Audit 331014

FINDING 2023-001 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Activities Allowed or Unallowed, Allowable Costs/Cost Principles, Period of Performance, and Procurement and Suspension and Debarment Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): PO 20011717 Pass-Through Entity: Indiana State Department of Health Compliance Requirements: Activities Allowed or Unallowed, Allowable Costs/Cost Principles, Period of Performance, Procurement and Suspension and Debarment Audit Findings: Material Weakness, Other Matters Condition and Context The County Department of Health, a department within the County, was awarded the Health Issues and Challenges grant through the Indiana State Department of Health financed through the American Rescue Plan Act for the purpose of funding programs that focus on the improvement of chronic disease, specifically, elevated blood lead level reduction. The Health Issues and Challenges grant is a reimbursable grant, whereby the County received reimbursement on a per-case basis at a stated rate for Case Management and Environmental Investigation activities performed. The County Department of Health received federal receipts related to the grant in the amount of $130,479 during 2023. As part of sound management of the federal award, the County Department of Health was responsible for implementing a system of internal controls that would ensure compliance with the applicable requirements. The County Department of Health did not properly design or implement such a system. Receipts of the program were adequately identified through the use of an account number within the County Health Fund (285) in the County's ledger (ledger) which was unique to the Health Issues and Challenges grant receipts. However, the ledger did not adequately identify the expenditures of the grant program within the County Health Fund. Through inquiry with the County Department of Health employees and review of unit-prepared support of grant expenditures, we determined expenditures were made with grant funds during the audit period; however, we were unable to distinguish between the expenditures of the Health Issues and Challenges grant and all other activities of the County Department of Health in the County Health fund. Due to the lack of separate identification of expenditures in the financial records, we were not able to establish a population from which to audit the Health Issues and Challenges grant for compliance with the following compliance requirements of the program:  Activities Allowed or Unallowed  Allowable Costs/Cost Principles  Period of Performance  Procurement and Suspension and Debarment As such, the full award amount of $130,479, as reported on the Schedule of Expenditures of Federal Awards, was determined to be questioned costs. The lack of internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.300(b) states in part: "The non-Federal entity is responsible for complying with all requirements of the Federal award. . . ." 2 CFR 200.302 states in part: "(a) Each state must expend and account for the Federal award in accordance with state laws and procedures for expending and accounting for the state's own funds. In addition, the state's and the other non-Federal entity's financial management systems, including records documenting compliance with Federal statutes, regulations, and the terms and conditions of the Federal award, must be sufficient to permit the preparation of reports required by general and program-specific terms and conditions; and the tracing of funds to a level of expenditures adequate to establish that such funds have been used according to the Federal statutes, regulations, and the terms and conditions of the Federal award. . . . (b) The financial management system of each non-Federal entity must provide for the following . . . (1) Identification, in its accounts, of all Federal awards received and expended and the Federal programs under which they were received. Federal program and Federal award identification must include, as applicable, the Assistance Listings title and number, Federal award identification number and year, name of the Federal agency, and name of the pass-through entity, if any. (2) Accurate, current, and complete disclosure of the financial results of each Federal award or program in accordance with the reporting requirements set forth in §§ 200.328 and 200.329. . . . (3) Records that identify adequately the source and application of funds for federallyfunded activities. These records must contain information pertaining to Federal awards, authorizations, financial obligations, unobligated balances, assets, expenditures, income and interest and be supported by source documentation. (4) Effective control over, and accountability for, all funds, property, and other assets. . . ." Cause The County Department of Health was unable to differentiate expenditures made from federal and non-federal funds within its ledger for the Heath Issues and Challenges grant. Effect Without the proper implementation of an effectively designed system of internal controls, a population of expenditures associated with the Health Issues and Challenges grant could not be determined. As such, the County Department of Health cannot ensure nor can we determine that expenditures of the grant were not unallowable, within the proper period, and adhered to established practices and policies. Questioned Costs We identified $130,479 in known questioned costs as noted in the Condition and Context. Recommendation We recommended that management of the County Department of Health establish a system of internal controls to ensure that grant award funds are adequately accounted for and tracked in such a manner as to determine the activity, receipts, and disbursements associated with the grant. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-002 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): PO 20011717 Pass-Through Entity: Indiana State Department of Health Compliance Requirement: Reporting Audit Finding: Material Weakness Condition and Context The County Department of Health, a department within the County, was awarded the Health Issues and Challenges grant through the Indiana State Department of Health financed through the American Rescue Plan Act (ARPA) for the purposes of funding programs that focus on the improvement of chronic disease, specifically, elevated blood lead level reduction. As part of sound management of the federal award, the County Department of Health was responsible for implementing a system of internal controls that would ensure compliance with the applicable requirements. The County Department of Health did not properly design or implement such a system. The County Department of Health was required to submit data through the online portal, National Electronic Disease Surveillance System (NEDSS) Base System (NBS), monthly beginning in October 2022. The submitted data included program specific metrics relating to patient case management of certified Elevated Blood Lead Levels (EBLLs). The County Department of Health was also required to ensure environmental investigation activities completed, including risk assessments and environmental inspections, were documented in the Indiana I-LEAD database monthly by a licensed Lead Risk Assessor. Environmental investigation activities performed by the County Department of Health were documented in the Indiana I-LEAD database by a licensed Lead Risk Assessor who was an employee of the County Department of Health. Similarly, case management activities performed were documented in the NEDSS Base System (NBS). Once activities were documented in the Indiana I-LEAD database and NBS systems, the activities were further documented in a spreadsheet by the Lead Risk Assessor (for I-LEAD activities) and the Case Management Coordinator (for NBS activities). The spreadsheet was reviewed by the Director of the Environmental Services Division and the Finance Director monthly. The Finance Director then used the spreadsheet to prepare the monthly reimbursement requests and sent the monthly reimbursement requests to the Indiana State Department of Health. We determined through inquiry with the Director of the Environmental Services Division and the Finance Director that while there was a review of the monthly spreadsheet, there was not a second review of the spreadsheet back to the activities reported in the Indiana I-LEAD database and NBS for accuracy. Additionally, the Finance Director prepared and submitted the reimbursement requests to the State without a second review or oversight process in place to prevent, or detect and correct, errors prior to submission. The lack of internal controls was a systemic issue throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Cause A proper system of internal controls, which would include segregation of key functions, was not designed by management of the County Department of Health to ensure the state was provided with complete and accurate information related to the COVID-19 - Coronavirus State and Local Fiscal Recovery Funds award. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect management's statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper design or implementation of the components of a system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the County Department of Health design and implement a proper system of internal controls, including policies and procedures that would provide segregation of duties to ensure appropriate reviews, approvals, and oversight are taking place to ensure reports are complete and accurate. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-003 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): FY 2023 Compliance Requirement: Reporting Audit Finding: Material Weakness Condition and Context Recipients of COVID-19 - Coronavirus State and Local Fiscal Recovery Funds (SLFRF) awards are required to submit quarterly or annually Project and Expenditure (P&E) reports to the U.S. Department of the Treasury (Treasury). The reporting periods, as well as the respective due dates, are based upon the type of recipient and its population, as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. Counties with a population that exceeds 250,000 residents are further required to submit annually a Recovery Plan Performance Report (RPPR). The RPPR provides the public and the Treasury with both retrospective and prospective information on the projects that recipients are undertaking or planning to undertake with program funding and how they are planning to ensure program outcomes are achieved in an effective, efficient, and equitable manner. The County was classified as a metropolitan county with a population that exceeds 250,000 residents. As such, quarterly P&E reports were to cover one calendar quarter and were to be submitted to the Treasury by the last day of the month following the end of the period covered. The annual RPPR was to be submitted to the Treasury by July 31, 2023. An employee of the Board of County Commissioners prepared and submitted the four required quarterly P&E reports during the audit period; however, there was no review or oversight process in place to prevent, or detect and correct, errors. Additionally, an employee of the Board of County Commissioners submitted the required annual RPPR during the audit period, which was compiled by a contracted vendor on the County's behalf. The vendor worked with the employee to get the necessary information to complete the report. Once complete, the report was provided to the employee, who then submitted the report without a review or oversight process in place to prevent, or detect and correct, errors. The lack of internal controls was a systemic issue throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Cause A proper system of internal controls, which would include segregation of duties, over SLFRF reporting was not designed by the Board of County Commissioners in order to prevent, detect or correct, material noncompliance. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect management's statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper design or implementation of the components of an effectively designed system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the Board of County Commissioners design and implement a proper system of internal controls, including policies and procedures that would provide segregation of duties to ensure appropriate reviews, approvals, and oversight are taking place. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-004 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Procurement and Suspension and Debarment Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listing Number: 21.027 Federal Award Number and Year (or Other Identifying Number): FY 2023 Compliance Requirement: Procurement and Suspension and Debarment Audit Findings: Material Weakness, Modified Opinion Condition and Context The County received a total COVID-19 - Coronavirus State and Local Fiscal Recovery Funds (SLFRF) allocation of $73,674,384 and chose to calculate its own revenue loss allowance, which totaled $35,932,557, to use for government services. Some SLFRF program funds expended in 2023 were expended under the revenue loss eligible use category. Additional program funds expended in 2023 were expended under the other eligible use categories. Procurement Federal regulations allow for informal procurement methods when the value of the procurement for property or services does not exceed the simplified acquisition threshold, which is set at $250,000 unless a lower, more restrictive threshold is set by a non-federal entity. As Indiana Code has set a more restrictive threshold of $150,000, informal procurement methods are permitted when the value of the procurement does not exceed $150,000. This informal process allows for methods other than the formal bid process. The informal process is divided between two methods based on thresholds. Micro-purchases, typically for those purchases $10,000 or under, and small purchase procedures for those purchases above the micro-purchase threshold, but below the simplified acquisition threshold. Micro-purchases may be awarded without soliciting competitive price rate quotations. If small purchase procedures are used, then price or rate quotations must be obtained from an adequate number of qualified sources. For funds expended under the revenue loss eligible use category, the above listed procurement requirements do not apply. During the audit period, the County had four vendors with purchases over the $10,000 micropurchase threshold which were expended under an eligible use category other than revenue loss and, as such, were considered small purchase procurements. The County did not provide competitive price quotations for the small purchase procurements for three of the four vendors, which totaled $257,038. Suspension and Debarment Prior to entering into subawards and covered transactions with SLFRF award funds, recipients are required to verify that such contractors and subrecipients are not suspended, debarred, or otherwise excluded. "Covered transactions" include, but are not limited to, contracts for goods and services awarded under a nonprocurement transaction (i.e., grant agreement) that are expected to equal or exceed $25,000. The verification is to be done by checking the Excluded Parties List System, collecting a certification from that person, or adding a clause or condition to the covered transaction with that person. During the engagement, an employee of the Board of County Commissioners stated that verification was completed by checking the Excluded Parties List System when covered transactions were entered into by the County to verify that an entity with which it plans to enter into a covered transaction is not suspended, debarred, or otherwise excluded or disqualified from participating in federal assistance programs or activities. Six covered transactions, totaling $3,952,203, were paid from SLFRF funds to six different vendors for goods or services that equaled or exceeded $25,000 during the audit period. Three of the six covered transactions were selected for testing. For all three transactions tested, documentation was not provided that the vendor's suspension and debarment status was verified. The lack of internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 31 CFR 19.300 states: "When you enter into a covered transaction with another person at the next lower tier, you must verify that the person with whom you do business is not excluded or disqualified. You do this by: (a) Checking the EPLS; or (b) Collecting a certification from that person if allowed by this rule; or (c) Adding a clause or condition to the covered transaction with that person." 2 CFR 200.318 states in part: "(a) The non-Federal entity must have and use documented procurement procedures, consistent with State, local, and tribal laws and regulations and the standards of this section, for the acquisition of property or services required under a Federal award or subaward. The non-Federal entity's documented procurement procedures must conform to the procurement standards identified in §§ 200.317 through 200.327. . . . (i) The non-Federal entity must maintain records sufficient to detail the history of procurement. These records will include, but are not necessarily limited to, the following: Rationale for the method of procurement, selection of contract type, contractor selection or rejection, and the basis for the contract price. . . ." 2 CFR 200.320 states in part: "The non-Federal entity must have and use documented procurement procedures, consistent with the standards of this section and §§ 200.317, 200.318, and 200.319 for any of the following methods of procurement used for the acquisition of property or services required under a Federal award or sub-award. (a) Informal procurement methods. When the value of the procurement for property or services under a Federal award does not exceed the simplified acquisition threshold (SAT), as defined in § 200.1, or a lower threshold established by a non-Federal entity, formal procurement methods are not required. The non-Federal entity may use informal procurement methods to expedite the completion of its transactions and minimize the associated administrative burden and cost. The informal methods used for procurement of property or services at or below the SAT include: . . . (2) Small purchases — (i) Small purchase procedures. The acquisition of property or services, the aggregate dollar amount of which is higher than the micro-purchase threshold but does not exceed the simplified acquisition threshold. If small purchase procedures are used, price or rate quotations must be obtained from an adequate number of qualified sources as determined appropriate by the non-Federal entity. . . . Cause The County was unable to provide documentation to demonstrate it had properly procured services. In addition, the County was unable to provide documentation to demonstrate it had checked the Excluded Parties List System, per the County's procedures, to ensure vendors were not suspended or debarred prior to entering into covered transactions that exceeded $25,000. Effect Without the proper implementation of an effectively designed system of internal controls, the County cannot demonstrate it obtained an adequate number of price or rate quotations prior to selecting a vendor. Therefore, the County could have overpaid for the services obtained. Furthermore, without the proper implementation of an effectively designed system of internal controls, the County cannot ensure the vendors paid with federal funds are eligible to participate in federal programs. Any program funds the County used to pay vendors that have been suspended or debarred would be unallowable, and the funding agency could potentially recover them. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the Board of County Commissioners strengthen the County's system of internal controls to ensure that an adequate number of price or rate quotations are obtained for small purchase procurements. Additionally, we recommended policies and procedures be strengthened to ensure appropriate supporting documentation for federal programs is retained. Lastly, we recommended that the Board of County Commissioners strengthen the County's system of internal controls to ensure that all vendors that are paid $25,000 or more, all or in part with federal funds, are not suspended or debarred from participating in federal programs before entering into any covered transactions. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-001 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Activities Allowed or Unallowed, Allowable Costs/Cost Principles, Period of Performance, and Procurement and Suspension and Debarment Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): PO 20011717 Pass-Through Entity: Indiana State Department of Health Compliance Requirements: Activities Allowed or Unallowed, Allowable Costs/Cost Principles, Period of Performance, Procurement and Suspension and Debarment Audit Findings: Material Weakness, Other Matters Condition and Context The County Department of Health, a department within the County, was awarded the Health Issues and Challenges grant through the Indiana State Department of Health financed through the American Rescue Plan Act for the purpose of funding programs that focus on the improvement of chronic disease, specifically, elevated blood lead level reduction. The Health Issues and Challenges grant is a reimbursable grant, whereby the County received reimbursement on a per-case basis at a stated rate for Case Management and Environmental Investigation activities performed. The County Department of Health received federal receipts related to the grant in the amount of $130,479 during 2023. As part of sound management of the federal award, the County Department of Health was responsible for implementing a system of internal controls that would ensure compliance with the applicable requirements. The County Department of Health did not properly design or implement such a system. Receipts of the program were adequately identified through the use of an account number within the County Health Fund (285) in the County's ledger (ledger) which was unique to the Health Issues and Challenges grant receipts. However, the ledger did not adequately identify the expenditures of the grant program within the County Health Fund. Through inquiry with the County Department of Health employees and review of unit-prepared support of grant expenditures, we determined expenditures were made with grant funds during the audit period; however, we were unable to distinguish between the expenditures of the Health Issues and Challenges grant and all other activities of the County Department of Health in the County Health fund. Due to the lack of separate identification of expenditures in the financial records, we were not able to establish a population from which to audit the Health Issues and Challenges grant for compliance with the following compliance requirements of the program:  Activities Allowed or Unallowed  Allowable Costs/Cost Principles  Period of Performance  Procurement and Suspension and Debarment As such, the full award amount of $130,479, as reported on the Schedule of Expenditures of Federal Awards, was determined to be questioned costs. The lack of internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.300(b) states in part: "The non-Federal entity is responsible for complying with all requirements of the Federal award. . . ." 2 CFR 200.302 states in part: "(a) Each state must expend and account for the Federal award in accordance with state laws and procedures for expending and accounting for the state's own funds. In addition, the state's and the other non-Federal entity's financial management systems, including records documenting compliance with Federal statutes, regulations, and the terms and conditions of the Federal award, must be sufficient to permit the preparation of reports required by general and program-specific terms and conditions; and the tracing of funds to a level of expenditures adequate to establish that such funds have been used according to the Federal statutes, regulations, and the terms and conditions of the Federal award. . . . (b) The financial management system of each non-Federal entity must provide for the following . . . (1) Identification, in its accounts, of all Federal awards received and expended and the Federal programs under which they were received. Federal program and Federal award identification must include, as applicable, the Assistance Listings title and number, Federal award identification number and year, name of the Federal agency, and name of the pass-through entity, if any. (2) Accurate, current, and complete disclosure of the financial results of each Federal award or program in accordance with the reporting requirements set forth in §§ 200.328 and 200.329. . . . (3) Records that identify adequately the source and application of funds for federallyfunded activities. These records must contain information pertaining to Federal awards, authorizations, financial obligations, unobligated balances, assets, expenditures, income and interest and be supported by source documentation. (4) Effective control over, and accountability for, all funds, property, and other assets. . . ." Cause The County Department of Health was unable to differentiate expenditures made from federal and non-federal funds within its ledger for the Heath Issues and Challenges grant. Effect Without the proper implementation of an effectively designed system of internal controls, a population of expenditures associated with the Health Issues and Challenges grant could not be determined. As such, the County Department of Health cannot ensure nor can we determine that expenditures of the grant were not unallowable, within the proper period, and adhered to established practices and policies. Questioned Costs We identified $130,479 in known questioned costs as noted in the Condition and Context. Recommendation We recommended that management of the County Department of Health establish a system of internal controls to ensure that grant award funds are adequately accounted for and tracked in such a manner as to determine the activity, receipts, and disbursements associated with the grant. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-002 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): PO 20011717 Pass-Through Entity: Indiana State Department of Health Compliance Requirement: Reporting Audit Finding: Material Weakness Condition and Context The County Department of Health, a department within the County, was awarded the Health Issues and Challenges grant through the Indiana State Department of Health financed through the American Rescue Plan Act (ARPA) for the purposes of funding programs that focus on the improvement of chronic disease, specifically, elevated blood lead level reduction. As part of sound management of the federal award, the County Department of Health was responsible for implementing a system of internal controls that would ensure compliance with the applicable requirements. The County Department of Health did not properly design or implement such a system. The County Department of Health was required to submit data through the online portal, National Electronic Disease Surveillance System (NEDSS) Base System (NBS), monthly beginning in October 2022. The submitted data included program specific metrics relating to patient case management of certified Elevated Blood Lead Levels (EBLLs). The County Department of Health was also required to ensure environmental investigation activities completed, including risk assessments and environmental inspections, were documented in the Indiana I-LEAD database monthly by a licensed Lead Risk Assessor. Environmental investigation activities performed by the County Department of Health were documented in the Indiana I-LEAD database by a licensed Lead Risk Assessor who was an employee of the County Department of Health. Similarly, case management activities performed were documented in the NEDSS Base System (NBS). Once activities were documented in the Indiana I-LEAD database and NBS systems, the activities were further documented in a spreadsheet by the Lead Risk Assessor (for I-LEAD activities) and the Case Management Coordinator (for NBS activities). The spreadsheet was reviewed by the Director of the Environmental Services Division and the Finance Director monthly. The Finance Director then used the spreadsheet to prepare the monthly reimbursement requests and sent the monthly reimbursement requests to the Indiana State Department of Health. We determined through inquiry with the Director of the Environmental Services Division and the Finance Director that while there was a review of the monthly spreadsheet, there was not a second review of the spreadsheet back to the activities reported in the Indiana I-LEAD database and NBS for accuracy. Additionally, the Finance Director prepared and submitted the reimbursement requests to the State without a second review or oversight process in place to prevent, or detect and correct, errors prior to submission. The lack of internal controls was a systemic issue throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Cause A proper system of internal controls, which would include segregation of key functions, was not designed by management of the County Department of Health to ensure the state was provided with complete and accurate information related to the COVID-19 - Coronavirus State and Local Fiscal Recovery Funds award. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect management's statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper design or implementation of the components of a system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the County Department of Health design and implement a proper system of internal controls, including policies and procedures that would provide segregation of duties to ensure appropriate reviews, approvals, and oversight are taking place to ensure reports are complete and accurate. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-003 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): FY 2023 Compliance Requirement: Reporting Audit Finding: Material Weakness Condition and Context Recipients of COVID-19 - Coronavirus State and Local Fiscal Recovery Funds (SLFRF) awards are required to submit quarterly or annually Project and Expenditure (P&E) reports to the U.S. Department of the Treasury (Treasury). The reporting periods, as well as the respective due dates, are based upon the type of recipient and its population, as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. Counties with a population that exceeds 250,000 residents are further required to submit annually a Recovery Plan Performance Report (RPPR). The RPPR provides the public and the Treasury with both retrospective and prospective information on the projects that recipients are undertaking or planning to undertake with program funding and how they are planning to ensure program outcomes are achieved in an effective, efficient, and equitable manner. The County was classified as a metropolitan county with a population that exceeds 250,000 residents. As such, quarterly P&E reports were to cover one calendar quarter and were to be submitted to the Treasury by the last day of the month following the end of the period covered. The annual RPPR was to be submitted to the Treasury by July 31, 2023. An employee of the Board of County Commissioners prepared and submitted the four required quarterly P&E reports during the audit period; however, there was no review or oversight process in place to prevent, or detect and correct, errors. Additionally, an employee of the Board of County Commissioners submitted the required annual RPPR during the audit period, which was compiled by a contracted vendor on the County's behalf. The vendor worked with the employee to get the necessary information to complete the report. Once complete, the report was provided to the employee, who then submitted the report without a review or oversight process in place to prevent, or detect and correct, errors. The lack of internal controls was a systemic issue throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Cause A proper system of internal controls, which would include segregation of duties, over SLFRF reporting was not designed by the Board of County Commissioners in order to prevent, detect or correct, material noncompliance. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect management's statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper design or implementation of the components of an effectively designed system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the Board of County Commissioners design and implement a proper system of internal controls, including policies and procedures that would provide segregation of duties to ensure appropriate reviews, approvals, and oversight are taking place. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-004 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Procurement and Suspension and Debarment Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listing Number: 21.027 Federal Award Number and Year (or Other Identifying Number): FY 2023 Compliance Requirement: Procurement and Suspension and Debarment Audit Findings: Material Weakness, Modified Opinion Condition and Context The County received a total COVID-19 - Coronavirus State and Local Fiscal Recovery Funds (SLFRF) allocation of $73,674,384 and chose to calculate its own revenue loss allowance, which totaled $35,932,557, to use for government services. Some SLFRF program funds expended in 2023 were expended under the revenue loss eligible use category. Additional program funds expended in 2023 were expended under the other eligible use categories. Procurement Federal regulations allow for informal procurement methods when the value of the procurement for property or services does not exceed the simplified acquisition threshold, which is set at $250,000 unless a lower, more restrictive threshold is set by a non-federal entity. As Indiana Code has set a more restrictive threshold of $150,000, informal procurement methods are permitted when the value of the procurement does not exceed $150,000. This informal process allows for methods other than the formal bid process. The informal process is divided between two methods based on thresholds. Micro-purchases, typically for those purchases $10,000 or under, and small purchase procedures for those purchases above the micro-purchase threshold, but below the simplified acquisition threshold. Micro-purchases may be awarded without soliciting competitive price rate quotations. If small purchase procedures are used, then price or rate quotations must be obtained from an adequate number of qualified sources. For funds expended under the revenue loss eligible use category, the above listed procurement requirements do not apply. During the audit period, the County had four vendors with purchases over the $10,000 micropurchase threshold which were expended under an eligible use category other than revenue loss and, as such, were considered small purchase procurements. The County did not provide competitive price quotations for the small purchase procurements for three of the four vendors, which totaled $257,038. Suspension and Debarment Prior to entering into subawards and covered transactions with SLFRF award funds, recipients are required to verify that such contractors and subrecipients are not suspended, debarred, or otherwise excluded. "Covered transactions" include, but are not limited to, contracts for goods and services awarded under a nonprocurement transaction (i.e., grant agreement) that are expected to equal or exceed $25,000. The verification is to be done by checking the Excluded Parties List System, collecting a certification from that person, or adding a clause or condition to the covered transaction with that person. During the engagement, an employee of the Board of County Commissioners stated that verification was completed by checking the Excluded Parties List System when covered transactions were entered into by the County to verify that an entity with which it plans to enter into a covered transaction is not suspended, debarred, or otherwise excluded or disqualified from participating in federal assistance programs or activities. Six covered transactions, totaling $3,952,203, were paid from SLFRF funds to six different vendors for goods or services that equaled or exceeded $25,000 during the audit period. Three of the six covered transactions were selected for testing. For all three transactions tested, documentation was not provided that the vendor's suspension and debarment status was verified. The lack of internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 31 CFR 19.300 states: "When you enter into a covered transaction with another person at the next lower tier, you must verify that the person with whom you do business is not excluded or disqualified. You do this by: (a) Checking the EPLS; or (b) Collecting a certification from that person if allowed by this rule; or (c) Adding a clause or condition to the covered transaction with that person." 2 CFR 200.318 states in part: "(a) The non-Federal entity must have and use documented procurement procedures, consistent with State, local, and tribal laws and regulations and the standards of this section, for the acquisition of property or services required under a Federal award or subaward. The non-Federal entity's documented procurement procedures must conform to the procurement standards identified in §§ 200.317 through 200.327. . . . (i) The non-Federal entity must maintain records sufficient to detail the history of procurement. These records will include, but are not necessarily limited to, the following: Rationale for the method of procurement, selection of contract type, contractor selection or rejection, and the basis for the contract price. . . ." 2 CFR 200.320 states in part: "The non-Federal entity must have and use documented procurement procedures, consistent with the standards of this section and §§ 200.317, 200.318, and 200.319 for any of the following methods of procurement used for the acquisition of property or services required under a Federal award or sub-award. (a) Informal procurement methods. When the value of the procurement for property or services under a Federal award does not exceed the simplified acquisition threshold (SAT), as defined in § 200.1, or a lower threshold established by a non-Federal entity, formal procurement methods are not required. The non-Federal entity may use informal procurement methods to expedite the completion of its transactions and minimize the associated administrative burden and cost. The informal methods used for procurement of property or services at or below the SAT include: . . . (2) Small purchases — (i) Small purchase procedures. The acquisition of property or services, the aggregate dollar amount of which is higher than the micro-purchase threshold but does not exceed the simplified acquisition threshold. If small purchase procedures are used, price or rate quotations must be obtained from an adequate number of qualified sources as determined appropriate by the non-Federal entity. . . . Cause The County was unable to provide documentation to demonstrate it had properly procured services. In addition, the County was unable to provide documentation to demonstrate it had checked the Excluded Parties List System, per the County's procedures, to ensure vendors were not suspended or debarred prior to entering into covered transactions that exceeded $25,000. Effect Without the proper implementation of an effectively designed system of internal controls, the County cannot demonstrate it obtained an adequate number of price or rate quotations prior to selecting a vendor. Therefore, the County could have overpaid for the services obtained. Furthermore, without the proper implementation of an effectively designed system of internal controls, the County cannot ensure the vendors paid with federal funds are eligible to participate in federal programs. Any program funds the County used to pay vendors that have been suspended or debarred would be unallowable, and the funding agency could potentially recover them. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the Board of County Commissioners strengthen the County's system of internal controls to ensure that an adequate number of price or rate quotations are obtained for small purchase procurements. Additionally, we recommended policies and procedures be strengthened to ensure appropriate supporting documentation for federal programs is retained. Lastly, we recommended that the Board of County Commissioners strengthen the County's system of internal controls to ensure that all vendors that are paid $25,000 or more, all or in part with federal funds, are not suspended or debarred from participating in federal programs before entering into any covered transactions. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.