Audit 320882

FINDING 2023-004 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): FY 2022 Compliance Requirement: Reporting Audit Findings: Material Weakness, Other Matters Condition and Context Recipients are required to submit quarterly or annual Project and Expenditure (P&E) reports to the U.S. Department of the Treasury (Treasury). The reporting periods, as well as the respective due dates, are based upon type of recipient and its population, as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. The County was classified as a county with a population below 250,000 residents that received an allocation of less than $10 million in State and Local Fiscal Recovery Funds (SLFRF). As such, the initial P&E report, covering the period from March 3, 2021 to March 31, 2022, was required to be submitted to the Treasury by April 30, 2022. The subsequent annual reports are to cover one calendar year and must be submitted to the Treasury by April 30 each year. Upon inquiry of the County's policies and procedures related to the reporting requirements, the County stated that the County Auditor and a financial consultant prepared the P&E report based on reports from the County's financial system. The County Auditor then submitted the report. There was no evidence of an oversight or review process prior to submission. The County submitted the P&E report by April 30, 2023, as required; however, the report was not supported by the County's records. The annual report submitted in April 2023 did not include an expenditure of $64,999 as the County Auditor used the incorrect period of January 1, 2022 to December 31, 2022, to complete the report. The omitted expenditure was incurred on March 23, 2023. The lack of internal controls and noncompliance were systemic issues throughout the audit period for the FY 2022 grant. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." INDIANA STATE BOARD OF ACCOUNTS 19 SHELBY COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) 31 CFR 35.4(c) states in part: "Reporting and requests for other information. During the period of performance, recipients shall provide to the Secretary periodic reports providing detailed accounting of the uses of funds, . . ." Coronavirus State and Local Fiscal Recover Funds Compliance and Reporting Guidance, page 10, states in part: ". . . 10. Reporting. All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for com-piling and reporting accurate, compliant financial data, in accordance with appropriate accounting standards and principles. . . ." Cause A proper system of internal controls which would include segregation of key functions was not designed by management of the County. The lack of review or approval process by someone other than the preparers allowed the error in the P&E report to go undetected. The error was a result of expenditures from the incorrect reporting period being used to complete the report. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, noncompliance. As such, the P&E report submitted understated expenditures. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the County. In addition, not meeting the SLFRF reporting requirements increases the likelihood that the public will not have access to transparent and accurate information regarding expenditures of federal awards. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the County design and implement a proper system of internal controls, including policies and procedures to ensure that the County abstracts the correct reporting period, to provide the Treasury with complete and accurate information for the P&E reports. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-005 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Procurement and Suspension and Debarment Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): FY 2022 Compliance Requirement: Procurement and Suspension and Debarment Audit Findings: Material Weakness, Modified Opinion Repeat Finding This is a repeat finding from the immediately prior audit report. The prior audit finding number was 2022-004. Condition and Context An effective internal control system was not in place at the County to ensure compliance with the requirements related to the grant agreement and the Procurement and Suspension and Debarment compliance requirement. Procurement - Policy The County had not established a purchasing policy that would reflect applicable state laws and regulations, including procedures to avoid acquisition of unnecessary or duplicative items; procedures to ensure that all solicitations incorporate a clear and accurate description of the technical requirements for the material, product, or service to be procured; and did not maintain written standards of conduct covering conflicts of interest and governing actions of its employees engaged in the selection, award, and administration of contracts. Suspension and Debarment Prior to entering into subawards and covered transactions with State and Local Fiscal Recovery Funds (SLFRF) award funds, recipients are required to verify that such contractors and subrecipients are not suspended, debarred, or otherwise excluded. "Covered transactions" include, but are not limited to, contracts for goods and services awarded under a nonprocurement transaction (i.e., grant agreement) that are expected to equal or exceed $25,000. The verification is to be done by checking the Excluded Parties List System (EPLS), collecting a certification from that person or adding a clause or condition to the covered transaction with that person. The County did not have internal controls in place to ensure compliance with the suspension and debarment compliance requirement. Upon inquiry of the County's policies and procedures related to suspension and debarment requirements, the County stated that they did not have policies or procedures in place for verifying that an entity with which it plans to enter into a covered transaction is not suspended, debarred, or otherwise excluded or disqualified from participating in federal assistance programs or activities. INDIANA STATE BOARD OF ACCOUNTS 21 SHELBY COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Two covered transactions for goods or services that equaled or exceeded $25,000 that were paid from SLFRF funds during the audit period were identified. Each transaction was examined to determine whether the County verified the suspension and debarment status of either vendor prior to payment. The two covered transactions, totaling $223,499, did not include the appropriate provisions in the contracts nor did the County require a certification or check the EPLS to ensure the entity was not suspended or debarred prior to making payment. The lack of internal controls and noncompliance were systemic issues throughout the audit period for the FY 2022 grant. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.318(a) states: "The non-Federal entity must have and use documented procurement procedures, consistent with State, local, and tribal laws and regulations and the standards of this section, for the acquisition of property or services required under a Federal award or subaward. The non- Federal entity's documented procurement procedures must conform to the procurement standards identified in §§ 200.317 through 200.327." 2 CFR 200.214 states: "Non-federal entities are subject to the non-procurement debarment and suspension regulations implementing Executive Orders 12549 and 12689, 2 CFR part 180. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities." 31 CFR 19.300 states: "When you enter into a covered transaction with another person at the next lower tier, you must verify that the person with whom you intend to do business is not excluded or disqualified. You do this by: (a) Checking the EPLS; or (b) Collecting a certification from that person if allowed by this rule; or (c) Adding a clause or condition to the covered transaction with that person." INDIANA STATE BOARD OF ACCOUNTS 22 SHELBY COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Cause A proper system of internal controls was not designed by management of the County. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the County's management of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, vendors and subrecipients to whom payments equal to or in excess of $25,000 were not verified to be not suspended, debarred, or otherwise excluded. Any program funds the County used to pay vendors that have been suspended or debarred would be unallowable, and the funding agency could potentially recover them. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the County establish a proper system of internal controls and develop policies and procedures to ensure contractors and subrecipients, as appropriate, are not suspended, debarred, or otherwise excluded prior to entering into any contracts or subawards. Additionally, we recommended the County establish documented procurement procedures consistent with state and local laws for the acquisition of property or services required under a federal award or subaward. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-006 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Activities Allowed or Unallowed, Allowable Costs/Cost Principles, Period of Performance Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): FY 2022 Compliance Requirements: Activities Allowed or Unallowed, Allowable Costs/Cost Principles, Period of Performance Audit Finding: Material Weakness Repeat Finding This is a similar repeat finding from the immediately prior audit report. The prior audit finding number was 2022-003. INDIANA STATE BOARD OF ACCOUNTS 23 SHELBY COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Condition and Context Prior to receipt of State and Local Fiscal Recovery Funds (SLFRF), all eligible entities were required to execute a Financial Assistance Agreement (Agreement), which included the Award Terms and Conditions that recipients must comply within carrying out the objectives of their award. Per the Agreement, the County was responsible for the effective administration of the federal award, as well as the application of sound management practices and administration of the federal funds in a manner consistent with the program objectives and the terms and conditions of the award. Recipients may use SLFRF funds for any eligible expenses subject to the restrictions set forth in sections 602 and 603 of the Social Security Act, as added by section 9901 of the American Rescue Plan Act of 2021. The SLFRF program provides substantial flexibility for each recipient to meet local needs within four separate eligible use categories. Recipients may use SLFRF funds to:  Respond to the COVID-19 public health emergency and its negative economic impacts;  Respond to workers performing essential work during the COVID-19 public health emergency by providing premium pay to eligible workers of eligible employers that have eligible workers who are performing essential work;  Provide government services, to the extent COVID-19 caused a reduction in revenues collected in the most recent full fiscal year of the recipient; and  Make necessary investments in water, sewer, or broadband infrastructure. Pursuant to the Agreement, the period of performance for the award began on the date the funds were disbursed to the County and ends on December 31, 2026. Recipients may only use funds to cover costs incurred during the period that began on March 3, 2021, and ends on December 31, 2024. Recipients must liquidate all obligations incurred by December 31, 2024, under the award no later than December 31, 2026, which is the end of the period of performance. A single employee received all invoices for financial obligations made from the SLFRF award. The employee prepared and reviewed the claims to ensure all expenditures were for allowable activities, met the cost objectives, and were within the period of performance prior to issuing payment from the SLFRF fund. The SLFRF claims were then included with the regular claims docket for the County Council's review and subsequent approval. However, the docket did not include sufficient detail nor was other documentation provided to the County Council in order for them to complete an appropriate level of review to determine if the expenses related to the SLFRF award were for allowable activities, met the cost objectives, and were within the period of performance. The lack of internal controls was a systemic issue throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: INDIANA STATE BOARD OF ACCOUNTS 24 SHELBY COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Cause A proper system of internal controls over the SLFRF expenditures was not designed by management of the County, which would include segregation of key functions, to ensure SLFRF funds were being used appropriately. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the County's management of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the County. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the County design and implement a proper system of internal controls including policies and procedures that would provide segregation of duties to ensure appropriate reviews, approvals, and oversight are taking place prior to payment of funds from the SLFRF award. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-004 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): FY 2022 Compliance Requirement: Reporting Audit Findings: Material Weakness, Other Matters Condition and Context Recipients are required to submit quarterly or annual Project and Expenditure (P&E) reports to the U.S. Department of the Treasury (Treasury). The reporting periods, as well as the respective due dates, are based upon type of recipient and its population, as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. The County was classified as a county with a population below 250,000 residents that received an allocation of less than $10 million in State and Local Fiscal Recovery Funds (SLFRF). As such, the initial P&E report, covering the period from March 3, 2021 to March 31, 2022, was required to be submitted to the Treasury by April 30, 2022. The subsequent annual reports are to cover one calendar year and must be submitted to the Treasury by April 30 each year. Upon inquiry of the County's policies and procedures related to the reporting requirements, the County stated that the County Auditor and a financial consultant prepared the P&E report based on reports from the County's financial system. The County Auditor then submitted the report. There was no evidence of an oversight or review process prior to submission. The County submitted the P&E report by April 30, 2023, as required; however, the report was not supported by the County's records. The annual report submitted in April 2023 did not include an expenditure of $64,999 as the County Auditor used the incorrect period of January 1, 2022 to December 31, 2022, to complete the report. The omitted expenditure was incurred on March 23, 2023. The lack of internal controls and noncompliance were systemic issues throughout the audit period for the FY 2022 grant. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." INDIANA STATE BOARD OF ACCOUNTS 19 SHELBY COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) 31 CFR 35.4(c) states in part: "Reporting and requests for other information. During the period of performance, recipients shall provide to the Secretary periodic reports providing detailed accounting of the uses of funds, . . ." Coronavirus State and Local Fiscal Recover Funds Compliance and Reporting Guidance, page 10, states in part: ". . . 10. Reporting. All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for com-piling and reporting accurate, compliant financial data, in accordance with appropriate accounting standards and principles. . . ." Cause A proper system of internal controls which would include segregation of key functions was not designed by management of the County. The lack of review or approval process by someone other than the preparers allowed the error in the P&E report to go undetected. The error was a result of expenditures from the incorrect reporting period being used to complete the report. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, noncompliance. As such, the P&E report submitted understated expenditures. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the County. In addition, not meeting the SLFRF reporting requirements increases the likelihood that the public will not have access to transparent and accurate information regarding expenditures of federal awards. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the County design and implement a proper system of internal controls, including policies and procedures to ensure that the County abstracts the correct reporting period, to provide the Treasury with complete and accurate information for the P&E reports. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-005 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Procurement and Suspension and Debarment Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): FY 2022 Compliance Requirement: Procurement and Suspension and Debarment Audit Findings: Material Weakness, Modified Opinion Repeat Finding This is a repeat finding from the immediately prior audit report. The prior audit finding number was 2022-004. Condition and Context An effective internal control system was not in place at the County to ensure compliance with the requirements related to the grant agreement and the Procurement and Suspension and Debarment compliance requirement. Procurement - Policy The County had not established a purchasing policy that would reflect applicable state laws and regulations, including procedures to avoid acquisition of unnecessary or duplicative items; procedures to ensure that all solicitations incorporate a clear and accurate description of the technical requirements for the material, product, or service to be procured; and did not maintain written standards of conduct covering conflicts of interest and governing actions of its employees engaged in the selection, award, and administration of contracts. Suspension and Debarment Prior to entering into subawards and covered transactions with State and Local Fiscal Recovery Funds (SLFRF) award funds, recipients are required to verify that such contractors and subrecipients are not suspended, debarred, or otherwise excluded. "Covered transactions" include, but are not limited to, contracts for goods and services awarded under a nonprocurement transaction (i.e., grant agreement) that are expected to equal or exceed $25,000. The verification is to be done by checking the Excluded Parties List System (EPLS), collecting a certification from that person or adding a clause or condition to the covered transaction with that person. The County did not have internal controls in place to ensure compliance with the suspension and debarment compliance requirement. Upon inquiry of the County's policies and procedures related to suspension and debarment requirements, the County stated that they did not have policies or procedures in place for verifying that an entity with which it plans to enter into a covered transaction is not suspended, debarred, or otherwise excluded or disqualified from participating in federal assistance programs or activities. INDIANA STATE BOARD OF ACCOUNTS 21 SHELBY COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Two covered transactions for goods or services that equaled or exceeded $25,000 that were paid from SLFRF funds during the audit period were identified. Each transaction was examined to determine whether the County verified the suspension and debarment status of either vendor prior to payment. The two covered transactions, totaling $223,499, did not include the appropriate provisions in the contracts nor did the County require a certification or check the EPLS to ensure the entity was not suspended or debarred prior to making payment. The lack of internal controls and noncompliance were systemic issues throughout the audit period for the FY 2022 grant. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.318(a) states: "The non-Federal entity must have and use documented procurement procedures, consistent with State, local, and tribal laws and regulations and the standards of this section, for the acquisition of property or services required under a Federal award or subaward. The non- Federal entity's documented procurement procedures must conform to the procurement standards identified in §§ 200.317 through 200.327." 2 CFR 200.214 states: "Non-federal entities are subject to the non-procurement debarment and suspension regulations implementing Executive Orders 12549 and 12689, 2 CFR part 180. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities." 31 CFR 19.300 states: "When you enter into a covered transaction with another person at the next lower tier, you must verify that the person with whom you intend to do business is not excluded or disqualified. You do this by: (a) Checking the EPLS; or (b) Collecting a certification from that person if allowed by this rule; or (c) Adding a clause or condition to the covered transaction with that person." INDIANA STATE BOARD OF ACCOUNTS 22 SHELBY COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Cause A proper system of internal controls was not designed by management of the County. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the County's management of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, vendors and subrecipients to whom payments equal to or in excess of $25,000 were not verified to be not suspended, debarred, or otherwise excluded. Any program funds the County used to pay vendors that have been suspended or debarred would be unallowable, and the funding agency could potentially recover them. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the County establish a proper system of internal controls and develop policies and procedures to ensure contractors and subrecipients, as appropriate, are not suspended, debarred, or otherwise excluded prior to entering into any contracts or subawards. Additionally, we recommended the County establish documented procurement procedures consistent with state and local laws for the acquisition of property or services required under a federal award or subaward. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-006 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Activities Allowed or Unallowed, Allowable Costs/Cost Principles, Period of Performance Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): FY 2022 Compliance Requirements: Activities Allowed or Unallowed, Allowable Costs/Cost Principles, Period of Performance Audit Finding: Material Weakness Repeat Finding This is a similar repeat finding from the immediately prior audit report. The prior audit finding number was 2022-003. INDIANA STATE BOARD OF ACCOUNTS 23 SHELBY COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Condition and Context Prior to receipt of State and Local Fiscal Recovery Funds (SLFRF), all eligible entities were required to execute a Financial Assistance Agreement (Agreement), which included the Award Terms and Conditions that recipients must comply within carrying out the objectives of their award. Per the Agreement, the County was responsible for the effective administration of the federal award, as well as the application of sound management practices and administration of the federal funds in a manner consistent with the program objectives and the terms and conditions of the award. Recipients may use SLFRF funds for any eligible expenses subject to the restrictions set forth in sections 602 and 603 of the Social Security Act, as added by section 9901 of the American Rescue Plan Act of 2021. The SLFRF program provides substantial flexibility for each recipient to meet local needs within four separate eligible use categories. Recipients may use SLFRF funds to:  Respond to the COVID-19 public health emergency and its negative economic impacts;  Respond to workers performing essential work during the COVID-19 public health emergency by providing premium pay to eligible workers of eligible employers that have eligible workers who are performing essential work;  Provide government services, to the extent COVID-19 caused a reduction in revenues collected in the most recent full fiscal year of the recipient; and  Make necessary investments in water, sewer, or broadband infrastructure. Pursuant to the Agreement, the period of performance for the award began on the date the funds were disbursed to the County and ends on December 31, 2026. Recipients may only use funds to cover costs incurred during the period that began on March 3, 2021, and ends on December 31, 2024. Recipients must liquidate all obligations incurred by December 31, 2024, under the award no later than December 31, 2026, which is the end of the period of performance. A single employee received all invoices for financial obligations made from the SLFRF award. The employee prepared and reviewed the claims to ensure all expenditures were for allowable activities, met the cost objectives, and were within the period of performance prior to issuing payment from the SLFRF fund. The SLFRF claims were then included with the regular claims docket for the County Council's review and subsequent approval. However, the docket did not include sufficient detail nor was other documentation provided to the County Council in order for them to complete an appropriate level of review to determine if the expenses related to the SLFRF award were for allowable activities, met the cost objectives, and were within the period of performance. The lack of internal controls was a systemic issue throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: INDIANA STATE BOARD OF ACCOUNTS 24 SHELBY COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Cause A proper system of internal controls over the SLFRF expenditures was not designed by management of the County, which would include segregation of key functions, to ensure SLFRF funds were being used appropriately. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the County's management of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the County. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the County design and implement a proper system of internal controls including policies and procedures that would provide segregation of duties to ensure appropriate reviews, approvals, and oversight are taking place prior to payment of funds from the SLFRF award. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.