prior to entering the transactions and did not consistently ensure that the applicable required provisions were communicated to contractors. Effect: The County’s control and compliance were not consistently followed, which required verification of suspension or debarment prior to entering the contract. EB reviewed the vendor’s status on SAM.gov and verified the vendors selected for testing were not suspended and debarred at the date of the audit. Additionally, the OCPW, SSA and OCCR departments did not identify the applicable required provisions of the contract to the contractors at the time of the contract award. Questioned Costs: No questioned costs were identified as a result of our procedures. Context/Sampling: A nonstatistical sample of four (4) out of twelve (12) procurement contracts were sampled from OCPW and eight (8) out of nineteen (19) procurement contracts were sampled from OCCR for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. The entire population of 1 (contract) was tested from SSA for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. Repeat Finding from Prior Years: Yes, Finding 2022-003 and 2022-009. Recommendation: We recommend that the OCPW, OCCR and SSA departments adhere to their procurement procedures requiring the suspension or debarment verification is performed prior to entering into a covered transaction. Additionally, we recommend the OCPW, SSA and OCCR departments modify and strengthen its current policies and procedures to ensure that all applicable required provisions are communicated to contractors in accordance with 2 CFR Appendix II to Part 200. Views of Responsible Officials: Management agrees. See separately issued Corrective Action Plan.

Program: COVID-19 Coronavirus State and Local Fiscal Recovery Funds Federal Financial Assistance Listing Number: 21.027 Federal Grantor: U.S. Department of Treasury Award No. and Year: 2021 Compliance Requirements: Procurement and Suspension and Debarment Type of Finding: Significant Deficiency in Internal Control Over Compliance and Instance of Noncompliance Criteria: 2 CFR section 200.303(a), Internal Controls, states that the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Title 2 CFR Section 200.214 of the Uniform Guidance states that the County must comply with 2 CFR part 180, which implements Executive Orders 12549 and 12689. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities. Per 2 CFR Section 180.300, when a non-Federal entity enters into a covered transaction with an entity at a lower tier, the non-Federal entity must verify that the entity, as defined in 2 CFR section 180.995 and agency adopting regulations, is not suspended or debarred or otherwise excluded from participating in the transaction. This verification may be accomplished by (1) checking the System for Award Management (SAM) Exclusions maintained by the General Services Administration (GSA) and available at https://www.sam.gov/SAM/, (2) collecting a certification from the entity, or (3) adding a clause or condition to the covered transaction with that entity. 2 CFR section Appendix II to Part 200, Contract Provisions for Non-Federal Entity Contracts Under Federal Awards states that in addition to other provisions required by the Federal agency or non-Federal entity, all contracts made by the non-Federal entity under the Federal award must contain certain provisions, as applicable. Condition: During our testing of the Orange County Public Works (OCPW), Orange County Community Resources (OCCR) and the Social Services Agency’s (SSA) provisions for procurement requirements under the COVID-19 Coronavirus State and Local Fiscal Recovery Funds, we noted the following instances where there was no evidence that the OCPW, OCCR or SSA departments verified the entity was not suspended or debarred or otherwise excluded from participating in the transaction, prior to entering the contract, in accordance with County policy: • Four (4) of four (4) contracts through the OCPW department selected for testing. • Three (3) of eight (8) contracts through the OCCR department selected for testing. • One (1) of one (1) contract through the SSA department selected for testing. The following information was not provided at the time of the contract award for four (4) of four (4) contracts selected for testing within the OCPW department, one (1) of one (1) contract selected within SSA, and five (5) of eight (8) contracts selected for testing within the OCCR department: • Byrd Anti-Lobbying Amendment • Clean Air Act and Federal Pollution Control Act provision The following information was not provided at the time of the contract award for two (2) of four (4) contracts selected for testing within the OCPW department and one (1) of one (1) contract selected for testing within SSA: • Contract Work Hours and Safety Standards Act provision The following information was not provided at the time of the contract award for one (1) of one contract selected for testing within SSA: • Davis-Bacon Act provision • Equal Employment Opportunity provision Cause: The OCPW, OCCR and SSA departments did not follow their policy to verify the information described in the condition prior to entering the transactions and did not consistently ensure that the applicable required provisions were communicated to contractors. Effect: The County’s control and compliance were not consistently followed, which required verification of suspension or debarment prior to entering the contract. EB reviewed the vendor’s status on SAM.gov and verified the vendors selected for testing were not suspended and debarred at the date of the audit. Additionally, the OCPW, SSA and OCCR departments did not identify the applicable required provisions of the contract to the contractors at the time of the contract award. Questioned Costs: No questioned costs were identified as a result of our procedures. Context/Sampling: A nonstatistical sample of four (4) out of twelve (12) procurement contracts were sampled from OCPW and eight (8) out of nineteen (19) procurement contracts were sampled from OCCR for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. The entire population of 1 (contract) was tested from SSA for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. Repeat Finding from Prior Years: Yes, Finding 2022-003 and 2022-009. Recommendation: We recommend that the OCPW, OCCR and SSA departments adhere to their procurement procedures requiring the suspension or debarment verification is performed prior to entering into a covered transaction. Additionally, we recommend the OCPW, SSA and OCCR departments modify and strengthen its current policies and procedures to ensure that all applicable required provisions are communicated to contractors in accordance with 2 CFR Appendix II to Part 200. Views of Responsible Officials: Management agrees. See separately issued Corrective Action Plan.

Program: COVID-19 Coronavirus State and Local Fiscal Recovery Funds Federal Financial Assistance Listing Number: 21.027 Federal Grantor: U.S. Department of Treasury Award No. and Year: 2021 Compliance Requirements: Procurement and Suspension and Debarment Type of Finding: Significant Deficiency in Internal Control Over Compliance and Instance of Noncompliance Criteria: 2 CFR section 200.303(a), Internal Controls, states that the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Title 2 CFR Section 200.214 of the Uniform Guidance states that the County must comply with 2 CFR part 180, which implements Executive Orders 12549 and 12689. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities. Per 2 CFR Section 180.300, when a non-Federal entity enters into a covered transaction with an entity at a lower tier, the non-Federal entity must verify that the entity, as defined in 2 CFR section 180.995 and agency adopting regulations, is not suspended or debarred or otherwise excluded from participating in the transaction. This verification may be accomplished by (1) checking the System for Award Management (SAM) Exclusions maintained by the General Services Administration (GSA) and available at https://www.sam.gov/SAM/, (2) collecting a certification from the entity, or (3) adding a clause or condition to the covered transaction with that entity. 2 CFR section Appendix II to Part 200, Contract Provisions for Non-Federal Entity Contracts Under Federal Awards states that in addition to other provisions required by the Federal agency or non-Federal entity, all contracts made by the non-Federal entity under the Federal award must contain certain provisions, as applicable. Condition: During our testing of the Orange County Public Works (OCPW), Orange County Community Resources (OCCR) and the Social Services Agency’s (SSA) provisions for procurement requirements under the COVID-19 Coronavirus State and Local Fiscal Recovery Funds, we noted the following instances where there was no evidence that the OCPW, OCCR or SSA departments verified the entity was not suspended or debarred or otherwise excluded from participating in the transaction, prior to entering the contract, in accordance with County policy: • Four (4) of four (4) contracts through the OCPW department selected for testing. • Three (3) of eight (8) contracts through the OCCR department selected for testing. • One (1) of one (1) contract through the SSA department selected for testing. The following information was not provided at the time of the contract award for four (4) of four (4) contracts selected for testing within the OCPW department, one (1) of one (1) contract selected within SSA, and five (5) of eight (8) contracts selected for testing within the OCCR department: • Byrd Anti-Lobbying Amendment • Clean Air Act and Federal Pollution Control Act provision The following information was not provided at the time of the contract award for two (2) of four (4) contracts selected for testing within the OCPW department and one (1) of one (1) contract selected for testing within SSA: • Contract Work Hours and Safety Standards Act provision The following information was not provided at the time of the contract award for one (1) of one contract selected for testing within SSA: • Davis-Bacon Act provision • Equal Employment Opportunity provision Cause: The OCPW, OCCR and SSA departments did not follow their policy to verify the information described in the condition prior to entering the transactions and did not consistently ensure that the applicable required provisions were communicated to contractors. Effect: The County’s control and compliance were not consistently followed, which required verification of suspension or debarment prior to entering the contract. EB reviewed the vendor’s status on SAM.gov and verified the vendors selected for testing were not suspended and debarred at the date of the audit. Additionally, the OCPW, SSA and OCCR departments did not identify the applicable required provisions of the contract to the contractors at the time of the contract award. Questioned Costs: No questioned costs were identified as a result of our procedures. Context/Sampling: A nonstatistical sample of four (4) out of twelve (12) procurement contracts were sampled from OCPW and eight (8) out of nineteen (19) procurement contracts were sampled from OCCR for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. The entire population of 1 (contract) was tested from SSA for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. Repeat Finding from Prior Years: Yes, Finding 2022-003 and 2022-009. Recommendation: We recommend that the OCPW, OCCR and SSA departments adhere to their procurement procedures requiring the suspension or debarment verification is performed prior to entering into a covered transaction. Additionally, we recommend the OCPW, SSA and OCCR departments modify and strengthen its current policies and procedures to ensure that all applicable required provisions are communicated to contractors in accordance with 2 CFR Appendix II to Part 200. Views of Responsible Officials: Management agrees. See separately issued Corrective Action Plan.

Program: COVID-19 Coronavirus State and Local Fiscal Recovery Funds Federal Financial Assistance Listing Number: 21.027 Federal Grantor: U.S. Department of Treasury Award No. and Year: 2021 Compliance Requirements: Procurement and Suspension and Debarment Type of Finding: Significant Deficiency in Internal Control Over Compliance and Instance of Noncompliance Criteria: 2 CFR section 200.303(a), Internal Controls, states that the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Title 2 CFR Section 200.214 of the Uniform Guidance states that the County must comply with 2 CFR part 180, which implements Executive Orders 12549 and 12689. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities. Per 2 CFR Section 180.300, when a non-Federal entity enters into a covered transaction with an entity at a lower tier, the non-Federal entity must verify that the entity, as defined in 2 CFR section 180.995 and agency adopting regulations, is not suspended or debarred or otherwise excluded from participating in the transaction. This verification may be accomplished by (1) checking the System for Award Management (SAM) Exclusions maintained by the General Services Administration (GSA) and available at https://www.sam.gov/SAM/, (2) collecting a certification from the entity, or (3) adding a clause or condition to the covered transaction with that entity. 2 CFR section Appendix II to Part 200, Contract Provisions for Non-Federal Entity Contracts Under Federal Awards states that in addition to other provisions required by the Federal agency or non-Federal entity, all contracts made by the non-Federal entity under the Federal award must contain certain provisions, as applicable. Condition: During our testing of the Orange County Public Works (OCPW), Orange County Community Resources (OCCR) and the Social Services Agency’s (SSA) provisions for procurement requirements under the COVID-19 Coronavirus State and Local Fiscal Recovery Funds, we noted the following instances where there was no evidence that the OCPW, OCCR or SSA departments verified the entity was not suspended or debarred or otherwise excluded from participating in the transaction, prior to entering the contract, in accordance with County policy: • Four (4) of four (4) contracts through the OCPW department selected for testing. • Three (3) of eight (8) contracts through the OCCR department selected for testing. • One (1) of one (1) contract through the SSA department selected for testing. The following information was not provided at the time of the contract award for four (4) of four (4) contracts selected for testing within the OCPW department, one (1) of one (1) contract selected within SSA, and five (5) of eight (8) contracts selected for testing within the OCCR department: • Byrd Anti-Lobbying Amendment • Clean Air Act and Federal Pollution Control Act provision The following information was not provided at the time of the contract award for two (2) of four (4) contracts selected for testing within the OCPW department and one (1) of one (1) contract selected for testing within SSA: • Contract Work Hours and Safety Standards Act provision The following information was not provided at the time of the contract award for one (1) of one contract selected for testing within SSA: • Davis-Bacon Act provision • Equal Employment Opportunity provision Cause: The OCPW, OCCR and SSA departments did not follow their policy to verify the information described in the condition prior to entering the transactions and did not consistently ensure that the applicable required provisions were communicated to contractors. Effect: The County’s control and compliance were not consistently followed, which required verification of suspension or debarment prior to entering the contract. EB reviewed the vendor’s status on SAM.gov and verified the vendors selected for testing were not suspended and debarred at the date of the audit. Additionally, the OCPW, SSA and OCCR departments did not identify the applicable required provisions of the contract to the contractors at the time of the contract award. Questioned Costs: No questioned costs were identified as a result of our procedures. Context/Sampling: A nonstatistical sample of four (4) out of twelve (12) procurement contracts were sampled from OCPW and eight (8) out of nineteen (19) procurement contracts were sampled from OCCR for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. The entire population of 1 (contract) was tested from SSA for the COVID-19 Coronavirus State and Local Fiscal Recovery Funds. Repeat Finding from Prior Years: Yes, Finding 2022-003 and 2022-009. Recommendation: We recommend that the OCPW, OCCR and SSA departments adhere to their procurement procedures requiring the suspension or debarment verification is performed prior to entering into a covered transaction. Additionally, we recommend the OCPW, SSA and OCCR departments modify and strengthen its current policies and procedures to ensure that all applicable required provisions are communicated to contractors in accordance with 2 CFR Appendix II to Part 200. Views of Responsible Officials: Management agrees. See separately issued Corrective Action Plan.