Corrective Action Plans

Finding 376159 (2023-066)

Significant Deficiency 2023

VA

Questioned Costs HUD Housing Programs Significant Deficiency § 200.303

Responsible Contact Person(s): Kevin Platea, Chief Information Officer Stephen Schleck, Associate Director of Enterprise Business Solutions Corrective Action Planned: A Change Request for the case management system was developed 2 years ago and DSS is reviewing the change request to determine a stat...

Responsible Contact Person(s): Kevin Platea, Chief Information Officer Stephen Schleck, Associate Director of Enterprise Business Solutions Corrective Action Planned: A Change Request for the case management system was developed 2 years ago and DSS is reviewing the change request to determine a status. It was agreed by Line of Business and ITS EBS & a vendor (the systems provider) that there will be an iterative approach to completing the record retention and purge rules for implementation in the case management system. Estimated Completion Date: 12/31/2024

View Audit 295106

Finding 376134 (2023-061)

Significant Deficiency 2023

Commonwealth of Virginia

VA

Questioned Costs Significant Deficiency Internal Control / Segregation of Duties § 200.303

Responsible Contact Person(s): Diane Carnohan, Chief Information Security Officer Corrective Action Planned: This finding was marked as FOIA Exempt (FOIAE) and as a result, the State Comptroller has determined that the resulting corrective actions are FOIAE under §2.2-3705.2 (9.) of the Code of Virg...

Responsible Contact Person(s): Diane Carnohan, Chief Information Security Officer Corrective Action Planned: This finding was marked as FOIA Exempt (FOIAE) and as a result, the State Comptroller has determined that the resulting corrective actions are FOIAE under §2.2-3705.2 (9.) of the Code of Virginia. Federal awarding agencies and pass-through entities, please see the Appendix titled “Applicable Management Contacts for Findings and Questioned Costs” to request the corrective action planned from the applicable entity. Estimated Completion Date: 6/1/2024

View Audit 295106

Finding 376131 (2023-058)

Significant Deficiency 2023

Commonwealth of Virginia

VA

Questioned Costs Significant Deficiency Internal Control / Segregation of Duties § 200.303

Responsible Contact Person(s): Kevin Platea, Chief Information Officer Corrective Action Planned: This finding was marked as FOIA Exempt (FOIAE) and as a result, the State Comptroller has determined that the resulting corrective actions are FOIAE under §2.2-3705.2 (9.) of the Code of Virginia. Fede...

Responsible Contact Person(s): Kevin Platea, Chief Information Officer Corrective Action Planned: This finding was marked as FOIA Exempt (FOIAE) and as a result, the State Comptroller has determined that the resulting corrective actions are FOIAE under §2.2-3705.2 (9.) of the Code of Virginia. Federal awarding agencies and pass-through entities, please see the Appendix titled “Applicable Management Contacts for Findings and Questioned Costs” to request the corrective action planned from the applicable entity. Estimated Completion Date: 12/31/2024

View Audit 295106

Finding 376128 (2023-056)

Significant Deficiency 2023

Commonwealth of Virginia

VA

Internal Control / Segregation of Duties Questioned Costs Significant Deficiency § 200.303

Responsible Contact Person(s): Barry Davis, Chief Information Security Officer and Director of Information Security & Risk Management John Vosper, Information Technology Audit Manager Corrective Action Planned: DSS has contracted with a contractor to perform IT audits once every three years on an on...

Responsible Contact Person(s): Barry Davis, Chief Information Security Officer and Director of Information Security & Risk Management John Vosper, Information Technology Audit Manager Corrective Action Planned: DSS has contracted with a contractor to perform IT audits once every three years on an ongoing rotating basis. Estimated Completion Date: 12/31/2023

View Audit 295106

Finding 376125 (2023-055)

Significant Deficiency 2023

Commonwealth of Virginia

VA

Internal Control / Segregation of Duties Special Tests & Provisions Questioned Costs

Responsible Contact Person(s): Mike Jones, Chief Information Officer Corrective Action Planned: The vendor started the security audit in September 2023 and completed in December 2023. The report was sent to DMAS in February 2024. Next steps- The report needs to be reviewed and the Contract Administ...

Responsible Contact Person(s): Mike Jones, Chief Information Officer Corrective Action Planned: The vendor started the security audit in September 2023 and completed in December 2023. The report was sent to DMAS in February 2024. Next steps- The report needs to be reviewed and the Contract Administrator will work with the vendor to ensure Plan of Action and Milestones (POAMs) are completed to address the risks and control gaps. The Contract Administrator will monitor the vendor to ensure the vendor meets to terms of the contract and submits a security audit every two years. Estimated Completion Date: 6/30/2024

View Audit 295106

Finding 376123 (2023-051)

Significant Deficiency 2023

Commonwealth of Virginia

VA

Questioned Costs Significant Deficiency Internal Control / Segregation of Duties § 200.303

Responsible Contact Person(s): David Clark, Information Security Officer Corrective Action Planned: The Information Security Unit has documented a process for the types of changes that trigger a security impact analysis (SIA) as well as a request form for a security impact review. Part of the SIA pr...

Responsible Contact Person(s): David Clark, Information Security Officer Corrective Action Planned: The Information Security Unit has documented a process for the types of changes that trigger a security impact analysis (SIA) as well as a request form for a security impact review. Part of the SIA process will be to determine if pre-implementation testing is required. The Information Security Unit will retain documentation in accordance with the Configuration Management Policy. Once the processes are further defined, the Information Security Unit will update the Configuration Management Policy & Procedures. Estimated Completion Date: 3/31/2024

View Audit 295106

Finding 376120 (2023-049)

Significant Deficiency 2023

Commonwealth of Virginia

VA

Questioned Costs Significant Deficiency Internal Control / Segregation of Duties § 200.303

Responsible Contact Person(s): Kevin Platea, Chief Information Officer Corrective Action Planned: This finding was marked as FOIA Exempt (FOIAE) and as a result, the State Comptroller has determined that the resulting corrective actions are FOIAE under §2.2-3705.2 (9.) of the Code of Virginia. Fede...

Responsible Contact Person(s): Kevin Platea, Chief Information Officer Corrective Action Planned: This finding was marked as FOIA Exempt (FOIAE) and as a result, the State Comptroller has determined that the resulting corrective actions are FOIAE under §2.2-3705.2 (9.) of the Code of Virginia. Federal awarding agencies and pass-through entities, please see the Appendix titled “Applicable Management Contacts for Findings and Questioned Costs” to request the corrective action planned from the applicable entity. Estimated Completion Date: 6/30/2024

View Audit 295106

Finding 376117 (2023-043)

Significant Deficiency 2023

Commonwealth of Virginia

VA

Questioned Costs Reporting Significant Deficiency § 200.303

Responsible Contact Person(s): Barry Davis, Chief Information Security Officer and Director of Information Security & Risk Management Melinda Raines, Director of Human Resources Karen Holt, Human Resources Business Process Consultant Corrective Action Planned: An agency-wide work group will be estab...

Responsible Contact Person(s): Barry Davis, Chief Information Security Officer and Director of Information Security & Risk Management Melinda Raines, Director of Human Resources Karen Holt, Human Resources Business Process Consultant Corrective Action Planned: An agency-wide work group will be established to determine the exact processes need to implement the controls necessary to address this finding. HR and ISRM have identified the need for new reporting and interfaces to regain compliance. DSS had deployed DOA human capital management system and an internal system that will need to have interfaces developed. Estimated Completion Date: 6/30/2024

View Audit 295106

Finding 376114 (2023-036)

Significant Deficiency 2023

Commonwealth of Virginia

VA

Questioned Costs HUD Housing Programs Significant Deficiency § 200.303

Responsible Contact Person(s): Mike Jones, Chief Information Officer Steve Hanoka, Chief Information Security Officer Corrective Action Planned: The 2023 Annual Access Review for the claims processing system through secure web application surveys began in the 4th Quarter 2023. Three separate surve...

Responsible Contact Person(s): Mike Jones, Chief Information Officer Steve Hanoka, Chief Information Security Officer Corrective Action Planned: The 2023 Annual Access Review for the claims processing system through secure web application surveys began in the 4th Quarter 2023. Three separate surveys were sent to perform access review for DSS, Contractor and DMAS Internal access review. • DSS annual review sent on November 9, 2023 and ended on November 20, 2023 • Contractor review sent on November 30, 2023 and ended on December 15, 2023 • DMAS review sent on December 15, 2023 and ended on January 13, 2024 All 3 surveys requested managers to review their employees access and confirm if it was required or if the access should be revoked. Survey results are available to perform follow up actions. DMAS Security is currently reviewing the survey results and revoking access where requested. Estimated Completion Date: 6/30/2024

View Audit 295106

Finding 376111 (2023-035)

Significant Deficiency 2023

Commonwealth of Virginia

VA

Questioned Costs Eligibility HUD Housing Programs § 200.303

Responsible Contact Person(s): Barry Davis, Chief Information Security Officer and Director of Information Security & Risk Management Steve McCauley, Assistant Division Director Corrective Action Planned: DSS will perform an annual access review of user accounts for the case management system. Estim...

Responsible Contact Person(s): Barry Davis, Chief Information Security Officer and Director of Information Security & Risk Management Steve McCauley, Assistant Division Director Corrective Action Planned: DSS will perform an annual access review of user accounts for the case management system. Estimated Completion Date: 12/31/2024

View Audit 295106

Finding 376108 (2023-034)

Significant Deficiency 2023

Commonwealth of Virginia

VA

Internal Control / Segregation of Duties Questioned Costs Eligibility § 200.303

Responsible Contact Person(s): Angela Morse, Director of Benefit Programs Kavansa Gardner, Information Technology Manager Corrective Action Planned: DSS will perform and document a conflicting access review for the case management system to identify the combinations of roles that could pose separat...

Responsible Contact Person(s): Angela Morse, Director of Benefit Programs Kavansa Gardner, Information Technology Manager Corrective Action Planned: DSS will perform and document a conflicting access review for the case management system to identify the combinations of roles that could pose separation of duties conflicts and ensure compensating controls are in place to mitigate risks arising from those conflicts. Additionally, DSS will work with a vendor to update the role-based security access documentation to reflect all system changes from prior case management system related releases when there are proposed changes to the roles matrix. Estimated Completion Date: 12/31/2024

View Audit 295106

Finding 376105 (2023-027)

Material Weakness 2023

Commonwealth of Virginia

VA

Questioned Costs Material Weakness Internal Control / Segregation of Duties § 200.303

Responsible Contact Person(s): Barry Davis, Chief Information Security Officer and Information Security & Risk Management Kevin Platea, Chief Information Officer Corrective Action Planned: This finding was marked as FOIA Exempt (FOIAE) and as a result, the State Comptroller has determined that the r...

Responsible Contact Person(s): Barry Davis, Chief Information Security Officer and Information Security & Risk Management Kevin Platea, Chief Information Officer Corrective Action Planned: This finding was marked as FOIA Exempt (FOIAE) and as a result, the State Comptroller has determined that the resulting corrective actions are FOIAE under §2.2-3705.2 (9.) of the Code of Virginia. Federal awarding agencies and pass-through entities, please see the Appendix titled “Applicable Management Contacts for Findings and Questioned Costs” to request the corrective action planned from the applicable entity. Estimated Completion Date: 12/31/2023

View Audit 295106

Finding 376080 (2023-022)

Significant Deficiency 2023

Commonwealth of Virginia

VA

Questioned Costs Subrecipient Monitoring Significant Deficiency § 200.303

Responsible Contact Person(s): Diane Carnohan, Chief Information Security Officer Corrective Action Planned: This finding was marked as FOIA Exempt (FOIAE) and as a result, the State Comptroller has determined that the resulting corrective actions are FOIAE under §2.2-3705.2 (9.) of the Code of Virg...

Responsible Contact Person(s): Diane Carnohan, Chief Information Security Officer Corrective Action Planned: This finding was marked as FOIA Exempt (FOIAE) and as a result, the State Comptroller has determined that the resulting corrective actions are FOIAE under §2.2-3705.2 (9.) of the Code of Virginia. Federal awarding agencies and pass-through entities, please see the Appendix titled “Applicable Management Contacts for Findings and Questioned Costs” to request the corrective action planned from the applicable entity. Estimated Completion Date: 12/31/2024

View Audit 295106

Finding 376077 (2023-015)

Significant Deficiency 2023

Commonwealth of Virginia

VA

Questioned Costs Subrecipient Monitoring Significant Deficiency § 200.303

Responsible Contact Person(s): Kevin Platea, Chief Information Officer Corrective Action Planned: This finding was marked as FOIA Exempt (FOIAE) and as a result, the State Comptroller has determined that the resulting corrective actions are FOIAE under §2.2-3705.2 (9.) of the Code of Virginia. Fede...

Responsible Contact Person(s): Kevin Platea, Chief Information Officer Corrective Action Planned: This finding was marked as FOIA Exempt (FOIAE) and as a result, the State Comptroller has determined that the resulting corrective actions are FOIAE under §2.2-3705.2 (9.) of the Code of Virginia. Federal awarding agencies and pass-through entities, please see the Appendix titled “Applicable Management Contacts for Findings and Questioned Costs” to request the corrective action planned from the applicable entity. Estimated Completion Date: 12/31/2024

View Audit 295106

Finding 376074 (2023-014)

Significant Deficiency 2023

Commonwealth of Virginia

VA

Questioned Costs Subrecipient Monitoring Significant Deficiency § 200.303

Responsible Contact Person(s): Barry Davis, Chief Information Security Officer and Director of Information Security & Risk Management Kevin Platea, Chief Information Officer Corrective Action Planned: To improve the governance structure of the agency, ISRM Division Leadership is working with a vendo...

Responsible Contact Person(s): Barry Davis, Chief Information Security Officer and Director of Information Security & Risk Management Kevin Platea, Chief Information Officer Corrective Action Planned: To improve the governance structure of the agency, ISRM Division Leadership is working with a vendor to address the division’s responsibility around defining and communicating the Security and Risk Management program. The goal is to educate the agency System Owners, Data Owners, System Administrators, System User, and Data Custodians as to their roles and responsibilities in managing risk associated with agency data and systems. The Division of ISRM will deliver System Owner training to the Agency Executive Team in April in support of the Commonwealth’s requirement that System Owner’s manage risks associated with their systems. This training will also highlight the importance of Configuration Management and Software and Service Acquisition. The Division of ISRM will also construct and offer training on Configuration Management and Software and Service Acquisition to whichever resources the Agency identifies to own such related processes. The training will be ready to be provided no later than August 1, 2023. Estimated Completion Date: 12/31/2023

View Audit 295106

Finding 376071 (2023-010)

Material Weakness 2023

Commonwealth of Virginia

VA

Questioned Costs Subrecipient Monitoring Material Weakness § 200.303

Responsible Contact Person(s): Steve Hanoka, Chief Information Security Officer Corrective Action Planned: Policies are reviewed and signed. Procedures are in progress, to be followed by implementation. DMAS wants to meet with the APA and VITA to discuss Pen Test and vulnerability scan processes. ...

Responsible Contact Person(s): Steve Hanoka, Chief Information Security Officer Corrective Action Planned: Policies are reviewed and signed. Procedures are in progress, to be followed by implementation. DMAS wants to meet with the APA and VITA to discuss Pen Test and vulnerability scan processes. Completion of System Security Plans (SSPs) are about 50% complete, with 6 SSPs complete, 3 under review, 1 in draft and 7 to schedule. A program management policy/standard has been written and is under review. Estimated Completion Date: 4/1/2024

View Audit 295106

Finding 376063 (2023-004)

Material Weakness 2023

Batesville Community School Corporation

IN

Internal Control / Segregation of Duties Material Weakness Reporting § 200.303

FINDING 2023-004 Finding Subject: COVID-19 - Education Stabilization Fund – Reporting Summary of Finding: Reports were not reviewed by someone other than the preparer Contact Person Responsible for Corrective Action: Todd Nobbe Contact Phone Number: 812-934-2194 Views of Responsible Official: We con...

FINDING 2023-004 Finding Subject: COVID-19 - Education Stabilization Fund – Reporting Summary of Finding: Reports were not reviewed by someone other than the preparer Contact Person Responsible for Corrective Action: Todd Nobbe Contact Phone Number: 812-934-2194 Views of Responsible Official: We concur with the finding. Description of Corrective Action Plan: The school corporation will establish a proper system for internal controls and develop procedure to ensure report are review by someone other than the preparer. Completion Date: Immediately 2/26/2024

View Audit 295088

Finding 376054 (2023-001)

Significant Deficiency 2023

Mental Health America of Northern Kentucky and Southwest Ohio

OH

Allowable Costs / Cost Principles Internal Control / Segregation of Duties § 200.300 § 200.400

Re: Single Audit Corrective Action Plan for the Fiscal Year Ended June 30, 2023 AUDIT FINDINGS Finding Reference Number: 2023-001 Description of Finding: No Written Policies, Procedures, or Standards of Conduct Relative to Federal Awards. Statement of Concurrence or Nonconcurrence: Mental Health...

Re: Single Audit Corrective Action Plan for the Fiscal Year Ended June 30, 2023 AUDIT FINDINGS Finding Reference Number: 2023-001 Description of Finding: No Written Policies, Procedures, or Standards of Conduct Relative to Federal Awards. Statement of Concurrence or Nonconcurrence: Mental Health America, Northern Kentucky and Southwest Ohio agrees with the audit finding. Corrective Action: Mental Health America, Northern Kentucky and Southwest Ohio will prepare written procedures governing the expenditures of Federal Funds. Name of Contact Person:Elizabeth Atwell, Executive Director eatwell@mhankyswoh.org (513)721-2910 Projected Completion Date: On or before June 30, 2024

View Audit 295087

Finding 376047 (2023-003)

Material Weakness 2023

Crown Point Community School Corporation

IN

Special Tests & Provisions Subrecipient Monitoring Material Weakness § 200.303

FINDING 2023-003 Finding Subject: Title I Grants to Local Educational Agencies Special Tests and Provisions – Assessment System Security Summary of Finding: A sample of 40 employees were tested from the school’s roster and ten did not have a signed agreement indicating training was received. There w...

FINDING 2023-003 Finding Subject: Title I Grants to Local Educational Agencies Special Tests and Provisions – Assessment System Security Summary of Finding: A sample of 40 employees were tested from the school’s roster and ten did not have a signed agreement indicating training was received. There was no process to ensure that all employees required to be trained received the training and submitted the Assessment System Security Agreement. It is recommended that the School Corporation's management establish a system of internal controls. Contact Person Responsible for Corrective Action: James H. Hardman Contact Phone Number and Email Address: 219-663-3371 jhardman@cps.k12.in.us Views of Responsible Officials: The management of the Crown Point Community School Corporation concurs with the finding. Description of Corrective Action Plan: The management of the Crown Point Community School Corporation will establish a system of internal controls to ensure all employees required to be trained receive the training and submit the Assessment System Security Agreement. Anticipated Completion Date: February 20, 2024

View Audit 295075

Finding 376045 (2023-002)

Material Weakness 2023

Crown Point Community School Corporation

IN

Internal Control / Segregation of Duties Material Weakness Reporting § 200.303

FINDING 2023-002 Finding Subject: Title I Grants to Local Educational Agencies - Reporting Summary of Finding: The School Corporation had established a system of internal controls over the Final Expenditure report for Title I. However, the internal control process was not documented. It is recommend...

FINDING 2023-002 Finding Subject: Title I Grants to Local Educational Agencies - Reporting Summary of Finding: The School Corporation had established a system of internal controls over the Final Expenditure report for Title I. However, the internal control process was not documented. It is recommended that the School Corporation's management establish a system of internal controls. Contact Person Responsible for Corrective Action: James H. Hardman Contact Phone Number and Email Address: 219-663-3371 jhardman@cps.k12.in.us Views of Responsible Officials: The management of the Crown Point Community School Corporation concurs with the finding. Description of Corrective Action Plan: The management of the Crown Point Community School Corporation will establish a system of internal controls consisting of policies and procedures. Anticipated Completion Date: April 5, 2024

View Audit 295075

Finding 376043 (2023-002)

Significant Deficiency 2023

Housing Authority of the City of York

SC

HUD Housing Programs Significant Deficiency Special Tests & Provisions

2023-002 Special Tests and Provisions – Income Targeting Program: U.S. Department of HUD: Section 8 Housing Choice Vouchers (CFDA 14.871) Type of Finding: Significant Deficiency in Internal Control and Other Matter to be Reported Under the Uniform Guidance This is a repeat finding of 2022-0...

2023-002 Special Tests and Provisions – Income Targeting Program: U.S. Department of HUD: Section 8 Housing Choice Vouchers (CFDA 14.871) Type of Finding: Significant Deficiency in Internal Control and Other Matter to be Reported Under the Uniform Guidance This is a repeat finding of 2022-002 from June 30, 2022 (initially reported June 30, 2021) Statement of Condition The Authority did not have adequate controls over income targeting to assure that the Authority is in compliance with this requirement. During our testing, we noted that tenants with incomes that were extremely low accounted for approximately 70% of new admissions during the fiscal year, which is below the minimum required percentage of 75%. Recommendation We recommend the Authority assure that at least 75% of new admissions be in the extremely low-income bracket. This should be monitored throughout the year. The Authority can also select applicants on the waiting list who are extremely low income by bypassing others on the list that don’t meet the requirement and documenting that the person was selected ahead of others to be able to meet the requirement Action Taken: We concur with this finding. We will closely monitor new admissions and focus on applicants on the waiting list who meet the criteria as extremely low income so that the 75% requirement is met. Our lease rate has been decreasing due to a decrease in availability in our area. We have been issuing vouchers every month and have little to no wait on our waiting list. We are also accepting applications every week. We have been unable to exclude persons due to the extremely low-income bracket requirement because we are trying to increase the overall utilization in our voucher program. We have submitted a request to HUD to allow an exception to the income targeting rule and are currently awaiting a response. Effective Date: February 29, 2024 Contact Information Jenny Hammond, Executive Director Housing Authority of the City of York 221 California Street York, SC 29745 (803) 684-7359

View Audit 295068

Finding 376042 (2023-001)

Significant Deficiency 2023

Housing Authority of the City of York

SC

HUD Housing Programs Eligibility Significant Deficiency

Finding No. 2023-001 Eligibility – Tenant Files Program: U.S. Department of HUD: Section 8 Housing Choice Vouchers (CFDA 14.871) Type of Finding: Significant Deficiency in Internal Control and Other Matter to be Reported Under the Uniform Guidance This is a repeat finding of 2022-001...

Finding No. 2023-001 Eligibility – Tenant Files Program: U.S. Department of HUD: Section 8 Housing Choice Vouchers (CFDA 14.871) Type of Finding: Significant Deficiency in Internal Control and Other Matter to be Reported Under the Uniform Guidance This is a repeat finding of 2022-001 from June 30, 2022 (initially reported June 30, 2021) Statement of Condition Out of a total tenant population of approximately 194 vouchers, 20 files were selected for testing. Exceptions were noted as follows: • 1 file where a math error on zero-income calculation resulted in an increase in HAP rent from $709 to $712. • 1 file where a math error on zero-income calculation resulted in a decrease in HAP rent from $961 to $912. • 1 file where social security income was calculated using 2022 amounts despite move-in date in February 2023. As a result, HAP rent decreased from $561 to $546. • 1 file where social security income was calculated using 2022 amounts despite annual re-exam in February 2023. As a result, HAP rent decreased from $709 to $687. In addition to the above, during our new admissions testing (5 tested out of 44 new admissions) we noted the following: • 1 file that did not contain a signed lease agreement. Recommendation The Authority should correct the deficiencies noted in the tested files and utilize an ongoing quality control review process on the entire tenant population to ensure proper compliance with the requirements related to tenant eligibility. Ongoing staff training and timely management reviews should be utilized to ensure staff is aware of acceptable procedures. In addition, the Authority should review staffing levels, skill sets and case load. Action Taken We concur with this finding and have implemented various controls. A tenant file and unit quality control procedure has been developed and implemented.

View Audit 295068

Finding 376021 (2023-002)

Significant Deficiency 2023

Readyct, Inc.

CT

Questioned Costs Allowable Costs / Cost Principles Significant Deficiency § 200.414

2023-002 Coronavirus State and Local Fiscal Recovery Funds – Assistance Listing No. 21.027 Recommendation: We recommend that the Organization review and follow the indirect cost rate guidance set out at 2 CFR section 200.414 within Uniform Guidance. Explanation of disagreement with audit finding: ...

2023-002 Coronavirus State and Local Fiscal Recovery Funds – Assistance Listing No. 21.027 Recommendation: We recommend that the Organization review and follow the indirect cost rate guidance set out at 2 CFR section 200.414 within Uniform Guidance. Explanation of disagreement with audit finding: There is no disagreement with the audit finding. Action taken in response to finding: Management is in the process of updating it’s calculation of indirect costs to be in compliance with the indirect cost rate guidance set out at 2 CFR section 200.414 within Uniform Guidance. Name of the contact person responsible for corrective action: Shannon Marimón Planned completion date for corrective action plan: February 29, 2024

View Audit 295043 Questioned Costs: $1

Finding 376019 (2023-001)

Significant Deficiency 2023

Readyct, Inc.

CT

Questioned Costs Procurement, Suspension & Debarment Significant Deficiency § 200.318 § 200.326

2023-001 Coronavirus State and Local Fiscal Recovery Funds – Assistance Listing No. 21.027 Recommendation: We recommend that the Organization review its procurement and make necessary changes to comply with the criteria as set out in 2 CFR sections 200.318 through 200.326. Explanation of disagreem...

2023-001 Coronavirus State and Local Fiscal Recovery Funds – Assistance Listing No. 21.027 Recommendation: We recommend that the Organization review its procurement and make necessary changes to comply with the criteria as set out in 2 CFR sections 200.318 through 200.326. Explanation of disagreement with audit finding: There is no disagreement with the audit finding. Action taken in response to finding: Management is in the process of enhancing the federal procurement policy to include sections 200.318 through 200.326. Name of the contact person responsible for corrective action: Shannon Marimón Planned completion date for corrective action plan: February 29, 2024

View Audit 295043

Finding 376004 (2023-004)

Material Weakness 2023

Fayette County School Corporation

IN

School Nutrition Programs Internal Control / Segregation of Duties Allowable Costs / Cost Principles § 200.303

FINDING 2023 004 Finding Subject: Child Nutrition Cluster Allowable and Non allowable Activities and Costs Summary of Finding: Material Weakness FCSC did not have a review process in place to ensure that food service program funds were being used for allowable activities and allowable costs. Conta...

FINDING 2023 004 Finding Subject: Child Nutrition Cluster Allowable and Non allowable Activities and Costs Summary of Finding: Material Weakness FCSC did not have a review process in place to ensure that food service program funds were being used for allowable activities and allowable costs. Contact Person Responsible for Corrective Action: Tina Smith Contact Phone Number and Email Address: (765) 825 2178 tlsmith@fayette.k12.in.us Views of Responsible Officials: We concur with this finding. However, it has never been a past practice to audit the costs and activities of the food service program. This has been a recent change in audit requirements that began with the beginning of this audit period. Description of Corrective Action Plan: The Deputy Treasurer will randomly and periodically request receipts from the food service director in order to conduct a mini audit to ensure that all costs and activities are, in fact, allowable. Anticipated Completion Date: A new procedure is in place effective February 2024. The documented oversight will be available and provided for review with the 2025 audit.

View Audit 295033

Corrective Action Plans

Filters