Corrective Action Plans

Corrective action plan: HHSC will conduct an end-to-end review of the sanctions process to identify and implement any needed changes to the business process, training, or system. Implementation date: May 31, 2026 Responsible person: Carrie Robertson, Manager, Strategy and Innovation–Business Integration and Support

Corrective action plan: HHSC has taken steps to improve the consistency and reliability of financial reporting related to Maintenance of Effort (MOE) expenditures, specifically, amounts reported on the ACF 204, submitted by HHSC Budget and the ACF 196R, submitted by HHSC Federal Reporting (FR). To address potential discrepancies and strengthen internal controls, HHSC Federal Reporting has implemented and documented a formal reconciliation process. This process involves the following key components: • Implementation and documentation of a formal reconciliation process that compares all MOE expenditures for HHSC, TEA, and TWC reported on the ACF 204 to those reported on the ACF 196R before report submission. The process outlines specific steps for data cross-referencing and validation to ensure completeness and accuracy. • Research, resolve, and correct any discrepancies identified during the reconciliation process before the reports are finalized and submitted for management review. • Reinforcement of management review and documentation of the reconciliation between the ACF-204 and ACF-196R will be incorporated into the approval process prior to report certification. Implementation date: February 28, 2026 Responsible person: Alan Flynn, Manager, Federal Reporting

Corrective action plan: THECB ITS will: • Develop and implement a standardized process for all user access reviews, including a required template which documents review date, reviewer identity, scope, results, and remediation actions. • Maintain all documentation in a centralized location on our ITS SharePoint site. • Implement regular monitoring to ensure reviews are performed time, and the proper documentation is retained. • We will seek to automate processes where possible. Implementation date: July 1, 2026 Responsible person: Layla Young, Brian Nolte, Joel Anguiano

Corrective action plan: TCEQ will provide targeted training to program staff on federal procurement requirements, including the necessity of coordinating all purchases through the Procurements & Contracts Section and completing required vendor compliance checks. Training will emphasize procedures for sole source or limited source procurements and reinforce staff responsibilities under 2 CFR procurement and internal control standards. Regular refresher sessions and documented guidance will help ensure consistent understanding and adherence to required procurement practices across all program areas. Implementation date: May 31, 2026 Responsible person: Yolanda Davis, Deputy Director, Financial Administration Division

Corrective action plan: ITS Management will establish a formal, documented user access review program applicable to both privileged and non-privileged network users. Key actions include: 1. Policy Updates: Revise information technology access control policies and procedures to re-quire periodic (at least annual) reviews of all network user access. 2. Standardized Process and Documentation: Implement a consistent, documented review process and maintain records in a centralized repository to ensure accountability and auditability. 3. Monitoring and Oversight: Implement oversight procedures to track completion of access re-views and remediation of identified issues, with reporting to IT and information security leadership to support governance. Implementation dates: 1. Policy and procedure updates: Expected completion by April 30, 2026 2. Standardized process and repository implementation: Expected completion by May 31, 2026 3. First completed annual review under the revised process: Expected completion by June 30, 2026 Responsible persons: Tara Mitchell, Director of IT Operations Sean Peterson, Chief Information Officer

Corrective action plan: TWC will establish a new policy of 3 defined roles (preparation, review, and approval) and a standardized process for each role on each report. TWC will establish a log to capture the name and date of the staff completing each role for each report, and we will use the log to confirm that no individual performs more than one role on a given report. For all staff with any participation in the ETA reporting function, TWC will have training on the new policy, procedures and log. Implementation date: June 30, 2026 Responsible person: Terri Warren, Unemployment Insurance Administration & Operational Support Department Director

Corrective action plan: A formalized process will be implemented, utilizing Standard Operating Procedures, to cover changes of hardware or software in relationship with network and infrastructure components. A change management tracking and approval system is under development that will be utilized to track and provide audit logs of all network and infrastructure changes. Implementation date: August 31, 2026 Responsible person: Lars Hjaltman, CIO

Corrective action plan: • IT will coordinate with HR on strengthening the separation process, to include HR running separation reports quarterly and sending to IT to cross check. Will perform regular scheduled meetings to discuss the separation process/issues. • IT is testing automatic scripts that will aid in the process and will be implemented this year. • IT will document quarterly access reviews which are already done. • IT will work on enhancing automation and controls; Will utilize AI to assist. Implementation date: May 2026 Responsible person: Chris Bunton, CIO, Texas Department of Agriculture

Management Response: The University agrees with the finding. The identified issue was isolated and only impacted fall graduates. This issue was fully addressed when the university filed its fall 2025 enrollment reporting. The university has conducted an internal audit to identify students that were reported incorrectly and has manually updated files to ensure dates were properly reflected. At current state, internal monitoring and manual edits are made if discrepancies appear. The university has been in contact with PeopleSoft software related to the issue. Should the software issue not be resolved, the university plans to continue with manual edits to ensure proper reporting. Contact Person: Stacy Ramsey, University Registrar srramse@ilstu.edu Completion Date: December 2025

Information on the federal program: Subject: Special Education Cluster (IDEA) –Earmarking Federal Agency: Department of Education Federal Programs: Special Education Grants to States, Special Education Preschool Grants Assistance Listing Numbers: 84.027, 84.173 Federal Award Numbers and Years (or Other Identifying Numbers): 22611-047-PN01, 22611-047-ARP, 23611-047-PN01, 22619-047-PN01, 22619-047-ARP, 23619-047-PN01 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Matching, Level of Effort, and Earmarking Audit Finding: Significant Deficiency, Other Matters Condition: An effective internal control system was not in place at the School Corporation in order to ensure compliance with requirements related to the grant agreement and the earmarking portion of the Matching, Level of Effort, Earmarking compliance requirement. Context: The School Corporation did not meet the earmarking requirements for the grants, which concluded during the audit period. Both the Special Education Grants to States and Special Education Preschool Grants required a proportionate share of their funding to be spent on non-public school students with disabilities. The 22611-047-PN01, 22611-047-ARP, 23611-047-PN01, 22619-047-PN01, 22619-047-ARP, and 23619-047-PN01 grant awards were fully expended during the audit period with minimum Non-Public Proportionate Share earmarking requirements of $27,189, $5,074, $26,124, $1,171, $453, and $1,929, respectively. There were not sufficient non-public school expenditures incurred to meet the non-public proportionate share requirement for any of the six grants. The non-public school expenditures fell short of the minimum requirement by $11,679, $3,176, $16,405, $1,171, $4, and $1,929, respectively. Views of Responsible Officials and Corrective Action Plan: Management agrees with the finding. The cooperative has developed a written procedure for documenting expenditures related to the proportionate share earmarking requirement at the School Corporation level to address this issue going forward. The School Corporation will maintain the proper documentation to support the Non-Public Proportionate Share earmarking requirement and validate the earmarking requirement is met at the end of the grant’s period of performance or once fully expended. Responsible Party and Timeline for Completion: The corrective action plan has been put into place for the 2025-26 school year. Tracy Albertson, Director of Finance, and Sarah Claton, Director of Cooperative School Services, will oversee the corrective action plan.

Information on the federal program: Subject: Special Education Cluster (IDEA) – Period of Performance Federal Agency: Department of Education Federal Programs: Special Education Grants to States, Special Education Preschool Grants Assistance Listing Numbers: 84.027, 84.027X, 84.173, 84.173X Federal Award Numbers and Years (or Other Identifying Numbers): 22611-047-PN01, 22611-047-ARP, 22619-047-PN01, 22619-047-ARP Pass-Through Entity: Indiana Department of Education Compliance Requirement: Period of Performance Audit Finding: Material Weakness Condition: An effective internal control system was not in place at the School Corporation to ensure compliance with requirements related to the Special Education Cluster program and Period of Performance compliance requirements. Context: During fiscal year 2023-24, the School Corporation was a member of Cooperative School Services (Cooperative). The Cooperative operated the special education programs and spent the federal money on behalf of its member schools. As the grant agreement was between the Indiana Department of Education (IDOE) and each member school, the School Corporation was responsible for ensuring and providing oversight of the Cooperative. For Special Education Cluster awards, funds must be obligated during the 27 months, extending from July 1 of the fiscal year for which the funds were appropriated through September 30 of the second following fiscal year. When testing transactions occurred in the liquidation period for the 22611-047-PN01, 22611-047-ARP, 22619-047-PN01 and 22619-047-ARP grant awards, two exceptions were identified in the sample of five transactions. For the above listed awards, costs must be obligated by September 30, 2023. For the two identified exceptions, an initial purchase order was made in September, but the ultimate transaction was paid to a separate vendor than the original purchase order, and this obligation was incurred in November 2023. This issue was isolated to fiscal year 2024. No costs incurred outside of the period of performance were identified in fiscal year 2025. Views of Responsible Officials and Corrective Action Plan: Management disagrees with part of the finding. The term “obligate” can be interpreted in various ways within our context. While we have a purchase order that was completed by September 30, we do agree that we changed vendors after September 30 and paid the non-public school directly. We agree with the finding that direct payment to a non-public school is not allowable. The purchase order is an internal written commitment to acquire the items/supplies, but it is not a binding written agreement to acquire “property” when we are purchasing supplies until it is provided to the vendor. The purchase order is authorization and approval to purchase the items/supplies. Once the purchase order is provided to the vendor, it is committed and is the binding written agreement. The invoice is an order to pay the obligation. Responsible Party and Timeline for Completion: Corrective action plan has been implemented as this finding impacted fiscal year 2024 but did not recur in fiscal year 2025. Sarah Claton, Cooperative School Services director, and Tracy Albertson, Director of Finance, will oversee the corrective action plan to monitor the cooperative on an ongoing basis.

Information on the federal program: Subject: Special Education Cluster (IDEA) – Activities Allowed or Unallowed, Allowable Costs/Cost Principles Federal Agency: Department of Education Federal Programs: Special Education Grants to States, Special Education Preschool Grants Assistance Listing Numbers: 84.027, 84.027X, 84.173, 84.173X Federal Award Numbers and Years (or Other Identifying Numbers): 22611-047-PN01, 22611-047-ARP, 22619-047-ARP, 24611-047-PN01 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Activities Allowed or Unallowed, Allowable Costs/Cost Principles Audit Finding: Material Weakness Condition: An effective internal control system was not in place at the School Corporation to ensure compliance with requirements related to the Special Education Cluster program and Activities Allowed or Unallowed and Allowable Costs compliance requirements. Context: During fiscal year 2023-2024, the School Corporation was a member of Cooperative School Services (Cooperative). The Cooperative operated the special education programs and spent the federal money on behalf of its member schools. As the grant agreement was between the Indiana Department of Education (IDOE) and each member school, the School Corporation was responsible for ensuring and providing oversight of the Cooperative. For costs related to non-public schools, the practice of the Cooperative was to separate out the required amount for each member school from the Cooperative budget, and the member schools would work with the non-public schools to determine how to spend their proportionate share amount. Each member school would then request reimbursement from the Cooperative for non-public school expenditures incurred. This allowed both the Cooperative and member schools to maintain control of all Special Education funds, property, equipment and supplies. In the initial sample of 25 expenditures, there was no noncompliance identified. However, while performing a review of separate transactions for the Period of Performance compliance requirement, it was noted that non-public schools received direct reimbursements from the Cooperative for their proportionate share expenditures, which is not allowable under the grant award. The audit team reviewed the expenditure population in entirety and identified a total of 5 expenditures, totaling $17,857, that were made from Special Education funds directly to non-public schools by the cooperative during the audit period. The lack of controls and noncompliance was an isolated to the 22611-047-PN01, 22611-047-ARP, 22619-047-ARP and 24611-047-PN01 grant awards. This issue was isolated to fiscal year 2024. No direct payments to non-public schools were identified during fiscal year 2025. Views of Responsible Officials and Corrective Action Plan: Management concurs with the finding. During the required consultation meeting involving the Local Educational Agency (LEA), representatives from private schools, and the parents or legal guardians of nonpublic students with disabilities, the agenda will cover both allowable and un-allowed costs. The meeting agenda will clearly outline that all purchased items are the responsibility of the LEA, that gift cards are prohibited, and that all acquisitions must provide direct benefit to students with disabilities. Responsible Party and Timeline for Completion: Corrective action plan has been implemented as this finding impacted fiscal year 2024 but did not recur in fiscal year 2025. Sarah Claton, Cooperative School Services Director, and Tracy Albertson, Director of Finance, will oversee the corrective action plan to monitor the cooperative on an ongoing basis.

Information on the federal program: Subject: Child Nutrition Cluster - Internal Controls Federal Agency: Department of Agriculture Federal Program: School Breakfast Program, National School Lunch Program Assistance Listing Number: 10.553, 10.555 Federal Award Numbers and Years (or Other Identifying Numbers): FY2024 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Procurement and Suspension and Debarment Audit Finding: Material Weakness Condition: An effective internal control system was not in place at the School Corporation to ensure compliance with requirements related to the Child Nutrition Program and Procurement compliance requirements. Context: The School Corporation is a member of a purchasing cooperative, who handles the procurement process and establishes competitively awarded contracts for the majority of food service purchases. For one-time purchases such as food service equipment, the School Corporation is responsible for handling the procurement process. For one of the two small purchase method procurements sampled for testing, the school disbursed $67,000 for food service equipment maintenance in fiscal year 2024. The procurement for this item was handled at the school level. We noted the School Corporation did not obtain quotes from an adequate number of qualified sources. The School Corporation also did not properly perform a suspension and debarment check on the vendor. This finding is isolated to fiscal year 2024. There were no purchases in 2025 that required a simplified acquisition or small purchase procurement other than those procured by the food service cooperative. Views of Responsible Officials and Corrective Action Plan: Moving forward, we will implement a standardized procurement checklist to ensure that quotes are obtained from the required number of vendors in accordance with the small purchase method regulations. Child Nutrition Department will also review micropurchase vendors’ cumulative annual spending on a routine basis to determine whether purchases may exceed the micropurchase threshold and require use of the small purchase method. Documentation of all quotes received will be maintained for audit verification. In addition, staff responsible for procurement have received IDOE/USDA refresher training on federal procurement requirements, including thresholds and documentation standards, to ensure full compliance. Suspension and debarment checks will continue to be conducted and documented for all applicable vendors. Responsible Party and Timeline for Completion: Corrective action plan has been implemented as this finding impacted fiscal year 2024 but did not recur in fiscal year 2025. Missy Corns, Food Service Director, and Tracy Albertson, Director of Finance, will oversee the corrective action plan to monitor the procurement and suspension and debarment requirements on an ongoing basis.

Information on the federal program: Subject: Child Nutrition Cluster - Internal Controls Federal Agency: Department of Agriculture Federal Program: School Breakfast Program, National School Lunch Program Assistance Listing Number: 10.553, 10.555 Federal Award Numbers and Years (or Other Identifying Numbers): FY23-24 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Eligibility Audit Finding: Material Weakness, Qualified Opinion Condition: An effective internal control system was not in place at the School Corporation in order to ensure compliance with requirements related to the grant agreement and the eligibility compliance requirement. Context: During the testing of internal controls and compliance over eligibility determinations for free and reduced meals, we selected a sample of 15 applications and 45 direct certifications for testing. For 3 of the 15 applications, the School Corporation was not able to provide any documentation to support the eligibility determination due to turnover in the food service director position. Therefore, we were unable to determine whether the School Corporation complied with the eligibility requirements. The internal control and noncompliance was isolated to fiscal year 2024. Views of Responsible Officials and Corrective Action Plan: School Corporation has implemented procedures to ensure a complete record is maintained for every free and reduced-price meal application and any subsequent eligibility status change. All applications, supporting documentation, and determination records are retained as hard copy files. An electronic Benefit Issuance Document will also be retained during the year and printed as a hard copy record. Any change in eligibility status is documented with the effective date and supporting rationale to provide a clear audit trail. These procedures are now part of the School Corporation’s standard operating practices in school food service to ensure ongoing compliance and continuity moving forward. Responsible Party and Timeline for Completion: Corrective action plan has been implemented as this finding impacted fiscal year 2024 but did not recur in fiscal year 2025. Missy Corns, Food Service Director, and Tracy Albertson, Director of Finance, will oversee the corrective action plan to monitor the eligibility requirements on an ongoing basis.

The City will review the requirements for written policies and will adopt policies, as needed, or will revise its current policies as needed to comply with Uniform Guidance.

Coronavirus State and Local Recovery Funds Reporting Planned Corrective Action: The City has adjusted the procedures to develop and submit the annual report to include segregation of duties. Anticipated Completion Date: March 1, 2026 Responsible Contact Person: Gretchen Hoskins, Finance Director

Coronavirus State and Local Fiscal Recovery Funds Procurement, Suspension, and Debarment Planned Corrective Action: The City implemented a Vendor’s Doing Business Policy in FY 2025-26 requiring all new vendors be searched on SAM.gov and California Secretary of State prior to executing a contract, with emphasis on federal awards. Anticipated Completion Date: March 9, 2026 Responsible Contact Person: Gretchen Hoskins, Finance Director

Finding Reference: 2025-001 – Reporting Condition: During testing of reporting compliance for major federal programs, we selected three of twelve monthly OAF reports submitted during the fiscal year. For each month tested, reported amounts did not reconcile to MOFC’s internal Poundage Distribution reports and Product Code – Agencies by County reports. Specifically, we identified material variances between the OAF reports and internal distribution records, including: October 2024: ACP distributions were omitted from the OAF report, resulting in a variance of approximately 821,528 pounds (projected dollar impact of $262,889). January 2025: VA/Holiday Purchase distributions were omitted from the OAF report, resulting in a variance of approximately 310,898 pounds (projected dollar impact of $155,449). June 2025: Donated distributions, primarily Direct Retail Pickup (DRP) quantities, were omitted from the OAF report, resulting in a variance of approximately 933,505 pounds (projected dollar impact of $1,764,324). Additional differences were noted in purchased distributions of 40,399 pounds (projected dollar impact of $16,968). Although management provided explanations indicating that certain distributions were omitted in error or excluded due to differences in reporting scope, MOFC did not maintain documented reconciliations supporting the reported amounts. Evidence of review and approval demonstrating that differences were identified, investigated, and resolved prior to report submission was not provided. Views of Responsible Officials Items 1 & 2 are both failures of a report in our former ERP to include exception components and needed to be added manually when reporting. This is a result of human error. Item 3 is a result of a WIP component currently being installed into the new ERP to add in programmatic data for agency pickups. This is currently added manually for reporting purposes – also human error. Planned Corrective Action: Implementation of the Direct Retail Pickup poundage integrations into the current ERP will negate the necessity to manually enter the numbers. While this install is occurring, we will continue to manually update. Anticipated Completion Date: Initial discussions have occurred with an anticipated solution provided, tested and approved before the end of FY26 timeframe.

Management is aware and understands the importance of compliance with the federal requirements and will ensure the meal counts will be properly reported in the future.

Reporting Responses UNR – Agrees with the finding. ● Detailed corrective action taken, including what will be done to avoid the identified issues in the future, and when these measures will be in place; Management staff, independent of the preparer, will review and sign off on each report. This review process will include verifying that all information is correctly entered. ● How compliance and performance will be measured and documented for future audit, management and performance review. Compliance and performance will be measured through the independent review process, where management will verify and sign off on each report to ensure accuracy. ● Who will be responsible and may be held accountable in the future if repeat or similar observations are noted. Associate Director of Post Award Official Contact: Rhett R. Vertrees, Assistant Chief Financial Officer 2601 Enterprise Road, Reno NV 89512-1666 Phone: (775)784-3409, Fax: (775)784-1127 Email: rvertrees@nshe.nevada.edu

Reporting Responses UNR – Agrees with the finding. ● Detailed corrective action taken, including what will be done to avoid the identified issues in the future, and when these measures will be in place; Management staff, independent of preparer, will review and sign off on each report. This review process will include verifying that all information is correctly entered. ● How compliance and performance will be measured and documented for future audit, management and performance review. Compliance and performance will be measured through the independent review process, where management will verify and sign off on each report to ensure accuracy. ● Who will be responsible and may be held accountable in the future if repeat or similar observations are noted. Associate Director of Post Award Official Contact: Rhett R. Vertrees, Assistant Chief Financial Officer 2601 Enterprise Road, Reno NV 89512-1666 Phone: (775)784-3409, Fax: (775)784-1127 Email: rvertrees@nshe.nevada.edu

Reporting Responses CSN – Agrees with the finding. ● Detailed corrective action taken, including what will be done to avoid the identified issues in the future, and when these measures will be in place; CSN Office of Grants and Contracts Post-Award Management has advised the grant’s principal investigator (PI) that underlying documentations must match the data reported on the Annual Performance Reports submitted to the award sponsor. The CSN GEAR UP PI and GEAR UP First Year College Advisor have refined the reporting and record keeping process to ensure accurate reporting and supporting documentation is kept in compliance with the grant. The Senior Accountant of Grants and Contracts also reviews the data before each report is submitted to the sponsor. ● How compliance and performance will be measured and documented for future audit, management and performance review. CSN GEAR UP PI and GEAR UP First Year College Advisor will continue to ensure accurate reporting and supporting documentation is kept in compliance. CSN Office of Grants and Contracts Post-Award Management will continue to communicate with PIs to ensure all reports have been reviewed for adequate and accurate supporting documentation prior to submission to the sponsor. ● Who will be responsible and may be held accountable in the future if repeat or similar observations are noted. CSN Program Director, who is the Gaining Early Awareness and Readiness for Undergraduate Programs (GEAR UP) Principal Investigator (PI), is accountable for exercising oversight and responsibility. GBC – Agrees with the finding. ● Detailed corrective action taken, including what will be done to avoid the identified issues in the future, and when these measures will be in place; o Establishment of a formal review and approval workflow requiring secondary review by the Grants Office of participants numbers prior to submission of any financial or performance report. This will require: (1) Identification of the reporting period; (2) Review of all source documents supporting reported totals; and, (3) Mathematical reconciliation of reported figures o Training provided to grant program staff and administrative personnel on documentation standards and reporting accuracy expectations. o All corrective actions were implemented immediately upon identification of the finding and will be fully in place within 30 days of notification. The revised procedures are now standard practice for all grants reporting participant numbers. ● How compliance and performance will be measured and documented for future audit, management and performance review. o Reports may not be submitted to the pass-through entity without documented secondary review and written approval from the Grants Director or the Grant and Asset Coordinator. o Interim and final program reports will be reviewed to ensure: (1) Participant totals match underlying documentation; (2) Source documentation is retained and accessible; and, (3) Approval signatures are present prior to submission. ● Who will be responsible and may be held accountable in the future if repeat or similar observations are noted. o The Grants Director and the Director of Business Operations are responsible for oversight of grant compliance. NSU – Agrees with the finding. ● Detailed corrective action taken, including what will be done to avoid the identified issues in the future, and when these measures will be in place; NSU has reviewed the finding and has put additional measures in place to ensure compliance. Staff responsible for preparing reports were retrained and multi-layered quality checks have been implemented to safeguard integrity of data entered in shared databases. NSU’s multi-layered quality checks include written confirmations from staff involved in service activities and backup of documentation within NSU’s local storage to support the numbers being reported. The latter represents a move away from using a database that is accessible to multiple institutions to a centrally controlled location within NSU. This process outlined herein was implemented in August 2025 and ensures that the source documentation reconciles with reports and is available for auditing purposes. ● How compliance and performance will be measured and documented for future audit, management and performance review. To ensure compliance, NSU staff who are responsible for the program and technical reporting have reviewed and updated internal policies and procedures relating to reporting. Performance targets and benchmarks have been reestablished and will be measured at set intervals. Any errors detected will be documented and remedied. Additionally, errors will serve as the basis for continuous improvement processes and retraining as needed. These will be documented in performance reviews. ● Who will be responsible and may be held accountable in the future if repeat or similar observations are noted. The NSU GEAR UP Principal Investigator and First-Year College Advisor Supervisor are responsible and accountable for ensuring reporting is supported by underlying records. TMCC – Agrees with the finding. ● Detailed corrective action taken, including what will be done to avoid the identified issues in the future, and when these measures will be in place; TMCC reports on the number of participants for all services rendered under the GEAR UP grant through both the Interim Progress Report (IPR) and the Final Progress Report (FPR). The identified issue concerns a discrepancy between the reported participant count on the IPR and the underlying supporting records. To ensure data accuracy going forward, TMCC will implement an additional review of participant reporting. Prior to the submission of progress reports, a second technical reviewer within the GEAR UP team would verify the participant counts entered into GEARS (GEAR UP’s designated data-reporting platform) against the supporting documentation (the attendance sheet). Should a discrepancy be identified, the GEAR UP team will follow up with the individual responsible for the data entry on GEARS to reconcile the difference. This may include requesting correction of data entry errors or obtaining additional documentation to support the reported participant count, as appropriate. Additionally, attendance sign-in sheets will be collected and retained by TMCC staff to allow for direct verification prior to reporting. ● How compliance and performance will be measured and documented for future audit, management and performance review. Compliance and performance will be measured by the implementation of a second reviewer for the participant data reported through GEARS and included in the progress reporting. This review can be documented through an internal checklist, internal communication, or other appropriate records demonstrating that the participant data was reviewed and validated prior to the submission of progress reports. ● Who will be responsible and may be held accountable in the future if repeat or similar observations are noted. Primary responsibility for accurate participant reporting will remain with the TMCC First Year College Advisor (FYCA) or other designated staff responsible for preparing grant performance reports. Responsibility for completing the secondary verification review will be assigned to a designated GEAR UP technical reviewer or program staff member who is independent of the initial data entry and report preparation. If repeat or similar observations occur, program leadership will evaluate adherence to established procedures and implement additional corrective actions, which may include staff retraining, revision of internal procedures, or reassignment of reporting responsibilities, as appropriate. UNLV agrees with this finding. ● Detailed corrective action taken, including what will be done to avoid the identified issues in the future, and when these measures will be in place; The UNLV OSP will continue to work with PIs to ensure there is a documented review of progress reports. PIs will be expected to demonstrate review of progress reports and provide supporting documentation for data. Additionally, if reports require financial expenditures, the Office of Sponsored Programs will require validation before submission. Communication dissemination will occur twice within the academic year. ● How compliance and performance will be measured and documented for future audit, management and performance review. UNLV OSP will continue communications through Research Weekly (an internal communication newsletter) to remind PIs to ensure timely submission of progress reports and retention of records such as, lab notes, testing, populations served, activities performed, etc. to demonstrate activities supported by the grant. UNLV OSP will maintain communications with PIs to perform monitoring throughout the life of the award. ● Who will be responsible and may be held accountable in the future if repeat or similar observations are noted. The UNLV OSP Executive Director is accountable for exercising oversight and responsibility along with the applicable Deans. UNR – Agrees with the finding. ● Detailed corrective action taken, including what will be done to avoid the identified issues in the future, and when these measures will be in place; All participant counts reported in Interim Progress Reports will be supported by retained underlying source documentation that directly reconcile to the reported totals. Standard documentation expectations and retention requirements will be communicated to program staff. ● How compliance and performance will be measured and documented for future audit, management and performance review. Compliance will be measured through pre-submission review of reported participant data against underlying records and through post-submission spot checks conducted by Program Director. Documentation supporting reported counts will be retained in the official project file and made available for future audit, management review, and internal monitoring. Evidence of reconciliation will be documented via checklists or certifications retained with the report. ● Who will be responsible and may be held accountable in the future if repeat or similar observations are noted. Program Director WNC – Agrees with the finding. ● Detailed corrective action taken, including what will be done to avoid the identified issues in the future, and when these measures will be in place; Sponsors have determined grant practices and required reporting documentation, which have not been consistently required or expected of subrecipients. WNC will maintain its own sign-in sheets and documentation for all grant-sponsored activities to ensure compliance with overall grant requirements. The corrective action was implemented in July 2025. ● How compliance and performance will be measured and documented for future audit, management and performance review. The GEAR Up coordinator will create and maintain sign-in sheets or other documentation for every grant-sponsored activity. The coordinator will maintain records in accordance with federal and state guidance and will ensure that supporting documentation is sufficient to support the reported figures. ● Who will be responsible and may be held accountable in the future if repeat or similar observations are noted. Final responsibility and accountability fall on the GEAR Up coordinator and grant administrator. Official Contact: Rhett R. Vertrees, Assistant Chief Financial Officer 2601 Enterprise Road, Reno NV 89512-1666 Phone: (775)784-3409, Fax: (775)784-1127 Email: rvertrees@nshe.nevada.edu

Cash Management Responses WNC – Agrees with the finding. ● Detailed corrective action taken, including what will be done to avoid the identified issues in the future, and when these measures will be in place; Western Nevada College implemented the practice of invoice review (proper segregation of duties) in October 2024, in which all invoices are reviewed from an individual separate from the preparer. This practice has been in place since our October 2024 grant billing period and has continued ever since. This audit finding resulted from the auditor selecting a transaction prior to WNC implementing the new procedure. All other transactions selected by the auditor were in compliance. ● How compliance and performance will be measured and documented for future audit, management and performance review. All grant invoices going forward will have a second level of review prior to drawing down or requesting reimbursement of funds. Documentation will be compiled for each grant invoice that will indicate that a second level of review has been obtained. ● Who will be responsible and may be held accountable in the future if repeat or similar observations are noted. The Vice President of Finance & Administration may be held accountable in the future if repeat or similar observations are noted. Official Contact: Rhett R. Vertrees, Assistant Chief Financial Officer 2601 Enterprise Road, Reno NV 89512-1666 Phone: (775)784-3409, Fax: (775)784-1127 Email: rvertrees@nshe.nevada.edu

Allowable Costs/Cost Principles Responses GBC accepts the finding. ● Detailed corrective action taken, including what will be done to avoid the identified issues in the future, and when these measures will be in place; o GBC maintains evidence of review and approval of the payroll expenses in question. GBC is very willing to enhance internal controls to provide for documented review and approval for terminated employees charged to the grant program. o GBC has strengthened internal controls over payroll expenditures charged to federal grants to ensure documented review and segregation of duties, particularly for terminated employees. o Documented evidence of review and approval will be retained within the payroll/grants file to ensure a clear audit trail. o Human Resources and Grants Accounting staff have been reminded of federal documentation requirements specific to grant-funded payroll expenditures. ● How compliance and performance will be measured and documented for future audit, management and performance review. o Quarterly internal reviews of payroll expenditures charged to federal grants, with specific review of terminated employees. o Retention of documented approval evidence in electronic grant files. o Review during annual fiscal year-end grant reconciliations. ● Who will be responsible and may be held accountable in the future if repeat or similar observations are noted. o The Grants Director and Director of Business Operations are responsible for oversight of grant compliance. Official Contact: Rhett R. Vertrees, Assistant Chief Financial Officer 2601 Enterprise Road, Reno NV 89512-1666 Phone: (775)784-3409, Fax: (775)784-1127 Email: rvertrees@nshe.nevada.edu

Reporting Responses UNLV agrees with this finding. ● Detailed corrective action taken, including what will be done to avoid the identified issues in the future, and when these measures will be in place; The UNLV OSP will continue to work with PIs to ensure there is a documented review of progress reports. PIs will be expected to demonstrate review of progress reports and provide supporting documentation for data. Additionally, if reports require financial expenditures, OSP will require validation before submission. Communication dissemination will occur twice within the academic year. ● How compliance and performance will be measured and documented for future audit, management and performance review. UNLV OSP will maintain communications with PIs to perform monitoring throughout the life of the award. ● Who will be responsible and may be held accountable in the future if repeat or similar observations are noted. The UNLV OSP Executive Director is accountable for exercising oversight and responsibility along with the applicable Deans. UNR – Agrees with the finding. ● Detailed corrective action taken, including what will be done to avoid the identified issues in the future, and when these measures will be in place; Management staff, independent of preparer, will review and sign off on each report. This review process will include verifying that all information is correctly entered. ● How compliance and performance will be measured and documented for future audit, management and performance review. Compliance and performance will be measured through the independent review process, where management will verify and sign off on each report to ensure accuracy. ● Who will be responsible and may be held accountable in the future if repeat or similar observations are noted. Associate Director of Post Award Official Contact: Rhett R. Vertrees, Assistant Chief Financial Officer 2601 Enterprise Road, Reno NV 89512-1666 Phone: (775)784-3409, Fax: (775)784-1127 Email: rvertrees@nshe.nevada.edu