Corrective Action Plans

Browse how organizations respond to audit findings

Total CAPs
55,681
In database
Filtered Results
18,358
Matching current filters
Showing Page
35 of 735
25 per page

Filters

Clear
CONTACT PERSON: Dennis Locke, Director of Finance and Budget, dlocke@cityofspartanburg.org CORRECTIVE ACTION: The City will ensure that all applicable airport project reports are completed and filed on a timely basis. PROPOSED COMPLETION DATE: Prior to June 30, 2026
CONTACT PERSON: Dennis Locke, Director of Finance and Budget, dlocke@cityofspartanburg.org CORRECTIVE ACTION: The City will ensure that all applicable airport project reports are completed and filed on a timely basis. PROPOSED COMPLETION DATE: Prior to June 30, 2026
Corrective Actions: • Reinforce expectations through additional training and support for employees and supervisors on the proper preparation and monthly submission of PAR forms. • Strengthen internal review procedures by assigning responsibility for confirming PARs are completed accurately, submitte...
Corrective Actions: • Reinforce expectations through additional training and support for employees and supervisors on the proper preparation and monthly submission of PAR forms. • Strengthen internal review procedures by assigning responsibility for confirming PARs are completed accurately, submitted on time, and signed by both the employee and the supervising administrator. • Ensure PAR documentation is consistently forwarded to Fiscal Services for timely review and any necessary adjustments so payroll charges align with the actual percentages of time worked on Title I activities. Responsible Department/Person: • Educational Services (Federal Programs/Title I) - Program Oversight • Human Resources/Payroll- Payroll Coding Support (as applicable) • Fiscal Services - Compliance Review and Adjustments • Primary Contacts: Siddhant Bhatta (Executive Director of Fiscal Services); Alma Quijas (Fiscal Compliance Manager) Anticipated Completion Date: March 31, 2026
Corrective Actions: • Continue providing guidance and training to school site staff on cohort coding practices, allowable supporting documentation, and documentation standards. • Strengthen documentation collection, review, and retention processes to ensure cohort adjustment support is consistently ...
Corrective Actions: • Continue providing guidance and training to school site staff on cohort coding practices, allowable supporting documentation, and documentation standards. • Strengthen documentation collection, review, and retention processes to ensure cohort adjustment support is consistently collected, reviewed for completeness, and maintained in an organized manner for audit purposes. • Conduct periodic internal reviews of cohort records to verify the accuracy of historical and future student removals. • Establish clear procedural expectations and assign oversight responsibilities to improve reporting accuracy and reduce the risk of recurrence. Responsible Department/Person: • Educational Services (Data/ Accountability) and School Site Administration • Fiscal Services - Compliance Oversight • Primary Contacts: Siddhant Bhatta (Executive Director of Fiscal Services); Alma Quijas (Fiscal Compliance Manager) Anticipated Completion Date: March 31, 2026 The District does not anticipate this finding will repeat in the 2025-26 audit due to ongoing training and strengthened procedures.
1. Finance Administration will revise P/I 9.6 to incorporate program office requirement to: - Complete SAM.gov training requirement. - Conduct a mandatory verification step requiring Confirmation in SAM.gov that all vendors and purchases are free of debarment or suspension prior to initiating any ag...
1. Finance Administration will revise P/I 9.6 to incorporate program office requirement to: - Complete SAM.gov training requirement. - Conduct a mandatory verification step requiring Confirmation in SAM.gov that all vendors and purchases are free of debarment or suspension prior to initiating any agreement - Perform quality assurance including review of contracts to verify entities are not debarred or suspended 2. Finance Administration will distribute the updated P/I to all Metro employees to ensure organization wide awareness and adherence. 3. Finance Administration will identify a tutorial video to serve as a required training.
2025-001: Late Return of Title IV Financial Aid - Student Financial Aid Cluster - Assistance Listing #s 84.007, 84.033, 84.063- Grant Period - Year Ended June 30, 2025 Condition Found During our Return of Title IV Fund testing, we noted that the College did not calculate or return Title IV Student F...
2025-001: Late Return of Title IV Financial Aid - Student Financial Aid Cluster - Assistance Listing #s 84.007, 84.033, 84.063- Grant Period - Year Ended June 30, 2025 Condition Found During our Return of Title IV Fund testing, we noted that the College did not calculate or return Title IV Student Financial Aid for two out of twenty-five students tested until after 45 days when the student ceased attendance. We consider the untimely calculation and Return of Title IV Student Financial Aid to be an instance of noncompliance relating to the Special Tests and Provisions Compliance Requirement. This is a repeat finding of prior year finding 2024-001. Corrective Action Plan In the first instance, the Return to Title IV (R2T4) calculation was completed timely; however, the associated disbursement was not processed within the required timeframe. Going forward, Title IV aid disbursements related to R2T4 calculations will be processed manually at the time the calculation is completed. The institution will no longer wait for regularly scheduled system disbursement dates in these circumstances. In the second instance, the student withdrew from the 8-week-1 courses but remained registered for the 8- week-2 courses; therefore, an R2T4 calculation was not initially completed. The student ultimately did not begin attendance in the 8-week-2 courses, and the 45-day timeframe elapsed. To prevent future occurrences, RLC will complete an R2T4 calculation at the time of withdrawal from the 8-week-1 courses and will reverse the calculation if the student subsequently attends the 8-week-2 courses. Responsible Person for Corrective Action Plan - ReAnne May, Director of Financial Aid Implementation Date of Corrective Action Plan - January 16, 2026
Responsible Person(s): Dale Batten, Deputy Commissioner Rehabilitative Services; Rob Perrine, Information Security Officer Corrective Action Planned: The DARS Information Security Office and the System/Data Owner will continue to remediate the audit findings noted in the IAD audit report on the case...
Responsible Person(s): Dale Batten, Deputy Commissioner Rehabilitative Services; Rob Perrine, Information Security Officer Corrective Action Planned: The DARS Information Security Office and the System/Data Owner will continue to remediate the audit findings noted in the IAD audit report on the case management system. In addition, the ISO and System/Data Owner will continue to meet quarterly with Internal Audit to review remediation progress, address implementation challenges, and ensure corrective actions are completed in a timely manner. Estimated Completion Date: 9/30/2026
Responsible Person(s): Chaye Neal-Jones, Director of Office of Enterprise Management Services; Eric Billings, Director of Grants Management Corrective Action Planned: Staff is working with DBHDS IT to ensure that ticketing workflow includes managerial approval. Additionally, system administrators ar...
Responsible Person(s): Chaye Neal-Jones, Director of Office of Enterprise Management Services; Eric Billings, Director of Grants Management Corrective Action Planned: Staff is working with DBHDS IT to ensure that ticketing workflow includes managerial approval. Additionally, system administrators are removing individuals from the system when they receive HR notification of their separation from the agency via email and the system automatically disables inactive accounts after 60 days. DBHDS is still working to develop a process for periodically reviewing the appropriateness of system users access and the activity of system administrators within the system. Estimated Completion Date: 7/1/2026
Responsible Person(s): Eric Billings, Director of Grants Management; Chaye Neal-Jones, Director of Office of Enterprise Management Services Corrective Action Planned: DBHDS identified that CSB subaward information was not being captured within the system's reports. Responsible staff are now entering...
Responsible Person(s): Eric Billings, Director of Grants Management; Chaye Neal-Jones, Director of Office of Enterprise Management Services Corrective Action Planned: DBHDS identified that CSB subaward information was not being captured within the system's reports. Responsible staff are now entering the executed date for CSB subawards which is being picked up by the report. Documents with an inception date of July 1, 2025, within the system have been updated to reflect the correct executed date. DBHDS staff are still working with the vendor to ensure that the report is working correctly. Estimated Completion Date: 4/1/2026
Responsible Person(s): Dan Lewis, Chief Technology Officer; Timothy Kelly, Innovation, Architecture and Governance Director Corrective Action Planned: This finding was marked as FOIA Exempt (FOIAE) and as a result, the State Comptroller has determined that the resulting corrective actions are FOIAE ...
Responsible Person(s): Dan Lewis, Chief Technology Officer; Timothy Kelly, Innovation, Architecture and Governance Director Corrective Action Planned: This finding was marked as FOIA Exempt (FOIAE) and as a result, the State Comptroller has determined that the resulting corrective actions are FOIAE under §2.2-3705.2 (9.) of the Code of Virginia. Federal awarding agencies and pass-through entities, please see the Appendix titled “Applicable Management Contacts for Findings and Questioned Costs” to request the corrective action planned from the applicable entity. Estimated Completion Date: 6/15/2026
Responsible Person(s): Kavansa Gardner, Business Program Manager Senior, Benefit Programs; David Carico, Business Operations Manager Corrective Action Planned: Below is the narrative for CR901 and CR902 Records Retention, including current production deployment timelines. CR901 establishes the datab...
Responsible Person(s): Kavansa Gardner, Business Program Manager Senior, Benefit Programs; David Carico, Business Operations Manager Corrective Action Planned: Below is the narrative for CR901 and CR902 Records Retention, including current production deployment timelines. CR901 establishes the database infrastructure required to support compliant records retention within case management system. This includes partition creation across 75 plus high volume tables to enable structured aging and controlled purge activity aligned to retention thresholds. Production Deployment Timeline; scheduled as part of the February 2026 technical release. This phase is foundational and will be completed before purge logic can safely execute. CR902 Retention Logic and controlled execution; CR902 operationalizes the records retention policy by implementing controlled purge jobs leveraging the partitioning framework established in CR901. This Change Request moves the solution from infrastructure readiness to active lifecycle management. Phase 1 Database partition creation (February 2026 production release schedule) Phase 2 Controlled purge implementation (March 2026 release schedule) Phase 3 Validation, audit confirmation, and reporting controls (April 2026 release schedule) Phase 4 Reoccurring operational retention cycles with documented runbooks (ongoing/living) Estimated Completion Date: 4/30/2026
Responsible Person(s): Kavansa Gardner, Business Program Manager Senior, Benefit Programs; Lunita Browder-Harris, Business Operation Specialist, Business Operations Corrective Action Planned: DSS has identified critical or conflicting roles in the management system. The roles in scope have the capab...
Responsible Person(s): Kavansa Gardner, Business Program Manager Senior, Benefit Programs; Lunita Browder-Harris, Business Operation Specialist, Business Operations Corrective Action Planned: DSS has identified critical or conflicting roles in the management system. The roles in scope have the capability to perform all actions within the system, including inputting applications, determining eligibility, and authorizing benefits. DSS is in the process of implementing a procedure for reviewing and revoking conflicting roles ands privileges for all localities. DSS will work with APA to ensure adequate separation of duties is implemented within the eligibility system. Estimated Completion Date: 6/30/2026
Responsible Person(s): Barry Davis, Information Security Officer; John Vosper, Assistant Director Information Security and Risk Management Corrective Action Planned: DSS has contracted with two vendors to perform external IT Audits over sensitive systems. DSS is able to completed between 25-35 IT au...
Responsible Person(s): Barry Davis, Information Security Officer; John Vosper, Assistant Director Information Security and Risk Management Corrective Action Planned: DSS has contracted with two vendors to perform external IT Audits over sensitive systems. DSS is able to completed between 25-35 IT audits out of their 89 sensitive systems per year. DSS expects all IT systems will be audited by the end of 2027. A set of 31 IT Audits will be completed March 30, 2026. Estimated Completion Date: 12/31/2027
Responsible Person(s): Dan Lewis, Chief Technology Officer; Timothy Kelly, Innovation, Architecture and Governance Director Corrective Action Planned: This finding was marked as FOIA Exempt (FOIAE) and as a result, the State Comptroller has determined that the resulting corrective actions are FOIAE ...
Responsible Person(s): Dan Lewis, Chief Technology Officer; Timothy Kelly, Innovation, Architecture and Governance Director Corrective Action Planned: This finding was marked as FOIA Exempt (FOIAE) and as a result, the State Comptroller has determined that the resulting corrective actions are FOIAE under §2.2-3705.2 (9.) of the Code of Virginia. Federal awarding agencies and pass-through entities, please see the Appendix titled “Applicable Management Contacts for Findings and Questioned Costs” to request the corrective action planned from the applicable entity. Estimated Completion Date: 5/29/2026
Responsible Person(s): Mike Jones, Chief Information Officer Corrective Action Planned: This finding was marked as FOIA Exempt (FOIAE) and as a result, the State Comptroller has determined that the resulting corrective actions are FOIAE under §2.2-3705.2 (9.) of the Code of Virginia. Federal awardin...
Responsible Person(s): Mike Jones, Chief Information Officer Corrective Action Planned: This finding was marked as FOIA Exempt (FOIAE) and as a result, the State Comptroller has determined that the resulting corrective actions are FOIAE under §2.2-3705.2 (9.) of the Code of Virginia. Federal awarding agencies and pass-through entities, please see the Appendix titled “Applicable Management Contacts for Findings and Questioned Costs” to request the corrective action planned from the applicable entity. Estimated Completion Date: 6/30/2026
Responsible Person(s): Barry Davis, Information Security Officer; Timothy Kelly, Innovation, Architecture and Governance Director; Steve McCauley, Assistant Director Information Security and Risk Management Corrective Action Planned: DSS Information Security and Risk Management team will ensure risk...
Responsible Person(s): Barry Davis, Information Security Officer; Timothy Kelly, Innovation, Architecture and Governance Director; Steve McCauley, Assistant Director Information Security and Risk Management Corrective Action Planned: DSS Information Security and Risk Management team will ensure risk and control assessments identify and evaluate IAM focused security controls. DSS will develop and define processes and practices to collect monitor and evaluate performance metrics to ensure IAM functions are following define agency service level agreements. DSS will identify different systems and classes for IAM functions. DSS will then create a process to ensure performance metrics are identified. DSS will then implement a procedure to monitor and evaluate the performance metrics. DSS has a documented separation and offboarding process published on its Fusion employee portal. This is a multi-step manual process. DSS is developing training for supervisors and managers to ensure that they know how to navigate through the process. In addition, DSS is developing manual and automated processes to ensure compliance with the process. Estimated Completion Date: 12/30/2026
Responsible Person(s): Dan Lewis, Chief Technology Officer; Timothy Kelly, Innovation, Architecture and Governance Director Corrective Action Planned: DSS is establishing the processes and supporting system resources to ensure that DSS has an effective and compliant change management process. These ...
Responsible Person(s): Dan Lewis, Chief Technology Officer; Timothy Kelly, Innovation, Architecture and Governance Director Corrective Action Planned: DSS is establishing the processes and supporting system resources to ensure that DSS has an effective and compliant change management process. These include: completion of migrating all application to a single repository which enables change tracking and version control in development projects; use of workflows in the system to enforce delivery of required artifacts prior to change submission; changes to the Change Advisory Board process, and post-change processes to validate meeting the acceptance criteria. Estimated Completion Date: 4/30/2026
Responsible Person(s): Dan Lewis, Chief Technology Officer; Timothy Kelly, Innovation, Architecture and Governance Director Corrective Action Planned: This finding was marked as FOIA Exempt (FOIAE) and as a result, the State Comptroller has determined that the resulting corrective actions are FOIAE ...
Responsible Person(s): Dan Lewis, Chief Technology Officer; Timothy Kelly, Innovation, Architecture and Governance Director Corrective Action Planned: This finding was marked as FOIA Exempt (FOIAE) and as a result, the State Comptroller has determined that the resulting corrective actions are FOIAE under §2.2-3705.2 (9.) of the Code of Virginia. Federal awarding agencies and pass-through entities, please see the Appendix titled “Applicable Management Contacts for Findings and Questioned Costs” to request the corrective action planned from the applicable entity. Estimated Completion Date: 3/9/2026
Responsible Person(s): Barry Davis, Information Security Officer; John Vosper, Assistant Director Information Security and Risk management Corrective Action Planned: This finding was marked as FOIA Exempt (FOIAE) and as a result, the State Comptroller has determined that the resulting corrective act...
Responsible Person(s): Barry Davis, Information Security Officer; John Vosper, Assistant Director Information Security and Risk management Corrective Action Planned: This finding was marked as FOIA Exempt (FOIAE) and as a result, the State Comptroller has determined that the resulting corrective actions are FOIAE under §2.2-3705.2 (9.) of the Code of Virginia. Federal awarding agencies and pass-through entities, please see the Appendix titled “Applicable Management Contacts for Findings and Questioned Costs” to request the corrective action planned from the applicable entity. Estimated Completion Date: 12/30/2028
Responsible Person(s): Barry Davis, Information Security Officer; John Vosper, Assistant Director Information Security and Risk Management; Steve McCauley, Assistant Director Information Security and Risk Management Corrective Action Planned: DSS Information Security and Risk Management is reconcili...
Responsible Person(s): Barry Davis, Information Security Officer; John Vosper, Assistant Director Information Security and Risk Management; Steve McCauley, Assistant Director Information Security and Risk Management Corrective Action Planned: DSS Information Security and Risk Management is reconciling the system to identify security roles for each sensitive system. Estimated Completion Date: 6/30/2026
Responsible Person(s): Dan Lewis, Chief Technology Officer; Timothy Kelly, Innovation, Architecture and Governance Director Corrective Action Planned: DSS will follow the direction of the IAG Team to improve compliance with the security standard. IAG has created a new roadmap for remediation of rela...
Responsible Person(s): Dan Lewis, Chief Technology Officer; Timothy Kelly, Innovation, Architecture and Governance Director Corrective Action Planned: DSS will follow the direction of the IAG Team to improve compliance with the security standard. IAG has created a new roadmap for remediation of related IT security and governance findings, and the IAG director is working with the CTO, CISO and TSD leadership on defining concrete plans for remediation of all related findings. The IAG director, the CTO and the TSD leadership continue to implement and refine the division-wide process to ensure sufficient resources are available and dedicated to prioritizing and implementing the planned IT governance structure changes. Roadmap review sessions are scheduled. Remediation working sessions are in process of being scheduled. Estimated Completion Date: 3/27/2026
Responsible Person(s): Steve Hanoka, Information Security Officer Corrective Action Planned: DMAS has started confirming the geographic location for sensitive data monthly and the vulnerability scans every 90 days for the one provider Medicaid management services IT Service provider. DMAS is taking ...
Responsible Person(s): Steve Hanoka, Information Security Officer Corrective Action Planned: DMAS has started confirming the geographic location for sensitive data monthly and the vulnerability scans every 90 days for the one provider Medicaid management services IT Service provider. DMAS is taking steps to ensure that this is completed for all of the service providers that are not under cloud oversight. Estimated Completion Date: 6/30/2026
Responsible Person(s): Ida Witherspoon, Chief Financial Officer; William Carter, Federal Reporting Manager Corrective Action Planned: Grants now uses a financial system created report to perform a perfunctory audit, matching submission data received from the various Program and Budget staff against ...
Responsible Person(s): Ida Witherspoon, Chief Financial Officer; William Carter, Federal Reporting Manager Corrective Action Planned: Grants now uses a financial system created report to perform a perfunctory audit, matching submission data received from the various Program and Budget staff against each individual upload into the federal system. Vendors are filtered by ALN by each analyst responsible for monitoring the various ALN's that make up the DSS portfolio. Once the lists are cross checked, DSS reaches out again to the sub awarding authority responsible within the agency to ask for additional FFATA information. Estimated Completion Date: 6/30/2026
Responsible Person(s): Ida Witherspoon, Chief Financial Officer; Ousman Kah, Subrecipient Monitoring Coordinator; James Pell, ARMICS Program Manager Corrective Action Planned: As part of the compliance review, an analysis will be conducted to identify divisions and associated service provider agenci...
Responsible Person(s): Ida Witherspoon, Chief Financial Officer; Ousman Kah, Subrecipient Monitoring Coordinator; James Pell, ARMICS Program Manager Corrective Action Planned: As part of the compliance review, an analysis will be conducted to identify divisions and associated service provider agencies that manage substantial fiscal responsibilities under federal or state funding streams. This includes mapping subrecipient institutions and other state agencies such as the Office of Community Services (OCS) that receive federal grant allocations. The objective is to ensure visibility into entities handling large-scale financial transactions, assess their internal controls, and confirm adherence to applicable federal and state requirements. This analysis will serve as the foundation for targeted monitoring and risk mitigation strategies. DSS receives federal funding, which is disbursed to state agencies as a pass-through transaction. These transactions are initiated by various divisions within DSS, based on agreements with subrecipients, and then sent to Finance for review/processing. The subrecipients receiving federal funding must carry out the mission of that specific federal program. Pass-through transactions are required to be summarized and submitted to DOA for year-end financial reporting by agency and ALN (Assistance Listing Number, i.e., 10.561 = SNAP). DSS needs to obtain confirmation that each agency receiving federal funding is using the federal funds appropriately and within the guidelines of the grant award. ARMICS team will work to obtain financial control assurances from identified significant fiscal recipients. Estimated Completion Date: 11/30/2026
Responsible Person(s): Monique Majeus, Economic Assistance and Employment; Christie Bruce, TANF Consultant Corrective Action Planned: Change Request submitted to fix and implement the changes requiring correction in 2025. Estimated Completion Date: 11/25/2025
Responsible Person(s): Monique Majeus, Economic Assistance and Employment; Christie Bruce, TANF Consultant Corrective Action Planned: Change Request submitted to fix and implement the changes requiring correction in 2025. Estimated Completion Date: 11/25/2025
Responsible Person(s): Fernanda Crandol, Chief Financial Officer Corrective Action Planned: This finding was marked as FOIA Exempt (FOIAE) and as a result, the State Comptroller has determined that the resulting corrective actions are FOIAE under §2.2-3705.2 (9.) of the Code of Virginia. Federal awa...
Responsible Person(s): Fernanda Crandol, Chief Financial Officer Corrective Action Planned: This finding was marked as FOIA Exempt (FOIAE) and as a result, the State Comptroller has determined that the resulting corrective actions are FOIAE under §2.2-3705.2 (9.) of the Code of Virginia. Federal awarding agencies and pass-through entities, please see the Appendix titled “Applicable Management Contacts for Findings and Questioned Costs” to request the corrective action planned from the applicable entity. Estimated Completion Date: 5/31/2026
« 1 33 34 36 37 735 »