Audit 356534

FINDING 2023-003 Subject: Child Nutrition Cluster - Activities Allowed or Unallowed Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Activities Allowed or Unallowed Audit Finding: Material Weakness Condition and Context A cash reimbursement is provided to the School Corporation based on meals served under the School Breakfast Program, National School Lunch Program, and Summer Food Service Program for Children. The cash reimbursement is to be used for the benefit of the food service program. An effective system of internal controls, which would include segregation of duties, that would likely be effective in preventing, or detecting and correcting, noncompliance should be designed and implemented to ensure expenditures charged to the food service program fund (fund 800) are for the benefit of the food service program. The School Corporation's process for payroll disbursements included a segregation of duties; however, no individual reviewer or approver was provided detailed payroll information that would have allowed them to determine the expense was being paid from the food service program. The lack of internal controls was a systemic issue throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Cause A proper system of internal controls was not designed by management of the School Corporation, which would include segregation of key functions. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. INDIANA STATE BOARD OF ACCOUNTS 18 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Effect Without the proper design or implementation of the components of a system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the School Corporation design and implement a proper system of internal controls, including policies and procedures that would provide segregation of duties to ensure appropriate reviews, approvals, and oversight are taking place. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-003 Subject: Child Nutrition Cluster - Activities Allowed or Unallowed Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Activities Allowed or Unallowed Audit Finding: Material Weakness Condition and Context A cash reimbursement is provided to the School Corporation based on meals served under the School Breakfast Program, National School Lunch Program, and Summer Food Service Program for Children. The cash reimbursement is to be used for the benefit of the food service program. An effective system of internal controls, which would include segregation of duties, that would likely be effective in preventing, or detecting and correcting, noncompliance should be designed and implemented to ensure expenditures charged to the food service program fund (fund 800) are for the benefit of the food service program. The School Corporation's process for payroll disbursements included a segregation of duties; however, no individual reviewer or approver was provided detailed payroll information that would have allowed them to determine the expense was being paid from the food service program. The lack of internal controls was a systemic issue throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Cause A proper system of internal controls was not designed by management of the School Corporation, which would include segregation of key functions. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. INDIANA STATE BOARD OF ACCOUNTS 18 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Effect Without the proper design or implementation of the components of a system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the School Corporation design and implement a proper system of internal controls, including policies and procedures that would provide segregation of duties to ensure appropriate reviews, approvals, and oversight are taking place. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-003 Subject: Child Nutrition Cluster - Activities Allowed or Unallowed Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Activities Allowed or Unallowed Audit Finding: Material Weakness Condition and Context A cash reimbursement is provided to the School Corporation based on meals served under the School Breakfast Program, National School Lunch Program, and Summer Food Service Program for Children. The cash reimbursement is to be used for the benefit of the food service program. An effective system of internal controls, which would include segregation of duties, that would likely be effective in preventing, or detecting and correcting, noncompliance should be designed and implemented to ensure expenditures charged to the food service program fund (fund 800) are for the benefit of the food service program. The School Corporation's process for payroll disbursements included a segregation of duties; however, no individual reviewer or approver was provided detailed payroll information that would have allowed them to determine the expense was being paid from the food service program. The lack of internal controls was a systemic issue throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Cause A proper system of internal controls was not designed by management of the School Corporation, which would include segregation of key functions. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. INDIANA STATE BOARD OF ACCOUNTS 18 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Effect Without the proper design or implementation of the components of a system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the School Corporation design and implement a proper system of internal controls, including policies and procedures that would provide segregation of duties to ensure appropriate reviews, approvals, and oversight are taking place. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-003 Subject: Child Nutrition Cluster - Activities Allowed or Unallowed Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Activities Allowed or Unallowed Audit Finding: Material Weakness Condition and Context A cash reimbursement is provided to the School Corporation based on meals served under the School Breakfast Program, National School Lunch Program, and Summer Food Service Program for Children. The cash reimbursement is to be used for the benefit of the food service program. An effective system of internal controls, which would include segregation of duties, that would likely be effective in preventing, or detecting and correcting, noncompliance should be designed and implemented to ensure expenditures charged to the food service program fund (fund 800) are for the benefit of the food service program. The School Corporation's process for payroll disbursements included a segregation of duties; however, no individual reviewer or approver was provided detailed payroll information that would have allowed them to determine the expense was being paid from the food service program. The lack of internal controls was a systemic issue throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Cause A proper system of internal controls was not designed by management of the School Corporation, which would include segregation of key functions. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. INDIANA STATE BOARD OF ACCOUNTS 18 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Effect Without the proper design or implementation of the components of a system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the School Corporation design and implement a proper system of internal controls, including policies and procedures that would provide segregation of duties to ensure appropriate reviews, approvals, and oversight are taking place. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-003 Subject: Child Nutrition Cluster - Activities Allowed or Unallowed Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Activities Allowed or Unallowed Audit Finding: Material Weakness Condition and Context A cash reimbursement is provided to the School Corporation based on meals served under the School Breakfast Program, National School Lunch Program, and Summer Food Service Program for Children. The cash reimbursement is to be used for the benefit of the food service program. An effective system of internal controls, which would include segregation of duties, that would likely be effective in preventing, or detecting and correcting, noncompliance should be designed and implemented to ensure expenditures charged to the food service program fund (fund 800) are for the benefit of the food service program. The School Corporation's process for payroll disbursements included a segregation of duties; however, no individual reviewer or approver was provided detailed payroll information that would have allowed them to determine the expense was being paid from the food service program. The lack of internal controls was a systemic issue throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Cause A proper system of internal controls was not designed by management of the School Corporation, which would include segregation of key functions. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. INDIANA STATE BOARD OF ACCOUNTS 18 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Effect Without the proper design or implementation of the components of a system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the School Corporation design and implement a proper system of internal controls, including policies and procedures that would provide segregation of duties to ensure appropriate reviews, approvals, and oversight are taking place. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-004 Subject: Child Nutrition Cluster - Allowable Costs/Cost Principles Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Allowable Costs/Cost Principles Audit Findings: Material Weakness, Other Matters Condition and Context A cash reimbursement is provided to the School Corporation based on meals served under the School Breakfast Program, National School Lunch Program, and Summer Food Service Program for Children. The cash reimbursement is to be used for the benefit of the food service program. An effective system of internal controls, which would include segregation of duties, that would likely be effective in preventing, or detecting and correcting, noncompliance should be designed and implemented to ensure expenditures charged to the food service program fund (fund 800) are for the benefit of the food service program. The School Corporation's process for payroll disbursements included a segregation of duties; however, no individual reviewer or approver was provided detailed payroll information that would have allowed them to determine the expense was being paid from the food service program. Due to the lack of internal controls, the School Corporation paid $23,682 of administrative salaries based on fixed percentages without supporting documentation to indicate how the percentages were determined or time records indicating time spent on the program by the applicable administrators. The amount paid, $23,682, is considered questioned costs. INDIANA STATE BOARD OF ACCOUNTS 19 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) The lack of internal controls was a systemic issue throughout the audit period. The noncompliance was isolated to the salaries identified above. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.403 states in part: "Except where otherwise authorized by statute, costs must meet the following general criteria in order to be allowable under Federal awards: (a) Be necessary and reasonable for the performance of the Federal award and be allocable thereto under these principles. (b) Conform to any limitations or exclusions set forth in these principles or in the Federal award as to types or amount of cost items. . . . (g) Be adequately documented. . . ." 2 CFR 200.430 states in part: "Standards for Documentation of Personnel Expenses (1) Charges to Federal awards for salaries and wages must be based on records that accurately reflect the work performed. These records must: (i) Be supported by a system of internal control which provides reasonable assurance that the charges are accurate, allowable, and properly allocated; (ii) Be incorporated into the official records of the non-Federal entity; (iii) Reasonably reflect the total activity for which the employee is compensated by the non- Federal entity, not exceeding 100% of compensated activities . . . (vii) Support the distribution of the employee's salary or wages among specific activities or cost objectives if the employee works on more than one Federal award; a Federal award and non-Federal award; an indirect cost activity and a direct cost activity; or two or more indirect activities which are allocated using different allocation bases; or an unallowable activity and a direct or indirect cost activity. . . ." INDIANA STATE BOARD OF ACCOUNTS 20 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Cause A proper system of internal controls was not designed by management of the School Corporation, which would include segregation of key functions. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, administrative payroll was charged to the school lunch fund without appropriate supporting documentation. Noncompliance with the grant agreement and the compliance requirement could result in the loss of future federal funds to the School Corporation. Questioned Costs Known questioned costs of $23,682 were identified as noted in the Condition and Context. Recommendation We recommended the School Corporation's management establish a proper system of internal controls and develop policies and procedures to ensure costs are adequately documented. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-004 Subject: Child Nutrition Cluster - Allowable Costs/Cost Principles Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Allowable Costs/Cost Principles Audit Findings: Material Weakness, Other Matters Condition and Context A cash reimbursement is provided to the School Corporation based on meals served under the School Breakfast Program, National School Lunch Program, and Summer Food Service Program for Children. The cash reimbursement is to be used for the benefit of the food service program. An effective system of internal controls, which would include segregation of duties, that would likely be effective in preventing, or detecting and correcting, noncompliance should be designed and implemented to ensure expenditures charged to the food service program fund (fund 800) are for the benefit of the food service program. The School Corporation's process for payroll disbursements included a segregation of duties; however, no individual reviewer or approver was provided detailed payroll information that would have allowed them to determine the expense was being paid from the food service program. Due to the lack of internal controls, the School Corporation paid $23,682 of administrative salaries based on fixed percentages without supporting documentation to indicate how the percentages were determined or time records indicating time spent on the program by the applicable administrators. The amount paid, $23,682, is considered questioned costs. INDIANA STATE BOARD OF ACCOUNTS 19 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) The lack of internal controls was a systemic issue throughout the audit period. The noncompliance was isolated to the salaries identified above. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.403 states in part: "Except where otherwise authorized by statute, costs must meet the following general criteria in order to be allowable under Federal awards: (a) Be necessary and reasonable for the performance of the Federal award and be allocable thereto under these principles. (b) Conform to any limitations or exclusions set forth in these principles or in the Federal award as to types or amount of cost items. . . . (g) Be adequately documented. . . ." 2 CFR 200.430 states in part: "Standards for Documentation of Personnel Expenses (1) Charges to Federal awards for salaries and wages must be based on records that accurately reflect the work performed. These records must: (i) Be supported by a system of internal control which provides reasonable assurance that the charges are accurate, allowable, and properly allocated; (ii) Be incorporated into the official records of the non-Federal entity; (iii) Reasonably reflect the total activity for which the employee is compensated by the non- Federal entity, not exceeding 100% of compensated activities . . . (vii) Support the distribution of the employee's salary or wages among specific activities or cost objectives if the employee works on more than one Federal award; a Federal award and non-Federal award; an indirect cost activity and a direct cost activity; or two or more indirect activities which are allocated using different allocation bases; or an unallowable activity and a direct or indirect cost activity. . . ." INDIANA STATE BOARD OF ACCOUNTS 20 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Cause A proper system of internal controls was not designed by management of the School Corporation, which would include segregation of key functions. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, administrative payroll was charged to the school lunch fund without appropriate supporting documentation. Noncompliance with the grant agreement and the compliance requirement could result in the loss of future federal funds to the School Corporation. Questioned Costs Known questioned costs of $23,682 were identified as noted in the Condition and Context. Recommendation We recommended the School Corporation's management establish a proper system of internal controls and develop policies and procedures to ensure costs are adequately documented. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-004 Subject: Child Nutrition Cluster - Allowable Costs/Cost Principles Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Allowable Costs/Cost Principles Audit Findings: Material Weakness, Other Matters Condition and Context A cash reimbursement is provided to the School Corporation based on meals served under the School Breakfast Program, National School Lunch Program, and Summer Food Service Program for Children. The cash reimbursement is to be used for the benefit of the food service program. An effective system of internal controls, which would include segregation of duties, that would likely be effective in preventing, or detecting and correcting, noncompliance should be designed and implemented to ensure expenditures charged to the food service program fund (fund 800) are for the benefit of the food service program. The School Corporation's process for payroll disbursements included a segregation of duties; however, no individual reviewer or approver was provided detailed payroll information that would have allowed them to determine the expense was being paid from the food service program. Due to the lack of internal controls, the School Corporation paid $23,682 of administrative salaries based on fixed percentages without supporting documentation to indicate how the percentages were determined or time records indicating time spent on the program by the applicable administrators. The amount paid, $23,682, is considered questioned costs. INDIANA STATE BOARD OF ACCOUNTS 19 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) The lack of internal controls was a systemic issue throughout the audit period. The noncompliance was isolated to the salaries identified above. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.403 states in part: "Except where otherwise authorized by statute, costs must meet the following general criteria in order to be allowable under Federal awards: (a) Be necessary and reasonable for the performance of the Federal award and be allocable thereto under these principles. (b) Conform to any limitations or exclusions set forth in these principles or in the Federal award as to types or amount of cost items. . . . (g) Be adequately documented. . . ." 2 CFR 200.430 states in part: "Standards for Documentation of Personnel Expenses (1) Charges to Federal awards for salaries and wages must be based on records that accurately reflect the work performed. These records must: (i) Be supported by a system of internal control which provides reasonable assurance that the charges are accurate, allowable, and properly allocated; (ii) Be incorporated into the official records of the non-Federal entity; (iii) Reasonably reflect the total activity for which the employee is compensated by the non- Federal entity, not exceeding 100% of compensated activities . . . (vii) Support the distribution of the employee's salary or wages among specific activities or cost objectives if the employee works on more than one Federal award; a Federal award and non-Federal award; an indirect cost activity and a direct cost activity; or two or more indirect activities which are allocated using different allocation bases; or an unallowable activity and a direct or indirect cost activity. . . ." INDIANA STATE BOARD OF ACCOUNTS 20 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Cause A proper system of internal controls was not designed by management of the School Corporation, which would include segregation of key functions. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, administrative payroll was charged to the school lunch fund without appropriate supporting documentation. Noncompliance with the grant agreement and the compliance requirement could result in the loss of future federal funds to the School Corporation. Questioned Costs Known questioned costs of $23,682 were identified as noted in the Condition and Context. Recommendation We recommended the School Corporation's management establish a proper system of internal controls and develop policies and procedures to ensure costs are adequately documented. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-004 Subject: Child Nutrition Cluster - Allowable Costs/Cost Principles Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Allowable Costs/Cost Principles Audit Findings: Material Weakness, Other Matters Condition and Context A cash reimbursement is provided to the School Corporation based on meals served under the School Breakfast Program, National School Lunch Program, and Summer Food Service Program for Children. The cash reimbursement is to be used for the benefit of the food service program. An effective system of internal controls, which would include segregation of duties, that would likely be effective in preventing, or detecting and correcting, noncompliance should be designed and implemented to ensure expenditures charged to the food service program fund (fund 800) are for the benefit of the food service program. The School Corporation's process for payroll disbursements included a segregation of duties; however, no individual reviewer or approver was provided detailed payroll information that would have allowed them to determine the expense was being paid from the food service program. Due to the lack of internal controls, the School Corporation paid $23,682 of administrative salaries based on fixed percentages without supporting documentation to indicate how the percentages were determined or time records indicating time spent on the program by the applicable administrators. The amount paid, $23,682, is considered questioned costs. INDIANA STATE BOARD OF ACCOUNTS 19 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) The lack of internal controls was a systemic issue throughout the audit period. The noncompliance was isolated to the salaries identified above. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.403 states in part: "Except where otherwise authorized by statute, costs must meet the following general criteria in order to be allowable under Federal awards: (a) Be necessary and reasonable for the performance of the Federal award and be allocable thereto under these principles. (b) Conform to any limitations or exclusions set forth in these principles or in the Federal award as to types or amount of cost items. . . . (g) Be adequately documented. . . ." 2 CFR 200.430 states in part: "Standards for Documentation of Personnel Expenses (1) Charges to Federal awards for salaries and wages must be based on records that accurately reflect the work performed. These records must: (i) Be supported by a system of internal control which provides reasonable assurance that the charges are accurate, allowable, and properly allocated; (ii) Be incorporated into the official records of the non-Federal entity; (iii) Reasonably reflect the total activity for which the employee is compensated by the non- Federal entity, not exceeding 100% of compensated activities . . . (vii) Support the distribution of the employee's salary or wages among specific activities or cost objectives if the employee works on more than one Federal award; a Federal award and non-Federal award; an indirect cost activity and a direct cost activity; or two or more indirect activities which are allocated using different allocation bases; or an unallowable activity and a direct or indirect cost activity. . . ." INDIANA STATE BOARD OF ACCOUNTS 20 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Cause A proper system of internal controls was not designed by management of the School Corporation, which would include segregation of key functions. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, administrative payroll was charged to the school lunch fund without appropriate supporting documentation. Noncompliance with the grant agreement and the compliance requirement could result in the loss of future federal funds to the School Corporation. Questioned Costs Known questioned costs of $23,682 were identified as noted in the Condition and Context. Recommendation We recommended the School Corporation's management establish a proper system of internal controls and develop policies and procedures to ensure costs are adequately documented. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-004 Subject: Child Nutrition Cluster - Allowable Costs/Cost Principles Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Allowable Costs/Cost Principles Audit Findings: Material Weakness, Other Matters Condition and Context A cash reimbursement is provided to the School Corporation based on meals served under the School Breakfast Program, National School Lunch Program, and Summer Food Service Program for Children. The cash reimbursement is to be used for the benefit of the food service program. An effective system of internal controls, which would include segregation of duties, that would likely be effective in preventing, or detecting and correcting, noncompliance should be designed and implemented to ensure expenditures charged to the food service program fund (fund 800) are for the benefit of the food service program. The School Corporation's process for payroll disbursements included a segregation of duties; however, no individual reviewer or approver was provided detailed payroll information that would have allowed them to determine the expense was being paid from the food service program. Due to the lack of internal controls, the School Corporation paid $23,682 of administrative salaries based on fixed percentages without supporting documentation to indicate how the percentages were determined or time records indicating time spent on the program by the applicable administrators. The amount paid, $23,682, is considered questioned costs. INDIANA STATE BOARD OF ACCOUNTS 19 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) The lack of internal controls was a systemic issue throughout the audit period. The noncompliance was isolated to the salaries identified above. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.403 states in part: "Except where otherwise authorized by statute, costs must meet the following general criteria in order to be allowable under Federal awards: (a) Be necessary and reasonable for the performance of the Federal award and be allocable thereto under these principles. (b) Conform to any limitations or exclusions set forth in these principles or in the Federal award as to types or amount of cost items. . . . (g) Be adequately documented. . . ." 2 CFR 200.430 states in part: "Standards for Documentation of Personnel Expenses (1) Charges to Federal awards for salaries and wages must be based on records that accurately reflect the work performed. These records must: (i) Be supported by a system of internal control which provides reasonable assurance that the charges are accurate, allowable, and properly allocated; (ii) Be incorporated into the official records of the non-Federal entity; (iii) Reasonably reflect the total activity for which the employee is compensated by the non- Federal entity, not exceeding 100% of compensated activities . . . (vii) Support the distribution of the employee's salary or wages among specific activities or cost objectives if the employee works on more than one Federal award; a Federal award and non-Federal award; an indirect cost activity and a direct cost activity; or two or more indirect activities which are allocated using different allocation bases; or an unallowable activity and a direct or indirect cost activity. . . ." INDIANA STATE BOARD OF ACCOUNTS 20 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Cause A proper system of internal controls was not designed by management of the School Corporation, which would include segregation of key functions. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, administrative payroll was charged to the school lunch fund without appropriate supporting documentation. Noncompliance with the grant agreement and the compliance requirement could result in the loss of future federal funds to the School Corporation. Questioned Costs Known questioned costs of $23,682 were identified as noted in the Condition and Context. Recommendation We recommended the School Corporation's management establish a proper system of internal controls and develop policies and procedures to ensure costs are adequately documented. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-005 Subject: Child Nutrition Cluster - Eligibility Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Eligibility Audit Findings: Material Weakness, Other Matters Repeat Finding This is a repeat finding from the prior audit report. The prior audit finding number was 2021-002. Condition and Context The School Corporation had not established effective internal controls that would likely be effective in preventing, or detecting and correcting, noncompliance related to the eligibility determination of a child receiving meals. INDIANA STATE BOARD OF ACCOUNTS 21 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Any child enrolled in a participating school or summer camp, or attending a Summer Food Service Program (SFSP) meal service site, who meets the applicable program's definition of "child," may receive meals under the applicable program. In the case of the National School Lunch Program and School Breakfast Program, children belonging to households meeting nationwide income eligibility requirements may receive meals at no charge or at reduced price. Children who have been determined ineligible for free or reduced-price school meals pay the full price, set by the School Food Authority, for their meals. Children attending SFSP meal service sites receive their meals at no charge. As a general rule, a child's eligibility for free or reduced-price meals under a Child Nutrition Cluster program may be established by the submission of an annual application or statement which furnishes such information as family income and family size. Local educational agencies, institutions, and sponsors then determine eligibility by comparing the data reported by the child's household to published income eligibility guidelines. Additionally, a child may be direct certified. For a direct certification, annual eligibility determinations are based on the child's household receiving benefits under SNAP, FDPIR, the Head Start Program (ALN 93.600), or, under most circumstances, the TANF program (ALN 93.558). A household may furnish documentation of its participation in one of these programs; or the school, institution, or sponsor may obtain the information directly from the State or local agency that administers these programs. Certain foster, runaway, homeless, and migrant children are categorically eligible for free school lunches and breakfasts. Direct certified households do not need to complete an application. The School Corporation's process for determining student eligibility was that the Assistant Food Service Director make the initial eligibility determination and the Food Service Director review the determination made. Per the School Corporation, all free or reduced priced applications received were subject to this process. A sample of 40 free or reduced priced applications were selected for testing to determine if the identified internal control was in place and operating. Of the 40 free and reduced priced applications selected for testing, 12 did not have the identified internal control in place. For these 12 applications, the Assistant Food Service Director made the initial eligibility determination, but there was no evidence that the Food Service Director reviewed the determination. In addition, a sample of 40 free or reduced priced applications were selected for testing to determine whether required eligibility determinations were made, participants were determined to be eligible, and that only eligible individuals participated in the program. Of the 40 free and reduced priced applications selected for testing, 3 were determined to have the incorrect eligibility status in the system software when compared to supporting documentation. The lack of internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." INDIANA STATE BOARD OF ACCOUNTS 22 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) 7 CFR 245.6 states in part: ". . . (b) Direct certification. In lieu of requiring a household to complete the free and reduced price meal or free milk application, as specified in paragraph (a) of this section, the local educational agency must certify children as eligible for free meals or free milk in accordance with paragraph (b)(1)(i) of this section or may certify children as eligible for free meals or free milk in accordance with paragraph (b)(2) of this section. If a household also submits an application for directly certified children, the direct certification eligibility determination will take precedence. . . . (5) Direct certification documentation. (i) The required documentation for direct certification is provided in paragraph (2) of the definition of Documentation in § 245.2. (ii) (A) Beginning in School Year 2012–2013, direct certification with SNAP shall be conducted using a data matching technique only. Letters to households for direct certification may be used only as an additional means to notify households of children's eligibility based on receipt of SNAP benefits. The last period that letters to households may be used as the primary method for direct certification is School Year 2011–2012. While such notices cannot be the primary method used by a state to document receipt of SNAP, the local educational agency shall accept such a letter if presented by a household. (B) Letters or other documents may be used as the primary method for direct certification to document receipt of FDPIR or TANF benefits. (iii) Individual notices from officials of eligible programs for a Foster child, a Homeless child, a Migrant child, a Runaway child, or a Head Start child, as defined in § 245.2, may continue to be used. These notices are provided to school officials who must certify these children as eligible for free meals or free milk, as applicable, without further application, upon receipt of such notice. . . . (c) Determination of Eligibility . . . (2) Use of prior year's eligibility status. Prior to the processing of applications or the completion of direct certification procedures for the current school year, children from households with approved applications or documentation of direct certification on file from the preceding year, shall be offered reimbursable free and reduced price meals or free milk, as appropriate. The local educational agency must extend eligibility to newly enrolled children when other children in their household (as defined in § 245.2) were approved for benefits the previous year. However, applications and documentation of direct certification from the preceding year shall be used only to determine eligibility for the first 30 operating days following the first operating day at the beginning of the school year, or until a new eligibility determination is made in the current school year, whichever comes first. At the State agency's discretion, students who, in the preceding school year, attended a school operating a special assistance certification and reimbursement alternative (as permitted in § 245.9)) may be offered free reimbursable meals for up to 30 operating days or until a new eligibility determination is made in the current school year, whichever comes first. . . . INDIANA STATE BOARD OF ACCOUNTS 23 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (4) Calculating income. The local educational agency must use the income information provided by the household on the application to calculate the household's total current income. When a household submits an application containing complete documentation, as defined in § 245.2, and the household's total current income is at or below the eligibility limits specified in the Income Eligibility Guidelines as defined in § 245.2, the children in that household must be approved for free or reduced price benefits, as applicable. . . ." Cause A proper system of internal controls was not designed by management of the School Corporation. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, a student's eligibility for free or reduced-price meals was incorrectly determined. Noncompliance with the grant agreement and the compliance requirement could result in the loss of future federal funds to the School Corporation. Questioned Costs There were no questioned costs identified. Recommendation We recommended the School Corporation's management establish a proper system of internal controls and develop policies and procedures to ensure only eligible students receive benefits. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-005 Subject: Child Nutrition Cluster - Eligibility Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Eligibility Audit Findings: Material Weakness, Other Matters Repeat Finding This is a repeat finding from the prior audit report. The prior audit finding number was 2021-002. Condition and Context The School Corporation had not established effective internal controls that would likely be effective in preventing, or detecting and correcting, noncompliance related to the eligibility determination of a child receiving meals. INDIANA STATE BOARD OF ACCOUNTS 21 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Any child enrolled in a participating school or summer camp, or attending a Summer Food Service Program (SFSP) meal service site, who meets the applicable program's definition of "child," may receive meals under the applicable program. In the case of the National School Lunch Program and School Breakfast Program, children belonging to households meeting nationwide income eligibility requirements may receive meals at no charge or at reduced price. Children who have been determined ineligible for free or reduced-price school meals pay the full price, set by the School Food Authority, for their meals. Children attending SFSP meal service sites receive their meals at no charge. As a general rule, a child's eligibility for free or reduced-price meals under a Child Nutrition Cluster program may be established by the submission of an annual application or statement which furnishes such information as family income and family size. Local educational agencies, institutions, and sponsors then determine eligibility by comparing the data reported by the child's household to published income eligibility guidelines. Additionally, a child may be direct certified. For a direct certification, annual eligibility determinations are based on the child's household receiving benefits under SNAP, FDPIR, the Head Start Program (ALN 93.600), or, under most circumstances, the TANF program (ALN 93.558). A household may furnish documentation of its participation in one of these programs; or the school, institution, or sponsor may obtain the information directly from the State or local agency that administers these programs. Certain foster, runaway, homeless, and migrant children are categorically eligible for free school lunches and breakfasts. Direct certified households do not need to complete an application. The School Corporation's process for determining student eligibility was that the Assistant Food Service Director make the initial eligibility determination and the Food Service Director review the determination made. Per the School Corporation, all free or reduced priced applications received were subject to this process. A sample of 40 free or reduced priced applications were selected for testing to determine if the identified internal control was in place and operating. Of the 40 free and reduced priced applications selected for testing, 12 did not have the identified internal control in place. For these 12 applications, the Assistant Food Service Director made the initial eligibility determination, but there was no evidence that the Food Service Director reviewed the determination. In addition, a sample of 40 free or reduced priced applications were selected for testing to determine whether required eligibility determinations were made, participants were determined to be eligible, and that only eligible individuals participated in the program. Of the 40 free and reduced priced applications selected for testing, 3 were determined to have the incorrect eligibility status in the system software when compared to supporting documentation. The lack of internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." INDIANA STATE BOARD OF ACCOUNTS 22 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) 7 CFR 245.6 states in part: ". . . (b) Direct certification. In lieu of requiring a household to complete the free and reduced price meal or free milk application, as specified in paragraph (a) of this section, the local educational agency must certify children as eligible for free meals or free milk in accordance with paragraph (b)(1)(i) of this section or may certify children as eligible for free meals or free milk in accordance with paragraph (b)(2) of this section. If a household also submits an application for directly certified children, the direct certification eligibility determination will take precedence. . . . (5) Direct certification documentation. (i) The required documentation for direct certification is provided in paragraph (2) of the definition of Documentation in § 245.2. (ii) (A) Beginning in School Year 2012–2013, direct certification with SNAP shall be conducted using a data matching technique only. Letters to households for direct certification may be used only as an additional means to notify households of children's eligibility based on receipt of SNAP benefits. The last period that letters to households may be used as the primary method for direct certification is School Year 2011–2012. While such notices cannot be the primary method used by a state to document receipt of SNAP, the local educational agency shall accept such a letter if presented by a household. (B) Letters or other documents may be used as the primary method for direct certification to document receipt of FDPIR or TANF benefits. (iii) Individual notices from officials of eligible programs for a Foster child, a Homeless child, a Migrant child, a Runaway child, or a Head Start child, as defined in § 245.2, may continue to be used. These notices are provided to school officials who must certify these children as eligible for free meals or free milk, as applicable, without further application, upon receipt of such notice. . . . (c) Determination of Eligibility . . . (2) Use of prior year's eligibility status. Prior to the processing of applications or the completion of direct certification procedures for the current school year, children from households with approved applications or documentation of direct certification on file from the preceding year, shall be offered reimbursable free and reduced price meals or free milk, as appropriate. The local educational agency must extend eligibility to newly enrolled children when other children in their household (as defined in § 245.2) were approved for benefits the previous year. However, applications and documentation of direct certification from the preceding year shall be used only to determine eligibility for the first 30 operating days following the first operating day at the beginning of the school year, or until a new eligibility determination is made in the current school year, whichever comes first. At the State agency's discretion, students who, in the preceding school year, attended a school operating a special assistance certification and reimbursement alternative (as permitted in § 245.9)) may be offered free reimbursable meals for up to 30 operating days or until a new eligibility determination is made in the current school year, whichever comes first. . . . INDIANA STATE BOARD OF ACCOUNTS 23 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (4) Calculating income. The local educational agency must use the income information provided by the household on the application to calculate the household's total current income. When a household submits an application containing complete documentation, as defined in § 245.2, and the household's total current income is at or below the eligibility limits specified in the Income Eligibility Guidelines as defined in § 245.2, the children in that household must be approved for free or reduced price benefits, as applicable. . . ." Cause A proper system of internal controls was not designed by management of the School Corporation. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, a student's eligibility for free or reduced-price meals was incorrectly determined. Noncompliance with the grant agreement and the compliance requirement could result in the loss of future federal funds to the School Corporation. Questioned Costs There were no questioned costs identified. Recommendation We recommended the School Corporation's management establish a proper system of internal controls and develop policies and procedures to ensure only eligible students receive benefits. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-006 Subject: Child Nutrition Cluster - Procurement and Suspension and Debarment Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Procurement and Suspension and Debarment Audit Findings: Material Weakness, Other Matters INDIANA STATE BOARD OF ACCOUNTS 24 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Condition and Context A School Nutrition Cooperative (Co-ops, Education Service Center, Group Purchasing Organization, etc.) that would like to be classified as a School Food Authority (SFA) Cooperative must complete a questionnaire and submit it to the Indiana Department of Education (IDOE). Once a questionnaire is received, the IDOE will review the answers to determine a Cooperative's classification. Only Cooperatives that submit the questionnaire and receive an SFA-only Cooperative classification from the IDOE in writing, will be considered an SFA only Cooperative for the purposes of the procurement process and procurement reviews. When the value of goods or services exceeds the simplified acquisition threshold, the proper purchasing method would be the bidding process, unless the purchase meets certain other qualifications. Federal regulations allow for informal procurement methods when the value of the procurement for goods or services does not exceed the simplified acquisition threshold, which is customarily set at $250,000. However, Indiana Code 5-22-8 has a more restrictive threshold of $150,000 or less for when small purchase procedures may be used. This informal process allows for methods other than the formal bid process. The informal process is divided between two methods based on thresholds. Micro-purchases, typically for those purchases $10,000 or under, and small purchase procedures for those purchases above the micropurchase threshold, but below the simplified acquisition threshold. Micro-purchases may be awarded without soliciting competitive price rate quotations. If small purchase procedures are used, then price or rate quotations must be obtained from an adequate number of qualified sources. If it is determined a single source provider can be used for a small purchase, documentation must be retained supporting the determination. Two vendors were identified as falling within the small purchase threshold. Both vendors were selected for testing. Supporting documentation to show that an adequate number of price or rate quotations were obtained to ensure full and open competition could not be provided for audit. The lack of internal controls and noncompliance were systemic issues throughout the audit. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.318 states in part: "(a) The non-Federal entity must have and use documented procurement procedures, consistent with State, local, and tribal laws and regulations and the standards of this section, for the acquisition of property or services required under a Federal award or subaward. The non-Federal entity's documented procurement procedures must conform to the procurement standards identified in §§ 200.317 through 200.327. . . . INDIANA STATE BOARD OF ACCOUNTS 25 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (i) The non-Federal entity must maintain records sufficient to detail the history of procurement. These records will include, but are not necessarily limited to, the following: Rationale for the method of procurement, selection of contract type, contractor selection or rejection, and the basis for the contract price. . . ." 2 CFR 200.320 states in part: "The non-Federal entity must have and use document procurement procedures, consistent with the standards of this section and §§ 200.317, 200.318, and 200.319 for any of the following methods of procurement used for the acquisition of property or services required under a Federal award or sub-award. (a) Informal procurement methods. When the value of the procurement for property or services under a Federal award does not exceed the simplified acquisition threshold (SAT), as defined in § 200.1, or a lower threshold established by a non-Federal entity, formal procurement methods are not required. The non-Federal entity may use informal procurement methods to expedite the completion of its transactions and minimize the associated administrative burden and cost. The informal methods used for procurement of property or services at or below the SAT include: (2) Small purchases – (i) Small purchase procedures. The acquisition of property or services, the aggregate dollar amount of which is higher than the micro-purchase threshold but does not exceed the simplified acquisition threshold. If small purchase procedures are used, price or rate quotations must be obtained from an adequate number of qualified sources as determined appropriate by the non-Federal entity. . . ." Cause A proper system of internal controls was not designed by management of the School Corporation. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, procurement procedures for goods and services were not adhered to. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the School Corporation's management establish a proper system of internal controls and develop policies and procedures to ensure there are appropriate procurement procedures for goods and services. INDIANA STATE BOARD OF ACCOUNTS 26 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-006 Subject: Child Nutrition Cluster - Procurement and Suspension and Debarment Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Procurement and Suspension and Debarment Audit Findings: Material Weakness, Other Matters INDIANA STATE BOARD OF ACCOUNTS 24 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Condition and Context A School Nutrition Cooperative (Co-ops, Education Service Center, Group Purchasing Organization, etc.) that would like to be classified as a School Food Authority (SFA) Cooperative must complete a questionnaire and submit it to the Indiana Department of Education (IDOE). Once a questionnaire is received, the IDOE will review the answers to determine a Cooperative's classification. Only Cooperatives that submit the questionnaire and receive an SFA-only Cooperative classification from the IDOE in writing, will be considered an SFA only Cooperative for the purposes of the procurement process and procurement reviews. When the value of goods or services exceeds the simplified acquisition threshold, the proper purchasing method would be the bidding process, unless the purchase meets certain other qualifications. Federal regulations allow for informal procurement methods when the value of the procurement for goods or services does not exceed the simplified acquisition threshold, which is customarily set at $250,000. However, Indiana Code 5-22-8 has a more restrictive threshold of $150,000 or less for when small purchase procedures may be used. This informal process allows for methods other than the formal bid process. The informal process is divided between two methods based on thresholds. Micro-purchases, typically for those purchases $10,000 or under, and small purchase procedures for those purchases above the micropurchase threshold, but below the simplified acquisition threshold. Micro-purchases may be awarded without soliciting competitive price rate quotations. If small purchase procedures are used, then price or rate quotations must be obtained from an adequate number of qualified sources. If it is determined a single source provider can be used for a small purchase, documentation must be retained supporting the determination. Two vendors were identified as falling within the small purchase threshold. Both vendors were selected for testing. Supporting documentation to show that an adequate number of price or rate quotations were obtained to ensure full and open competition could not be provided for audit. The lack of internal controls and noncompliance were systemic issues throughout the audit. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.318 states in part: "(a) The non-Federal entity must have and use documented procurement procedures, consistent with State, local, and tribal laws and regulations and the standards of this section, for the acquisition of property or services required under a Federal award or subaward. The non-Federal entity's documented procurement procedures must conform to the procurement standards identified in §§ 200.317 through 200.327. . . . INDIANA STATE BOARD OF ACCOUNTS 25 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (i) The non-Federal entity must maintain records sufficient to detail the history of procurement. These records will include, but are not necessarily limited to, the following: Rationale for the method of procurement, selection of contract type, contractor selection or rejection, and the basis for the contract price. . . ." 2 CFR 200.320 states in part: "The non-Federal entity must have and use document procurement procedures, consistent with the standards of this section and §§ 200.317, 200.318, and 200.319 for any of the following methods of procurement used for the acquisition of property or services required under a Federal award or sub-award. (a) Informal procurement methods. When the value of the procurement for property or services under a Federal award does not exceed the simplified acquisition threshold (SAT), as defined in § 200.1, or a lower threshold established by a non-Federal entity, formal procurement methods are not required. The non-Federal entity may use informal procurement methods to expedite the completion of its transactions and minimize the associated administrative burden and cost. The informal methods used for procurement of property or services at or below the SAT include: (2) Small purchases – (i) Small purchase procedures. The acquisition of property or services, the aggregate dollar amount of which is higher than the micro-purchase threshold but does not exceed the simplified acquisition threshold. If small purchase procedures are used, price or rate quotations must be obtained from an adequate number of qualified sources as determined appropriate by the non-Federal entity. . . ." Cause A proper system of internal controls was not designed by management of the School Corporation. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, procurement procedures for goods and services were not adhered to. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the School Corporation's management establish a proper system of internal controls and develop policies and procedures to ensure there are appropriate procurement procedures for goods and services. INDIANA STATE BOARD OF ACCOUNTS 26 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-006 Subject: Child Nutrition Cluster - Procurement and Suspension and Debarment Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Procurement and Suspension and Debarment Audit Findings: Material Weakness, Other Matters INDIANA STATE BOARD OF ACCOUNTS 24 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Condition and Context A School Nutrition Cooperative (Co-ops, Education Service Center, Group Purchasing Organization, etc.) that would like to be classified as a School Food Authority (SFA) Cooperative must complete a questionnaire and submit it to the Indiana Department of Education (IDOE). Once a questionnaire is received, the IDOE will review the answers to determine a Cooperative's classification. Only Cooperatives that submit the questionnaire and receive an SFA-only Cooperative classification from the IDOE in writing, will be considered an SFA only Cooperative for the purposes of the procurement process and procurement reviews. When the value of goods or services exceeds the simplified acquisition threshold, the proper purchasing method would be the bidding process, unless the purchase meets certain other qualifications. Federal regulations allow for informal procurement methods when the value of the procurement for goods or services does not exceed the simplified acquisition threshold, which is customarily set at $250,000. However, Indiana Code 5-22-8 has a more restrictive threshold of $150,000 or less for when small purchase procedures may be used. This informal process allows for methods other than the formal bid process. The informal process is divided between two methods based on thresholds. Micro-purchases, typically for those purchases $10,000 or under, and small purchase procedures for those purchases above the micropurchase threshold, but below the simplified acquisition threshold. Micro-purchases may be awarded without soliciting competitive price rate quotations. If small purchase procedures are used, then price or rate quotations must be obtained from an adequate number of qualified sources. If it is determined a single source provider can be used for a small purchase, documentation must be retained supporting the determination. Two vendors were identified as falling within the small purchase threshold. Both vendors were selected for testing. Supporting documentation to show that an adequate number of price or rate quotations were obtained to ensure full and open competition could not be provided for audit. The lack of internal controls and noncompliance were systemic issues throughout the audit. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.318 states in part: "(a) The non-Federal entity must have and use documented procurement procedures, consistent with State, local, and tribal laws and regulations and the standards of this section, for the acquisition of property or services required under a Federal award or subaward. The non-Federal entity's documented procurement procedures must conform to the procurement standards identified in §§ 200.317 through 200.327. . . . INDIANA STATE BOARD OF ACCOUNTS 25 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (i) The non-Federal entity must maintain records sufficient to detail the history of procurement. These records will include, but are not necessarily limited to, the following: Rationale for the method of procurement, selection of contract type, contractor selection or rejection, and the basis for the contract price. . . ." 2 CFR 200.320 states in part: "The non-Federal entity must have and use document procurement procedures, consistent with the standards of this section and §§ 200.317, 200.318, and 200.319 for any of the following methods of procurement used for the acquisition of property or services required under a Federal award or sub-award. (a) Informal procurement methods. When the value of the procurement for property or services under a Federal award does not exceed the simplified acquisition threshold (SAT), as defined in § 200.1, or a lower threshold established by a non-Federal entity, formal procurement methods are not required. The non-Federal entity may use informal procurement methods to expedite the completion of its transactions and minimize the associated administrative burden and cost. The informal methods used for procurement of property or services at or below the SAT include: (2) Small purchases – (i) Small purchase procedures. The acquisition of property or services, the aggregate dollar amount of which is higher than the micro-purchase threshold but does not exceed the simplified acquisition threshold. If small purchase procedures are used, price or rate quotations must be obtained from an adequate number of qualified sources as determined appropriate by the non-Federal entity. . . ." Cause A proper system of internal controls was not designed by management of the School Corporation. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, procurement procedures for goods and services were not adhered to. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the School Corporation's management establish a proper system of internal controls and develop policies and procedures to ensure there are appropriate procurement procedures for goods and services. INDIANA STATE BOARD OF ACCOUNTS 26 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-006 Subject: Child Nutrition Cluster - Procurement and Suspension and Debarment Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Procurement and Suspension and Debarment Audit Findings: Material Weakness, Other Matters INDIANA STATE BOARD OF ACCOUNTS 24 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Condition and Context A School Nutrition Cooperative (Co-ops, Education Service Center, Group Purchasing Organization, etc.) that would like to be classified as a School Food Authority (SFA) Cooperative must complete a questionnaire and submit it to the Indiana Department of Education (IDOE). Once a questionnaire is received, the IDOE will review the answers to determine a Cooperative's classification. Only Cooperatives that submit the questionnaire and receive an SFA-only Cooperative classification from the IDOE in writing, will be considered an SFA only Cooperative for the purposes of the procurement process and procurement reviews. When the value of goods or services exceeds the simplified acquisition threshold, the proper purchasing method would be the bidding process, unless the purchase meets certain other qualifications. Federal regulations allow for informal procurement methods when the value of the procurement for goods or services does not exceed the simplified acquisition threshold, which is customarily set at $250,000. However, Indiana Code 5-22-8 has a more restrictive threshold of $150,000 or less for when small purchase procedures may be used. This informal process allows for methods other than the formal bid process. The informal process is divided between two methods based on thresholds. Micro-purchases, typically for those purchases $10,000 or under, and small purchase procedures for those purchases above the micropurchase threshold, but below the simplified acquisition threshold. Micro-purchases may be awarded without soliciting competitive price rate quotations. If small purchase procedures are used, then price or rate quotations must be obtained from an adequate number of qualified sources. If it is determined a single source provider can be used for a small purchase, documentation must be retained supporting the determination. Two vendors were identified as falling within the small purchase threshold. Both vendors were selected for testing. Supporting documentation to show that an adequate number of price or rate quotations were obtained to ensure full and open competition could not be provided for audit. The lack of internal controls and noncompliance were systemic issues throughout the audit. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.318 states in part: "(a) The non-Federal entity must have and use documented procurement procedures, consistent with State, local, and tribal laws and regulations and the standards of this section, for the acquisition of property or services required under a Federal award or subaward. The non-Federal entity's documented procurement procedures must conform to the procurement standards identified in §§ 200.317 through 200.327. . . . INDIANA STATE BOARD OF ACCOUNTS 25 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (i) The non-Federal entity must maintain records sufficient to detail the history of procurement. These records will include, but are not necessarily limited to, the following: Rationale for the method of procurement, selection of contract type, contractor selection or rejection, and the basis for the contract price. . . ." 2 CFR 200.320 states in part: "The non-Federal entity must have and use document procurement procedures, consistent with the standards of this section and §§ 200.317, 200.318, and 200.319 for any of the following methods of procurement used for the acquisition of property or services required under a Federal award or sub-award. (a) Informal procurement methods. When the value of the procurement for property or services under a Federal award does not exceed the simplified acquisition threshold (SAT), as defined in § 200.1, or a lower threshold established by a non-Federal entity, formal procurement methods are not required. The non-Federal entity may use informal procurement methods to expedite the completion of its transactions and minimize the associated administrative burden and cost. The informal methods used for procurement of property or services at or below the SAT include: (2) Small purchases – (i) Small purchase procedures. The acquisition of property or services, the aggregate dollar amount of which is higher than the micro-purchase threshold but does not exceed the simplified acquisition threshold. If small purchase procedures are used, price or rate quotations must be obtained from an adequate number of qualified sources as determined appropriate by the non-Federal entity. . . ." Cause A proper system of internal controls was not designed by management of the School Corporation. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, procurement procedures for goods and services were not adhered to. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the School Corporation's management establish a proper system of internal controls and develop policies and procedures to ensure there are appropriate procurement procedures for goods and services. INDIANA STATE BOARD OF ACCOUNTS 26 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-006 Subject: Child Nutrition Cluster - Procurement and Suspension and Debarment Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Procurement and Suspension and Debarment Audit Findings: Material Weakness, Other Matters INDIANA STATE BOARD OF ACCOUNTS 24 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Condition and Context A School Nutrition Cooperative (Co-ops, Education Service Center, Group Purchasing Organization, etc.) that would like to be classified as a School Food Authority (SFA) Cooperative must complete a questionnaire and submit it to the Indiana Department of Education (IDOE). Once a questionnaire is received, the IDOE will review the answers to determine a Cooperative's classification. Only Cooperatives that submit the questionnaire and receive an SFA-only Cooperative classification from the IDOE in writing, will be considered an SFA only Cooperative for the purposes of the procurement process and procurement reviews. When the value of goods or services exceeds the simplified acquisition threshold, the proper purchasing method would be the bidding process, unless the purchase meets certain other qualifications. Federal regulations allow for informal procurement methods when the value of the procurement for goods or services does not exceed the simplified acquisition threshold, which is customarily set at $250,000. However, Indiana Code 5-22-8 has a more restrictive threshold of $150,000 or less for when small purchase procedures may be used. This informal process allows for methods other than the formal bid process. The informal process is divided between two methods based on thresholds. Micro-purchases, typically for those purchases $10,000 or under, and small purchase procedures for those purchases above the micropurchase threshold, but below the simplified acquisition threshold. Micro-purchases may be awarded without soliciting competitive price rate quotations. If small purchase procedures are used, then price or rate quotations must be obtained from an adequate number of qualified sources. If it is determined a single source provider can be used for a small purchase, documentation must be retained supporting the determination. Two vendors were identified as falling within the small purchase threshold. Both vendors were selected for testing. Supporting documentation to show that an adequate number of price or rate quotations were obtained to ensure full and open competition could not be provided for audit. The lack of internal controls and noncompliance were systemic issues throughout the audit. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.318 states in part: "(a) The non-Federal entity must have and use documented procurement procedures, consistent with State, local, and tribal laws and regulations and the standards of this section, for the acquisition of property or services required under a Federal award or subaward. The non-Federal entity's documented procurement procedures must conform to the procurement standards identified in §§ 200.317 through 200.327. . . . INDIANA STATE BOARD OF ACCOUNTS 25 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (i) The non-Federal entity must maintain records sufficient to detail the history of procurement. These records will include, but are not necessarily limited to, the following: Rationale for the method of procurement, selection of contract type, contractor selection or rejection, and the basis for the contract price. . . ." 2 CFR 200.320 states in part: "The non-Federal entity must have and use document procurement procedures, consistent with the standards of this section and §§ 200.317, 200.318, and 200.319 for any of the following methods of procurement used for the acquisition of property or services required under a Federal award or sub-award. (a) Informal procurement methods. When the value of the procurement for property or services under a Federal award does not exceed the simplified acquisition threshold (SAT), as defined in § 200.1, or a lower threshold established by a non-Federal entity, formal procurement methods are not required. The non-Federal entity may use informal procurement methods to expedite the completion of its transactions and minimize the associated administrative burden and cost. The informal methods used for procurement of property or services at or below the SAT include: (2) Small purchases – (i) Small purchase procedures. The acquisition of property or services, the aggregate dollar amount of which is higher than the micro-purchase threshold but does not exceed the simplified acquisition threshold. If small purchase procedures are used, price or rate quotations must be obtained from an adequate number of qualified sources as determined appropriate by the non-Federal entity. . . ." Cause A proper system of internal controls was not designed by management of the School Corporation. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, procurement procedures for goods and services were not adhered to. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the School Corporation's management establish a proper system of internal controls and develop policies and procedures to ensure there are appropriate procurement procedures for goods and services. INDIANA STATE BOARD OF ACCOUNTS 26 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-007 Subject: Child Nutrition Cluster - Reporting Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Reporting Audit Finding: Material Weakness Condition and Context The School Corporation had not properly designed or implemented a system of internal controls, which would include appropriate segregation of duties, that would likely be effective in preventing, or detecting and correcting, noncompliance related to the monthly reimbursement claims. Monthly reimbursement claims for breakfast and lunch meals served are prepared and submitted without a documented review or approval by a second individual not involved in the preparation of the reimbursement claim. The lack of internal controls was a systemic issue throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Cause A proper system of internal controls was not designed by management of the School Corporation, which would include segregation of key functions. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. INDIANA STATE BOARD OF ACCOUNTS 27 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Effect Without the proper design or implementation of the components of a system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the School Corporation's management design and implement a proper system of internal controls, including policies and procedures that would provide segregation of duties to ensure appropriate reviews, approvals, and oversight are taking place. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-007 Subject: Child Nutrition Cluster - Reporting Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Reporting Audit Finding: Material Weakness Condition and Context The School Corporation had not properly designed or implemented a system of internal controls, which would include appropriate segregation of duties, that would likely be effective in preventing, or detecting and correcting, noncompliance related to the monthly reimbursement claims. Monthly reimbursement claims for breakfast and lunch meals served are prepared and submitted without a documented review or approval by a second individual not involved in the preparation of the reimbursement claim. The lack of internal controls was a systemic issue throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Cause A proper system of internal controls was not designed by management of the School Corporation, which would include segregation of key functions. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. INDIANA STATE BOARD OF ACCOUNTS 27 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Effect Without the proper design or implementation of the components of a system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the School Corporation's management design and implement a proper system of internal controls, including policies and procedures that would provide segregation of duties to ensure appropriate reviews, approvals, and oversight are taking place. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-007 Subject: Child Nutrition Cluster - Reporting Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Reporting Audit Finding: Material Weakness Condition and Context The School Corporation had not properly designed or implemented a system of internal controls, which would include appropriate segregation of duties, that would likely be effective in preventing, or detecting and correcting, noncompliance related to the monthly reimbursement claims. Monthly reimbursement claims for breakfast and lunch meals served are prepared and submitted without a documented review or approval by a second individual not involved in the preparation of the reimbursement claim. The lack of internal controls was a systemic issue throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Cause A proper system of internal controls was not designed by management of the School Corporation, which would include segregation of key functions. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. INDIANA STATE BOARD OF ACCOUNTS 27 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Effect Without the proper design or implementation of the components of a system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the School Corporation's management design and implement a proper system of internal controls, including policies and procedures that would provide segregation of duties to ensure appropriate reviews, approvals, and oversight are taking place. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-007 Subject: Child Nutrition Cluster - Reporting Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Reporting Audit Finding: Material Weakness Condition and Context The School Corporation had not properly designed or implemented a system of internal controls, which would include appropriate segregation of duties, that would likely be effective in preventing, or detecting and correcting, noncompliance related to the monthly reimbursement claims. Monthly reimbursement claims for breakfast and lunch meals served are prepared and submitted without a documented review or approval by a second individual not involved in the preparation of the reimbursement claim. The lack of internal controls was a systemic issue throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Cause A proper system of internal controls was not designed by management of the School Corporation, which would include segregation of key functions. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. INDIANA STATE BOARD OF ACCOUNTS 27 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Effect Without the proper design or implementation of the components of a system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the School Corporation's management design and implement a proper system of internal controls, including policies and procedures that would provide segregation of duties to ensure appropriate reviews, approvals, and oversight are taking place. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-007 Subject: Child Nutrition Cluster - Reporting Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Reporting Audit Finding: Material Weakness Condition and Context The School Corporation had not properly designed or implemented a system of internal controls, which would include appropriate segregation of duties, that would likely be effective in preventing, or detecting and correcting, noncompliance related to the monthly reimbursement claims. Monthly reimbursement claims for breakfast and lunch meals served are prepared and submitted without a documented review or approval by a second individual not involved in the preparation of the reimbursement claim. The lack of internal controls was a systemic issue throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Cause A proper system of internal controls was not designed by management of the School Corporation, which would include segregation of key functions. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. INDIANA STATE BOARD OF ACCOUNTS 27 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Effect Without the proper design or implementation of the components of a system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the School Corporation's management design and implement a proper system of internal controls, including policies and procedures that would provide segregation of duties to ensure appropriate reviews, approvals, and oversight are taking place. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-008 Subject: Child Nutrition Cluster - Special Tests and Provisions - Verification of Free and Reduced-Price Applications (NSLP) Federal Agency: Department of Agriculture Federal Programs: National School Lunch Program Assistance Listings Number: 10.555 Federal Award Numbers and Years (or Other Identifying Numbers): FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Special Tests and Provisions - Verification of Free and Reduced-Price Applications (NSLP) Audit Findings: Material Weakness, Other Matters Condition and Context By November 15 of each school year, the Local Educational Agencies (LEA) must verify the current free and reduced-price eligibility of households selected from a sample of applications that it has approved for free and reduced-price meals, unless the LEA is otherwise exempt from the verification requirement. The verification sample size is based on the total number of approved applications on file on October 1. If the LEA performs the verification function it must be in accordance with instructions provided by the state agency. The LEA must follow up on children whose eligibility status has changed as the result of verification activities to put them in the correct category. As instructed, the LEAs must select a sample of applications to be verified utilizing one of the following methods: INDIANA STATE BOARD OF ACCOUNTS 28 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) a. Standard sample size - The lesser of 3 percent or 3,000 of the approved applications on file as of October 1, selected from error-prone applications. For this purpose, error prone applications are those showing household incomes within $100 monthly or $1,200 annually of the income eligibility guidelines for free and reduced price meals. b. Alternative sample sizes - (1) The lesser of 3 percent or 3,000 applications selected at random from approved applications on file as of October 1 of the school year, or (2) The sum of (a) the lesser of 1 percent of all applications identified as error-prone or 1,000 error-prone applications, and (b) the lesser of 1/2 of 1 percent of, or 500, approved applications in which the household provided, in lieu of income information, a case number showing participation in the SNAP, TANF, or FDPIR. In accordance with the above guidance, the School Corporation selected a sample of verifications based on the alternative sample size. As such, the School Corporation was required to review the lesser of 3 percent or 3,000 applications selected at random from approved applications on file as of October 1 of the 2022-2023 school year. On October 1, the School Corporation had 93 applications on file and determined that 3 applications were required to be verified. One employee was responsible for performing the required verification of the 3 free and reducedprice applications. There was no documentation of an oversight, review, or approval process to ensure that the verifications were properly performed. All three of the required verifications were selected for testing. For each verification, the School Corporation requested income documentation from the applicant to perform the verification as required. For one of the three verifications tested, it was determined the verification was not completed appropriately as required. For the noted student, income documentation was not provided as requested, nor could the student be located on the direct certification listings or lookup therefore a status of free, as noted in the system, could not be verified as accurate. The lack of internal controls and noncompliance were isolated to fiscal year 2022-2023. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 7 CFR 245.6a states in part: ". . . (f) Verification procedures and assistance for households - . . . INDIANA STATE BOARD OF ACCOUNTS 29 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (7) Eligibility changes. Based on the verification activities, the local educational agency shall make appropriate modifications to the eligibility determinations made initially. The local educational agency must notify the household of any change. Households must be notified of any reduction in benefits in accordance with paragraph (j) of this section. Households with reduced benefits or that are longer eligible for free or reduced price meals must be notified of their right to reapply at any time with documentation of income or participation in one of the eligible programs in paragraph (a)(1) of this section. . . . (j) Adverse action. If verification activities fail to confirm eligibility for free or reduced price benefits or should the household fail to cooperate with verification efforts, the school or local educational agency shall reduce or terminate benefits, as applicable, as follows: Ten days advance notification shall be provided to households that are to receive a reduction or termination of benefits, prior to the actual reduction or termination. The first day of the 10 day advance notice period shall be the day the notice is sent. The notice shall advise the household of: (1) The change; (2) The reasons for the change; (3) Notification of the right to appeal and when the appeal must be filed to ensure continued benefits while awaiting a hearing and decision; (4) Instructions on how to appeal; and (5) The right to reapply at any time during the school year. The reasons for ineligibility shall be properly documented and retained on file at the local educational agency." Cause A proper system of internal controls was not designed by management of the School Corporation, which would include segregation of duties. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, verifications for free and reduced-price applications could not be verified as accurate. Noncompliance with the grant agreement and the compliance requirement could result in the loss of future federal funds to the School Corporation. Questioned Costs There were no questioned costs identified. INDIANA STATE BOARD OF ACCOUNTS 30 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Recommendation We recommended that management of the School Corporation establish a proper system of internal controls and develop policies and procedures to ensure verifications for free and reduced-price applications are appropriately completed and reviewed. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-009 Subject: Child Nutrition Cluster - Special Tests and Provisions - Non-Profit School Food Service Accounts Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Special Tests and Provisions - Non-Profit School Food Service Accounts Audit Finding: Material Weakness Condition and Context The School Corporation had not properly designed or implemented a system of internal controls, which would include appropriate segregation of duties, that would likely be effective in preventing, or detecting and correcting, noncompliance. All revenues and expenditures of the non-profit school food service account are to be accounted for in accordance with state and federal requirements. As such separate accounting is to be made for the school food service, federal reimbursements are to be correcting credited to the food service account, and transfers out of the school food service account are to be for allowable costs of the school food service. Receipt of the federal reimbursements were posted to the ledger by one individual without an oversight or review process in place to ensure the remitter, amount, fund, and receipt classification were accurate. Additionally, the same individual received the ACH notifications when monies from monthly meal reimbursements were credited to the School Corporation's bank account and performed the bank reconciliations. The lack of internal controls was a systemic issue throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." INDIANA STATE BOARD OF ACCOUNTS 31 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Cause A proper system of internal controls was not designed by management of the School Corporation, which would include appropriate segregation of duties. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the School Corporation's management design and implement a proper system of internal controls, including policies and procedures that would provide segregation of duties to ensure appropriate reviews, approvals, and oversight are taking place. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-009 Subject: Child Nutrition Cluster - Special Tests and Provisions - Non-Profit School Food Service Accounts Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Special Tests and Provisions - Non-Profit School Food Service Accounts Audit Finding: Material Weakness Condition and Context The School Corporation had not properly designed or implemented a system of internal controls, which would include appropriate segregation of duties, that would likely be effective in preventing, or detecting and correcting, noncompliance. All revenues and expenditures of the non-profit school food service account are to be accounted for in accordance with state and federal requirements. As such separate accounting is to be made for the school food service, federal reimbursements are to be correcting credited to the food service account, and transfers out of the school food service account are to be for allowable costs of the school food service. Receipt of the federal reimbursements were posted to the ledger by one individual without an oversight or review process in place to ensure the remitter, amount, fund, and receipt classification were accurate. Additionally, the same individual received the ACH notifications when monies from monthly meal reimbursements were credited to the School Corporation's bank account and performed the bank reconciliations. The lack of internal controls was a systemic issue throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." INDIANA STATE BOARD OF ACCOUNTS 31 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Cause A proper system of internal controls was not designed by management of the School Corporation, which would include appropriate segregation of duties. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the School Corporation's management design and implement a proper system of internal controls, including policies and procedures that would provide segregation of duties to ensure appropriate reviews, approvals, and oversight are taking place. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-009 Subject: Child Nutrition Cluster - Special Tests and Provisions - Non-Profit School Food Service Accounts Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Special Tests and Provisions - Non-Profit School Food Service Accounts Audit Finding: Material Weakness Condition and Context The School Corporation had not properly designed or implemented a system of internal controls, which would include appropriate segregation of duties, that would likely be effective in preventing, or detecting and correcting, noncompliance. All revenues and expenditures of the non-profit school food service account are to be accounted for in accordance with state and federal requirements. As such separate accounting is to be made for the school food service, federal reimbursements are to be correcting credited to the food service account, and transfers out of the school food service account are to be for allowable costs of the school food service. Receipt of the federal reimbursements were posted to the ledger by one individual without an oversight or review process in place to ensure the remitter, amount, fund, and receipt classification were accurate. Additionally, the same individual received the ACH notifications when monies from monthly meal reimbursements were credited to the School Corporation's bank account and performed the bank reconciliations. The lack of internal controls was a systemic issue throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." INDIANA STATE BOARD OF ACCOUNTS 31 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Cause A proper system of internal controls was not designed by management of the School Corporation, which would include appropriate segregation of duties. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the School Corporation's management design and implement a proper system of internal controls, including policies and procedures that would provide segregation of duties to ensure appropriate reviews, approvals, and oversight are taking place. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-009 Subject: Child Nutrition Cluster - Special Tests and Provisions - Non-Profit School Food Service Accounts Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Special Tests and Provisions - Non-Profit School Food Service Accounts Audit Finding: Material Weakness Condition and Context The School Corporation had not properly designed or implemented a system of internal controls, which would include appropriate segregation of duties, that would likely be effective in preventing, or detecting and correcting, noncompliance. All revenues and expenditures of the non-profit school food service account are to be accounted for in accordance with state and federal requirements. As such separate accounting is to be made for the school food service, federal reimbursements are to be correcting credited to the food service account, and transfers out of the school food service account are to be for allowable costs of the school food service. Receipt of the federal reimbursements were posted to the ledger by one individual without an oversight or review process in place to ensure the remitter, amount, fund, and receipt classification were accurate. Additionally, the same individual received the ACH notifications when monies from monthly meal reimbursements were credited to the School Corporation's bank account and performed the bank reconciliations. The lack of internal controls was a systemic issue throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." INDIANA STATE BOARD OF ACCOUNTS 31 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Cause A proper system of internal controls was not designed by management of the School Corporation, which would include appropriate segregation of duties. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the School Corporation's management design and implement a proper system of internal controls, including policies and procedures that would provide segregation of duties to ensure appropriate reviews, approvals, and oversight are taking place. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-009 Subject: Child Nutrition Cluster - Special Tests and Provisions - Non-Profit School Food Service Accounts Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Special Tests and Provisions - Non-Profit School Food Service Accounts Audit Finding: Material Weakness Condition and Context The School Corporation had not properly designed or implemented a system of internal controls, which would include appropriate segregation of duties, that would likely be effective in preventing, or detecting and correcting, noncompliance. All revenues and expenditures of the non-profit school food service account are to be accounted for in accordance with state and federal requirements. As such separate accounting is to be made for the school food service, federal reimbursements are to be correcting credited to the food service account, and transfers out of the school food service account are to be for allowable costs of the school food service. Receipt of the federal reimbursements were posted to the ledger by one individual without an oversight or review process in place to ensure the remitter, amount, fund, and receipt classification were accurate. Additionally, the same individual received the ACH notifications when monies from monthly meal reimbursements were credited to the School Corporation's bank account and performed the bank reconciliations. The lack of internal controls was a systemic issue throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." INDIANA STATE BOARD OF ACCOUNTS 31 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Cause A proper system of internal controls was not designed by management of the School Corporation, which would include appropriate segregation of duties. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the School Corporation's management design and implement a proper system of internal controls, including policies and procedures that would provide segregation of duties to ensure appropriate reviews, approvals, and oversight are taking place. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-010 Subject: COVID-19 - Education Stabilization Fund - Allowable Costs/Cost Principles Federal Agency: Department of Education Federal Program: COVID-19 - Education Stabilization Fund Assistance Listings Numbers: 84.425D, 84.425U Federal Award Numbers and Years (or Other Identifying Numbers): S425D210013, S425U210013 Pass-Through Entity: Department of Education Compliance Requirement: Allowable Costs/Cost Principles Audit Findings: Material Weakness, Other Matters Condition and Context The Elementary and Secondary School Emergency Relief (ESSER) Fund provided funding to states and school districts to help safely reopen and sustain the safe operation of schools and to address the impact of the coronavirus pandemic on the nation's students. States were required to subgrant a portion of their ESSER allocations to Local Educational Agencies (LEA). Prior to the LEAs receiving their respective subgrants, the LEAs were required to complete an application for the ESSER funding, which was submitted to the Indiana Department of Education (IDOE), the pass-through entity for approval. The application included a district level budget identifying how the LEA intended to spend program funds. A sample of 25 claims charged to the ESSER grant program for which reimbursement was received during the audit period was selected for testing to verify that the expenditures were in conformance with the applicable cost principles. Of the 25 claims tested, the following errors were noted: INDIANA STATE BOARD OF ACCOUNTS 32 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued)  Two claims, totaling $983, were for payments to a teacher for part-time tutoring. However, there was not a School Board approved contract or Salary Ordinance that showed the approval of this position or the rate to be paid.  Two claims, totaling $318,922, were for payments for playground equipment; however, the related contract supporting the purchase was not provided. The lack of effective internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.403 states in part: "Except where otherwise authorized by statute, costs must meet the following general criteria in order to be allowable under Federal awards: (a) Be necessary and reasonable for the performance of the Federal award and be allocable thereto under these principles. (b) Conform to any limitations or exclusions set forth in these principles or in the Federal award as to types or amount of cost items. . . . (g) Be adequately documented. . . ." 2 CFR 200.430(i) states in part: "Standards for Documentation of Personnel Expenses (1) Charges to Federal awards for salaries and wages must be based on records that accurately reflect the work performed. These records must: (i) Be supported by a system of internal control which provides reasonable assurance that the charges are accurate, allowable, and properly allocated; (ii) Be incorporated into the official records of the non-Federal entity; (iii) Reasonably reflect the total activity for which the employee is compensated by the non- Federal entity, not exceeding 100% of compensated activities (for IHE, this per the IHE's definition of IBS); . . . INDIANA STATE BOARD OF ACCOUNTS 33 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (vii) Support the distribution of the employee's salary or wages among specific activities or cost objectives if the employee works on more than one Federal award; a Federal award and non-Federal award; an indirect cost activity and a direct cost activity; two or more indirect activities which are allocated using different allocation bases; or an unallowable activity and a direct or indirect cost activity. . . ." Cause A proper system of internal controls was not designed by the School Corporation's management. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, expenses were paid without adequate supporting documentation. Noncompliance with the grant agreement and the compliance requirement could result in the loss of future federal funds to the School Corporation. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the School Corporation's management establish a proper system of internal controls and develop policies and procedures to ensure costs are adequately documented. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-010 Subject: COVID-19 - Education Stabilization Fund - Allowable Costs/Cost Principles Federal Agency: Department of Education Federal Program: COVID-19 - Education Stabilization Fund Assistance Listings Numbers: 84.425D, 84.425U Federal Award Numbers and Years (or Other Identifying Numbers): S425D210013, S425U210013 Pass-Through Entity: Department of Education Compliance Requirement: Allowable Costs/Cost Principles Audit Findings: Material Weakness, Other Matters Condition and Context The Elementary and Secondary School Emergency Relief (ESSER) Fund provided funding to states and school districts to help safely reopen and sustain the safe operation of schools and to address the impact of the coronavirus pandemic on the nation's students. States were required to subgrant a portion of their ESSER allocations to Local Educational Agencies (LEA). Prior to the LEAs receiving their respective subgrants, the LEAs were required to complete an application for the ESSER funding, which was submitted to the Indiana Department of Education (IDOE), the pass-through entity for approval. The application included a district level budget identifying how the LEA intended to spend program funds. A sample of 25 claims charged to the ESSER grant program for which reimbursement was received during the audit period was selected for testing to verify that the expenditures were in conformance with the applicable cost principles. Of the 25 claims tested, the following errors were noted: INDIANA STATE BOARD OF ACCOUNTS 32 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued)  Two claims, totaling $983, were for payments to a teacher for part-time tutoring. However, there was not a School Board approved contract or Salary Ordinance that showed the approval of this position or the rate to be paid.  Two claims, totaling $318,922, were for payments for playground equipment; however, the related contract supporting the purchase was not provided. The lack of effective internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.403 states in part: "Except where otherwise authorized by statute, costs must meet the following general criteria in order to be allowable under Federal awards: (a) Be necessary and reasonable for the performance of the Federal award and be allocable thereto under these principles. (b) Conform to any limitations or exclusions set forth in these principles or in the Federal award as to types or amount of cost items. . . . (g) Be adequately documented. . . ." 2 CFR 200.430(i) states in part: "Standards for Documentation of Personnel Expenses (1) Charges to Federal awards for salaries and wages must be based on records that accurately reflect the work performed. These records must: (i) Be supported by a system of internal control which provides reasonable assurance that the charges are accurate, allowable, and properly allocated; (ii) Be incorporated into the official records of the non-Federal entity; (iii) Reasonably reflect the total activity for which the employee is compensated by the non- Federal entity, not exceeding 100% of compensated activities (for IHE, this per the IHE's definition of IBS); . . . INDIANA STATE BOARD OF ACCOUNTS 33 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (vii) Support the distribution of the employee's salary or wages among specific activities or cost objectives if the employee works on more than one Federal award; a Federal award and non-Federal award; an indirect cost activity and a direct cost activity; two or more indirect activities which are allocated using different allocation bases; or an unallowable activity and a direct or indirect cost activity. . . ." Cause A proper system of internal controls was not designed by the School Corporation's management. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, expenses were paid without adequate supporting documentation. Noncompliance with the grant agreement and the compliance requirement could result in the loss of future federal funds to the School Corporation. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the School Corporation's management establish a proper system of internal controls and develop policies and procedures to ensure costs are adequately documented. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-010 Subject: COVID-19 - Education Stabilization Fund - Allowable Costs/Cost Principles Federal Agency: Department of Education Federal Program: COVID-19 - Education Stabilization Fund Assistance Listings Numbers: 84.425D, 84.425U Federal Award Numbers and Years (or Other Identifying Numbers): S425D210013, S425U210013 Pass-Through Entity: Department of Education Compliance Requirement: Allowable Costs/Cost Principles Audit Findings: Material Weakness, Other Matters Condition and Context The Elementary and Secondary School Emergency Relief (ESSER) Fund provided funding to states and school districts to help safely reopen and sustain the safe operation of schools and to address the impact of the coronavirus pandemic on the nation's students. States were required to subgrant a portion of their ESSER allocations to Local Educational Agencies (LEA). Prior to the LEAs receiving their respective subgrants, the LEAs were required to complete an application for the ESSER funding, which was submitted to the Indiana Department of Education (IDOE), the pass-through entity for approval. The application included a district level budget identifying how the LEA intended to spend program funds. A sample of 25 claims charged to the ESSER grant program for which reimbursement was received during the audit period was selected for testing to verify that the expenditures were in conformance with the applicable cost principles. Of the 25 claims tested, the following errors were noted: INDIANA STATE BOARD OF ACCOUNTS 32 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued)  Two claims, totaling $983, were for payments to a teacher for part-time tutoring. However, there was not a School Board approved contract or Salary Ordinance that showed the approval of this position or the rate to be paid.  Two claims, totaling $318,922, were for payments for playground equipment; however, the related contract supporting the purchase was not provided. The lack of effective internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.403 states in part: "Except where otherwise authorized by statute, costs must meet the following general criteria in order to be allowable under Federal awards: (a) Be necessary and reasonable for the performance of the Federal award and be allocable thereto under these principles. (b) Conform to any limitations or exclusions set forth in these principles or in the Federal award as to types or amount of cost items. . . . (g) Be adequately documented. . . ." 2 CFR 200.430(i) states in part: "Standards for Documentation of Personnel Expenses (1) Charges to Federal awards for salaries and wages must be based on records that accurately reflect the work performed. These records must: (i) Be supported by a system of internal control which provides reasonable assurance that the charges are accurate, allowable, and properly allocated; (ii) Be incorporated into the official records of the non-Federal entity; (iii) Reasonably reflect the total activity for which the employee is compensated by the non- Federal entity, not exceeding 100% of compensated activities (for IHE, this per the IHE's definition of IBS); . . . INDIANA STATE BOARD OF ACCOUNTS 33 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (vii) Support the distribution of the employee's salary or wages among specific activities or cost objectives if the employee works on more than one Federal award; a Federal award and non-Federal award; an indirect cost activity and a direct cost activity; two or more indirect activities which are allocated using different allocation bases; or an unallowable activity and a direct or indirect cost activity. . . ." Cause A proper system of internal controls was not designed by the School Corporation's management. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, expenses were paid without adequate supporting documentation. Noncompliance with the grant agreement and the compliance requirement could result in the loss of future federal funds to the School Corporation. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the School Corporation's management establish a proper system of internal controls and develop policies and procedures to ensure costs are adequately documented. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-010 Subject: COVID-19 - Education Stabilization Fund - Allowable Costs/Cost Principles Federal Agency: Department of Education Federal Program: COVID-19 - Education Stabilization Fund Assistance Listings Numbers: 84.425D, 84.425U Federal Award Numbers and Years (or Other Identifying Numbers): S425D210013, S425U210013 Pass-Through Entity: Department of Education Compliance Requirement: Allowable Costs/Cost Principles Audit Findings: Material Weakness, Other Matters Condition and Context The Elementary and Secondary School Emergency Relief (ESSER) Fund provided funding to states and school districts to help safely reopen and sustain the safe operation of schools and to address the impact of the coronavirus pandemic on the nation's students. States were required to subgrant a portion of their ESSER allocations to Local Educational Agencies (LEA). Prior to the LEAs receiving their respective subgrants, the LEAs were required to complete an application for the ESSER funding, which was submitted to the Indiana Department of Education (IDOE), the pass-through entity for approval. The application included a district level budget identifying how the LEA intended to spend program funds. A sample of 25 claims charged to the ESSER grant program for which reimbursement was received during the audit period was selected for testing to verify that the expenditures were in conformance with the applicable cost principles. Of the 25 claims tested, the following errors were noted: INDIANA STATE BOARD OF ACCOUNTS 32 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued)  Two claims, totaling $983, were for payments to a teacher for part-time tutoring. However, there was not a School Board approved contract or Salary Ordinance that showed the approval of this position or the rate to be paid.  Two claims, totaling $318,922, were for payments for playground equipment; however, the related contract supporting the purchase was not provided. The lack of effective internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.403 states in part: "Except where otherwise authorized by statute, costs must meet the following general criteria in order to be allowable under Federal awards: (a) Be necessary and reasonable for the performance of the Federal award and be allocable thereto under these principles. (b) Conform to any limitations or exclusions set forth in these principles or in the Federal award as to types or amount of cost items. . . . (g) Be adequately documented. . . ." 2 CFR 200.430(i) states in part: "Standards for Documentation of Personnel Expenses (1) Charges to Federal awards for salaries and wages must be based on records that accurately reflect the work performed. These records must: (i) Be supported by a system of internal control which provides reasonable assurance that the charges are accurate, allowable, and properly allocated; (ii) Be incorporated into the official records of the non-Federal entity; (iii) Reasonably reflect the total activity for which the employee is compensated by the non- Federal entity, not exceeding 100% of compensated activities (for IHE, this per the IHE's definition of IBS); . . . INDIANA STATE BOARD OF ACCOUNTS 33 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (vii) Support the distribution of the employee's salary or wages among specific activities or cost objectives if the employee works on more than one Federal award; a Federal award and non-Federal award; an indirect cost activity and a direct cost activity; two or more indirect activities which are allocated using different allocation bases; or an unallowable activity and a direct or indirect cost activity. . . ." Cause A proper system of internal controls was not designed by the School Corporation's management. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, expenses were paid without adequate supporting documentation. Noncompliance with the grant agreement and the compliance requirement could result in the loss of future federal funds to the School Corporation. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the School Corporation's management establish a proper system of internal controls and develop policies and procedures to ensure costs are adequately documented. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-011 Subject: COVID-19 - Education Stabilization Fund - Reporting Federal Agency: Department of Education Federal Program: COVID-19 - Education Stabilization Fund Assistance Listings Numbers: 84.425D, 84.425U Federal Award Numbers and Years (or Other Identifying Numbers): S425D210013, S425U210013 Pass-Through Entity: Department of Education Compliance Requirement: Reporting Audit Findings: Material Weakness, Other Matters INDIANA STATE BOARD OF ACCOUNTS 34 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Condition and Context The School Corporation had not properly designed or implemented a system of internal controls that would likely be effective in preventing, or detecting and correcting, noncompliance. The School Corporation was required to submit annual data reports to the Indiana Department of Education (IDOE) via JotForm, a form/report builder. Data to be submitted included, but was not limited to, current period expenditures, prior period expenditures, and expenditures per activity. During the audit period the School Corporation submitted two ESSER I reports, two ESSER II reports, and two ESSER III reports, for a total of six reports. The annual data reports were compiled, prepared, and submitted by the Director of Curriculum without oversight or review process in place to prevent, or detect and correct, errors. All six of the submitted reports were selected for testing. One of the reports, ESSER II, Year 2, was not supported by the School Corporation's records. The School Corporation had expenditures of $583,415 from the ESSER II grant which were not included in this report. The lack of internal controls was systemic throughout the audit period. The noncompliance was isolated to the ESSER II, Year 2 report. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.302(b) states in part: "The financial management system of each non-Federal entity must provide for the following: . . . (2) Accurate, current, and complete disclosure of the financial results of each Federal award or program in accordance with the reporting requirements set forth in §§ 200.328 and 200.329. . . ." 34 CFR 76.722 states: "A State may require a subgrantee to submit reports in a manner and format that assists the State in complying with the requirements under 34 CFR 76.720 and in carrying out other responsibilities under the program." 34 CFR 76.731 states: "A State and a subgrantee shall keep records to show its compliance with program requirements." INDIANA STATE BOARD OF ACCOUNTS 35 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Cause A proper system of internal controls was not designed by the School Corporation's management. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, a report submitted to the IDOE was not supported by the School Corporation's underlying accounting records. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the School Corporation. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the School Corporation establish a proper system of internal controls and develop policies and procedures to ensure reports are supported by the ledgers or reports used to complete the report. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report. INDIANA STATE BOARD OF ACCOUNTS 36

FINDING 2023-011 Subject: COVID-19 - Education Stabilization Fund - Reporting Federal Agency: Department of Education Federal Program: COVID-19 - Education Stabilization Fund Assistance Listings Numbers: 84.425D, 84.425U Federal Award Numbers and Years (or Other Identifying Numbers): S425D210013, S425U210013 Pass-Through Entity: Department of Education Compliance Requirement: Reporting Audit Findings: Material Weakness, Other Matters INDIANA STATE BOARD OF ACCOUNTS 34 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Condition and Context The School Corporation had not properly designed or implemented a system of internal controls that would likely be effective in preventing, or detecting and correcting, noncompliance. The School Corporation was required to submit annual data reports to the Indiana Department of Education (IDOE) via JotForm, a form/report builder. Data to be submitted included, but was not limited to, current period expenditures, prior period expenditures, and expenditures per activity. During the audit period the School Corporation submitted two ESSER I reports, two ESSER II reports, and two ESSER III reports, for a total of six reports. The annual data reports were compiled, prepared, and submitted by the Director of Curriculum without oversight or review process in place to prevent, or detect and correct, errors. All six of the submitted reports were selected for testing. One of the reports, ESSER II, Year 2, was not supported by the School Corporation's records. The School Corporation had expenditures of $583,415 from the ESSER II grant which were not included in this report. The lack of internal controls was systemic throughout the audit period. The noncompliance was isolated to the ESSER II, Year 2 report. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.302(b) states in part: "The financial management system of each non-Federal entity must provide for the following: . . . (2) Accurate, current, and complete disclosure of the financial results of each Federal award or program in accordance with the reporting requirements set forth in §§ 200.328 and 200.329. . . ." 34 CFR 76.722 states: "A State may require a subgrantee to submit reports in a manner and format that assists the State in complying with the requirements under 34 CFR 76.720 and in carrying out other responsibilities under the program." 34 CFR 76.731 states: "A State and a subgrantee shall keep records to show its compliance with program requirements." INDIANA STATE BOARD OF ACCOUNTS 35 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Cause A proper system of internal controls was not designed by the School Corporation's management. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, a report submitted to the IDOE was not supported by the School Corporation's underlying accounting records. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the School Corporation. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the School Corporation establish a proper system of internal controls and develop policies and procedures to ensure reports are supported by the ledgers or reports used to complete the report. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report. INDIANA STATE BOARD OF ACCOUNTS 36

FINDING 2023-011 Subject: COVID-19 - Education Stabilization Fund - Reporting Federal Agency: Department of Education Federal Program: COVID-19 - Education Stabilization Fund Assistance Listings Numbers: 84.425D, 84.425U Federal Award Numbers and Years (or Other Identifying Numbers): S425D210013, S425U210013 Pass-Through Entity: Department of Education Compliance Requirement: Reporting Audit Findings: Material Weakness, Other Matters INDIANA STATE BOARD OF ACCOUNTS 34 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Condition and Context The School Corporation had not properly designed or implemented a system of internal controls that would likely be effective in preventing, or detecting and correcting, noncompliance. The School Corporation was required to submit annual data reports to the Indiana Department of Education (IDOE) via JotForm, a form/report builder. Data to be submitted included, but was not limited to, current period expenditures, prior period expenditures, and expenditures per activity. During the audit period the School Corporation submitted two ESSER I reports, two ESSER II reports, and two ESSER III reports, for a total of six reports. The annual data reports were compiled, prepared, and submitted by the Director of Curriculum without oversight or review process in place to prevent, or detect and correct, errors. All six of the submitted reports were selected for testing. One of the reports, ESSER II, Year 2, was not supported by the School Corporation's records. The School Corporation had expenditures of $583,415 from the ESSER II grant which were not included in this report. The lack of internal controls was systemic throughout the audit period. The noncompliance was isolated to the ESSER II, Year 2 report. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.302(b) states in part: "The financial management system of each non-Federal entity must provide for the following: . . . (2) Accurate, current, and complete disclosure of the financial results of each Federal award or program in accordance with the reporting requirements set forth in §§ 200.328 and 200.329. . . ." 34 CFR 76.722 states: "A State may require a subgrantee to submit reports in a manner and format that assists the State in complying with the requirements under 34 CFR 76.720 and in carrying out other responsibilities under the program." 34 CFR 76.731 states: "A State and a subgrantee shall keep records to show its compliance with program requirements." INDIANA STATE BOARD OF ACCOUNTS 35 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Cause A proper system of internal controls was not designed by the School Corporation's management. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, a report submitted to the IDOE was not supported by the School Corporation's underlying accounting records. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the School Corporation. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the School Corporation establish a proper system of internal controls and develop policies and procedures to ensure reports are supported by the ledgers or reports used to complete the report. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report. INDIANA STATE BOARD OF ACCOUNTS 36

FINDING 2023-011 Subject: COVID-19 - Education Stabilization Fund - Reporting Federal Agency: Department of Education Federal Program: COVID-19 - Education Stabilization Fund Assistance Listings Numbers: 84.425D, 84.425U Federal Award Numbers and Years (or Other Identifying Numbers): S425D210013, S425U210013 Pass-Through Entity: Department of Education Compliance Requirement: Reporting Audit Findings: Material Weakness, Other Matters INDIANA STATE BOARD OF ACCOUNTS 34 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Condition and Context The School Corporation had not properly designed or implemented a system of internal controls that would likely be effective in preventing, or detecting and correcting, noncompliance. The School Corporation was required to submit annual data reports to the Indiana Department of Education (IDOE) via JotForm, a form/report builder. Data to be submitted included, but was not limited to, current period expenditures, prior period expenditures, and expenditures per activity. During the audit period the School Corporation submitted two ESSER I reports, two ESSER II reports, and two ESSER III reports, for a total of six reports. The annual data reports were compiled, prepared, and submitted by the Director of Curriculum without oversight or review process in place to prevent, or detect and correct, errors. All six of the submitted reports were selected for testing. One of the reports, ESSER II, Year 2, was not supported by the School Corporation's records. The School Corporation had expenditures of $583,415 from the ESSER II grant which were not included in this report. The lack of internal controls was systemic throughout the audit period. The noncompliance was isolated to the ESSER II, Year 2 report. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.302(b) states in part: "The financial management system of each non-Federal entity must provide for the following: . . . (2) Accurate, current, and complete disclosure of the financial results of each Federal award or program in accordance with the reporting requirements set forth in §§ 200.328 and 200.329. . . ." 34 CFR 76.722 states: "A State may require a subgrantee to submit reports in a manner and format that assists the State in complying with the requirements under 34 CFR 76.720 and in carrying out other responsibilities under the program." 34 CFR 76.731 states: "A State and a subgrantee shall keep records to show its compliance with program requirements." INDIANA STATE BOARD OF ACCOUNTS 35 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Cause A proper system of internal controls was not designed by the School Corporation's management. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, a report submitted to the IDOE was not supported by the School Corporation's underlying accounting records. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the School Corporation. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the School Corporation establish a proper system of internal controls and develop policies and procedures to ensure reports are supported by the ledgers or reports used to complete the report. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report. INDIANA STATE BOARD OF ACCOUNTS 36

FINDING 2023-003 Subject: Child Nutrition Cluster - Activities Allowed or Unallowed Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Activities Allowed or Unallowed Audit Finding: Material Weakness Condition and Context A cash reimbursement is provided to the School Corporation based on meals served under the School Breakfast Program, National School Lunch Program, and Summer Food Service Program for Children. The cash reimbursement is to be used for the benefit of the food service program. An effective system of internal controls, which would include segregation of duties, that would likely be effective in preventing, or detecting and correcting, noncompliance should be designed and implemented to ensure expenditures charged to the food service program fund (fund 800) are for the benefit of the food service program. The School Corporation's process for payroll disbursements included a segregation of duties; however, no individual reviewer or approver was provided detailed payroll information that would have allowed them to determine the expense was being paid from the food service program. The lack of internal controls was a systemic issue throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Cause A proper system of internal controls was not designed by management of the School Corporation, which would include segregation of key functions. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. INDIANA STATE BOARD OF ACCOUNTS 18 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Effect Without the proper design or implementation of the components of a system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the School Corporation design and implement a proper system of internal controls, including policies and procedures that would provide segregation of duties to ensure appropriate reviews, approvals, and oversight are taking place. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-003 Subject: Child Nutrition Cluster - Activities Allowed or Unallowed Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Activities Allowed or Unallowed Audit Finding: Material Weakness Condition and Context A cash reimbursement is provided to the School Corporation based on meals served under the School Breakfast Program, National School Lunch Program, and Summer Food Service Program for Children. The cash reimbursement is to be used for the benefit of the food service program. An effective system of internal controls, which would include segregation of duties, that would likely be effective in preventing, or detecting and correcting, noncompliance should be designed and implemented to ensure expenditures charged to the food service program fund (fund 800) are for the benefit of the food service program. The School Corporation's process for payroll disbursements included a segregation of duties; however, no individual reviewer or approver was provided detailed payroll information that would have allowed them to determine the expense was being paid from the food service program. The lack of internal controls was a systemic issue throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Cause A proper system of internal controls was not designed by management of the School Corporation, which would include segregation of key functions. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. INDIANA STATE BOARD OF ACCOUNTS 18 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Effect Without the proper design or implementation of the components of a system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the School Corporation design and implement a proper system of internal controls, including policies and procedures that would provide segregation of duties to ensure appropriate reviews, approvals, and oversight are taking place. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-003 Subject: Child Nutrition Cluster - Activities Allowed or Unallowed Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Activities Allowed or Unallowed Audit Finding: Material Weakness Condition and Context A cash reimbursement is provided to the School Corporation based on meals served under the School Breakfast Program, National School Lunch Program, and Summer Food Service Program for Children. The cash reimbursement is to be used for the benefit of the food service program. An effective system of internal controls, which would include segregation of duties, that would likely be effective in preventing, or detecting and correcting, noncompliance should be designed and implemented to ensure expenditures charged to the food service program fund (fund 800) are for the benefit of the food service program. The School Corporation's process for payroll disbursements included a segregation of duties; however, no individual reviewer or approver was provided detailed payroll information that would have allowed them to determine the expense was being paid from the food service program. The lack of internal controls was a systemic issue throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Cause A proper system of internal controls was not designed by management of the School Corporation, which would include segregation of key functions. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. INDIANA STATE BOARD OF ACCOUNTS 18 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Effect Without the proper design or implementation of the components of a system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the School Corporation design and implement a proper system of internal controls, including policies and procedures that would provide segregation of duties to ensure appropriate reviews, approvals, and oversight are taking place. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-003 Subject: Child Nutrition Cluster - Activities Allowed or Unallowed Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Activities Allowed or Unallowed Audit Finding: Material Weakness Condition and Context A cash reimbursement is provided to the School Corporation based on meals served under the School Breakfast Program, National School Lunch Program, and Summer Food Service Program for Children. The cash reimbursement is to be used for the benefit of the food service program. An effective system of internal controls, which would include segregation of duties, that would likely be effective in preventing, or detecting and correcting, noncompliance should be designed and implemented to ensure expenditures charged to the food service program fund (fund 800) are for the benefit of the food service program. The School Corporation's process for payroll disbursements included a segregation of duties; however, no individual reviewer or approver was provided detailed payroll information that would have allowed them to determine the expense was being paid from the food service program. The lack of internal controls was a systemic issue throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Cause A proper system of internal controls was not designed by management of the School Corporation, which would include segregation of key functions. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. INDIANA STATE BOARD OF ACCOUNTS 18 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Effect Without the proper design or implementation of the components of a system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the School Corporation design and implement a proper system of internal controls, including policies and procedures that would provide segregation of duties to ensure appropriate reviews, approvals, and oversight are taking place. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-003 Subject: Child Nutrition Cluster - Activities Allowed or Unallowed Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Activities Allowed or Unallowed Audit Finding: Material Weakness Condition and Context A cash reimbursement is provided to the School Corporation based on meals served under the School Breakfast Program, National School Lunch Program, and Summer Food Service Program for Children. The cash reimbursement is to be used for the benefit of the food service program. An effective system of internal controls, which would include segregation of duties, that would likely be effective in preventing, or detecting and correcting, noncompliance should be designed and implemented to ensure expenditures charged to the food service program fund (fund 800) are for the benefit of the food service program. The School Corporation's process for payroll disbursements included a segregation of duties; however, no individual reviewer or approver was provided detailed payroll information that would have allowed them to determine the expense was being paid from the food service program. The lack of internal controls was a systemic issue throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Cause A proper system of internal controls was not designed by management of the School Corporation, which would include segregation of key functions. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. INDIANA STATE BOARD OF ACCOUNTS 18 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Effect Without the proper design or implementation of the components of a system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the School Corporation design and implement a proper system of internal controls, including policies and procedures that would provide segregation of duties to ensure appropriate reviews, approvals, and oversight are taking place. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-004 Subject: Child Nutrition Cluster - Allowable Costs/Cost Principles Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Allowable Costs/Cost Principles Audit Findings: Material Weakness, Other Matters Condition and Context A cash reimbursement is provided to the School Corporation based on meals served under the School Breakfast Program, National School Lunch Program, and Summer Food Service Program for Children. The cash reimbursement is to be used for the benefit of the food service program. An effective system of internal controls, which would include segregation of duties, that would likely be effective in preventing, or detecting and correcting, noncompliance should be designed and implemented to ensure expenditures charged to the food service program fund (fund 800) are for the benefit of the food service program. The School Corporation's process for payroll disbursements included a segregation of duties; however, no individual reviewer or approver was provided detailed payroll information that would have allowed them to determine the expense was being paid from the food service program. Due to the lack of internal controls, the School Corporation paid $23,682 of administrative salaries based on fixed percentages without supporting documentation to indicate how the percentages were determined or time records indicating time spent on the program by the applicable administrators. The amount paid, $23,682, is considered questioned costs. INDIANA STATE BOARD OF ACCOUNTS 19 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) The lack of internal controls was a systemic issue throughout the audit period. The noncompliance was isolated to the salaries identified above. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.403 states in part: "Except where otherwise authorized by statute, costs must meet the following general criteria in order to be allowable under Federal awards: (a) Be necessary and reasonable for the performance of the Federal award and be allocable thereto under these principles. (b) Conform to any limitations or exclusions set forth in these principles or in the Federal award as to types or amount of cost items. . . . (g) Be adequately documented. . . ." 2 CFR 200.430 states in part: "Standards for Documentation of Personnel Expenses (1) Charges to Federal awards for salaries and wages must be based on records that accurately reflect the work performed. These records must: (i) Be supported by a system of internal control which provides reasonable assurance that the charges are accurate, allowable, and properly allocated; (ii) Be incorporated into the official records of the non-Federal entity; (iii) Reasonably reflect the total activity for which the employee is compensated by the non- Federal entity, not exceeding 100% of compensated activities . . . (vii) Support the distribution of the employee's salary or wages among specific activities or cost objectives if the employee works on more than one Federal award; a Federal award and non-Federal award; an indirect cost activity and a direct cost activity; or two or more indirect activities which are allocated using different allocation bases; or an unallowable activity and a direct or indirect cost activity. . . ." INDIANA STATE BOARD OF ACCOUNTS 20 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Cause A proper system of internal controls was not designed by management of the School Corporation, which would include segregation of key functions. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, administrative payroll was charged to the school lunch fund without appropriate supporting documentation. Noncompliance with the grant agreement and the compliance requirement could result in the loss of future federal funds to the School Corporation. Questioned Costs Known questioned costs of $23,682 were identified as noted in the Condition and Context. Recommendation We recommended the School Corporation's management establish a proper system of internal controls and develop policies and procedures to ensure costs are adequately documented. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-004 Subject: Child Nutrition Cluster - Allowable Costs/Cost Principles Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Allowable Costs/Cost Principles Audit Findings: Material Weakness, Other Matters Condition and Context A cash reimbursement is provided to the School Corporation based on meals served under the School Breakfast Program, National School Lunch Program, and Summer Food Service Program for Children. The cash reimbursement is to be used for the benefit of the food service program. An effective system of internal controls, which would include segregation of duties, that would likely be effective in preventing, or detecting and correcting, noncompliance should be designed and implemented to ensure expenditures charged to the food service program fund (fund 800) are for the benefit of the food service program. The School Corporation's process for payroll disbursements included a segregation of duties; however, no individual reviewer or approver was provided detailed payroll information that would have allowed them to determine the expense was being paid from the food service program. Due to the lack of internal controls, the School Corporation paid $23,682 of administrative salaries based on fixed percentages without supporting documentation to indicate how the percentages were determined or time records indicating time spent on the program by the applicable administrators. The amount paid, $23,682, is considered questioned costs. INDIANA STATE BOARD OF ACCOUNTS 19 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) The lack of internal controls was a systemic issue throughout the audit period. The noncompliance was isolated to the salaries identified above. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.403 states in part: "Except where otherwise authorized by statute, costs must meet the following general criteria in order to be allowable under Federal awards: (a) Be necessary and reasonable for the performance of the Federal award and be allocable thereto under these principles. (b) Conform to any limitations or exclusions set forth in these principles or in the Federal award as to types or amount of cost items. . . . (g) Be adequately documented. . . ." 2 CFR 200.430 states in part: "Standards for Documentation of Personnel Expenses (1) Charges to Federal awards for salaries and wages must be based on records that accurately reflect the work performed. These records must: (i) Be supported by a system of internal control which provides reasonable assurance that the charges are accurate, allowable, and properly allocated; (ii) Be incorporated into the official records of the non-Federal entity; (iii) Reasonably reflect the total activity for which the employee is compensated by the non- Federal entity, not exceeding 100% of compensated activities . . . (vii) Support the distribution of the employee's salary or wages among specific activities or cost objectives if the employee works on more than one Federal award; a Federal award and non-Federal award; an indirect cost activity and a direct cost activity; or two or more indirect activities which are allocated using different allocation bases; or an unallowable activity and a direct or indirect cost activity. . . ." INDIANA STATE BOARD OF ACCOUNTS 20 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Cause A proper system of internal controls was not designed by management of the School Corporation, which would include segregation of key functions. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, administrative payroll was charged to the school lunch fund without appropriate supporting documentation. Noncompliance with the grant agreement and the compliance requirement could result in the loss of future federal funds to the School Corporation. Questioned Costs Known questioned costs of $23,682 were identified as noted in the Condition and Context. Recommendation We recommended the School Corporation's management establish a proper system of internal controls and develop policies and procedures to ensure costs are adequately documented. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-004 Subject: Child Nutrition Cluster - Allowable Costs/Cost Principles Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Allowable Costs/Cost Principles Audit Findings: Material Weakness, Other Matters Condition and Context A cash reimbursement is provided to the School Corporation based on meals served under the School Breakfast Program, National School Lunch Program, and Summer Food Service Program for Children. The cash reimbursement is to be used for the benefit of the food service program. An effective system of internal controls, which would include segregation of duties, that would likely be effective in preventing, or detecting and correcting, noncompliance should be designed and implemented to ensure expenditures charged to the food service program fund (fund 800) are for the benefit of the food service program. The School Corporation's process for payroll disbursements included a segregation of duties; however, no individual reviewer or approver was provided detailed payroll information that would have allowed them to determine the expense was being paid from the food service program. Due to the lack of internal controls, the School Corporation paid $23,682 of administrative salaries based on fixed percentages without supporting documentation to indicate how the percentages were determined or time records indicating time spent on the program by the applicable administrators. The amount paid, $23,682, is considered questioned costs. INDIANA STATE BOARD OF ACCOUNTS 19 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) The lack of internal controls was a systemic issue throughout the audit period. The noncompliance was isolated to the salaries identified above. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.403 states in part: "Except where otherwise authorized by statute, costs must meet the following general criteria in order to be allowable under Federal awards: (a) Be necessary and reasonable for the performance of the Federal award and be allocable thereto under these principles. (b) Conform to any limitations or exclusions set forth in these principles or in the Federal award as to types or amount of cost items. . . . (g) Be adequately documented. . . ." 2 CFR 200.430 states in part: "Standards for Documentation of Personnel Expenses (1) Charges to Federal awards for salaries and wages must be based on records that accurately reflect the work performed. These records must: (i) Be supported by a system of internal control which provides reasonable assurance that the charges are accurate, allowable, and properly allocated; (ii) Be incorporated into the official records of the non-Federal entity; (iii) Reasonably reflect the total activity for which the employee is compensated by the non- Federal entity, not exceeding 100% of compensated activities . . . (vii) Support the distribution of the employee's salary or wages among specific activities or cost objectives if the employee works on more than one Federal award; a Federal award and non-Federal award; an indirect cost activity and a direct cost activity; or two or more indirect activities which are allocated using different allocation bases; or an unallowable activity and a direct or indirect cost activity. . . ." INDIANA STATE BOARD OF ACCOUNTS 20 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Cause A proper system of internal controls was not designed by management of the School Corporation, which would include segregation of key functions. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, administrative payroll was charged to the school lunch fund without appropriate supporting documentation. Noncompliance with the grant agreement and the compliance requirement could result in the loss of future federal funds to the School Corporation. Questioned Costs Known questioned costs of $23,682 were identified as noted in the Condition and Context. Recommendation We recommended the School Corporation's management establish a proper system of internal controls and develop policies and procedures to ensure costs are adequately documented. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-004 Subject: Child Nutrition Cluster - Allowable Costs/Cost Principles Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Allowable Costs/Cost Principles Audit Findings: Material Weakness, Other Matters Condition and Context A cash reimbursement is provided to the School Corporation based on meals served under the School Breakfast Program, National School Lunch Program, and Summer Food Service Program for Children. The cash reimbursement is to be used for the benefit of the food service program. An effective system of internal controls, which would include segregation of duties, that would likely be effective in preventing, or detecting and correcting, noncompliance should be designed and implemented to ensure expenditures charged to the food service program fund (fund 800) are for the benefit of the food service program. The School Corporation's process for payroll disbursements included a segregation of duties; however, no individual reviewer or approver was provided detailed payroll information that would have allowed them to determine the expense was being paid from the food service program. Due to the lack of internal controls, the School Corporation paid $23,682 of administrative salaries based on fixed percentages without supporting documentation to indicate how the percentages were determined or time records indicating time spent on the program by the applicable administrators. The amount paid, $23,682, is considered questioned costs. INDIANA STATE BOARD OF ACCOUNTS 19 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) The lack of internal controls was a systemic issue throughout the audit period. The noncompliance was isolated to the salaries identified above. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.403 states in part: "Except where otherwise authorized by statute, costs must meet the following general criteria in order to be allowable under Federal awards: (a) Be necessary and reasonable for the performance of the Federal award and be allocable thereto under these principles. (b) Conform to any limitations or exclusions set forth in these principles or in the Federal award as to types or amount of cost items. . . . (g) Be adequately documented. . . ." 2 CFR 200.430 states in part: "Standards for Documentation of Personnel Expenses (1) Charges to Federal awards for salaries and wages must be based on records that accurately reflect the work performed. These records must: (i) Be supported by a system of internal control which provides reasonable assurance that the charges are accurate, allowable, and properly allocated; (ii) Be incorporated into the official records of the non-Federal entity; (iii) Reasonably reflect the total activity for which the employee is compensated by the non- Federal entity, not exceeding 100% of compensated activities . . . (vii) Support the distribution of the employee's salary or wages among specific activities or cost objectives if the employee works on more than one Federal award; a Federal award and non-Federal award; an indirect cost activity and a direct cost activity; or two or more indirect activities which are allocated using different allocation bases; or an unallowable activity and a direct or indirect cost activity. . . ." INDIANA STATE BOARD OF ACCOUNTS 20 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Cause A proper system of internal controls was not designed by management of the School Corporation, which would include segregation of key functions. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, administrative payroll was charged to the school lunch fund without appropriate supporting documentation. Noncompliance with the grant agreement and the compliance requirement could result in the loss of future federal funds to the School Corporation. Questioned Costs Known questioned costs of $23,682 were identified as noted in the Condition and Context. Recommendation We recommended the School Corporation's management establish a proper system of internal controls and develop policies and procedures to ensure costs are adequately documented. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-004 Subject: Child Nutrition Cluster - Allowable Costs/Cost Principles Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Allowable Costs/Cost Principles Audit Findings: Material Weakness, Other Matters Condition and Context A cash reimbursement is provided to the School Corporation based on meals served under the School Breakfast Program, National School Lunch Program, and Summer Food Service Program for Children. The cash reimbursement is to be used for the benefit of the food service program. An effective system of internal controls, which would include segregation of duties, that would likely be effective in preventing, or detecting and correcting, noncompliance should be designed and implemented to ensure expenditures charged to the food service program fund (fund 800) are for the benefit of the food service program. The School Corporation's process for payroll disbursements included a segregation of duties; however, no individual reviewer or approver was provided detailed payroll information that would have allowed them to determine the expense was being paid from the food service program. Due to the lack of internal controls, the School Corporation paid $23,682 of administrative salaries based on fixed percentages without supporting documentation to indicate how the percentages were determined or time records indicating time spent on the program by the applicable administrators. The amount paid, $23,682, is considered questioned costs. INDIANA STATE BOARD OF ACCOUNTS 19 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) The lack of internal controls was a systemic issue throughout the audit period. The noncompliance was isolated to the salaries identified above. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.403 states in part: "Except where otherwise authorized by statute, costs must meet the following general criteria in order to be allowable under Federal awards: (a) Be necessary and reasonable for the performance of the Federal award and be allocable thereto under these principles. (b) Conform to any limitations or exclusions set forth in these principles or in the Federal award as to types or amount of cost items. . . . (g) Be adequately documented. . . ." 2 CFR 200.430 states in part: "Standards for Documentation of Personnel Expenses (1) Charges to Federal awards for salaries and wages must be based on records that accurately reflect the work performed. These records must: (i) Be supported by a system of internal control which provides reasonable assurance that the charges are accurate, allowable, and properly allocated; (ii) Be incorporated into the official records of the non-Federal entity; (iii) Reasonably reflect the total activity for which the employee is compensated by the non- Federal entity, not exceeding 100% of compensated activities . . . (vii) Support the distribution of the employee's salary or wages among specific activities or cost objectives if the employee works on more than one Federal award; a Federal award and non-Federal award; an indirect cost activity and a direct cost activity; or two or more indirect activities which are allocated using different allocation bases; or an unallowable activity and a direct or indirect cost activity. . . ." INDIANA STATE BOARD OF ACCOUNTS 20 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Cause A proper system of internal controls was not designed by management of the School Corporation, which would include segregation of key functions. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, administrative payroll was charged to the school lunch fund without appropriate supporting documentation. Noncompliance with the grant agreement and the compliance requirement could result in the loss of future federal funds to the School Corporation. Questioned Costs Known questioned costs of $23,682 were identified as noted in the Condition and Context. Recommendation We recommended the School Corporation's management establish a proper system of internal controls and develop policies and procedures to ensure costs are adequately documented. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-005 Subject: Child Nutrition Cluster - Eligibility Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Eligibility Audit Findings: Material Weakness, Other Matters Repeat Finding This is a repeat finding from the prior audit report. The prior audit finding number was 2021-002. Condition and Context The School Corporation had not established effective internal controls that would likely be effective in preventing, or detecting and correcting, noncompliance related to the eligibility determination of a child receiving meals. INDIANA STATE BOARD OF ACCOUNTS 21 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Any child enrolled in a participating school or summer camp, or attending a Summer Food Service Program (SFSP) meal service site, who meets the applicable program's definition of "child," may receive meals under the applicable program. In the case of the National School Lunch Program and School Breakfast Program, children belonging to households meeting nationwide income eligibility requirements may receive meals at no charge or at reduced price. Children who have been determined ineligible for free or reduced-price school meals pay the full price, set by the School Food Authority, for their meals. Children attending SFSP meal service sites receive their meals at no charge. As a general rule, a child's eligibility for free or reduced-price meals under a Child Nutrition Cluster program may be established by the submission of an annual application or statement which furnishes such information as family income and family size. Local educational agencies, institutions, and sponsors then determine eligibility by comparing the data reported by the child's household to published income eligibility guidelines. Additionally, a child may be direct certified. For a direct certification, annual eligibility determinations are based on the child's household receiving benefits under SNAP, FDPIR, the Head Start Program (ALN 93.600), or, under most circumstances, the TANF program (ALN 93.558). A household may furnish documentation of its participation in one of these programs; or the school, institution, or sponsor may obtain the information directly from the State or local agency that administers these programs. Certain foster, runaway, homeless, and migrant children are categorically eligible for free school lunches and breakfasts. Direct certified households do not need to complete an application. The School Corporation's process for determining student eligibility was that the Assistant Food Service Director make the initial eligibility determination and the Food Service Director review the determination made. Per the School Corporation, all free or reduced priced applications received were subject to this process. A sample of 40 free or reduced priced applications were selected for testing to determine if the identified internal control was in place and operating. Of the 40 free and reduced priced applications selected for testing, 12 did not have the identified internal control in place. For these 12 applications, the Assistant Food Service Director made the initial eligibility determination, but there was no evidence that the Food Service Director reviewed the determination. In addition, a sample of 40 free or reduced priced applications were selected for testing to determine whether required eligibility determinations were made, participants were determined to be eligible, and that only eligible individuals participated in the program. Of the 40 free and reduced priced applications selected for testing, 3 were determined to have the incorrect eligibility status in the system software when compared to supporting documentation. The lack of internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." INDIANA STATE BOARD OF ACCOUNTS 22 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) 7 CFR 245.6 states in part: ". . . (b) Direct certification. In lieu of requiring a household to complete the free and reduced price meal or free milk application, as specified in paragraph (a) of this section, the local educational agency must certify children as eligible for free meals or free milk in accordance with paragraph (b)(1)(i) of this section or may certify children as eligible for free meals or free milk in accordance with paragraph (b)(2) of this section. If a household also submits an application for directly certified children, the direct certification eligibility determination will take precedence. . . . (5) Direct certification documentation. (i) The required documentation for direct certification is provided in paragraph (2) of the definition of Documentation in § 245.2. (ii) (A) Beginning in School Year 2012–2013, direct certification with SNAP shall be conducted using a data matching technique only. Letters to households for direct certification may be used only as an additional means to notify households of children's eligibility based on receipt of SNAP benefits. The last period that letters to households may be used as the primary method for direct certification is School Year 2011–2012. While such notices cannot be the primary method used by a state to document receipt of SNAP, the local educational agency shall accept such a letter if presented by a household. (B) Letters or other documents may be used as the primary method for direct certification to document receipt of FDPIR or TANF benefits. (iii) Individual notices from officials of eligible programs for a Foster child, a Homeless child, a Migrant child, a Runaway child, or a Head Start child, as defined in § 245.2, may continue to be used. These notices are provided to school officials who must certify these children as eligible for free meals or free milk, as applicable, without further application, upon receipt of such notice. . . . (c) Determination of Eligibility . . . (2) Use of prior year's eligibility status. Prior to the processing of applications or the completion of direct certification procedures for the current school year, children from households with approved applications or documentation of direct certification on file from the preceding year, shall be offered reimbursable free and reduced price meals or free milk, as appropriate. The local educational agency must extend eligibility to newly enrolled children when other children in their household (as defined in § 245.2) were approved for benefits the previous year. However, applications and documentation of direct certification from the preceding year shall be used only to determine eligibility for the first 30 operating days following the first operating day at the beginning of the school year, or until a new eligibility determination is made in the current school year, whichever comes first. At the State agency's discretion, students who, in the preceding school year, attended a school operating a special assistance certification and reimbursement alternative (as permitted in § 245.9)) may be offered free reimbursable meals for up to 30 operating days or until a new eligibility determination is made in the current school year, whichever comes first. . . . INDIANA STATE BOARD OF ACCOUNTS 23 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (4) Calculating income. The local educational agency must use the income information provided by the household on the application to calculate the household's total current income. When a household submits an application containing complete documentation, as defined in § 245.2, and the household's total current income is at or below the eligibility limits specified in the Income Eligibility Guidelines as defined in § 245.2, the children in that household must be approved for free or reduced price benefits, as applicable. . . ." Cause A proper system of internal controls was not designed by management of the School Corporation. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, a student's eligibility for free or reduced-price meals was incorrectly determined. Noncompliance with the grant agreement and the compliance requirement could result in the loss of future federal funds to the School Corporation. Questioned Costs There were no questioned costs identified. Recommendation We recommended the School Corporation's management establish a proper system of internal controls and develop policies and procedures to ensure only eligible students receive benefits. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-005 Subject: Child Nutrition Cluster - Eligibility Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Eligibility Audit Findings: Material Weakness, Other Matters Repeat Finding This is a repeat finding from the prior audit report. The prior audit finding number was 2021-002. Condition and Context The School Corporation had not established effective internal controls that would likely be effective in preventing, or detecting and correcting, noncompliance related to the eligibility determination of a child receiving meals. INDIANA STATE BOARD OF ACCOUNTS 21 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Any child enrolled in a participating school or summer camp, or attending a Summer Food Service Program (SFSP) meal service site, who meets the applicable program's definition of "child," may receive meals under the applicable program. In the case of the National School Lunch Program and School Breakfast Program, children belonging to households meeting nationwide income eligibility requirements may receive meals at no charge or at reduced price. Children who have been determined ineligible for free or reduced-price school meals pay the full price, set by the School Food Authority, for their meals. Children attending SFSP meal service sites receive their meals at no charge. As a general rule, a child's eligibility for free or reduced-price meals under a Child Nutrition Cluster program may be established by the submission of an annual application or statement which furnishes such information as family income and family size. Local educational agencies, institutions, and sponsors then determine eligibility by comparing the data reported by the child's household to published income eligibility guidelines. Additionally, a child may be direct certified. For a direct certification, annual eligibility determinations are based on the child's household receiving benefits under SNAP, FDPIR, the Head Start Program (ALN 93.600), or, under most circumstances, the TANF program (ALN 93.558). A household may furnish documentation of its participation in one of these programs; or the school, institution, or sponsor may obtain the information directly from the State or local agency that administers these programs. Certain foster, runaway, homeless, and migrant children are categorically eligible for free school lunches and breakfasts. Direct certified households do not need to complete an application. The School Corporation's process for determining student eligibility was that the Assistant Food Service Director make the initial eligibility determination and the Food Service Director review the determination made. Per the School Corporation, all free or reduced priced applications received were subject to this process. A sample of 40 free or reduced priced applications were selected for testing to determine if the identified internal control was in place and operating. Of the 40 free and reduced priced applications selected for testing, 12 did not have the identified internal control in place. For these 12 applications, the Assistant Food Service Director made the initial eligibility determination, but there was no evidence that the Food Service Director reviewed the determination. In addition, a sample of 40 free or reduced priced applications were selected for testing to determine whether required eligibility determinations were made, participants were determined to be eligible, and that only eligible individuals participated in the program. Of the 40 free and reduced priced applications selected for testing, 3 were determined to have the incorrect eligibility status in the system software when compared to supporting documentation. The lack of internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." INDIANA STATE BOARD OF ACCOUNTS 22 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) 7 CFR 245.6 states in part: ". . . (b) Direct certification. In lieu of requiring a household to complete the free and reduced price meal or free milk application, as specified in paragraph (a) of this section, the local educational agency must certify children as eligible for free meals or free milk in accordance with paragraph (b)(1)(i) of this section or may certify children as eligible for free meals or free milk in accordance with paragraph (b)(2) of this section. If a household also submits an application for directly certified children, the direct certification eligibility determination will take precedence. . . . (5) Direct certification documentation. (i) The required documentation for direct certification is provided in paragraph (2) of the definition of Documentation in § 245.2. (ii) (A) Beginning in School Year 2012–2013, direct certification with SNAP shall be conducted using a data matching technique only. Letters to households for direct certification may be used only as an additional means to notify households of children's eligibility based on receipt of SNAP benefits. The last period that letters to households may be used as the primary method for direct certification is School Year 2011–2012. While such notices cannot be the primary method used by a state to document receipt of SNAP, the local educational agency shall accept such a letter if presented by a household. (B) Letters or other documents may be used as the primary method for direct certification to document receipt of FDPIR or TANF benefits. (iii) Individual notices from officials of eligible programs for a Foster child, a Homeless child, a Migrant child, a Runaway child, or a Head Start child, as defined in § 245.2, may continue to be used. These notices are provided to school officials who must certify these children as eligible for free meals or free milk, as applicable, without further application, upon receipt of such notice. . . . (c) Determination of Eligibility . . . (2) Use of prior year's eligibility status. Prior to the processing of applications or the completion of direct certification procedures for the current school year, children from households with approved applications or documentation of direct certification on file from the preceding year, shall be offered reimbursable free and reduced price meals or free milk, as appropriate. The local educational agency must extend eligibility to newly enrolled children when other children in their household (as defined in § 245.2) were approved for benefits the previous year. However, applications and documentation of direct certification from the preceding year shall be used only to determine eligibility for the first 30 operating days following the first operating day at the beginning of the school year, or until a new eligibility determination is made in the current school year, whichever comes first. At the State agency's discretion, students who, in the preceding school year, attended a school operating a special assistance certification and reimbursement alternative (as permitted in § 245.9)) may be offered free reimbursable meals for up to 30 operating days or until a new eligibility determination is made in the current school year, whichever comes first. . . . INDIANA STATE BOARD OF ACCOUNTS 23 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (4) Calculating income. The local educational agency must use the income information provided by the household on the application to calculate the household's total current income. When a household submits an application containing complete documentation, as defined in § 245.2, and the household's total current income is at or below the eligibility limits specified in the Income Eligibility Guidelines as defined in § 245.2, the children in that household must be approved for free or reduced price benefits, as applicable. . . ." Cause A proper system of internal controls was not designed by management of the School Corporation. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, a student's eligibility for free or reduced-price meals was incorrectly determined. Noncompliance with the grant agreement and the compliance requirement could result in the loss of future federal funds to the School Corporation. Questioned Costs There were no questioned costs identified. Recommendation We recommended the School Corporation's management establish a proper system of internal controls and develop policies and procedures to ensure only eligible students receive benefits. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-006 Subject: Child Nutrition Cluster - Procurement and Suspension and Debarment Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Procurement and Suspension and Debarment Audit Findings: Material Weakness, Other Matters INDIANA STATE BOARD OF ACCOUNTS 24 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Condition and Context A School Nutrition Cooperative (Co-ops, Education Service Center, Group Purchasing Organization, etc.) that would like to be classified as a School Food Authority (SFA) Cooperative must complete a questionnaire and submit it to the Indiana Department of Education (IDOE). Once a questionnaire is received, the IDOE will review the answers to determine a Cooperative's classification. Only Cooperatives that submit the questionnaire and receive an SFA-only Cooperative classification from the IDOE in writing, will be considered an SFA only Cooperative for the purposes of the procurement process and procurement reviews. When the value of goods or services exceeds the simplified acquisition threshold, the proper purchasing method would be the bidding process, unless the purchase meets certain other qualifications. Federal regulations allow for informal procurement methods when the value of the procurement for goods or services does not exceed the simplified acquisition threshold, which is customarily set at $250,000. However, Indiana Code 5-22-8 has a more restrictive threshold of $150,000 or less for when small purchase procedures may be used. This informal process allows for methods other than the formal bid process. The informal process is divided between two methods based on thresholds. Micro-purchases, typically for those purchases $10,000 or under, and small purchase procedures for those purchases above the micropurchase threshold, but below the simplified acquisition threshold. Micro-purchases may be awarded without soliciting competitive price rate quotations. If small purchase procedures are used, then price or rate quotations must be obtained from an adequate number of qualified sources. If it is determined a single source provider can be used for a small purchase, documentation must be retained supporting the determination. Two vendors were identified as falling within the small purchase threshold. Both vendors were selected for testing. Supporting documentation to show that an adequate number of price or rate quotations were obtained to ensure full and open competition could not be provided for audit. The lack of internal controls and noncompliance were systemic issues throughout the audit. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.318 states in part: "(a) The non-Federal entity must have and use documented procurement procedures, consistent with State, local, and tribal laws and regulations and the standards of this section, for the acquisition of property or services required under a Federal award or subaward. The non-Federal entity's documented procurement procedures must conform to the procurement standards identified in §§ 200.317 through 200.327. . . . INDIANA STATE BOARD OF ACCOUNTS 25 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (i) The non-Federal entity must maintain records sufficient to detail the history of procurement. These records will include, but are not necessarily limited to, the following: Rationale for the method of procurement, selection of contract type, contractor selection or rejection, and the basis for the contract price. . . ." 2 CFR 200.320 states in part: "The non-Federal entity must have and use document procurement procedures, consistent with the standards of this section and §§ 200.317, 200.318, and 200.319 for any of the following methods of procurement used for the acquisition of property or services required under a Federal award or sub-award. (a) Informal procurement methods. When the value of the procurement for property or services under a Federal award does not exceed the simplified acquisition threshold (SAT), as defined in § 200.1, or a lower threshold established by a non-Federal entity, formal procurement methods are not required. The non-Federal entity may use informal procurement methods to expedite the completion of its transactions and minimize the associated administrative burden and cost. The informal methods used for procurement of property or services at or below the SAT include: (2) Small purchases – (i) Small purchase procedures. The acquisition of property or services, the aggregate dollar amount of which is higher than the micro-purchase threshold but does not exceed the simplified acquisition threshold. If small purchase procedures are used, price or rate quotations must be obtained from an adequate number of qualified sources as determined appropriate by the non-Federal entity. . . ." Cause A proper system of internal controls was not designed by management of the School Corporation. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, procurement procedures for goods and services were not adhered to. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the School Corporation's management establish a proper system of internal controls and develop policies and procedures to ensure there are appropriate procurement procedures for goods and services. INDIANA STATE BOARD OF ACCOUNTS 26 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-006 Subject: Child Nutrition Cluster - Procurement and Suspension and Debarment Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Procurement and Suspension and Debarment Audit Findings: Material Weakness, Other Matters INDIANA STATE BOARD OF ACCOUNTS 24 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Condition and Context A School Nutrition Cooperative (Co-ops, Education Service Center, Group Purchasing Organization, etc.) that would like to be classified as a School Food Authority (SFA) Cooperative must complete a questionnaire and submit it to the Indiana Department of Education (IDOE). Once a questionnaire is received, the IDOE will review the answers to determine a Cooperative's classification. Only Cooperatives that submit the questionnaire and receive an SFA-only Cooperative classification from the IDOE in writing, will be considered an SFA only Cooperative for the purposes of the procurement process and procurement reviews. When the value of goods or services exceeds the simplified acquisition threshold, the proper purchasing method would be the bidding process, unless the purchase meets certain other qualifications. Federal regulations allow for informal procurement methods when the value of the procurement for goods or services does not exceed the simplified acquisition threshold, which is customarily set at $250,000. However, Indiana Code 5-22-8 has a more restrictive threshold of $150,000 or less for when small purchase procedures may be used. This informal process allows for methods other than the formal bid process. The informal process is divided between two methods based on thresholds. Micro-purchases, typically for those purchases $10,000 or under, and small purchase procedures for those purchases above the micropurchase threshold, but below the simplified acquisition threshold. Micro-purchases may be awarded without soliciting competitive price rate quotations. If small purchase procedures are used, then price or rate quotations must be obtained from an adequate number of qualified sources. If it is determined a single source provider can be used for a small purchase, documentation must be retained supporting the determination. Two vendors were identified as falling within the small purchase threshold. Both vendors were selected for testing. Supporting documentation to show that an adequate number of price or rate quotations were obtained to ensure full and open competition could not be provided for audit. The lack of internal controls and noncompliance were systemic issues throughout the audit. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.318 states in part: "(a) The non-Federal entity must have and use documented procurement procedures, consistent with State, local, and tribal laws and regulations and the standards of this section, for the acquisition of property or services required under a Federal award or subaward. The non-Federal entity's documented procurement procedures must conform to the procurement standards identified in §§ 200.317 through 200.327. . . . INDIANA STATE BOARD OF ACCOUNTS 25 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (i) The non-Federal entity must maintain records sufficient to detail the history of procurement. These records will include, but are not necessarily limited to, the following: Rationale for the method of procurement, selection of contract type, contractor selection or rejection, and the basis for the contract price. . . ." 2 CFR 200.320 states in part: "The non-Federal entity must have and use document procurement procedures, consistent with the standards of this section and §§ 200.317, 200.318, and 200.319 for any of the following methods of procurement used for the acquisition of property or services required under a Federal award or sub-award. (a) Informal procurement methods. When the value of the procurement for property or services under a Federal award does not exceed the simplified acquisition threshold (SAT), as defined in § 200.1, or a lower threshold established by a non-Federal entity, formal procurement methods are not required. The non-Federal entity may use informal procurement methods to expedite the completion of its transactions and minimize the associated administrative burden and cost. The informal methods used for procurement of property or services at or below the SAT include: (2) Small purchases – (i) Small purchase procedures. The acquisition of property or services, the aggregate dollar amount of which is higher than the micro-purchase threshold but does not exceed the simplified acquisition threshold. If small purchase procedures are used, price or rate quotations must be obtained from an adequate number of qualified sources as determined appropriate by the non-Federal entity. . . ." Cause A proper system of internal controls was not designed by management of the School Corporation. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, procurement procedures for goods and services were not adhered to. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the School Corporation's management establish a proper system of internal controls and develop policies and procedures to ensure there are appropriate procurement procedures for goods and services. INDIANA STATE BOARD OF ACCOUNTS 26 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-006 Subject: Child Nutrition Cluster - Procurement and Suspension and Debarment Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Procurement and Suspension and Debarment Audit Findings: Material Weakness, Other Matters INDIANA STATE BOARD OF ACCOUNTS 24 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Condition and Context A School Nutrition Cooperative (Co-ops, Education Service Center, Group Purchasing Organization, etc.) that would like to be classified as a School Food Authority (SFA) Cooperative must complete a questionnaire and submit it to the Indiana Department of Education (IDOE). Once a questionnaire is received, the IDOE will review the answers to determine a Cooperative's classification. Only Cooperatives that submit the questionnaire and receive an SFA-only Cooperative classification from the IDOE in writing, will be considered an SFA only Cooperative for the purposes of the procurement process and procurement reviews. When the value of goods or services exceeds the simplified acquisition threshold, the proper purchasing method would be the bidding process, unless the purchase meets certain other qualifications. Federal regulations allow for informal procurement methods when the value of the procurement for goods or services does not exceed the simplified acquisition threshold, which is customarily set at $250,000. However, Indiana Code 5-22-8 has a more restrictive threshold of $150,000 or less for when small purchase procedures may be used. This informal process allows for methods other than the formal bid process. The informal process is divided between two methods based on thresholds. Micro-purchases, typically for those purchases $10,000 or under, and small purchase procedures for those purchases above the micropurchase threshold, but below the simplified acquisition threshold. Micro-purchases may be awarded without soliciting competitive price rate quotations. If small purchase procedures are used, then price or rate quotations must be obtained from an adequate number of qualified sources. If it is determined a single source provider can be used for a small purchase, documentation must be retained supporting the determination. Two vendors were identified as falling within the small purchase threshold. Both vendors were selected for testing. Supporting documentation to show that an adequate number of price or rate quotations were obtained to ensure full and open competition could not be provided for audit. The lack of internal controls and noncompliance were systemic issues throughout the audit. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.318 states in part: "(a) The non-Federal entity must have and use documented procurement procedures, consistent with State, local, and tribal laws and regulations and the standards of this section, for the acquisition of property or services required under a Federal award or subaward. The non-Federal entity's documented procurement procedures must conform to the procurement standards identified in §§ 200.317 through 200.327. . . . INDIANA STATE BOARD OF ACCOUNTS 25 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (i) The non-Federal entity must maintain records sufficient to detail the history of procurement. These records will include, but are not necessarily limited to, the following: Rationale for the method of procurement, selection of contract type, contractor selection or rejection, and the basis for the contract price. . . ." 2 CFR 200.320 states in part: "The non-Federal entity must have and use document procurement procedures, consistent with the standards of this section and §§ 200.317, 200.318, and 200.319 for any of the following methods of procurement used for the acquisition of property or services required under a Federal award or sub-award. (a) Informal procurement methods. When the value of the procurement for property or services under a Federal award does not exceed the simplified acquisition threshold (SAT), as defined in § 200.1, or a lower threshold established by a non-Federal entity, formal procurement methods are not required. The non-Federal entity may use informal procurement methods to expedite the completion of its transactions and minimize the associated administrative burden and cost. The informal methods used for procurement of property or services at or below the SAT include: (2) Small purchases – (i) Small purchase procedures. The acquisition of property or services, the aggregate dollar amount of which is higher than the micro-purchase threshold but does not exceed the simplified acquisition threshold. If small purchase procedures are used, price or rate quotations must be obtained from an adequate number of qualified sources as determined appropriate by the non-Federal entity. . . ." Cause A proper system of internal controls was not designed by management of the School Corporation. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, procurement procedures for goods and services were not adhered to. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the School Corporation's management establish a proper system of internal controls and develop policies and procedures to ensure there are appropriate procurement procedures for goods and services. INDIANA STATE BOARD OF ACCOUNTS 26 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-006 Subject: Child Nutrition Cluster - Procurement and Suspension and Debarment Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Procurement and Suspension and Debarment Audit Findings: Material Weakness, Other Matters INDIANA STATE BOARD OF ACCOUNTS 24 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Condition and Context A School Nutrition Cooperative (Co-ops, Education Service Center, Group Purchasing Organization, etc.) that would like to be classified as a School Food Authority (SFA) Cooperative must complete a questionnaire and submit it to the Indiana Department of Education (IDOE). Once a questionnaire is received, the IDOE will review the answers to determine a Cooperative's classification. Only Cooperatives that submit the questionnaire and receive an SFA-only Cooperative classification from the IDOE in writing, will be considered an SFA only Cooperative for the purposes of the procurement process and procurement reviews. When the value of goods or services exceeds the simplified acquisition threshold, the proper purchasing method would be the bidding process, unless the purchase meets certain other qualifications. Federal regulations allow for informal procurement methods when the value of the procurement for goods or services does not exceed the simplified acquisition threshold, which is customarily set at $250,000. However, Indiana Code 5-22-8 has a more restrictive threshold of $150,000 or less for when small purchase procedures may be used. This informal process allows for methods other than the formal bid process. The informal process is divided between two methods based on thresholds. Micro-purchases, typically for those purchases $10,000 or under, and small purchase procedures for those purchases above the micropurchase threshold, but below the simplified acquisition threshold. Micro-purchases may be awarded without soliciting competitive price rate quotations. If small purchase procedures are used, then price or rate quotations must be obtained from an adequate number of qualified sources. If it is determined a single source provider can be used for a small purchase, documentation must be retained supporting the determination. Two vendors were identified as falling within the small purchase threshold. Both vendors were selected for testing. Supporting documentation to show that an adequate number of price or rate quotations were obtained to ensure full and open competition could not be provided for audit. The lack of internal controls and noncompliance were systemic issues throughout the audit. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.318 states in part: "(a) The non-Federal entity must have and use documented procurement procedures, consistent with State, local, and tribal laws and regulations and the standards of this section, for the acquisition of property or services required under a Federal award or subaward. The non-Federal entity's documented procurement procedures must conform to the procurement standards identified in §§ 200.317 through 200.327. . . . INDIANA STATE BOARD OF ACCOUNTS 25 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (i) The non-Federal entity must maintain records sufficient to detail the history of procurement. These records will include, but are not necessarily limited to, the following: Rationale for the method of procurement, selection of contract type, contractor selection or rejection, and the basis for the contract price. . . ." 2 CFR 200.320 states in part: "The non-Federal entity must have and use document procurement procedures, consistent with the standards of this section and §§ 200.317, 200.318, and 200.319 for any of the following methods of procurement used for the acquisition of property or services required under a Federal award or sub-award. (a) Informal procurement methods. When the value of the procurement for property or services under a Federal award does not exceed the simplified acquisition threshold (SAT), as defined in § 200.1, or a lower threshold established by a non-Federal entity, formal procurement methods are not required. The non-Federal entity may use informal procurement methods to expedite the completion of its transactions and minimize the associated administrative burden and cost. The informal methods used for procurement of property or services at or below the SAT include: (2) Small purchases – (i) Small purchase procedures. The acquisition of property or services, the aggregate dollar amount of which is higher than the micro-purchase threshold but does not exceed the simplified acquisition threshold. If small purchase procedures are used, price or rate quotations must be obtained from an adequate number of qualified sources as determined appropriate by the non-Federal entity. . . ." Cause A proper system of internal controls was not designed by management of the School Corporation. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, procurement procedures for goods and services were not adhered to. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the School Corporation's management establish a proper system of internal controls and develop policies and procedures to ensure there are appropriate procurement procedures for goods and services. INDIANA STATE BOARD OF ACCOUNTS 26 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-006 Subject: Child Nutrition Cluster - Procurement and Suspension and Debarment Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Procurement and Suspension and Debarment Audit Findings: Material Weakness, Other Matters INDIANA STATE BOARD OF ACCOUNTS 24 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Condition and Context A School Nutrition Cooperative (Co-ops, Education Service Center, Group Purchasing Organization, etc.) that would like to be classified as a School Food Authority (SFA) Cooperative must complete a questionnaire and submit it to the Indiana Department of Education (IDOE). Once a questionnaire is received, the IDOE will review the answers to determine a Cooperative's classification. Only Cooperatives that submit the questionnaire and receive an SFA-only Cooperative classification from the IDOE in writing, will be considered an SFA only Cooperative for the purposes of the procurement process and procurement reviews. When the value of goods or services exceeds the simplified acquisition threshold, the proper purchasing method would be the bidding process, unless the purchase meets certain other qualifications. Federal regulations allow for informal procurement methods when the value of the procurement for goods or services does not exceed the simplified acquisition threshold, which is customarily set at $250,000. However, Indiana Code 5-22-8 has a more restrictive threshold of $150,000 or less for when small purchase procedures may be used. This informal process allows for methods other than the formal bid process. The informal process is divided between two methods based on thresholds. Micro-purchases, typically for those purchases $10,000 or under, and small purchase procedures for those purchases above the micropurchase threshold, but below the simplified acquisition threshold. Micro-purchases may be awarded without soliciting competitive price rate quotations. If small purchase procedures are used, then price or rate quotations must be obtained from an adequate number of qualified sources. If it is determined a single source provider can be used for a small purchase, documentation must be retained supporting the determination. Two vendors were identified as falling within the small purchase threshold. Both vendors were selected for testing. Supporting documentation to show that an adequate number of price or rate quotations were obtained to ensure full and open competition could not be provided for audit. The lack of internal controls and noncompliance were systemic issues throughout the audit. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.318 states in part: "(a) The non-Federal entity must have and use documented procurement procedures, consistent with State, local, and tribal laws and regulations and the standards of this section, for the acquisition of property or services required under a Federal award or subaward. The non-Federal entity's documented procurement procedures must conform to the procurement standards identified in §§ 200.317 through 200.327. . . . INDIANA STATE BOARD OF ACCOUNTS 25 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (i) The non-Federal entity must maintain records sufficient to detail the history of procurement. These records will include, but are not necessarily limited to, the following: Rationale for the method of procurement, selection of contract type, contractor selection or rejection, and the basis for the contract price. . . ." 2 CFR 200.320 states in part: "The non-Federal entity must have and use document procurement procedures, consistent with the standards of this section and §§ 200.317, 200.318, and 200.319 for any of the following methods of procurement used for the acquisition of property or services required under a Federal award or sub-award. (a) Informal procurement methods. When the value of the procurement for property or services under a Federal award does not exceed the simplified acquisition threshold (SAT), as defined in § 200.1, or a lower threshold established by a non-Federal entity, formal procurement methods are not required. The non-Federal entity may use informal procurement methods to expedite the completion of its transactions and minimize the associated administrative burden and cost. The informal methods used for procurement of property or services at or below the SAT include: (2) Small purchases – (i) Small purchase procedures. The acquisition of property or services, the aggregate dollar amount of which is higher than the micro-purchase threshold but does not exceed the simplified acquisition threshold. If small purchase procedures are used, price or rate quotations must be obtained from an adequate number of qualified sources as determined appropriate by the non-Federal entity. . . ." Cause A proper system of internal controls was not designed by management of the School Corporation. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, procurement procedures for goods and services were not adhered to. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the School Corporation's management establish a proper system of internal controls and develop policies and procedures to ensure there are appropriate procurement procedures for goods and services. INDIANA STATE BOARD OF ACCOUNTS 26 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-007 Subject: Child Nutrition Cluster - Reporting Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Reporting Audit Finding: Material Weakness Condition and Context The School Corporation had not properly designed or implemented a system of internal controls, which would include appropriate segregation of duties, that would likely be effective in preventing, or detecting and correcting, noncompliance related to the monthly reimbursement claims. Monthly reimbursement claims for breakfast and lunch meals served are prepared and submitted without a documented review or approval by a second individual not involved in the preparation of the reimbursement claim. The lack of internal controls was a systemic issue throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Cause A proper system of internal controls was not designed by management of the School Corporation, which would include segregation of key functions. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. INDIANA STATE BOARD OF ACCOUNTS 27 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Effect Without the proper design or implementation of the components of a system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the School Corporation's management design and implement a proper system of internal controls, including policies and procedures that would provide segregation of duties to ensure appropriate reviews, approvals, and oversight are taking place. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-007 Subject: Child Nutrition Cluster - Reporting Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Reporting Audit Finding: Material Weakness Condition and Context The School Corporation had not properly designed or implemented a system of internal controls, which would include appropriate segregation of duties, that would likely be effective in preventing, or detecting and correcting, noncompliance related to the monthly reimbursement claims. Monthly reimbursement claims for breakfast and lunch meals served are prepared and submitted without a documented review or approval by a second individual not involved in the preparation of the reimbursement claim. The lack of internal controls was a systemic issue throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Cause A proper system of internal controls was not designed by management of the School Corporation, which would include segregation of key functions. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. INDIANA STATE BOARD OF ACCOUNTS 27 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Effect Without the proper design or implementation of the components of a system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the School Corporation's management design and implement a proper system of internal controls, including policies and procedures that would provide segregation of duties to ensure appropriate reviews, approvals, and oversight are taking place. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-007 Subject: Child Nutrition Cluster - Reporting Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Reporting Audit Finding: Material Weakness Condition and Context The School Corporation had not properly designed or implemented a system of internal controls, which would include appropriate segregation of duties, that would likely be effective in preventing, or detecting and correcting, noncompliance related to the monthly reimbursement claims. Monthly reimbursement claims for breakfast and lunch meals served are prepared and submitted without a documented review or approval by a second individual not involved in the preparation of the reimbursement claim. The lack of internal controls was a systemic issue throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Cause A proper system of internal controls was not designed by management of the School Corporation, which would include segregation of key functions. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. INDIANA STATE BOARD OF ACCOUNTS 27 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Effect Without the proper design or implementation of the components of a system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the School Corporation's management design and implement a proper system of internal controls, including policies and procedures that would provide segregation of duties to ensure appropriate reviews, approvals, and oversight are taking place. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-007 Subject: Child Nutrition Cluster - Reporting Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Reporting Audit Finding: Material Weakness Condition and Context The School Corporation had not properly designed or implemented a system of internal controls, which would include appropriate segregation of duties, that would likely be effective in preventing, or detecting and correcting, noncompliance related to the monthly reimbursement claims. Monthly reimbursement claims for breakfast and lunch meals served are prepared and submitted without a documented review or approval by a second individual not involved in the preparation of the reimbursement claim. The lack of internal controls was a systemic issue throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Cause A proper system of internal controls was not designed by management of the School Corporation, which would include segregation of key functions. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. INDIANA STATE BOARD OF ACCOUNTS 27 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Effect Without the proper design or implementation of the components of a system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the School Corporation's management design and implement a proper system of internal controls, including policies and procedures that would provide segregation of duties to ensure appropriate reviews, approvals, and oversight are taking place. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-007 Subject: Child Nutrition Cluster - Reporting Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Reporting Audit Finding: Material Weakness Condition and Context The School Corporation had not properly designed or implemented a system of internal controls, which would include appropriate segregation of duties, that would likely be effective in preventing, or detecting and correcting, noncompliance related to the monthly reimbursement claims. Monthly reimbursement claims for breakfast and lunch meals served are prepared and submitted without a documented review or approval by a second individual not involved in the preparation of the reimbursement claim. The lack of internal controls was a systemic issue throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Cause A proper system of internal controls was not designed by management of the School Corporation, which would include segregation of key functions. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. INDIANA STATE BOARD OF ACCOUNTS 27 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Effect Without the proper design or implementation of the components of a system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the School Corporation's management design and implement a proper system of internal controls, including policies and procedures that would provide segregation of duties to ensure appropriate reviews, approvals, and oversight are taking place. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-008 Subject: Child Nutrition Cluster - Special Tests and Provisions - Verification of Free and Reduced-Price Applications (NSLP) Federal Agency: Department of Agriculture Federal Programs: National School Lunch Program Assistance Listings Number: 10.555 Federal Award Numbers and Years (or Other Identifying Numbers): FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Special Tests and Provisions - Verification of Free and Reduced-Price Applications (NSLP) Audit Findings: Material Weakness, Other Matters Condition and Context By November 15 of each school year, the Local Educational Agencies (LEA) must verify the current free and reduced-price eligibility of households selected from a sample of applications that it has approved for free and reduced-price meals, unless the LEA is otherwise exempt from the verification requirement. The verification sample size is based on the total number of approved applications on file on October 1. If the LEA performs the verification function it must be in accordance with instructions provided by the state agency. The LEA must follow up on children whose eligibility status has changed as the result of verification activities to put them in the correct category. As instructed, the LEAs must select a sample of applications to be verified utilizing one of the following methods: INDIANA STATE BOARD OF ACCOUNTS 28 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) a. Standard sample size - The lesser of 3 percent or 3,000 of the approved applications on file as of October 1, selected from error-prone applications. For this purpose, error prone applications are those showing household incomes within $100 monthly or $1,200 annually of the income eligibility guidelines for free and reduced price meals. b. Alternative sample sizes - (1) The lesser of 3 percent or 3,000 applications selected at random from approved applications on file as of October 1 of the school year, or (2) The sum of (a) the lesser of 1 percent of all applications identified as error-prone or 1,000 error-prone applications, and (b) the lesser of 1/2 of 1 percent of, or 500, approved applications in which the household provided, in lieu of income information, a case number showing participation in the SNAP, TANF, or FDPIR. In accordance with the above guidance, the School Corporation selected a sample of verifications based on the alternative sample size. As such, the School Corporation was required to review the lesser of 3 percent or 3,000 applications selected at random from approved applications on file as of October 1 of the 2022-2023 school year. On October 1, the School Corporation had 93 applications on file and determined that 3 applications were required to be verified. One employee was responsible for performing the required verification of the 3 free and reducedprice applications. There was no documentation of an oversight, review, or approval process to ensure that the verifications were properly performed. All three of the required verifications were selected for testing. For each verification, the School Corporation requested income documentation from the applicant to perform the verification as required. For one of the three verifications tested, it was determined the verification was not completed appropriately as required. For the noted student, income documentation was not provided as requested, nor could the student be located on the direct certification listings or lookup therefore a status of free, as noted in the system, could not be verified as accurate. The lack of internal controls and noncompliance were isolated to fiscal year 2022-2023. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 7 CFR 245.6a states in part: ". . . (f) Verification procedures and assistance for households - . . . INDIANA STATE BOARD OF ACCOUNTS 29 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (7) Eligibility changes. Based on the verification activities, the local educational agency shall make appropriate modifications to the eligibility determinations made initially. The local educational agency must notify the household of any change. Households must be notified of any reduction in benefits in accordance with paragraph (j) of this section. Households with reduced benefits or that are longer eligible for free or reduced price meals must be notified of their right to reapply at any time with documentation of income or participation in one of the eligible programs in paragraph (a)(1) of this section. . . . (j) Adverse action. If verification activities fail to confirm eligibility for free or reduced price benefits or should the household fail to cooperate with verification efforts, the school or local educational agency shall reduce or terminate benefits, as applicable, as follows: Ten days advance notification shall be provided to households that are to receive a reduction or termination of benefits, prior to the actual reduction or termination. The first day of the 10 day advance notice period shall be the day the notice is sent. The notice shall advise the household of: (1) The change; (2) The reasons for the change; (3) Notification of the right to appeal and when the appeal must be filed to ensure continued benefits while awaiting a hearing and decision; (4) Instructions on how to appeal; and (5) The right to reapply at any time during the school year. The reasons for ineligibility shall be properly documented and retained on file at the local educational agency." Cause A proper system of internal controls was not designed by management of the School Corporation, which would include segregation of duties. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, verifications for free and reduced-price applications could not be verified as accurate. Noncompliance with the grant agreement and the compliance requirement could result in the loss of future federal funds to the School Corporation. Questioned Costs There were no questioned costs identified. INDIANA STATE BOARD OF ACCOUNTS 30 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Recommendation We recommended that management of the School Corporation establish a proper system of internal controls and develop policies and procedures to ensure verifications for free and reduced-price applications are appropriately completed and reviewed. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-009 Subject: Child Nutrition Cluster - Special Tests and Provisions - Non-Profit School Food Service Accounts Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Special Tests and Provisions - Non-Profit School Food Service Accounts Audit Finding: Material Weakness Condition and Context The School Corporation had not properly designed or implemented a system of internal controls, which would include appropriate segregation of duties, that would likely be effective in preventing, or detecting and correcting, noncompliance. All revenues and expenditures of the non-profit school food service account are to be accounted for in accordance with state and federal requirements. As such separate accounting is to be made for the school food service, federal reimbursements are to be correcting credited to the food service account, and transfers out of the school food service account are to be for allowable costs of the school food service. Receipt of the federal reimbursements were posted to the ledger by one individual without an oversight or review process in place to ensure the remitter, amount, fund, and receipt classification were accurate. Additionally, the same individual received the ACH notifications when monies from monthly meal reimbursements were credited to the School Corporation's bank account and performed the bank reconciliations. The lack of internal controls was a systemic issue throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." INDIANA STATE BOARD OF ACCOUNTS 31 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Cause A proper system of internal controls was not designed by management of the School Corporation, which would include appropriate segregation of duties. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the School Corporation's management design and implement a proper system of internal controls, including policies and procedures that would provide segregation of duties to ensure appropriate reviews, approvals, and oversight are taking place. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-009 Subject: Child Nutrition Cluster - Special Tests and Provisions - Non-Profit School Food Service Accounts Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Special Tests and Provisions - Non-Profit School Food Service Accounts Audit Finding: Material Weakness Condition and Context The School Corporation had not properly designed or implemented a system of internal controls, which would include appropriate segregation of duties, that would likely be effective in preventing, or detecting and correcting, noncompliance. All revenues and expenditures of the non-profit school food service account are to be accounted for in accordance with state and federal requirements. As such separate accounting is to be made for the school food service, federal reimbursements are to be correcting credited to the food service account, and transfers out of the school food service account are to be for allowable costs of the school food service. Receipt of the federal reimbursements were posted to the ledger by one individual without an oversight or review process in place to ensure the remitter, amount, fund, and receipt classification were accurate. Additionally, the same individual received the ACH notifications when monies from monthly meal reimbursements were credited to the School Corporation's bank account and performed the bank reconciliations. The lack of internal controls was a systemic issue throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." INDIANA STATE BOARD OF ACCOUNTS 31 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Cause A proper system of internal controls was not designed by management of the School Corporation, which would include appropriate segregation of duties. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the School Corporation's management design and implement a proper system of internal controls, including policies and procedures that would provide segregation of duties to ensure appropriate reviews, approvals, and oversight are taking place. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-009 Subject: Child Nutrition Cluster - Special Tests and Provisions - Non-Profit School Food Service Accounts Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Special Tests and Provisions - Non-Profit School Food Service Accounts Audit Finding: Material Weakness Condition and Context The School Corporation had not properly designed or implemented a system of internal controls, which would include appropriate segregation of duties, that would likely be effective in preventing, or detecting and correcting, noncompliance. All revenues and expenditures of the non-profit school food service account are to be accounted for in accordance with state and federal requirements. As such separate accounting is to be made for the school food service, federal reimbursements are to be correcting credited to the food service account, and transfers out of the school food service account are to be for allowable costs of the school food service. Receipt of the federal reimbursements were posted to the ledger by one individual without an oversight or review process in place to ensure the remitter, amount, fund, and receipt classification were accurate. Additionally, the same individual received the ACH notifications when monies from monthly meal reimbursements were credited to the School Corporation's bank account and performed the bank reconciliations. The lack of internal controls was a systemic issue throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." INDIANA STATE BOARD OF ACCOUNTS 31 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Cause A proper system of internal controls was not designed by management of the School Corporation, which would include appropriate segregation of duties. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the School Corporation's management design and implement a proper system of internal controls, including policies and procedures that would provide segregation of duties to ensure appropriate reviews, approvals, and oversight are taking place. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-009 Subject: Child Nutrition Cluster - Special Tests and Provisions - Non-Profit School Food Service Accounts Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Special Tests and Provisions - Non-Profit School Food Service Accounts Audit Finding: Material Weakness Condition and Context The School Corporation had not properly designed or implemented a system of internal controls, which would include appropriate segregation of duties, that would likely be effective in preventing, or detecting and correcting, noncompliance. All revenues and expenditures of the non-profit school food service account are to be accounted for in accordance with state and federal requirements. As such separate accounting is to be made for the school food service, federal reimbursements are to be correcting credited to the food service account, and transfers out of the school food service account are to be for allowable costs of the school food service. Receipt of the federal reimbursements were posted to the ledger by one individual without an oversight or review process in place to ensure the remitter, amount, fund, and receipt classification were accurate. Additionally, the same individual received the ACH notifications when monies from monthly meal reimbursements were credited to the School Corporation's bank account and performed the bank reconciliations. The lack of internal controls was a systemic issue throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." INDIANA STATE BOARD OF ACCOUNTS 31 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Cause A proper system of internal controls was not designed by management of the School Corporation, which would include appropriate segregation of duties. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the School Corporation's management design and implement a proper system of internal controls, including policies and procedures that would provide segregation of duties to ensure appropriate reviews, approvals, and oversight are taking place. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-009 Subject: Child Nutrition Cluster - Special Tests and Provisions - Non-Profit School Food Service Accounts Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY2022, FY2023 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Special Tests and Provisions - Non-Profit School Food Service Accounts Audit Finding: Material Weakness Condition and Context The School Corporation had not properly designed or implemented a system of internal controls, which would include appropriate segregation of duties, that would likely be effective in preventing, or detecting and correcting, noncompliance. All revenues and expenditures of the non-profit school food service account are to be accounted for in accordance with state and federal requirements. As such separate accounting is to be made for the school food service, federal reimbursements are to be correcting credited to the food service account, and transfers out of the school food service account are to be for allowable costs of the school food service. Receipt of the federal reimbursements were posted to the ledger by one individual without an oversight or review process in place to ensure the remitter, amount, fund, and receipt classification were accurate. Additionally, the same individual received the ACH notifications when monies from monthly meal reimbursements were credited to the School Corporation's bank account and performed the bank reconciliations. The lack of internal controls was a systemic issue throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." INDIANA STATE BOARD OF ACCOUNTS 31 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Cause A proper system of internal controls was not designed by management of the School Corporation, which would include appropriate segregation of duties. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the School Corporation's management design and implement a proper system of internal controls, including policies and procedures that would provide segregation of duties to ensure appropriate reviews, approvals, and oversight are taking place. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-010 Subject: COVID-19 - Education Stabilization Fund - Allowable Costs/Cost Principles Federal Agency: Department of Education Federal Program: COVID-19 - Education Stabilization Fund Assistance Listings Numbers: 84.425D, 84.425U Federal Award Numbers and Years (or Other Identifying Numbers): S425D210013, S425U210013 Pass-Through Entity: Department of Education Compliance Requirement: Allowable Costs/Cost Principles Audit Findings: Material Weakness, Other Matters Condition and Context The Elementary and Secondary School Emergency Relief (ESSER) Fund provided funding to states and school districts to help safely reopen and sustain the safe operation of schools and to address the impact of the coronavirus pandemic on the nation's students. States were required to subgrant a portion of their ESSER allocations to Local Educational Agencies (LEA). Prior to the LEAs receiving their respective subgrants, the LEAs were required to complete an application for the ESSER funding, which was submitted to the Indiana Department of Education (IDOE), the pass-through entity for approval. The application included a district level budget identifying how the LEA intended to spend program funds. A sample of 25 claims charged to the ESSER grant program for which reimbursement was received during the audit period was selected for testing to verify that the expenditures were in conformance with the applicable cost principles. Of the 25 claims tested, the following errors were noted: INDIANA STATE BOARD OF ACCOUNTS 32 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued)  Two claims, totaling $983, were for payments to a teacher for part-time tutoring. However, there was not a School Board approved contract or Salary Ordinance that showed the approval of this position or the rate to be paid.  Two claims, totaling $318,922, were for payments for playground equipment; however, the related contract supporting the purchase was not provided. The lack of effective internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.403 states in part: "Except where otherwise authorized by statute, costs must meet the following general criteria in order to be allowable under Federal awards: (a) Be necessary and reasonable for the performance of the Federal award and be allocable thereto under these principles. (b) Conform to any limitations or exclusions set forth in these principles or in the Federal award as to types or amount of cost items. . . . (g) Be adequately documented. . . ." 2 CFR 200.430(i) states in part: "Standards for Documentation of Personnel Expenses (1) Charges to Federal awards for salaries and wages must be based on records that accurately reflect the work performed. These records must: (i) Be supported by a system of internal control which provides reasonable assurance that the charges are accurate, allowable, and properly allocated; (ii) Be incorporated into the official records of the non-Federal entity; (iii) Reasonably reflect the total activity for which the employee is compensated by the non- Federal entity, not exceeding 100% of compensated activities (for IHE, this per the IHE's definition of IBS); . . . INDIANA STATE BOARD OF ACCOUNTS 33 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (vii) Support the distribution of the employee's salary or wages among specific activities or cost objectives if the employee works on more than one Federal award; a Federal award and non-Federal award; an indirect cost activity and a direct cost activity; two or more indirect activities which are allocated using different allocation bases; or an unallowable activity and a direct or indirect cost activity. . . ." Cause A proper system of internal controls was not designed by the School Corporation's management. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, expenses were paid without adequate supporting documentation. Noncompliance with the grant agreement and the compliance requirement could result in the loss of future federal funds to the School Corporation. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the School Corporation's management establish a proper system of internal controls and develop policies and procedures to ensure costs are adequately documented. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-010 Subject: COVID-19 - Education Stabilization Fund - Allowable Costs/Cost Principles Federal Agency: Department of Education Federal Program: COVID-19 - Education Stabilization Fund Assistance Listings Numbers: 84.425D, 84.425U Federal Award Numbers and Years (or Other Identifying Numbers): S425D210013, S425U210013 Pass-Through Entity: Department of Education Compliance Requirement: Allowable Costs/Cost Principles Audit Findings: Material Weakness, Other Matters Condition and Context The Elementary and Secondary School Emergency Relief (ESSER) Fund provided funding to states and school districts to help safely reopen and sustain the safe operation of schools and to address the impact of the coronavirus pandemic on the nation's students. States were required to subgrant a portion of their ESSER allocations to Local Educational Agencies (LEA). Prior to the LEAs receiving their respective subgrants, the LEAs were required to complete an application for the ESSER funding, which was submitted to the Indiana Department of Education (IDOE), the pass-through entity for approval. The application included a district level budget identifying how the LEA intended to spend program funds. A sample of 25 claims charged to the ESSER grant program for which reimbursement was received during the audit period was selected for testing to verify that the expenditures were in conformance with the applicable cost principles. Of the 25 claims tested, the following errors were noted: INDIANA STATE BOARD OF ACCOUNTS 32 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued)  Two claims, totaling $983, were for payments to a teacher for part-time tutoring. However, there was not a School Board approved contract or Salary Ordinance that showed the approval of this position or the rate to be paid.  Two claims, totaling $318,922, were for payments for playground equipment; however, the related contract supporting the purchase was not provided. The lack of effective internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.403 states in part: "Except where otherwise authorized by statute, costs must meet the following general criteria in order to be allowable under Federal awards: (a) Be necessary and reasonable for the performance of the Federal award and be allocable thereto under these principles. (b) Conform to any limitations or exclusions set forth in these principles or in the Federal award as to types or amount of cost items. . . . (g) Be adequately documented. . . ." 2 CFR 200.430(i) states in part: "Standards for Documentation of Personnel Expenses (1) Charges to Federal awards for salaries and wages must be based on records that accurately reflect the work performed. These records must: (i) Be supported by a system of internal control which provides reasonable assurance that the charges are accurate, allowable, and properly allocated; (ii) Be incorporated into the official records of the non-Federal entity; (iii) Reasonably reflect the total activity for which the employee is compensated by the non- Federal entity, not exceeding 100% of compensated activities (for IHE, this per the IHE's definition of IBS); . . . INDIANA STATE BOARD OF ACCOUNTS 33 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (vii) Support the distribution of the employee's salary or wages among specific activities or cost objectives if the employee works on more than one Federal award; a Federal award and non-Federal award; an indirect cost activity and a direct cost activity; two or more indirect activities which are allocated using different allocation bases; or an unallowable activity and a direct or indirect cost activity. . . ." Cause A proper system of internal controls was not designed by the School Corporation's management. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, expenses were paid without adequate supporting documentation. Noncompliance with the grant agreement and the compliance requirement could result in the loss of future federal funds to the School Corporation. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the School Corporation's management establish a proper system of internal controls and develop policies and procedures to ensure costs are adequately documented. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-010 Subject: COVID-19 - Education Stabilization Fund - Allowable Costs/Cost Principles Federal Agency: Department of Education Federal Program: COVID-19 - Education Stabilization Fund Assistance Listings Numbers: 84.425D, 84.425U Federal Award Numbers and Years (or Other Identifying Numbers): S425D210013, S425U210013 Pass-Through Entity: Department of Education Compliance Requirement: Allowable Costs/Cost Principles Audit Findings: Material Weakness, Other Matters Condition and Context The Elementary and Secondary School Emergency Relief (ESSER) Fund provided funding to states and school districts to help safely reopen and sustain the safe operation of schools and to address the impact of the coronavirus pandemic on the nation's students. States were required to subgrant a portion of their ESSER allocations to Local Educational Agencies (LEA). Prior to the LEAs receiving their respective subgrants, the LEAs were required to complete an application for the ESSER funding, which was submitted to the Indiana Department of Education (IDOE), the pass-through entity for approval. The application included a district level budget identifying how the LEA intended to spend program funds. A sample of 25 claims charged to the ESSER grant program for which reimbursement was received during the audit period was selected for testing to verify that the expenditures were in conformance with the applicable cost principles. Of the 25 claims tested, the following errors were noted: INDIANA STATE BOARD OF ACCOUNTS 32 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued)  Two claims, totaling $983, were for payments to a teacher for part-time tutoring. However, there was not a School Board approved contract or Salary Ordinance that showed the approval of this position or the rate to be paid.  Two claims, totaling $318,922, were for payments for playground equipment; however, the related contract supporting the purchase was not provided. The lack of effective internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.403 states in part: "Except where otherwise authorized by statute, costs must meet the following general criteria in order to be allowable under Federal awards: (a) Be necessary and reasonable for the performance of the Federal award and be allocable thereto under these principles. (b) Conform to any limitations or exclusions set forth in these principles or in the Federal award as to types or amount of cost items. . . . (g) Be adequately documented. . . ." 2 CFR 200.430(i) states in part: "Standards for Documentation of Personnel Expenses (1) Charges to Federal awards for salaries and wages must be based on records that accurately reflect the work performed. These records must: (i) Be supported by a system of internal control which provides reasonable assurance that the charges are accurate, allowable, and properly allocated; (ii) Be incorporated into the official records of the non-Federal entity; (iii) Reasonably reflect the total activity for which the employee is compensated by the non- Federal entity, not exceeding 100% of compensated activities (for IHE, this per the IHE's definition of IBS); . . . INDIANA STATE BOARD OF ACCOUNTS 33 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (vii) Support the distribution of the employee's salary or wages among specific activities or cost objectives if the employee works on more than one Federal award; a Federal award and non-Federal award; an indirect cost activity and a direct cost activity; two or more indirect activities which are allocated using different allocation bases; or an unallowable activity and a direct or indirect cost activity. . . ." Cause A proper system of internal controls was not designed by the School Corporation's management. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, expenses were paid without adequate supporting documentation. Noncompliance with the grant agreement and the compliance requirement could result in the loss of future federal funds to the School Corporation. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the School Corporation's management establish a proper system of internal controls and develop policies and procedures to ensure costs are adequately documented. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-010 Subject: COVID-19 - Education Stabilization Fund - Allowable Costs/Cost Principles Federal Agency: Department of Education Federal Program: COVID-19 - Education Stabilization Fund Assistance Listings Numbers: 84.425D, 84.425U Federal Award Numbers and Years (or Other Identifying Numbers): S425D210013, S425U210013 Pass-Through Entity: Department of Education Compliance Requirement: Allowable Costs/Cost Principles Audit Findings: Material Weakness, Other Matters Condition and Context The Elementary and Secondary School Emergency Relief (ESSER) Fund provided funding to states and school districts to help safely reopen and sustain the safe operation of schools and to address the impact of the coronavirus pandemic on the nation's students. States were required to subgrant a portion of their ESSER allocations to Local Educational Agencies (LEA). Prior to the LEAs receiving their respective subgrants, the LEAs were required to complete an application for the ESSER funding, which was submitted to the Indiana Department of Education (IDOE), the pass-through entity for approval. The application included a district level budget identifying how the LEA intended to spend program funds. A sample of 25 claims charged to the ESSER grant program for which reimbursement was received during the audit period was selected for testing to verify that the expenditures were in conformance with the applicable cost principles. Of the 25 claims tested, the following errors were noted: INDIANA STATE BOARD OF ACCOUNTS 32 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued)  Two claims, totaling $983, were for payments to a teacher for part-time tutoring. However, there was not a School Board approved contract or Salary Ordinance that showed the approval of this position or the rate to be paid.  Two claims, totaling $318,922, were for payments for playground equipment; however, the related contract supporting the purchase was not provided. The lack of effective internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.403 states in part: "Except where otherwise authorized by statute, costs must meet the following general criteria in order to be allowable under Federal awards: (a) Be necessary and reasonable for the performance of the Federal award and be allocable thereto under these principles. (b) Conform to any limitations or exclusions set forth in these principles or in the Federal award as to types or amount of cost items. . . . (g) Be adequately documented. . . ." 2 CFR 200.430(i) states in part: "Standards for Documentation of Personnel Expenses (1) Charges to Federal awards for salaries and wages must be based on records that accurately reflect the work performed. These records must: (i) Be supported by a system of internal control which provides reasonable assurance that the charges are accurate, allowable, and properly allocated; (ii) Be incorporated into the official records of the non-Federal entity; (iii) Reasonably reflect the total activity for which the employee is compensated by the non- Federal entity, not exceeding 100% of compensated activities (for IHE, this per the IHE's definition of IBS); . . . INDIANA STATE BOARD OF ACCOUNTS 33 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (vii) Support the distribution of the employee's salary or wages among specific activities or cost objectives if the employee works on more than one Federal award; a Federal award and non-Federal award; an indirect cost activity and a direct cost activity; two or more indirect activities which are allocated using different allocation bases; or an unallowable activity and a direct or indirect cost activity. . . ." Cause A proper system of internal controls was not designed by the School Corporation's management. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, expenses were paid without adequate supporting documentation. Noncompliance with the grant agreement and the compliance requirement could result in the loss of future federal funds to the School Corporation. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the School Corporation's management establish a proper system of internal controls and develop policies and procedures to ensure costs are adequately documented. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-011 Subject: COVID-19 - Education Stabilization Fund - Reporting Federal Agency: Department of Education Federal Program: COVID-19 - Education Stabilization Fund Assistance Listings Numbers: 84.425D, 84.425U Federal Award Numbers and Years (or Other Identifying Numbers): S425D210013, S425U210013 Pass-Through Entity: Department of Education Compliance Requirement: Reporting Audit Findings: Material Weakness, Other Matters INDIANA STATE BOARD OF ACCOUNTS 34 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Condition and Context The School Corporation had not properly designed or implemented a system of internal controls that would likely be effective in preventing, or detecting and correcting, noncompliance. The School Corporation was required to submit annual data reports to the Indiana Department of Education (IDOE) via JotForm, a form/report builder. Data to be submitted included, but was not limited to, current period expenditures, prior period expenditures, and expenditures per activity. During the audit period the School Corporation submitted two ESSER I reports, two ESSER II reports, and two ESSER III reports, for a total of six reports. The annual data reports were compiled, prepared, and submitted by the Director of Curriculum without oversight or review process in place to prevent, or detect and correct, errors. All six of the submitted reports were selected for testing. One of the reports, ESSER II, Year 2, was not supported by the School Corporation's records. The School Corporation had expenditures of $583,415 from the ESSER II grant which were not included in this report. The lack of internal controls was systemic throughout the audit period. The noncompliance was isolated to the ESSER II, Year 2 report. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.302(b) states in part: "The financial management system of each non-Federal entity must provide for the following: . . . (2) Accurate, current, and complete disclosure of the financial results of each Federal award or program in accordance with the reporting requirements set forth in §§ 200.328 and 200.329. . . ." 34 CFR 76.722 states: "A State may require a subgrantee to submit reports in a manner and format that assists the State in complying with the requirements under 34 CFR 76.720 and in carrying out other responsibilities under the program." 34 CFR 76.731 states: "A State and a subgrantee shall keep records to show its compliance with program requirements." INDIANA STATE BOARD OF ACCOUNTS 35 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Cause A proper system of internal controls was not designed by the School Corporation's management. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, a report submitted to the IDOE was not supported by the School Corporation's underlying accounting records. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the School Corporation. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the School Corporation establish a proper system of internal controls and develop policies and procedures to ensure reports are supported by the ledgers or reports used to complete the report. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report. INDIANA STATE BOARD OF ACCOUNTS 36

FINDING 2023-011 Subject: COVID-19 - Education Stabilization Fund - Reporting Federal Agency: Department of Education Federal Program: COVID-19 - Education Stabilization Fund Assistance Listings Numbers: 84.425D, 84.425U Federal Award Numbers and Years (or Other Identifying Numbers): S425D210013, S425U210013 Pass-Through Entity: Department of Education Compliance Requirement: Reporting Audit Findings: Material Weakness, Other Matters INDIANA STATE BOARD OF ACCOUNTS 34 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Condition and Context The School Corporation had not properly designed or implemented a system of internal controls that would likely be effective in preventing, or detecting and correcting, noncompliance. The School Corporation was required to submit annual data reports to the Indiana Department of Education (IDOE) via JotForm, a form/report builder. Data to be submitted included, but was not limited to, current period expenditures, prior period expenditures, and expenditures per activity. During the audit period the School Corporation submitted two ESSER I reports, two ESSER II reports, and two ESSER III reports, for a total of six reports. The annual data reports were compiled, prepared, and submitted by the Director of Curriculum without oversight or review process in place to prevent, or detect and correct, errors. All six of the submitted reports were selected for testing. One of the reports, ESSER II, Year 2, was not supported by the School Corporation's records. The School Corporation had expenditures of $583,415 from the ESSER II grant which were not included in this report. The lack of internal controls was systemic throughout the audit period. The noncompliance was isolated to the ESSER II, Year 2 report. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.302(b) states in part: "The financial management system of each non-Federal entity must provide for the following: . . . (2) Accurate, current, and complete disclosure of the financial results of each Federal award or program in accordance with the reporting requirements set forth in §§ 200.328 and 200.329. . . ." 34 CFR 76.722 states: "A State may require a subgrantee to submit reports in a manner and format that assists the State in complying with the requirements under 34 CFR 76.720 and in carrying out other responsibilities under the program." 34 CFR 76.731 states: "A State and a subgrantee shall keep records to show its compliance with program requirements." INDIANA STATE BOARD OF ACCOUNTS 35 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Cause A proper system of internal controls was not designed by the School Corporation's management. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, a report submitted to the IDOE was not supported by the School Corporation's underlying accounting records. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the School Corporation. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the School Corporation establish a proper system of internal controls and develop policies and procedures to ensure reports are supported by the ledgers or reports used to complete the report. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report. INDIANA STATE BOARD OF ACCOUNTS 36

FINDING 2023-011 Subject: COVID-19 - Education Stabilization Fund - Reporting Federal Agency: Department of Education Federal Program: COVID-19 - Education Stabilization Fund Assistance Listings Numbers: 84.425D, 84.425U Federal Award Numbers and Years (or Other Identifying Numbers): S425D210013, S425U210013 Pass-Through Entity: Department of Education Compliance Requirement: Reporting Audit Findings: Material Weakness, Other Matters INDIANA STATE BOARD OF ACCOUNTS 34 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Condition and Context The School Corporation had not properly designed or implemented a system of internal controls that would likely be effective in preventing, or detecting and correcting, noncompliance. The School Corporation was required to submit annual data reports to the Indiana Department of Education (IDOE) via JotForm, a form/report builder. Data to be submitted included, but was not limited to, current period expenditures, prior period expenditures, and expenditures per activity. During the audit period the School Corporation submitted two ESSER I reports, two ESSER II reports, and two ESSER III reports, for a total of six reports. The annual data reports were compiled, prepared, and submitted by the Director of Curriculum without oversight or review process in place to prevent, or detect and correct, errors. All six of the submitted reports were selected for testing. One of the reports, ESSER II, Year 2, was not supported by the School Corporation's records. The School Corporation had expenditures of $583,415 from the ESSER II grant which were not included in this report. The lack of internal controls was systemic throughout the audit period. The noncompliance was isolated to the ESSER II, Year 2 report. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.302(b) states in part: "The financial management system of each non-Federal entity must provide for the following: . . . (2) Accurate, current, and complete disclosure of the financial results of each Federal award or program in accordance with the reporting requirements set forth in §§ 200.328 and 200.329. . . ." 34 CFR 76.722 states: "A State may require a subgrantee to submit reports in a manner and format that assists the State in complying with the requirements under 34 CFR 76.720 and in carrying out other responsibilities under the program." 34 CFR 76.731 states: "A State and a subgrantee shall keep records to show its compliance with program requirements." INDIANA STATE BOARD OF ACCOUNTS 35 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Cause A proper system of internal controls was not designed by the School Corporation's management. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, a report submitted to the IDOE was not supported by the School Corporation's underlying accounting records. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the School Corporation. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the School Corporation establish a proper system of internal controls and develop policies and procedures to ensure reports are supported by the ledgers or reports used to complete the report. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report. INDIANA STATE BOARD OF ACCOUNTS 36

FINDING 2023-011 Subject: COVID-19 - Education Stabilization Fund - Reporting Federal Agency: Department of Education Federal Program: COVID-19 - Education Stabilization Fund Assistance Listings Numbers: 84.425D, 84.425U Federal Award Numbers and Years (or Other Identifying Numbers): S425D210013, S425U210013 Pass-Through Entity: Department of Education Compliance Requirement: Reporting Audit Findings: Material Weakness, Other Matters INDIANA STATE BOARD OF ACCOUNTS 34 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Condition and Context The School Corporation had not properly designed or implemented a system of internal controls that would likely be effective in preventing, or detecting and correcting, noncompliance. The School Corporation was required to submit annual data reports to the Indiana Department of Education (IDOE) via JotForm, a form/report builder. Data to be submitted included, but was not limited to, current period expenditures, prior period expenditures, and expenditures per activity. During the audit period the School Corporation submitted two ESSER I reports, two ESSER II reports, and two ESSER III reports, for a total of six reports. The annual data reports were compiled, prepared, and submitted by the Director of Curriculum without oversight or review process in place to prevent, or detect and correct, errors. All six of the submitted reports were selected for testing. One of the reports, ESSER II, Year 2, was not supported by the School Corporation's records. The School Corporation had expenditures of $583,415 from the ESSER II grant which were not included in this report. The lack of internal controls was systemic throughout the audit period. The noncompliance was isolated to the ESSER II, Year 2 report. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.302(b) states in part: "The financial management system of each non-Federal entity must provide for the following: . . . (2) Accurate, current, and complete disclosure of the financial results of each Federal award or program in accordance with the reporting requirements set forth in §§ 200.328 and 200.329. . . ." 34 CFR 76.722 states: "A State may require a subgrantee to submit reports in a manner and format that assists the State in complying with the requirements under 34 CFR 76.720 and in carrying out other responsibilities under the program." 34 CFR 76.731 states: "A State and a subgrantee shall keep records to show its compliance with program requirements." INDIANA STATE BOARD OF ACCOUNTS 35 SHENANDOAH SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Cause A proper system of internal controls was not designed by the School Corporation's management. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, a report submitted to the IDOE was not supported by the School Corporation's underlying accounting records. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the School Corporation. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the School Corporation establish a proper system of internal controls and develop policies and procedures to ensure reports are supported by the ledgers or reports used to complete the report. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report. INDIANA STATE BOARD OF ACCOUNTS 36