Audit 413210

Material Weakness in Internal Control Related to Unauthorized Transactions: Criteria and Condition The Organization's internal control is designed to prevent or timely detect unauthorized transactions. During the year ended December 31, 2025, the Organization identified certain unauthorized transactions initiated by an external party. The matter was promptly investigated and contained upon discovery. Context The unauthorized transactions resulted in a recorded loss of approximately $216,387 during the year ended December 31, 2025. Cause The investigation performed by management and external parties identified weaknesses in the Organization’s existing authorization procedures and monitoring controls over disbursement-related activities. Potential Effect The deficiencies in internal control resulted in unauthorized transactions and a material loss to the Organization. These control deficiencies create a reasonable possibility that unauthorized transactions could occur and not be prevented or detected and corrected on a timely basis. Recommendation We recommend that the Organization strengthen internal controls, implement new authorization protocols, enhanced monitoring controls, segregation of duties, additional management review procedures, and assess financial institution security for alignment with Organizational needs. Views of Responsible Officials and Planned Corrective Action Management agrees with the finding and all planned remediation measures have been fully implemented, including strengthened authentication and access controls across financial institutions, enhanced transaction monitoring, updated authorization policies, a reassessment of banking relationships, and increased staff training and cyber insurance coverage. Anticipated Completion Completed