Corrective Action Plans

Browse how organizations respond to audit findings

Total CAPs
51,702
In database
Filtered Results
10,975
Matching current filters
Showing Page
71 of 439
25 per page

Filters

Clear
Child Care and Nutrition, Inc. respectfully submits the following corrective action plan for the year ended September 30, 2024. Audit period: October 1, 2023-September 30, 2024 The findings from the September 30, 2024 schedule of findings and questioned costs are discussed below. The findings ar...
Child Care and Nutrition, Inc. respectfully submits the following corrective action plan for the year ended September 30, 2024. Audit period: October 1, 2023-September 30, 2024 The findings from the September 30, 2024 schedule of findings and questioned costs are discussed below. The findings are numbered consistently with the numbers assigned in the schedule. FINDINGS – FINANCIAL STATEMENT AUDIT MATERIAL WEAKNESS 2024-001 Internal Accounting Controls Recommendation: We recommend management be aware to the lack of segregation of duties within the accounting functions and provide oversight to ensure the internal control policies and procedures are being implemented by organization staff. Explanation of disagreement with audit finding: There is no disagreement with the audit finding. Action taken in response to finding: The Organization will continue to review the accounting functions of all affected departments so segregate them as it is cost beneficial. Name of the contact person responsible for corrective action: Sherri Looft, Executive Director Planned completion date for corrective action plan: September 30, 2025. MATERIAL WEAKNESS 2024-002 Annual Financial Reporting Under Generally Accepted Accounting Principles Recommendation: Management should continue to evaluate their internal staff capacity to determine if an internal control policy over the annual financial reporting is beneficial. Explanation of disagreement with audit finding: There is no disagreement with the audit finding. Action taken in response to finding: The Organization understands this is required communications for the preparation of the financial statements and will continue to work at this area to achieve the overall goal. Name of the contact person responsible for corrective action: Sherri Looft, Executive Director Planned completion date for corrective action plan: September 30, 2025. FINDINGS – FEDERAL AWARD PROGRAMS 2024-003 Internal Accounting Controls Federal Agency: U.S. Department of Agriculture Federal Program: Child and Adult Care Food Program CFDA Number: 10.558 Pass Through Agency: Minnesota Department of Education, Child Nutrition Section Pass Through Number: 1000003400 Award Periods: Year ended September 30, 2024 Recommendation: We recommend management be aware to the lack of segregation of duties within the accounting functions and provide oversight to ensure the internal control policies and procedures are being implemented by organization staff. Explanation of disagreement with audit finding: There is no disagreement with the audit finding. Action taken in response to finding: The Organization will continue to review the accounting functions of all affected departments so segregate them as it is cost beneficial. Name of the contact person responsible for corrective action: Sherri Looft, Executive Director Planned completion date for corrective action plan: September 30, 2025.
Corrective Actions Taken Commons has taken the following actions to protect against such fraudulent incidents in the future: • Engaged a firm to assist with managing the incident; • Opened a new bank account; • Added account verification services with our banking partner, which will be utilized to v...
Corrective Actions Taken Commons has taken the following actions to protect against such fraudulent incidents in the future: • Engaged a firm to assist with managing the incident; • Opened a new bank account; • Added account verification services with our banking partner, which will be utilized to verify account updates; • Limited the amount of per vendor/subrecipient daily payments to our insurance limits, with verifications prior to releasing additional funds when the total payment exceeds the insurance limits; • Subrecipient payment receipt is verified by both the subrecipient and the Commons grants team; • Updated our policy and procedures to direct our subrecipients to request banking changes through our procurement system and not through email; and • Expanded implementation of our Kissflow procurement system across the organization, which includes new vendor process as well as a change of vendor information module. Vendor changes would be approved first by the program/department that works with the vendor prior to Finance approval. Completion Date With the exception of implementing the change of vendor information module in Kissflow, the above actions have all been completed by the date of this report. The projected completion date for Kissflow change of vendor information module is April 30, 2025. Responsible Party Dana Thomas, Chief Financial Officer Angela Allen, Vice President of Finance
Finding 565012 (2024-001)
Material Weakness 2024
May 27, 2025 Roslund, Prestage & Company, P.C. 525 W. Warwick Drive, Suite A Alma, MI 48801 Re: Corrective Action Plan Regarding Section III: Schedule of Findings and Questioned Costs for the Fiscal Year Ended September 30, 2024, in Reference to 2024-001 Procurement It was identified in the findings...
May 27, 2025 Roslund, Prestage & Company, P.C. 525 W. Warwick Drive, Suite A Alma, MI 48801 Re: Corrective Action Plan Regarding Section III: Schedule of Findings and Questioned Costs for the Fiscal Year Ended September 30, 2024, in Reference to 2024-001 Procurement It was identified in the findings of 2024-001 Procurement (repeat comment) that LCCMH had not followed proper procurement requirements and procedures regarding the agreement in reference to ALN 93.969 Certified Community Behavioral Health Clinics (CCBHC) expansion Grants. LCCMH Management has taken actions to revise policies and procedures to ensure their alignment with federal regulations, as well as providing training regarding federal procurement requirements for the relevant personnel. The Standards Committee, which is responsible for regularly reviewing Policies and Procedures and approving or recommending changes, reviewed and approved the following policy revisions at its November 19, 2024 meeting to maintain compliance with federal regulation standards. 0.1.02.65 Provider Procurement and Best Value Purchasing 01.02.85 Procuring Employment Services Providers, Independent Contractors and Network Providers. The approved policies were also presented at the LCCMH Full Board meeting on November 21, 2024. All LCCMH Staff were advised on December 2, 2024, to review the revised policies and procedures. On April 22, 2025, SAMSHA provided LCCMH written notification identifying the 2023 citation for procurement as resolved. Thank you, Brooke Sankiewicz Chief Executive Officer Lapeer County Community Mental Health (810) 667-0500 bsankiewicz lapeercmh.org
View Audit 358880 Questioned Costs: $1
Finding 565001 (2024-001)
Material Weakness 2024
Condition: The Organization has engaged a subrecipient as part of this grant program, which was subsequently determined, but did not have an executed agreement with the subrecipient until October 2024. As a result, the Organization did not meet the requirements of performing formal risk assessment p...
Condition: The Organization has engaged a subrecipient as part of this grant program, which was subsequently determined, but did not have an executed agreement with the subrecipient until October 2024. As a result, the Organization did not meet the requirements of performing formal risk assessment procedures prior to engaging with the subrecipient. Planned Corrective Action: Management has executed an agreement with the identified subrecipient and implement formalized policies and procedures to ensure no risk factors for non-compliance exist and to properly monitor the subrecipient activity. The identified subrecipient has met all documentation and submission requirements to support reporting and appropriate usage of grant funds related to the grant program. Contact person responsible for corrective action: Adam Kinder, CFO Anticipated Completion Date: October 2024
Response: Project numbers will be utilized for the grant programming from this point further so that the income and expenses will be more easily defined and isolated for reporting.
Response: Project numbers will be utilized for the grant programming from this point further so that the income and expenses will be more easily defined and isolated for reporting.
Finding 564735 (2024-003)
Significant Deficiency 2024
Lack of Subrecipient Monitoring Auditor Description of Criteria, Condition, and Effect: Under 2 CFR Part 200.332(e), the pass through-entity must monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and condi...
Lack of Subrecipient Monitoring Auditor Description of Criteria, Condition, and Effect: Under 2 CFR Part 200.332(e), the pass through-entity must monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. The pass-through entity is responsible for monitoring the overall performance of a subrecipient to ensure that the goals and objectives of the subaward are achieved. The County performed financial monitoring procedures during the year and obtained and reviewed subrecipient single audit reports from those subrecipients who were required to have single audits performed under 2 CFR 200 Subpart F. However, the County could not provide evidence that programmatic or performance monitoring to ensure that the stated goals and objectives of the subaward program were achieved during the year, and as such did not comply with all necessary subrecipient monitoring requirements during the year as required in 2 CFR Part 200.332(e). The County did not follow all federal requirements for subrecipient monitoring and as a result has not completed all monitoring requirements for pass-through entities. Auditor Recommendation: We recommend that the County review its procedures for subrecipient monitoring to ensure compliance with Uniform Guidance. In the past, the County has had established procedures which included desk reviews and documented program monitoring of subrecipient programs, and it appears that not all of those procedures have remained in place due to staff turnover. The County should review, update, and implement procedures to ensure that those required elements of internal control are carried out by the responsible County department. Corrective Action: The Office of Community and Economic Development will implement a subrecipient monitoring policy specific to grants and operations including a schedule of monitoring and risk assessment. OCED program and finance staff will undergo training specific to subrecipient monitoring to ensure alignment in policies across programs. The OCED Finance and Operations Division Administrator will lead subrecipient monitoring activities and will coordinate as necessary with other OCED department division administrators to develop a monitoring schedule and communication plan for subrecipients. Washtenaw County Finance will assist in developing this subrecipient monitoring policy and will perform an overall review of all subrecipient monitoring to ensure compliance and consistency across departments and programs. Responsible Person: Chief Financial Officer Anticipated Completion Date: December 2025
Finding Number: 2024‐001 Program Name/Assistance Listing Title: Forest Service Schools and Roads Cluster, Education Stabilization Fund Assistance Listing Number: 10.665, 84.425 Contact Person: Andrea Despain, Business Manager Anticipated Completion Date: June 30, 2025 Planned Corrective Action: The ...
Finding Number: 2024‐001 Program Name/Assistance Listing Title: Forest Service Schools and Roads Cluster, Education Stabilization Fund Assistance Listing Number: 10.665, 84.425 Contact Person: Andrea Despain, Business Manager Anticipated Completion Date: June 30, 2025 Planned Corrective Action: The District will collaborate with all grant stakeholders to strengthen internal controls by clearly defining responsibilities, tracking submission deadlines, and ensuring strict adherence to policies. Oversight will be reinforced through regular grant management meetings and reviews conducted by the Business Manager. To enhance reporting accuracy and documentation practices, staff will receive targeted training on compliance requirements. Additionally, recordkeeping processes will be standardized, with periodic reviews to verify adherence and improve efficiency. These corrective actions will be implemented promptly and continuously supported through ongoing monitoring, ensuring more timely and accurate audits while maintaining compliance with federal regulations.
Finding 2024-003: MATERIAL WEAKNESS—Transit Services Programs Cluster Payroll Procedures U.S. Department of Transportation Pass-through Entity: Michigan Department of Transportation Assistance Listing Numbers: 20.516 and 20.521 Award Numbers: 215509NI, 215541NI, 220776NI and 221303NI Award Year ...
Finding 2024-003: MATERIAL WEAKNESS—Transit Services Programs Cluster Payroll Procedures U.S. Department of Transportation Pass-through Entity: Michigan Department of Transportation Assistance Listing Numbers: 20.516 and 20.521 Award Numbers: 215509NI, 215541NI, 220776NI and 221303NI Award Year End: September 30, 2024 Recommendation: The Organization should follow its established procedures to ensure that payroll records, including manual and electronic, are properly and timely filed and maintained in accordance with the Organization’s written record retention policy so that they can be readily located when needed. Action Taken: Staff responsible for these tasks will be educated on the importance of following the Organization’s policy. Responsible Person and Anticipated Completion Date: The Executive Director will oversee the implementation of this plan by September 30, 2025.
View Audit 358795 Questioned Costs: $1
Auditor’s Recommendation: Internal control should be documented to ensure compliance with the reporting compliance requirement. Documentation should include a signed certification by the preparer and a reviewer that the requests for payment, written summaries of reporting-specific meetings with gran...
Auditor’s Recommendation: Internal control should be documented to ensure compliance with the reporting compliance requirement. Documentation should include a signed certification by the preparer and a reviewer that the requests for payment, written summaries of reporting-specific meetings with grantors, and any other reporting activities are complete, accurate, and agree to supporting records of expenditures or other accounting or database information. Written policies and procedures should be designed and implemented for documentation of internal controls performed for reporting. Corrective Action: TEACH.org will write a policy to address internal controls for reporting. TEACH staff will obtain training on documentation of internal controls performed for reporting related to Federal awards. After training, TEACH staff will review all documentation of internal controls and make changes to our policies as needed to properly document our internal controls. Responsible for Corrective Action: TEACH.org Deputy Chief of Staff will obtain training on internal controls documentation for Federal grants. Once training is completed, DCoS will review all fiscal policies and add or edit our policies as needed to address proper documentation of internal controls performed for reporting. Anticipated Completion Date: TEACH.org DCoS will obtain training by September 30, 2025 and conclude their review of TEACH fiscal policies by December 31, 2025.
Auditor’s Recommendation: Time and effort documentation be documented per Uniform Guidance requirements and used to review and adjust budgeted compensation and benefit costs charged to the award to be accurate, allowable, and properly allocated. Written policies and procedures should be designed and...
Auditor’s Recommendation: Time and effort documentation be documented per Uniform Guidance requirements and used to review and adjust budgeted compensation and benefit costs charged to the award to be accurate, allowable, and properly allocated. Written policies and procedures should be designed and implemented for documentation of time and effort. Corrective Action: TEACH.org will write a policy regarding documenting required procedures to track employee time & effort charged to Federal grants. Each employee who charges time to a Federal grant will receive a copy of this policy annually. The policy will indicate that employees must provide signed time & effort tracking statements at least quarterly while they are charging time to Federal grants. Each statement will be signed by the employee, their supervisor, and the program director. These statements will be used to properly document time & effort charged to Federal grants and prepare invoices or claims for all Federal grants. Each invoice or claim will be compared to time & effort tracking and tied out to the amounts charged to the Federal grant. Responsible for Corrective Action: TEACH.org internal and external accounting staff will write the time & effort procedures with oversight from a TEACH Co-Executive Director. Once the procedures are approved, TEACH internal and external accounting staff will be responsible for identifying employees working on Federal grants and must supply them with a copy of the policy at least annually. Quarterly time & effort documentation forms will be prepared by internal and external accounting staff, and sent to employees, supervisors and program directors. TEACH internal and external accounting staff will be responsible for collecting and retaining all required time & effort documentation. TEACH program directors will be responsible for reviewing all completed time & effort documentation and reconciling time tracked to invoices or claims prepared for all Federal grants. Anticipated Completion Date: TEACH.org will write the time & effort tracking procedures, supply to all employees working on Federal grants, complete all time & effort tracking documents, and tie out to all invoices and claims retroactively to July 1, 2024. This work will be concluded by June 30, 2025, and starting July 1, 2025 the new procedures will be implemented for all Federal grants.
View Audit 358749 Questioned Costs: $1
Views of responsible officials and planned corrective actions: Management agrees with this finding and will put procedures in place for the review and approval of expenditures and maintenance of supporting documentation surrounding federal awards. Action Plan:  See the “Conduct Training Sessions fo...
Views of responsible officials and planned corrective actions: Management agrees with this finding and will put procedures in place for the review and approval of expenditures and maintenance of supporting documentation surrounding federal awards. Action Plan:  See the “Conduct Training Sessions for Expenditures Personnel” and “Audit of all FY25 YTD Expenditures” sections of management’s action plan for finding 2024-001  Review and update the Allowable Funds document o Locate the latest Allowable Funds Guide created by KIPP Delta. o Review and update the guide as necessary. o Store the updated guide in a central cloud location for responsible personnel to access easily. o Process completed as of April 17, 2025.  Develop a Federal Funds Workflow in Avid for POs and invoices: o A designated finance team member must review all federally funded purchases to improve the federal funds purchasing process. Steps include:  Create a separate workflow in Avid for POs and invoices to track federal purchases.  Ensure a purchase order is created before an invoice is submitted and paid.  Attach all required documentation to the PO, as with all other expenditures.  Verify that the expenditure complies with the Allowable Funds guide o Anticipated completion date of May 30, 2025.
View Audit 358741 Questioned Costs: $1
FINDING 2024-005 Finding Subject: Special Education Cluster (IDEA) - Internal Controls Contact Person Responsible for Corrective Action: Whitney Dixon, Treasurer Contact Phone Number: 574-533-8631 Views of Responsible Official: We concur with the finding. Description of Corrective Action Plan: Cash ...
FINDING 2024-005 Finding Subject: Special Education Cluster (IDEA) - Internal Controls Contact Person Responsible for Corrective Action: Whitney Dixon, Treasurer Contact Phone Number: 574-533-8631 Views of Responsible Official: We concur with the finding. Description of Corrective Action Plan: Cash Management Requests for reimbursement will not be submitted until the Treasurer has attached the supporting documentation from the financial software system (member schools will provide documentation). The documentation will be reviewed and approved by the Executive Director of ECSEC prior to submission to the Treasurer. The reimbursement request will require an approval signature from the Chief Financial Officer/Treasurer prior to submittal. Anticipated Completion Date: June 2025
FINDING 2024-004 Finding Subject: Child Nutrition Cluster - Suspension and Debarment Contact Person Responsible for Corrective Action: Heather Bontrager, Director of School Nutrition and Sheryl Graves, Purchasing Specialist Contact Phone Number: 574-533-8631 Views of Responsible Official: We concur ...
FINDING 2024-004 Finding Subject: Child Nutrition Cluster - Suspension and Debarment Contact Person Responsible for Corrective Action: Heather Bontrager, Director of School Nutrition and Sheryl Graves, Purchasing Specialist Contact Phone Number: 574-533-8631 Views of Responsible Official: We concur with the finding. Description of Corrective Action Plan: Suspension and Debarment Verification checks will be conducted annually at the start of the new program year, or upon execution of a new vendor contract expected to exceed $25,000. 1. Verification Steps: 􀁸 Vendor List Compilation: 􀁸 The Accounts Payable Specialist will generate a list of all vendors paid from Fund 0800 in the prior fiscal year. 􀁸 Identify vendors with aggregate disbursements of $25,000 or more. 􀁸 Include new vendors anticipated to exceed $25,000 in the upcoming year based on planned purchases or contracts. 2. SAM.gov Check: 􀁸 For each vendor identified, search their legal business name or DUNS/UEI number in the SAM.gov database. 􀁸 Verify that the vendor is listed as "Active" and not debarred or suspended. 3. Documentation: 􀁸 Print or save a PDF of the SAM.gov record for each verified vendor. 􀁸 The PDF notes the date of verification and name of the staff member who completed the check. 􀁸 Maintain documentation in a central procurement or compliance folder for audit purposes. 4. Annual Certification: 􀁸 The Purchasing Specialist and Director of Nutrition Services will jointly sign an Annual Vendor Verification Certification Form confirming that all applicable vendors have been checked and meet SAM.gov requirements. 􀁸 Submit the signed form to the Business Office and retain for audit documentation. Ongoing Monitoring: For any new vendors added mid-year with expected expenditures over $25,000 or contracts amended to exceed the $25,00 threshold, repeat the above verification process before any payment is made. Anticipated Completion Date: August 2025
The city recognizes the importance of internal controls and plans to enhance its procedires to ensure Project and Expenditure quarterly reports are prepared in accordance with governing requirements. An ARP consultant was engaged to ensure ARP reporting complinace. All subsequent reports to 2024 f...
The city recognizes the importance of internal controls and plans to enhance its procedires to ensure Project and Expenditure quarterly reports are prepared in accordance with governing requirements. An ARP consultant was engaged to ensure ARP reporting complinace. All subsequent reports to 2024 fiscal year are in compliance with ARP compliance.
The Council has hired a grant financial manager to handle all grant and financial related reporting. The Council will develop, improve, and implement policies and procedures for grant reimbursement requests. This will reduce or eliminate delays when potential errors are avoided or detected and corre...
The Council has hired a grant financial manager to handle all grant and financial related reporting. The Council will develop, improve, and implement policies and procedures for grant reimbursement requests. This will reduce or eliminate delays when potential errors are avoided or detected and corrected timelier.
District Treasurer (Denise Kennedy) will adopt sound accounting policies and establish and maintain internal control that will initiate, authorize, record, process, and report transactions consistent with management’s assertions embodied in the financial statements and that will safeguard District a...
District Treasurer (Denise Kennedy) will adopt sound accounting policies and establish and maintain internal control that will initiate, authorize, record, process, and report transactions consistent with management’s assertions embodied in the financial statements and that will safeguard District assets during the school year 2025.
Corrective Action Plan 2024-001: Management has since performed the suspension and debarment check for each vendor for which it used the on-call services contracts available. Additionally, management will include an addendum in future contracts to ensure vendor compliance with the federal contract r...
Corrective Action Plan 2024-001: Management has since performed the suspension and debarment check for each vendor for which it used the on-call services contracts available. Additionally, management will include an addendum in future contracts to ensure vendor compliance with the federal contract regulations. Anticipated Completion Date: May 2025 Contact Person: Noelle Lewis, Chief Financial Officer
2024-002 – Internal Controls Over Reporting Corrective Action Plan: The City will develop and implement procedures that require all reports be reviewed by a responsible City official, other than the preparer, prior to being submitted to a federal reporting agency. Responsible Party(ies): o Chief ...
2024-002 – Internal Controls Over Reporting Corrective Action Plan: The City will develop and implement procedures that require all reports be reviewed by a responsible City official, other than the preparer, prior to being submitted to a federal reporting agency. Responsible Party(ies): o Chief Financial Officer o City Manager Anticipated Completion Date: September 30, 2025
reports be reviewed by a responsible City official prior to being submitted to a federal reporting agency. Responsible Party(ies): o Chief Financial Officer o City Manager Anticipated Completion Date: September 30, 2025
reports be reviewed by a responsible City official prior to being submitted to a federal reporting agency. Responsible Party(ies): o Chief Financial Officer o City Manager Anticipated Completion Date: September 30, 2025
Finding 564406 (2024-003)
Significant Deficiency 2024
Sanford
SD
As it relates to the Federal Funding Accountability and Transparency Act (FFATA) reporting, Sanford has revised procedures to provide further clarity on FFATA reporting. There is an additional requirement to include the FFATA report as an attachment to the subrecipient monitoring form and this will ...
As it relates to the Federal Funding Accountability and Transparency Act (FFATA) reporting, Sanford has revised procedures to provide further clarity on FFATA reporting. There is an additional requirement to include the FFATA report as an attachment to the subrecipient monitoring form and this will be monitored through the monthly internal review conducted on subrecipient risk assessment and monitoring status. Responsible Party: Kristi Crawford, Director of Office of Grants; Anticipated completion date: May 1, 2025
Finding 564337 (2024-001)
Material Weakness 2024
Sanford
SD
As it relates to the Federal Funding Accountability and Transparency Act (FFATA) reporting, Sanford has revised procedures to provide further clarity on FFATA reporting. There is an additional requirement to include the FFATA report as an attachment to the subrecipient monitoring form and this will ...
As it relates to the Federal Funding Accountability and Transparency Act (FFATA) reporting, Sanford has revised procedures to provide further clarity on FFATA reporting. There is an additional requirement to include the FFATA report as an attachment to the subrecipient monitoring form and this will be monitored through the monthly internal review conducted on subrecipient risk assessment and monitoring status. Responsible Party: Kristi Crawford, Director of Office of Grants. Anticipated completion date: May 1, 2025
FA 2024-001 Improve Control over Employee Compensation Compliance Requirement: Allowable Costs/Cost Principle Internal Control Impact: Significant Deficiency Compliance Impact: Nonmaterial Noncompliance Federal Awarding Agency: U.S. Department of Agriculture Pass-Through Entity: Georgia Department...
FA 2024-001 Improve Control over Employee Compensation Compliance Requirement: Allowable Costs/Cost Principle Internal Control Impact: Significant Deficiency Compliance Impact: Nonmaterial Noncompliance Federal Awarding Agency: U.S. Department of Agriculture Pass-Through Entity: Georgia Department of Education Assistance Listing Number and Title: 10.553 - School Breakfast Program 10.555 - National School Lunch Program COVID-19-10.555 - National School Lunch Program Federal Award Number: 245GA324N1199 (Year: 2024), 225GA324N1099 (Year: 2024) Questioned Costs: $102,234 Prior Year Finding: 2023-004 Description: The policies and procedures of the School District were insufficient to provide adequate internal controls over the employee compensation process as it relates to the Child Nutrition Cluster. Corrective Action Plans: The District is developing correction action to strengthen controls, policies, and procedures and ensure adherence through improved monitoring. Estimated Completion Date: June 30, 2026 Contact Person: Connie Walker, School Nutrition Executive Director Telephone: 678-676-1780 Email: Connie_R_Walker@dekalbschoolsga.org
View Audit 358495 Questioned Costs: $1
June 4, 2025 U.S. Department of Health and Human Services Dimock Community Foundation, Inc. and Affiliates respectfully submits the following corrective action plan for the year ended June 30, 2024. Name and address of independent public accounting firm: AAFCPAs, Inc., 50 Washington Street, Westboro...
June 4, 2025 U.S. Department of Health and Human Services Dimock Community Foundation, Inc. and Affiliates respectfully submits the following corrective action plan for the year ended June 30, 2024. Name and address of independent public accounting firm: AAFCPAs, Inc., 50 Washington Street, Westborough, MA 01581 Audit period: July 1, 2023 - June 30, 2024 The findings from the June 30, 2024 schedule of findings and questioned costs are discussed below. The findings are numbered consistently with the numbers assigned in the schedule. FEDERAL AWARD FINDING Material Instance of Non-Compliance: Finding 2024-001: Health Center Program Uniform Data System (UDS) Report 2024-001 Assistance Listing Number 93.224/93.527 Health Center Program Cluster Recommendation: We recommend that the Agency enhance controls and monitoring procedures over Federal grant requirements to ensure future reports are submitted on time Action Taken: In 2025, the 2024 UDS submission was managed by the Chief Financial Officer and submitted by February 15th, 2025. All follow-up requests from the reviewer were resolved prior to March 31, 2025. We don't foresee any further issues with future submissions. If the Cognizant or Oversight Agency for Audit has questions regarding this plan, please call Luis Rivera, CFO at 617-442-8800. Sincerely, Luis Rivera, CFO
Federal Agency Name: Legal Services Corporation Program Name: Legal Services Corporation – Basic Field Grant FFAL#: 09-542026 Finding Summary: The Organization did not perform an annual IT risk assessment during 2024 and did not test an emergency disaster prevention and recovery plan as required in...
Federal Agency Name: Legal Services Corporation Program Name: Legal Services Corporation – Basic Field Grant FFAL#: 09-542026 Finding Summary: The Organization did not perform an annual IT risk assessment during 2024 and did not test an emergency disaster prevention and recovery plan as required in Section 2.5.3 of the LSC Financial Guide. Responsible Individuals: Lea Wroblewski, Executive Director Corrective Action Plan: The Executive Director shared the risk assessment guidelines with the 3rd party IT consultants, CMIT Solutions of Sioux Falls, who is familiar with technology utilized by ERLS. CMIT Solutions will conduct an annual risk assessment, help create an emergency disaster prevention and recovery plan, and help ensure that risk assessment guidelines are followed. At the regularly scheduled annual review with CMIT, ERLS will review the necessity of additional technology improvements following the completion of the 2022 Technology Assessment. Completion Date: July 2025
Corrective Actions: A. Perform Timely Access Revocation and Strengthen User Access Reviews ‐ The District implemented a new automated solution to terminate SSO and PS SIS access. This was implemented October 2024. ‐ The District’s plan is, upon implementation of the automated solution to deprovision...
Corrective Actions: A. Perform Timely Access Revocation and Strengthen User Access Reviews ‐ The District implemented a new automated solution to terminate SSO and PS SIS access. This was implemented October 2024. ‐ The District’s plan is, upon implementation of the automated solution to deprovision SSO and PS SIS access, our team is planning on performing annual user access for SSO and PS SIS reviews beginning Q1 2025. The District is also implementing Pathlock that will introduce user access reviews. ‐ For SAP access revocation the SAP Team is looking into options to deprovision users and audit user access through internal or third-party tools. The District anticipates selection of the tools by June 30, 2025. Upon implementation of the selected SAP tools the District will perform periodic access reviews for regular users. Personnel responsible for Implementation: Carmen V. Lidz, Vice Chancellor & Chief Information Office Expected Date of Implementation: June 30, 2025 B. Maintain and Review Logs of Users' Activity for both SAP and PS SIS ‐ Upon implementation of Pathlock, the District will perform periodic access reviews for regular users. ‐ Upon implementation of the selected SAP tools, the District will perform periodic access reviews for regular users. Personnel responsible for Implementation: Carmen V. Lidz, Vice Chancellor & Chief Information Office Expected Date of Implementation: June 30, 2025 C. Implement Data-at-Rest encryption for SAP and PS SIS Servers ‐ The District is in the process of upgrading PS SIS PeopleTools after which we will determine the most expedient path to implementing database encryption. The target completion for the PS SIS database encryption is Q3 of 2025 ‐ The District is currently evaluating the feasibility of adding the encryption of the SAP database to the HANA upgrade project. If the District determines that it’s not feasible, we will engage a third party to encrypt the SAP database. The target completion for the SAP database encryption is Q3 of 2025. Personnel responsible for Implementation: Carmen V. Lidz, Vice Chancellor & Chief Information Office Expected Date of Implementation: Q3 of 2025
« 1 69 70 72 73 439 »