Corrective Action Plans

SPECIAL TESTS AND PROVISIONS – ADP SYSTEM FOR SNAP Department of Health and Human Resources (DHHR) Assistance Listing Number 10.551, 10.561, COVID-19 10.561 Management within the DHHR, Bureau for Family Assistance (BFA), appreciates and shares the auditors’ concern with SNAP program integrity as it relates to the Recipient Automated Payment and Information Data System (RAPIDS) ADP system. The BFA notes that 7 CFR § 272.10 begins with, “(1) Purpose. All state agencies are required to sufficiently automate their SNAP operations and computerize their systems for obtaining, maintaining, utilizing, and transmitting information concerning SNAP. Sufficient automation levels are those which result in effective programs or in cost effective reductions in errors and improvements in management efficiency, such as decreases in program administrative costs...” Within the RAPIDS ecosystem for SNAP administration, this automation includes data matching measures undertaken, in compliance with related federal rules as specified in 7 CFR § 272.8, 7 CFR § 272.16, etc., to automate the validation of client-provided, worker-input information while mitigating the additional administrative burden of secondary review for all worker interactions with a client’s case. Policy regarding state and federal data matching is laid out in Chapter 6 of the State’s Income Maintenance Manual (IMM) at https://dhhr.wv.gov/bfa/policyplans/Documents/ Binder4.pdf. The primary data exchange system detailed in IMM Chapter 6 that is applicable to SNAP is the Income and Eligibility Verification System (IEVS) required by 7 CFR § 272.8. Systems mandated federally for inclusion in the IEVS include those operated by WorkForce WV, the Internal Revenue Service (IRS), and the U.S. Social Security Administration (SSA). A variety of other sources may also be queried for the purpose of validating client-provided information entered into RAPIDS by a worker, including Veterans Affairs (VA), Beneficiary and Earnings Data Exchange (BENDEX), Beneficiary Earnings and Exchange Record System (BEERS), National Directory of New Hires, and Prisoner Matching with the Department of Corrections as well as the Federal Data Services Hub (FDSH). IMM Chapter 6, page 2 describes the purpose of data matching through the IEVS thusly: Information obtained through IEVS is used for the following purposes: • To verify the eligibility of the assistance group (AG). • To verify the proper amount of benefits. • To determine if the AG received benefits to which it was not entitled. • To obtain information for use in criminal or civil prosecution based on receipt of benefits to which the AG was not entitled. IMM Chapter 6, pages 2-3 further detail the points at which a match with the IEVS must take place: A data exchange in the eligibility system occurs: • When a new case is created; • When a new person is added to a benefit; • When a person’s demographic information is changed; and, • On a periodic basis for all individuals in the eligibility system, depending on the type of benefit being received. Requirements for independent verification of information when automated data matches fail or report a discrepancy with client-provided, worker-input information are spelled out in IMM 6.4.4. The BFA believes that these automations, while perhaps not foolproof, are in keeping with both the word and intent of 7 CFR § 272.10, 7 CFR § 272.8, 7 CFR § 272.16, etc., which aim to automate processes in order to reduce administrative burden and associated costs, such as those that would be associated with a secondary review of all worker interactions with a client’s case. Furthermore, page 4-10.551-9 of the Compliance Supplement 2023, which lays out the suggested audit procedures for this topic, recommends the use of the USDA-FNS SNAP System Integrity Review Tool (SIRT) to ensure that the State’s ADP system is in alignment with USDA-FNS requirements and ensure that automated processes within RAPIDS continue to comport with federal requirements for ADP systems. To our knowledge, the auditors neither utilized that tool to guide their work nor requested verification from the State that the SIRT had been completed and previously employed. To support this response, management advocates a review of the SIRT submitted to FNS on October 26, 2023 in preparation for the go-live stage of the West Virginia People’s Access to Help (WV PATH) Family Assistance pilot program; as there is no significant difference in system functionality between the Family Assistance module of WV PATH and the existing eRAPIDS system, the responses/comments/replies from both FNS and the State that are included in this version of the SIRT generally apply both to eRAPIDS and to PATH. Throughout 2023, the BFA Division of Performance and Quality Improvement continued its ongoing SNAP case reviews, as well as its efforts to report compliance with monthly requirements for expanded supervisor case reviews conducted and tracked through the Rushmore case review system, as mandated in a December 7, 2022 memorandum to supervisors and made available to the auditors last year. Furthermore, the BFA developed additional worker training, including the reinstatement of face-to-face Statewide Payment Accuracy Conferences (held throughout the summer of 2023), with the aim to ensure that client information is accurately captured in RAPIDS so the APD can perform its automated functions with integrity.

DHHR INFORMATION SYSTEM AND RELATED BUSINESS PROCESS CONTROLS Department of Health and Human Resources (DHHR) Assistance Listing Number 10.551, 10.561, COVID-19 10.561, 93.558, COVID-19 93.558, 93.568, COVID-19 93.568, 93.575, 93.596, COVID-19 93.575, 93.658, 93.659, 93.767, 93.775, 93.777, COVID-19 93.777, 93.778 The DHHR is currently phasing in a new information technology system for determining eligibility, making payments, maintaining documentation, etc. The name of the new system is WVPATH (West Virginia People's Access to Help). The WVPATH system will replace the Family and Children's Tracking System (FACTS) and the Recipient Automated Payment Information Data System (RAPIDS), which are currently referenced in the finding. The WVPATH system will have additional controls and levels of review as compared with the FACTS and RAPIDS systems. Due to the timing of the phase-in process, the DHHR anticipates the finding will be resolved for the year ended June 30, 2024.

Finding 2023-001: Special Test and Provisions: Enrollment Reporting Context/Condition: Of the 40 students selected for enrollment reporting testing, 6 students within the sample were reported to NSLDS outside the maximum 60-day window. Recommendation: The auditor recommended that the University review and update internal controls to ensure student enrollment status in the National Student Loan Data System (NSLDS) is updated in a timely manner to ensure compliance with Federal Requirements. Persons Responsible for Corrective Action: Liz Force, University Registrar & Director of Records; Pam Barrett, Associate Vice President & Director of Financial Aid Planned Corrective Action: Brenau University contracts with the National Student Clearinghouse (NSC) to perform routine enrollment reporting required by Title IV Federal Student Aid regulations. The University's student information system contains a program designed to compile enrollment data for transmission to NSC in accordance with specifications provided by the National Student Loan Data System (NSLDS). We conducted a detailed review of the November 2022 NSLDS Reporting Guide and engaged the University's student information system vendor, who reviewed the current software logic and installed the modifications necessary to become compliant in this area. Anticipated Completion Date: November 7, 2023

FINDING 2023-007 Subject: COVID-19 – Education Stabilization Fund – Special Tests and Provisions – Wage Rate Requirements Summary of Finding: The School Corporation had not properly designed or implemented an effective system of internal controls to prevent, or detect and correct, noncompliance. Recommendation We recommended that management of the School Corporation design and implement a proper system of internal control, including policies and procedures that would provide segregation of duties to ensure appropriate reviews, approvals and oversight are taking place. Contact Person Responsible for Corrective Action: Casey Howard Contact Phone Number: 574-842-3364 x806 Views of the Responsible Officials: We concur with the finding. Description of Corrective Action Plan: The corporation will create and implement an effective system to prevent, or detect and correct, noncompliance. We will create an oversight or review process to obtain the required certified payrolls. Anticipated Completion Date: Completed as of January 2024

FINDING 2023-006 Subject: COVID-19 – Education Stabilization Fund – Reporting Summary of Finding: The School Corporation did not submit annual reports in a timely manner during the first year of the audit period. Reimbursement requests included invoices which had been reimbursed previously and some request did not agree with supporting documentation. Recommendation We recommended that management of the School Corporation establish a proper system of internal controls and develop policies and procedures to ensure reports are submitted timely and supporting documentation is used and retained for reimbursement requests. Contact Person Responsible for Corrective Action: Casey Howard Contact Phone Number: 574-842-3364 x806 Views of the Responsible Officials: We concur with the finding. Description of Corrective Action Plan: Reporting – The Treasurer and Deputy Treasurer will review and approve all grant reporting with Komputrol reports and grant approval. All deadlines will be submitted prior to due dates. The Superintendent, Treasurer, Deputy-Treasurer and/or Grant Writer will review all grant reimbursement requests prior to submission for accuracy. Anticipated Completion Date: Completed March 2023 – February 2024 INDIANA STATE

FINDING 2023-005 Subject: COVID-19 – Education Stabilization Fund – Equipment Summary of Finding: The School Corporation utilized Education Stabilization Funds to pay for equipment. The equipment was not included in the capital asset records. The capital asset listing provided did not identify which assets were purchased with federal dollars. Recommendation: We recommended that management of the School Corporation establish a proper system of internal controls and develop policies and procedures to ensure asset records include all the necessary information and new assets are added. Contact Person Responsible for Corrective Action: Casey Howard Contact Phone Number: 574-842-3364 x806 Views of the Responsible Officials: We concur with the finding. Description of Corrective Action Plan: Our corporation has a company that updates our fixed assets every two years. Between the two years our Deputy-Treasurer with the assistance of the Treasurer will work in an excel document to track all additions/deletions, identification, location, etc. All assets regarding equipment will be identified if purchased with federal grant funds. Anticipated Completion Date: February 2024

FINDING 2023-004 Subject: COVID-19 – Education Stabilization Fund – Earmarking Summary of Finding: Only 9% of the required 20% minimum earmarking requirement was spent. The remaining set aside amount that was requested for reimbursement was spent on activities that were not a part of the earmarking requirement. Recommendation We recommended that management of the School Corporation establish a proper system of internal controls and develop policies and procedures to ensure required earmarking requirements are met. Contact Person Responsible for Corrective Action: Casey Howard Contact Phone Number: 574-842-3364 x806 Views of the Responsible Officials: We concur with the finding. Description of Corrective Action Plan: The Superintendent, Treasurer, Deputy-Treasurer and/or Grant Writer will review all grant reimbursements prior to submission for all earmarking. Earmarking will be reviewed for implementation of evidence-based learning loss and accelerated learning. A grant amendment has been requested in January 2024 to include additional allowable expenses. Anticipated Completion Date: February 2024

FINDING 2023-003 Subject: COVID-19 – Education Stabilization Fund –Allowable Costs/Cost Principles Summary of Finding: Condition and Context The American Rescue Plan – Elementary and Secondary School Emergency Relief (ARP ESSER) Fund provided funding to States and school districts to help safely reopen and sustain the safe operation of schools and to address the impact of the coronavirus pandemic on the nation’s students. States were required to subgrant a portion of their ARP ESSER allocation to local educational agencies (LEA). Prior to LEAs receiving their respective subgrants, LEAs were required to complete an application for ARP ESSER funding, which was submitted to the Indiana Department of Education (IDOE), the pass-through entity for approval. The application included a district level budget identifying how the LEA intended to spend program funds. Per the School Corporation’s approved application, program funding was budgeted for salaries and respective benefits for Director of Student Support, Title I Aide, Career Coach, Summer School Positions, and a Social Emotional Academic Learning Liaison, as well as for equipment as classified under the facilities acquisition and construction expenditure account. The School Corporation noted on their application that the funds budgeted for equipment were strictly for the costs of the equipment and did not include any costs for labor. A sample of 31 claims charged to the ARP ESSER program for which reimbursement was received during the audit period was selected for testing to verify the expenditures were in conformance with the applicable cost principles. Of the 31 claims tested, four claims totaling $693,454, each of which were paid to the same contractor, included costs for labor and project management related to air handling units in multiple buildings. Due to the magnitude of the exceptions identified, all remaining payments made to this contractor for which the School Corporation received reimbursement during the audit period were abstracted and reviewed. Upon review of these claims, additional labor and project management costs of $306,745 were identified. The aggregate total of $1,000,199 expended for labor and project management costs are considered questioned costs as they were not approved by IDOE prior to being expended as required by the terms and conditions of the federal award. In addition, the School Corporation submitted twice to IDOE, four different invoices for expenditures related to the ARP ESSER program. As a result, the School Corporation received duplicate reimbursements for the expenditures on each of the four invoices, resulting in the School Corporation receiving $50,000 more than their approved allocation of ARP ESSER funding. The management of the School was aware of this error; however, did not contact IDOE to resolve the issue, nor did they return the funds to the State. Lastly, the School Corporation submitted to IDOE a request for reimbursement for expenditures totaling $12,113 for the Governor Emergency Education Relief Fund (GEER) program. The School Corporation received the reimbursement of $12,113 twice from IDOE. This resulted in the School Corporation receiving an extra $12,113 of GEER funding that they should not have received. The management of the INDIANA STATE BOARD OF ACCOUNTS 38 Culver Community Schools Corporation Karen Shuman, Superintendent www.culver.k12.in.us 700 School Street Aubbeenaubbee Township – Fulton County Culver, IN 46511-0231 North Bend Township – Starke County Phone (574) 842-3364 Tippecanoe Township – Pulaski County Fax (574) 842-4615 Union Township – Marshall County _________________________________________________________________ School was aware of this duplicate payment received from IDOE; however, did not contact IDOE to resolve the issue, nor did they return the funds to the State. Recommendation We recommended that management of the School Corporation establish a proper system of internal controls and develop policies and procedures to ensure costs are included in the approved budget, are only requested once, and are not retained if received in error. Contact Person Responsible for Corrective Action: Casey Howard Contact Phone Number: 574-842-3364 x806 Views of the Responsible Officials: We concur with the finding. Description of Corrective Action Plan: The Superintendent, Treasurer, Deputy-Treasurer and/or Grant writer will review all grant applications prior to submission. Upon grant approval the same parties will again review approval and review dollar amounts, allowable expenses, etc. The Superintendent, Treasurer, Deputy-Treasurer and/or Grant Writer will review all grant reimbursements and monitor/finance reports prior to submission. A grant amendment has been requested in January 2024 to include additional allowable expenses. Anticipated Completion Date: February 2024 INDIANA STATE

FINDING 2023-002 Subject: Child Nutrition Cluster – Suspension and Debarment Summary of Finding: The School Corporation did not verify vendor suspension and debarment status prior to payment. Recommendation We recommended that management of the School Corporation establish a system of internal and develop policies and procedures to ensure contractors and subrecipients, as appropriate are not suspended, debarred, or otherwise excluded prior to entering into any contracts or subawards. Contact Person Responsible for Corrective Action: Casey Howard Contact Phone Number: 574-842-3364 x806 Views of the Responsible Officials: We concur with the finding. Description of Corrective Action Plan: Food Service Director and/or Treasurer will utilize the procurement policy and will ensure all vendors paid with federal dollars have not been suspended or debarred. Anticipated Completion Date: Completed as of January 2024

FINDING 2023-003 Finding Subject: Subject: Child Nutrition Cluster - Procurement Summary of Finding: An adequate number of quotes were not obtained for small purchases. Contact Person Responsible for Corrective Action: Kellie Romer (Corporation Treasurer/Finance Director), Shelley Gardner (Corporation School Food Authority) Contact Phone Number and Email Address: 765-653-9771 Ext. 1010, kromer@greencastle.k12.in.us, 765-653-9771 Ext. 1011, sgardner@greencastle.k12.in.us Views of Responsible Officials: We concur with the finding Description of Corrective Action Plan: The procurement (small and micro purchases) will be verified by a two-person internal control; the food services director and food services assistant, finance director or deputy treasurer. We will also establish a process to address small and micro purchases. This would include acquiring bids for any combined expenditure(s) over a $150,000, acquiring quotes for any small purchase(s) between $10,000 and $150,000, and documenting equitable distribution among vendors concerning any micro purchases under $10,000. All vendor contracts will be approved yearly. All quotes and purchases will be verified by two-person internal control. Anticipated Completion Date: Immediately 2/8/2024

FINDING 2023-002 Finding Subject: Subject: COVID-19 - Education Stabilization Fund - Reporting Summary of Finding: Reports submitted were not substantiated by the ledgers. Contact Person Responsible for Corrective Action: Kellie Romer (Corporation Treasurer/Finance Director) Contact Phone Number and Email Address: 765-653-9771 Ext. 1010, kromer@greencastle.k12.in.us Views of Responsible Officials: We concur with the finding Description of Corrective Action Plan: The school corporation will establish a proper system for internal controls and develop procedures to ensure reports are supported by the financial records. Anticipated Completion Date: Immediately 2/8/2024

Finding 2023-006: Matching Federal Agency Name: Department of Health and Human Services FFAL #93.087 Program Name: Enhance Safety of Children Affected by Substance Abuse Finding Summary: The Center’s controls did not detect or correct the errors identified, which results in a reasonable possibility that the Center could submit disallowed costs under the federal awards and would not be able to detect and correct noncompliance in a timely manner. The secondary review of match claim workbook did not identify the clerical errors. During testing of expenditures, the following items were identified: a) The number of hours an employee worked per the approved timesheet vs. the hours claimed in the match claim workbook resulted in a clerical error. (1 instance) b) Per review of the supporting timesheet and paystub, an employee had mobile crisis pay which was not accurately reduced in the calculation for match in the match claim workbook (2 instances). Responsible Individuals: Staff Supervisors (Michelle Theesfeld, Kari Van Dam) and Project Accounts Manager (Marsha Bomgaars) Corrective Action Plan: Staff supervisors are to compare ClickTime entries with payroll system entries to ensure they match. The Project Accounts Manager will compare all ClickTime reports and payroll reports to ensure they match and are accurate. CEO will review all grant staff that also provide mobile crisis to ensure that mobile crisis pay is removed before allocating salary and fringe benefits to grant programs. Anticipated Completion Date: Beginning in January 2023, the Center began reconciling ClickTime reports with payroll reports using an excel spreadsheet to identify discrepancies between the ClickTime timecards and the payroll register to help ensure all hours are accurately reported.

Finding 2023-005: Activities Allowed and Allowable Costs Federal Agency Name: Department of Health and Human Services FFAL #93.958 Program Name: Block Grants for Community Mental Health Services Finding Summary: The Center’s controls did not detect or correct the errors identified, which results in a reasonable possibility that the Center could submit disallowed costs under the federal awards and would not be able to detect and correct noncompliance in a timely manner. Employees did not enter all nonfederal hours within the ClickTime system and the secondary review of the employee ClickTime timecards did not identify the missing hours. In addition, the secondary review of federal grant expenditure tracking spreadsheet did not identify the missing pay periods. During testing of expenditures, the following items were identified: a) ClickTime timecard, which tracks federal and nonfederal hours for employees, did not properly reflect the employees total federal and nonfederal hours being paid within the payroll register (2 instances). b) The tracking spreadsheet did not reflect the entire months payroll and instead only included 2 weeks of payroll and benefits which resulted in a calculation error for expenses allocated to the grant (1 instance). Responsible Individuals: Staff Supervisors (Missy Martini, Billie Jo Hovick, Taylor Prather, Kari Anderson) and Project Accounts Manager (Marsha Bomgaars) Corrective Action Plan: Staff supervisors are to compare ClickTime entries with payroll system entries to ensure they match. The Project Accounts Manager will compare all ClickTime reports and payroll reports to ensure they match and are accurate. Anticipated Completion Date: Beginning in January 2023, the Center began reconciling ClickTime reports with payroll reports using an excel spreadsheet to identify discrepancies between the ClickTime timecards and the payroll register to help ensure all hours are accurately reported.

Finding 2023-004: Activities Allowed and Allowable Costs Federal Agency Name: Department of Health and Human Services FFAL #93.829 Program Name: Section 223 Demonstration Programs to Improve Community Mental Health Services Finding Summary: The Center’s controls did not detect or correct the errors identified, which results in a reasonable possibility that the Center could submit disallowed costs under the federal awards and would not be able to detect and correct noncompliance in a timely manner. Employees did not enter all nonfederal hours within the ClickTime system and the secondary review of the employee ClickTime timecards did not identify the missing hours, the incorrectly tracked hours, and double tracked time. Also, the secondary review of federal grant expenditure tracking spreadsheet did not identify the calculation errors. In addition, the grant was overcharged for nonpayroll as it relates to a gym membership claimed for a customer of the grant. During testing of expenditures, the following items were identified: a) ClickTime timecard, which tracks federal and nonfederal hours for employees, did not properly reflect the employees total federal and nonfederal hours being paid within the payroll register (2 instances). b) Calculation errors for expenses allocated to the grant (2 instances). c) Employee’s overtime hours were not properly tracked in ClickTime (2 instances). d) Employee tracked paid time off under PTO and CCBHC lines in ClickTime (1 instance) causing it to be double tracked. e) Grant was overcharged as it relates to a client’s gym membership (1 instance). Responsible Individuals: Project Directors (Rebecca McCrackin, Missy Martini, Billie Jo Hovick), Project Accounts Manager (Marsha Bomgaars) and CEO (Dan Ries) Corrective Action Plan: Staff supervisors are to compare ClickTime entries with payroll system entries to ensure they match. The Project Accounts Manager will compare all ClickTime reports and payroll reports to ensure they match and are accurate. The CEO will review all client assistance payments for accuracy when doing monthly expense review/approval. Anticipated Completion Date: Beginning in January 2023, the Center began reconciling ClickTime reports with payroll reports using an excel spreadsheet to identify discrepancies between the ClickTime timecards and the payroll register to help ensure all hours are accurately reported.

Finding 2023-003: Activities Allowed and Allowable Costs Federal Agency Name: Department of Health and Human Services FFAL#93.087 Program Name: Enhance Safety of Children Affected by Substance Abuse Finding Summary: The Center’s controls did not detect or correct the errors identified, which results in a reasonable possibility that the Center could submit disallowed costs under the federal awards and would not be able to detect and correct noncompliance in a timely manner. Employees did not enter all nonfederal hours within the ClickTime system and the secondary review of the employee ClickTime timecards did not identify the missing hours. In addition, the secondary review of federal grant expenditure tracking spreadsheet did not identify the calculation errors. During testing of expenditures, the following items were identified: a) ClickTime timecard, which tracks federal and nonfederal hours for employees, did not properly reflect the employees total federal and nonfederal hours being paid within the payroll register (3 instances). b) Calculation errors for expenses allocated to the grant (1 instance). Responsible Individuals: Staff Supervisors (Christina Eggink-Postma, Sarah Heinrichs, Stephanie Pohar) and Project Accounts Manager (Marsha Bomgaars) Corrective Action Plan: Staff supervisors are to compare ClickTime entries with payroll system entries to ensure they match. The Project Accounts Manager will compare all ClickTime reports and payroll reports to ensure they match and are accurate. Anticipated Completion Date: Beginning in January 2023, the Center began reconciling ClickTime reports with payroll reports using an excel spreadsheet to identify discrepancies between the ClickTime timecards and the payroll register to help ensure all hours are accurately reported.

Condition: The School District’s controls did not prevent or detect and correct, in a timely manner, an employee’s time being charged to the Special Education Cluster that did not have adequate documentation. Additionally, the School District’s controls did not prevent or detect and correct, in a timely manner, updates to an employee status upon termination for employees charged to the Special Education Cluster and the Education Stabilization Fund. Planned Corrective Action: The School District concurs with the audit finding. The District has worked to strengthen internal controls to eliminate errors. The District will review its internal controls and provide additional training to staff. The School District is in the process of filling a Project Manager role on the Payroll Team who will be responsible for reviewing employee terminations and identifying potential overpayments. Until the role is filled, the Senior Director of Payroll and CFO will review employee exits quarterly to identify any potential overpayments and move funds to the general fund. New procedures for employee exit were rolled out in July in an effort to improve timely exiting of employees. Contact person responsible for corrective action: Jeremy Vidito, Chief Financial Officer Anticipated Completion Date: June 30, 2024

2023-001 Procurement Corrective action: Competitive quotes should be obtained and retained as specified in the procurement policy. Non-competitive procurement should be documented and approved prior to incurring expenses. Vendor debarment checks should be performed and documented prior to entering into covered transactions. Management Response: The audit uncovered a non-compliance with required competitive quotes for a procurement of meeting services which did not comply with CASIS policy. The predecessor management team had previously advised the responsible purchaser that these services did not require competitive quotes. This matter is also complicated by the fact that the procurements are not just for meeting space, logistics and meals, but also includes lodging, which is not subject to the three quote rule. Management acknowledges that this was a process escapement and provides for the following corrective action. Typically lodging expenses are included in the procurement because it results in discounts that are unavailable if not included. CASIS implemented a policy of requiring competitive quotes for purchases over $1,000 in the most recent revision of the procurement policy. This change was made to assure compliance with Federal Regulations. While the amount noted is within the limits established by Federal Micro-purchase regulations, it did not comply with internal policies as noted. Meeting space is a commonly used service that is highly competitive in pricing and most facilities charge competitive rates, but most of the time those quotes are not useable given the time of year, and more importantly the occupancy rate of the facility. Starting in 2024, we are requesting quotes from three facilities in the local area that will be valid for a period of one year. These rates will be updated manually and a single additional quote will be obtained to assure the “reasonableness” of the price. This process will represent an annual price survey that will satisfy the three quote rule of our procurement policy. For rental of facilities outside of the local area, we will obtain a minimum of three quotes as required by our procurement policy. Management also acknowledges the process escapement for SAM checks on new vendors. Our normal process is that annually, Finance performs a SAM check for all approved vendors. The agreement for Trust Factory came in late during the year resulting in this deficiency. When a new vendor is setup in our system, it will automatically trigger a SAM check. Responsible Party: Jonathan Bobbitt, CPA, Finance Manager Date Expected to be Corrected: September 30, 2024

There is no disagreement with the audit finding. Corrections for this finding started in January 2023. Initial months selected were prior to that date. Additional months were provided, tested and complied. NCU will continue to do our monthly reconciliations in the same manner.

FINDING 2023-002 Finding Subject: COVID-19 – Education Stabilization Fund - Reporting Summary of Finding: The School Corporation had not properly designed or implemented a system of internal controls, which would include appropriate segregation of duties, that would likely be effective in preventing, or detecting and correcting, noncompliance. The School Corporation was required to submit annual data reports to the Indiana Department of Education (IDOE) via JotForm, a form/report builder. Data to be submitted included, but was not limited to, current period expenditures, prior period expenditures, and expenditures per activity. During the audit period the School Corporation submitted two ESSER I reports, two ESSER II reports and two ESSER III reports, for a total of six reports. The annual data reports were complied, prepared and submitted by the Assistant Superintendent without an oversight or review process in place to prevent, or detect and correct, errors. Furthermore, the reported data on two of the reports could not be traced back to records that accumulate or summarize the data; therefore, the accuracy and completeness of the reports could not be verified. Contact Person Responsible for Corrective Action: Jim Diagostino, Superintendent, and Lori Bennett, Treasurer Contact Phone Number: 317-539-9200 Views of Responsible Officials: We agree with the finding. Description of Corrective Action Plan: The Superintendent, or designee, will prepare the annual data reports to be reported to the IDOE by using records that accumulate or summarize the data. Prior to the submission of the reports, the Treasurer will review the records and annual data report. The Treasurer will initial and date a hard copy of the report to ensure accuracy and completeness. Anticipated Completion Date: March 31, 2024

Recommendation: CLA recommends someone other than the preparer of Return of Title IV calculations review said calculations. Explanation of disagreement with audit finding: There is no disagreement with the audit finding. Action planned/taken in response to finding: All Return of Title IV calculations will be reviewed by another person in the Financial Aid Department, other than the preparer, for accuracy, completeness, and timeliness. Name(s) of the contact person(s) responsible for corrective action: David Fisher, dlfisher@neo.edu Planned completion date for corrective action plan: November 2023

After consultation with the National Clearinghouse (NCH), and written guidance from the U.S. Department of Education (ED), the Campus-Level enrollment effective date would not change because the enrollment level did not change. Clemson University will work with the NCH and utilize their audit support to further explore this scenario and determine what would need to be changed with field mapping and review, if anything. Anticipated Completion Date: June 1, 2024 Person Responsible for Corrective action: Cecil (Rock) McCaskill, Associate Registrar Contact/Responsible Party: Sherri Rowland, AVP and Controller Contact Information: sherrir@clemson.edu

The staff performing stale-dated check processing were notified of the audit finding and have received training. We have engaged with our banking partners to develop a report of outstanding checks to be available to Student Financial Services staff to identify aged outstanding student refund checks. Student Financial Services staff will communicate with students who have outstanding checks as a proactive measure to decrease the volume of uncashed stale-dated checks. Anticipated Completion Date: October 31, 2023 Person Responsible for Corrective action: Rebecca Pruitt, Director of Student Financial Services Contact/Responsible Party: Sherri Rowland, AVP and Controller Contact Information: sherrir@clemson.edu

The Office of Student Financial Aid will engage with the Office of Internal Audit (IA) to review the FISAP, and if any errors are found, will make corrections during the allotted time in December. Supporting schedules are centrally stored and will be made available to IA. Anticipated Completion Date: December 1, 2023 Person Responsible for Corrective action: Elizabeth Milam, Director of Financial Aid Contact/Responsible Party: Sherri Rowland, AVP and Controller Contact Information: sherrir@clemson.edu

We will continue to proactively monitor for system data irregularities and take corrective action as needed. We have implemented a weekly review of Banner to COD data for Pell disbursement activity to quickly identify and resolve discrepancies. A senior staff member completes this review with findings reported to management to determine if further action is required. Anticipated Completion Date: Tested plan of action, applied corrections and verified successful resolution as of March 1, 2023. Corrective action plan implemented March 9, 2023. Person Responsible for Corrective action: Elizabeth Milam, Director of Financial Aid Contact/Responsible Party: Sherri Rowland, AVP and Controller Contact Information: sherrir@clemson.edu

The University’s Director of Financial Compliance will implement an additional step to email the University’s Controller for approval prior to drawdown of federal funds and will follow up with a screenshot of the actual drawdown for validation. Anticipated Completion Date: September 18, 2023 Person Responsible for Corrective action: Karen Robbins, Director of Financial Compliance Contact/Responsible Party: Sherri Rowland, AVP and Controller Contact Information: sherrir@clemson.edu