Corrective Action Plans

Name: Mainline Health Systems, Inc. Contact Name: Elyse Knobloch Contact Phone Number: 870.538.5414 Auditor/Audit Firm: Forvis Mazars, LLP Audit Period: January 31, 2026 Estimated Completion Date: June 2026 Finding #2026-001 – Statement of Condition Patients did not receive the proper sliding fee adjustments under the Organization’s policy. Response: The Organization concurs with the finding, and management has continued to implement procedures to ensure that eligible patients receive discounts in accordance with the sliding fee scale. Coordination with Revenue Cycle Management has occurred to ensure awareness across teams. Office Managers review all new sliding fee applications on a monthly basis to ensure accuracy, and the Billing Manager conducts quarterly audits of sliding fee claims to ensure adjustments are entered correctly by the billing department. The Organization also continues to provide staff training for all individuals involved in the sliding fee application process. Management has instructed all outsourced billers not to modify sliding fee adjustments; any required changes must be handled by in-house billing staff. Additionally, sliding fee adjustments auto posted in error will be removed. Management is also working with IT to restrict system access for outsourced users to prevent unauthorized adjustments. Additionally, IT will implement a scheduled monthly audit report to identify improper adjustments and monitor user activity.

Management has reviewed the audit finding and acknowledges the allegation related to improper administration of the applicant wait list. The former project manager is no longer with the Project, and management responsibilities have been reassigned. Management plans to review wait list procedures, strengthen oversight and documentation requirements, and implement additional controls to ensure applicants are processed in accordance with established policies and applicable program requirements.

Action taken in response to finding: The organization has worked with appropriate staff to provide further clarification on sliding fee intake and approval process.

Finding: 2025-003 Condition Found: During testing of a statistically valid sample of 19 patient accounts that received sliding fee discounts, 2 patient files did not contain eligibility documentation to support that the patients qualified for the sliding fee discount at the time the discount was applied Individual(s) Responsible for Corrective Action: Chief Executive Officer, Fractional CFO, Billing Team Planned Corrective Action: The Organization revised its sliding fee discount policies, implemented centralized documentation tracking, and enhanced staff training related to eligibility determination and documentation requirements. Monitoring procedures, including periodic supervisory review, were established to ensure compliance. Anticipated Completion Date: Implemented and in progress. Due to the timing of the prior year’s audit completion, the Organization did not have time to complete a full monitoring cycle prior to audit testing.

Federal Award Finding 2025-004 - Material Weakness, Material Noncompliance - Special Tests and Provisions, Cash Receipts Finding: The Organization maintained cash balances in excess of federally insured limits in financial institutions that did not meet HUD's minimum GNMA rating requirements. Recommendation: The Organization should transfer excess cash balances to financial institutions that meet HUD's GNMA rating requirements or otherwise structure its cash holdings to ensure compliance with federal insurance limits and HUD custodial requirements. Action Taken: Nevins moved to this financial institution with the first HUD loan in 2015. This is a local bank that actively supports Nevin's mission in the community. Given Nevins’ current financial struggles, the balance in the bank seldom exceeds the $250,000 threshold. In addition, the receiver established its own account with East West Bank and was in the process of fully transitioning the operating account to East West Bank at the end of the fiscal year. Responsible Person: Paul Valentine, Receiver Target Completion Date: September 30, 2026 Status: Not started

To satisfy this audit finding, EOHHS requested a systems solution to process Eleanor Slater Hospital (ESH) claims which would automate a recipient’s TPL, Medicare, and MCO financial obligations before Medicaid is billed. EOHHS, BHDDH, and Gainwell Technologies have been working on said system modification project (PJ0630 – Other Insurance Edits for Eleanor Slater Hospital Claims) and the Business Design Document was reviewed with all parties on 6/22/2026. Anticipated Completion Date: SFY 2027 Q1 Contact Person: Hector Rivera, Interdepartmental Project Manager, Executive Office of Health and Human Services hector.l.rivera@ohhs.ri.gov

2025-066a: In order to address repeat income deficiencies from SWICA, Medicaid added The Work Number (TWN) as a new data source in August 2025. Since then, RI Bridges has been modified to first verify earned income against TWN. With this enhancement, Medicaid has seen an improvement in how earned income is verified during the post-eligibility verification (PEV) and annual renewal processes. Medicaid has determined the individuals flagged as being enrolled under the expansion pathway beyond their 65th birthday are the result of exceptions to the mass update eligibility process. Medicaid is working with our system vendor to develop a solution that will bypass this exception and terminate expansion eligibility for those turning 65 years old. RI Bridges appropriately identified the individual in question as requiring verification of citizenship status. However, as noted in the expansion age-out response, the mass update eligibility process exceptioned out, leaving the verification as unresolved and requiring manual review. Medicaid is working with our system vendor to develop a solution that will bypass this exception and terminate eligibility. Effective December 2025, the RI Bridges system receives quarterly matches from the SSA Death Master File (DMF). The DMF is automatically sent to the State as part of the quarterly PARIS data matching process. The State has deployed temporary system measures to process the file and automatically terminate Medicaid eligibility for individuals flagged as deceased on the DMF. As per section 71104 of the Working Families Tax Cut (WFTC) legislation, signed by the President on 7/4/25, the State will be deploying a long-term system enhancement to, “at least a quarterly basis, check the DMF to identify if enrolled individuals are deceased. If an individual is identified as deceased on the DMF, then the state must treat this information as factual, disenroll the individual, and discontinue any payments for items or services furnished after the death of the individual.” This enhancement is scheduled for the March 2027 release. In July 2024, federal partners operating the PARIS interstate match informed the State of a hold on PARIS interstate matching files. PARIS lifted the hold in October 2024. In November 2024, the State identified several defects in the PARIS results and suppressed requests for verification. A temporary system enhancement was logged to address the deficiencies and ensure the process was only requesting residency verification from individuals believed to be receiving Medicaid in another State. Long-term enhancements to the PARIS interstate match process are scheduled for late 2027. 2025-066b: Medicaid will continue to work with the Department of Human Services and HealthSource RI to improve reconciliation and quality assurance monitoring of eligibility and operational processes. Including, but not limited to automated quality control checks on batch processes, manual eligibility reviews of quarterly/annual activities, creating specialized reports, improving task logic, and identifying areas of repeat non-compliance to ensure appropriate controls are in place. 2025-066c: Upon notification from the systems team, Medicaid Finance will return any identified ineligible costs to the federal grantor. Anticipated Completion Dates: 2025-066a: Q4 2026 (exception scenarios) and Q4 2027 (PARIS) 2025-066b: Q4 2026 2025-066c: Ongoing Contact Persons: Anthony Salvo, Implementation Director of Policy and Programs, Executive Office of Health and Human Services anthony.salvo@ohhs.ri.gov Dezeree Hodish, Associate Director (Financial Management), Executive Office of Health and Human Services dezeree.hodish@ohhs.ri.gov

A file exchange process has been implemented where Gainwell pulls a monthly TPL report for each MCO which is shared with EOHHS to share with the MCO’s. EOHHS is unable to force the MCO’s to use the shared TPL data, we can only suggest they use it. At this point in time, the accuracy of the State’s TPL data is not good enough to reject encounter claims from the MCO’s. EOHHS continues to work on improving the TPL process specifically cleaning up the TPL data in the MMIS and eligibility system today. Future system enhancements include a direct TPL vendor and new TPL module which should improve TPL accuracy. Anticipated Completion Date: July 31, 2028 Contact Person: Jeffrey Schmeltz, Chief, Family Health Systems, Executive Office of Health and Human Services jeffrey.schmeltz@ohhs.ri.gov

2025-062a: EOHHS recently determined that the MCOs were unknowingly assigning the incorrect Organization Type Code to multiple provider types since EOHHS adopted the 837 standard in SFY 2014. This created unacceptably high encounter denial rates that led EOHHS to relax certain edits in the years that followed. An MMIS project is currently underway that will help ensure the plans are assigning the correct codes to their providers. Once the MCO's are submitting the correct codes, EOHHS will be able to begin the process of re-enabling the edits in the 2nd half of SFY 2027, which will improve controls over encounter claims data submissions. 2025-062b: Medicaid has deployed several control measures to improve the identification and processing of individuals determined to be deceased and living out State. In January 2026, the State operationalized a new interface with the National Change of Address (NCOA) database. The RI Bridges system verifies addresses of Medicaid recipients on a weekly (those with returned mail) and monthly (entire Medicaid population) basis. Automated rules ensure individuals with an out of State address received from NCOA are provided an opportunity to verify their residency. Failure to respond to the verification results in termination of eligibility. Effective December 2025, the RI Bridges system receives quarterly matches from the SSA Death Master File (DMF). The DMF is automatically sent to the State as part of the quarterly PARIS data matching process. The State has deployed temporary system measures to process the file and automatically terminate Medicaid eligibility for individuals flagged as deceased on the DMF. As per section 71104 of the Working Families Tax Cut (WFTC) legislation, signed by the President on 7/4/25, the State will be deploying a long-term system enhancement to, “at least a quarterly basis, check the DMF to identify if enrolled individuals are deceased. If an individual is identified as deceased on the DMF, then the state must treat this information as factual, disenroll the individual, and discontinue any payments for items or services furnished after the death of the individual.” This enhancement is scheduled for the March 2027 release. Anticipated Completion Dates: 2025-062a: Q4 SFY 2027 2025-062b: March 2027 Contact Persons: Rob Tingle, Chief of Program Analytics, Executive Office of Health and Human Services robert.tingle@ohhs.ri.gov Anthony Salvo, Implementation Director of Policy and Programs, Executive Office of Health and Human Services anthony.salvo@ohhs.ri.gov

EOHHS is in agreement with these findings and is in the process of working with Gainwell and its managed care partners to address these discrepancies. The providers that were not properly subjected to EOHHS’s enrollment processes were out of network providers within one of the managed care plans’ national network provider management system. These providers have been incorrectly included in provider network data as this managed care plan is in the process of end-dating these providers, which will resolve this discrepancy. EOHHS has reorganized Provider Enrollment oversight functions under the Office of Program Integrity (OPI) in alignment with federal standards, and as such will continue to audit and monitor enrollment files to ensure compliance with state and federal requirements. OPI is formalizing a process to swiftly terminate providers who have lost their licensure, as well as randomly auditing enrollment files to ensure proper licensure. Additionally, EOHHS will begin collecting DCYF licensure data as required. Anticipated Completion Date: December 31, 2026 Contact Persons: Nicholas James, Implementation Director of Policy and Programs, Executive Office of Health and Human Services nicholas.james@ohhs.ri.gov Rob Tingle, Chief of Program Analytics, Executive Office of Health and Human Services robert.tingle@ohhs.ri.gov

2025-032a: MMIS system access is controlled via an electronic system called GainwellNow. An MMIS access request form must be completed by the requestor, signed by that individual and their supervisor, and then sent to the Systems Group staff members who are responsible for approving or denying access requests. The Systems Group will sign the request form and approve the request within GainwellNow and the requestor will be granted access. The GainwellNow system also generates and sends email notifications to the Systems Group Administrators notifying them of a pending access request if the requestor enters it into GainwellNow directly. From there, the same approval/denial process occurs. If an individual has not logged into MMIS for 30 days, then they require a password reset in order to regain access. Those password reset requests create system generated emails that are sent to the Systems Group Admins for approval or denial. After 60 days of inactivity, the individual is locked out and cannot access the MMIS without requesting and obtaining approval of the password reset. If someone leaves state employment, then the Systems Group Admins submit an access deletion request into GainwellNow, deleting the account completely. Gainwell Technologies also sends monthly access reports to the Systems Group for review and confirmation that account deletion requests were completed as submitted. Additionally, Gainwell sends monthly “New or Deleted Users” reports to the Systems group for review. For IT security, the Systems Group receives and reviews the following reports: · RI-CDM-ASQC-Security-Report · RI-CSHARP-ASQC-Security-Report · RI-Java-ASQC-Security Report · RI-XIX-DR Exercise Scope · RI-XIX-DR Executive Summary Report 2025-032b: The Arc-Ampe (formerly called MARS-E) third party assessment is underway. Security scanning and testing is complete, and security controls have been evaluated. Final report is due by 6/30/2026. Remediation of legitimate vulnerabilities is underway and defects are tracked on the RIBridges POAM. 2025-032c: EOHHS/Medicaid will work collaboratively with ETSS and their vendors to proactively assess critical risk areas planned for the review year. 2025-032d: For RIBridges, SOC engagements occur every other year. A third-party Attestation of the Arc-Ampe controls occurs annually. The state can evaluate the results of this year’s upcoming SOC audit to determine if an increased frequency of the SOC is needed. Anticipated Completion Dates: 2025-032a: EOHHS believes this item to be complete and will defer to OAG for resolution of this finding. 2025-032b: High findings – 30 days, moderate findings – 90 days, low findings – 365 days. July 31, 2027. 2025-032c: Ongoing 2025-032d: December 31, 2026 Contact Persons: Hector Rivera, Interdepartmental Project Manager, Executive Office of Health and Human Services hector.l.rivera@ohhs.ri.gov Deb Merrill, Security Officer, ETSS, Department of Administration deb.merrill@doit.ri.gov Brian Tichenor, Medicaid Systems Manager, Executive Office of Health and Human Services brian.tichenor@ohhs.ri.gov

Medicaid deployed a system enhancement to automatically run eligibility on CHIP individuals for whom TPL information was received from MMIS. This enhancement went live in May 2026. This enhancement will improve the accuracy of eligibility determinations for the Medicaid and CHIP populations. In July 2024, federal partners operating the PARIS interstate match informed the State of a hold on PARIS interstate matching files. PARIS lifted the hold in October 2024. In November 2024, the State identified several defects in the PARIS results and suppressed requests for verification. A temporary system enhancement was logged to address the deficiencies and ensure the process was only requesting residency verification from individuals believed to be receiving Medicaid in another State. Long-term enhancements to the PARIS interstate match process are scheduled for late 2027. Anticipated Completion Date: Q4 2027 Contact Person: Anthony Salvo, Implementation Director of Policy and Programs, Executive Office of Health and Human Services Anthony.Salvo@ohhs.ri.gov

DCYF will continue to work with Public Consulting Group to ensure that eligibility quality control reviews are performed in a timely manner. Anticipated Completion Date: Ongoing Contact Person: Kimberly Reynolds, Associate Director of Financial Management, Department of Children, Youth and Families kim.reynolds@dcyf.ri.gov

Management concurs with the findings related to controls over child care eligibility determinations and provider payments. Management notes that the number and scope of findings identified in the current audit have been substantially reduced compared to prior Single Audits, reflecting continued progress in strengthening internal controls. The Office of Child Care remains committed to enhancing eligibility determination processes and related internal controls, including ensuring that required eligibility documentation is consistently maintained in the electronic case record. Corrective actions to address the remaining findings, along with the anticipated completion dates, are outlined below. [See Corrective Action Plans for table.] In addition to the corrective actions outlined above, the Department is strengthening supervisory oversight through implementation of routine pre-authorization quality reviews and standardized supervisory monitoring practices. Supervisors will utilize these tools as part of ongoing quality assurance activities to verify that required eligibility documentation is complete prior to authorization, identify recurring error trends, and provide targeted coaching, training, and process improvements to strengthen program integrity and reduce future eligibility errors. Management agrees with the recommendation to evaluate modifications to the existing eligibility system to support eligibility determinations under the CCAP Child Care Staff program. The Department previously assessed the feasibility of modifying RIBridges to accommodate eligibility determinations for the CCAP Child Care Educators and Child Care Staff pilot program. At that time, implementation was not feasible due to competing system development priorities, limited vendor development capacity, and the pilot status of the program. Since the period covered by the audit, the Department has implemented a requirement that participants in the pilot program also apply for the traditional CCAP program. This change has strengthened documentation requirements and helped mitigate risks associated with incomplete eligibility documentation. While these interim measures have improved program administration, the Department recognizes that administering eligibility determinations outside of the primary eligibility system is not a sustainable long-term approach. Accordingly, the Department is reassessing the future administration of the pilot program and evaluating options to incorporate eligibility determinations into RIBridges or, alternatively, to develop the functionality within RISES and integrate it with RIBridges. The Department will determine the most appropriate path forward based on program needs, system capabilities, and available resources to ensure a sustainable and well-controlled eligibility process. Additionally, the Department has strengthened controls over provider payments for the CCAP Child Care Staff pilot program since the audit period. Prior to each payment, the CCAP program team reviews the copayment workbook to identify and resolve discrepancies between pilot program payments and traditional CCAP benefits. In addition, the CCAP Finance team performs a formal review of each payment workbook before payments are processed. The vendor supporting the pilot has also enhanced its payment file process by implementing an additional level of financial review by the project team prior to submission and incorporating safeguards to identify attendance records that may have been previously paid, reducing the risk of duplicate payments. The Department has established procedures to recover identified overpayments, including both one-time recoveries through withholding from future pilot payments, where appropriate, and a formal recoupment process for providers who are no longer participating in the pilot program. These enhanced controls are intended to strengthen payment accuracy and support effective stewardship of program funds. Anticipated Completion Dates: See table above Contact Person: Nicole Chiello, Associate Director, Office of Child Care, Department of Human Services nicole.chiello@dhs.ri.gov

The RI Works unit has completed a comprehensive revision of the State's Work Verification Plan. The revised plan is currently undergoing an internal quality review to ensure consistency, appropriate terminology, removal of legacy references, and alignment with current program operations. Upon completion of this review, the Work Verification Plan will be submitted to the Administration for Children and Families (ACF) for review and approval. To strengthen ongoing compliance with the Work Verification Plan, DHS will implement documented supervisory quality assurance reviews to verify work participation documentation, ensure compliance with established verification procedures, and confirm the accuracy of work participation data reported to ACF. In addition, the Multi-Program Eligibility Review Tool referenced in Finding 2025-046 will be incorporated into the Department's supervisory monitoring process. Supervisors will utilize the tool to conduct routine case reviews to verify eligibility accuracy, work verification documentation, and compliance with federal and State requirements. Review results will be used to identify trends, provide targeted coaching, and strengthen ongoing quality assurance activities. Anticipated Completion Date: October 1, 2026 Contact Person: Donna Rook, Administrator, Family & Adult Services, Department of Human Services donna.m.rook@dhs.ri.gov

The Department has worked with the ACF Data Unit and the system vendor to identify the required coding corrections and implement updates consistent with current ACF reporting guidance. System enhancements are underway to address the identified coding issues. The Department will also implement a documented quality assurance review process for each quarterly ACF-199 submission. Prior to submission, designated staff will validate report data against RIBridges case information, verify compliance with current ACF reporting guidance, and document supervisory review and approval. DHS has incorporated updated ACF reporting guidance into its reporting procedures and will provide training and technical assistance to staff responsible for preparing and reviewing ACF-199 reports to ensure consistent application of federal reporting requirements. The Department will also obtain documentation on a quality assurance review for the quarterly 199 reports. Anticipated Completion Date: Ongoing Contact Person: Nikolaos Petropoulos, Data Analyst III, Office of Performance Analytics & Continuous Improvement, Department of Human Services nikolaos.petropoulos@dhs.ri.gov

The Department updated Policy (218-RICR-20-002) to reflect 45 CFR 205.55, including procedures for using IEVS interfaces and incorporating the resulting information into eligibility determinations. The updated policy will be sent to OMB 7/1/26. Additionally, the updated policy will be discussed at meetings (Office Hours, Training consultations, and Quarterlies). System interfaces will run on a quarterly basis consistent with the language in 45 CFR §205.55 regarding all applicants. This process is being tracked and prioritized in BRR-141767 which is the ticket number used to communicate with the vendor. In addition, DHS is strengthening operational controls to ensure required IEVS interfaces are executed, reviewed, and acted upon within required federal timeframes. Supervisors will monitor outstanding interface matches and timeliness of case actions as part of routine quality assurance activities to ensure interface information is appropriately evaluated, documented within the electronic case record, and incorporated into eligibility determinations. These actions will be supported by the Department's broader supervisory quality assurance and pre-authorization review initiatives to improve verification accuracy, ensure timely processing of electronic data matches, and reduce future eligibility errors. The Department also notes that a portion of the untimely processing identified during the audit occurred during the RIBridges cybersecurity incident, when staff were operating under documented Business Continuity Plan (BCP) procedures to restore critical operations and address processing backlogs. While these circumstances contributed to delays during the audit period, the Department recognizes the need to strengthen routine controls and has implemented the corrective actions described above. Information security enhancements are further addressed in response to Finding 2025-032. Anticipated Completion Date: Ongoing – The process of posting updated policy and then the public comment period historically takes about 6 months. Disseminating information to staff regarding the policy updates will begin July 2026 and continue until saturation. Contact Person: Donna Rook, Administrator, Family & Adult Services, Department of Human Services donna.m.rook@dhs.ri.gov

The Department has developed a comprehensive Multi-Program Eligibility Review Tool designed to strengthen supervisory oversight and improve consistency in eligibility determinations across public assistance programs. The tool, currently in final development, will be implemented statewide and utilized by supervisory staff as part of routine quality assurance and case review activities. The review tool has been expanded to specifically address the documentation deficiencies identified through the audit, including verification of citizenship and identity for all household members, residency documentation, hardship determinations, employment plans, initial applications, recertifications, interim reports, and required case documentation maintained within RIBridges. In addition, the Department has revised the DHS-2H Hardship Request form to clearly document hardship eligibility criteria and require participant attestation for the applicable hardship category, strengthening documentation supporting eligibility determinations. To further strengthen internal controls, the Department will: • implement supervisory case reviews using the Multi-Program Review Tool; • provide staff training on documentation and eligibility requirements; • monitor review results to identify recurring trends and implement corrective coaching where needed; and • incorporate findings into ongoing quality assurance and program monitoring to ensure sustained compliance with eligibility documentation requirements. These actions are intended to strengthen supervisory oversight, improve documentation compliance, and reduce the risk of unsupported eligibility determinations identified in the audit. Anticipated Completion Date: Fall of 2026 Contact Persons: Donna Rook, Administrator, Family & Adult Services, Department of Human Services donna.m.rook@dhs.ri.gov Vania Rebollo, Assistant Administrator Family and Children Service, Department of Human Services Vania.Rebollo@dhs.ri.gov

2025-037a: Members of the Income Support team will meet regularly with the WDS team to identify areas of concern and to evaluate alternative ways to strengthen the overall program effectiveness including subsequent RESEA activities will be among the topics discussed. These activities, among others, have been limited due to inadequate funding. 2025-037b: The DLT Data and Performance Unit prepared recommendations for an amended RESEA algorithm. The resolution team (comprised of members from the Data and Performance Unit, Income Support, Workforce Development Services, and the Office of Planning, Integrity, and Compliance) endorsed the recommendation. During Quarter 3 the proposal was brought before Department Executive Leadership. Leadership endorsed and approved the final draft. Anticipated Completion Date: November 30, 2026 Contact Person: Philip D’Ambra, Deputy Director (Income Support) UI Director, Department of Labor and Training philip.l.dambra@dlt.ri.gov

2025-034a: We appreciate the work performed by OAG and understand the importance of the SAR. While the noted exception, was an isolated incident, our internal control was lacking. We do have compensating controls in place to identify potential noncompliance with the registration requirement, this isolated transaction did not appear on the daily error report. ETSS is investigating how this occurred and will ensure that similar exception do not occur in the future. We will also use your recommendation as an opportunity to review and modify any control deficiencies related to the current legacy limitations. For example, not having a field on the AS400 to capture the dependent SS#, after initial application is filed. 2025-034b: DLT’s 2024 Systems Modernization Strategic Plan outlines long-term efforts to enhance system integration, automation, and data monitoring capabilities. RI DLT Modernization Strategic Plan - 2024.pdf. The Department is actively evaluating the feasibility of financing this effort. 2025-034c: UI Administration will consult with DLT legal office to update applicable regulations. Anticipated Completion Dates: 2025-034a: October 31, 2026 2025-034b: Ongoing 2025-034c: October 31, 2026 Contact Person: Sarah Fresch, Deputy Director, COO, Department of Labor and Training sarah.fresch@dlt.ri.gov Philip D’Ambra, Deputy Director (Income Support) UI Director, Department of Labor and Training Philip.l.dambra@dlt.ri.gov

Name of Contact Person: Michael Gaddy, Executive Director. Corrective Action: We will implement proper internal control procedures for the Public and Indian Housing program eligibility requirements. Management has established a checklist for applications and will establish a checklist for Move-ins and Move-outs. Proposed completion date: Immediately.

i. Comments on the Finding and Each Recommendation – We acknowledge the finding. The Organization utilized an informal practice to address processing timing di􀆯erences for rental assistance payments; however, the practice was not formally documented and was not applied consistently. Management recognizes the need for written policies and adequate supporting documentation when adjustments are made a􀆯ecting the timing of rental assistance payments and will review and revise its current policies and procedures to ensure appropriate documentation when future programs of similar nature exist. Additionally, this federal funding program has come to an end. ii. Actions Taken on the Finding – We will review our internal processes and procedures to ensure adequate and consistent processes and procedures are followed for programming and appropriate supervisory review exists across program areas.

Finding type: Significant deficiency. Federal awards: 84.328 Special Education Parent Information Centers (Direct Funding). 84.421 Disability Innovation Fund (Passed through Vermont Department of Aging and Independent Living). Criteria: Organizations spending more than the minimum amount of Federal awards must submit an audit reporting package to the Federal Audit Clearinghouse within nine months of the end of the fiscal year per the requirements of the Uniform Guidance. Condition: Vermont Family Network, Inc. did not submit the required audit reporting package by the due date for the year ended June 30, 2025. Management concurrence: Management concurs with this finding. Corrective action plan: In fiscal year 2026, new procedures and shared leadership roles were implemented to prevent this from happening again. Name of responsible official: Michelle Kessler, Interim Executive Director. Projected completion date: December 31, 2026.

2025-001 Sliding Fee Discount Determination Name of Contact Person: Chief Financial Officer: Ahmed Zibare Corrective Action: Community Medical Wellness Centers USA: • Is providing immediate re-training to staff on issues identified. • Continues to provide ongoing training to current and new staff involved in Sliding Fee Discount Program (SFDP) on program requirements and proper implementation of sliding fee determination and billing. • Will continue ongoing Sliding Fee Audits to assess staff knowledge, provide feedback, and offer guidance, as needed. Proposed Completion Date: September 30, 2026

City of Maumelle, Arkansas Corrective Action Plan Contact Name: Brad Ashford Contact Phone Number: 501-851-2500 Audit Firm: Forvis Mazars, LLP Audit Period: December 31, 2025 Finding #2025-002 – Statement of Condition: The City's policies and procedures did not include requirements related to suspension and deparment. Additionally, the City did not perform procedures to ensure vendors used in covered transactions were not suspended, debarred, or otherwise excluded. Response: The City concurs with the finding. Management will implement additional controls related to suspension and deparment. The completion date for the above-mentioned corrective action was December 2026.