Corrective Action Plans

Finding 526247 (2024-024)

Significant Deficiency 2024

VA

Subrecipient Monitoring Significant Deficiency Internal Control / Segregation of Duties § 200.303

Responsible Contact Person(s): Barry Davis, Chief Information Security Officer and Director of Information Security & Risk Management John Vosper, Assistant Director of Information Security & Risk Management Sam Owusu, IT Risk Manager of Information Security & Risk Management Corrective Action Plann...

Responsible Contact Person(s): Barry Davis, Chief Information Security Officer and Director of Information Security & Risk Management John Vosper, Assistant Director of Information Security & Risk Management Sam Owusu, IT Risk Manager of Information Security & Risk Management Corrective Action Planned: This finding was marked as FOIA Exempt (FOIAE) and as a result, the State Comptroller has determined that the resulting corrective actions are FOIAE under §2.2-3705.2 (9.) of the Code of Virginia. Federal awarding agencies and pass-through entities, please see the Appendix titled “Applicable Management Contacts for Findings and Questioned Costs” to request the corrective action planned from the applicable entity. Estimated Completion Date: 12/31/2026

View Audit 345214

Finding 526246 (2024-023)

Significant Deficiency 2024

Commonwealth of Virginia

VA

Reporting Significant Deficiency Internal Control / Segregation of Duties § 200.303

Responsible Contact Person(s): Mike Jones, Chief Information Officer Corrective Action Planned: This finding was marked as FOIA Exempt (FOIAE) and as a result, the State Comptroller has determined that the resulting corrective actions are FOIAE under §2.2-3705.2 (9.) of the Code of Virginia. Federa...

Responsible Contact Person(s): Mike Jones, Chief Information Officer Corrective Action Planned: This finding was marked as FOIA Exempt (FOIAE) and as a result, the State Comptroller has determined that the resulting corrective actions are FOIAE under §2.2-3705.2 (9.) of the Code of Virginia. Federal awarding agencies and pass-through entities, please see the Appendix titled “Applicable Management Contacts for Findings and Questioned Costs” to request the corrective action planned from the applicable entity. Estimated Completion Date: 4/30/2025

View Audit 345214

Finding 526245 (2024-022)

Material Weakness 2024

Commonwealth of Virginia

VA

Subrecipient Monitoring Material Weakness Internal Control / Segregation of Duties § 200.303

Responsible Contact Person(s): Steve Hanoka, Information Security Officer Corrective Action Planned: 1. The requirements in the IT Security Governance or general requirements in SEC 530 are going to be addressed as part of the IT Security Planning and IT Security Program Management Policies and Pr...

Responsible Contact Person(s): Steve Hanoka, Information Security Officer Corrective Action Planned: 1. The requirements in the IT Security Governance or general requirements in SEC 530 are going to be addressed as part of the IT Security Planning and IT Security Program Management Policies and Procedures which are targeted to be complete by February 28, 2025. In addition, as part of this effort DMAS will publicize and communicate to system owners those control families which will have general / organizational procedures and which will require system specific procedures. 2. Access Management policies and procedures are in place. As part of annual SSP reviews DMAS is now verifying compliance or issues found 3. All SSPs are current and under SEC530 4. Incident Response Policies and Procedures exist 5. Vulnerability Management policies and procedures exist. These include scanning for both vulnerabilities and baseline configuration. They are being tracked according to SEC530 resolution standards. Goal is to ensure that all vulnerabilities are remediated within the SLA or have approved exceptions by May 30, 2025. In addition, DMAS has gained guidance from VITA on acceptable alternatives to penetration testing and are tracking completion. 6. Comprehensive third-party Management procedures are being developed and will be implemented by March 31, 2025. 7. Security Training is up to date and compliant Estimated Completion Date: 5/31/2025

View Audit 345214

Finding 526244 (2024-017)

Significant Deficiency 2024

Commonwealth of Virginia

VA

Internal Control / Segregation of Duties Subrecipient Monitoring Reporting § 200.303

Responsible Contact Person(s): Steve Hanoka, Information Security Officer Corrective Action Planned: Third-party Management that will cover ensuring all deliverables required are part of a procedure and work instruction. In addition, to specifically address the points in the finding, ISO will ensure...

Responsible Contact Person(s): Steve Hanoka, Information Security Officer Corrective Action Planned: Third-party Management that will cover ensuring all deliverables required are part of a procedure and work instruction. In addition, to specifically address the points in the finding, ISO will ensure that the work instructions cover obtaining a confirmation on the geographic location of sensitive data monthly and vulnerability scan results at least every 90 days. During this procedure implementation, ISO will also work to specifically obtain these deliverables from the vendor in question. Estimated Completion Date: 3/31/2025

View Audit 345214

Finding 526243 (2024-011)

Significant Deficiency 2024

Commonwealth of Virginia

VA

Internal Control / Segregation of Duties Reporting Significant Deficiency § 200.303

Responsible Contact Person(s): Mike Jones, Chief Information Officer Corrective Action Planned: Language has been added to the Conduent contract renewal for option years 1 and 2 to require the SOC 1 Type II. The renewal is in the process of being reviewed and executed to go into effect July 1, 2025...

Responsible Contact Person(s): Mike Jones, Chief Information Officer Corrective Action Planned: Language has been added to the Conduent contract renewal for option years 1 and 2 to require the SOC 1 Type II. The renewal is in the process of being reviewed and executed to go into effect July 1, 2025. Language added to contract renewal: Contractor Internal Controls Reports The Contractor shall provide the Department, at a minimum; annual, unredacted reports from its independent external auditor on the effectiveness of the Contractor’s internal controls conducted in accordance with the AICPA Statement on Standards for Attestation Engagements. If the reports disclose deficiencies in internal controls, the Contractor shall include management’s corrective action plans to remediate the deficiency. The Contractor shall provide the following reports: · SOC 1 Type 2 Report that reports on the controls at the service organization which are relevant to the user entities’ internal control over financial reporting · SOC 2 Type 2 Report covering all five Trust Services Criteria (Security, Availability, Processing Integrity, Privacy and Confidentiality) The contractor shall provide the Department with these internal control reports within 30 days of the report’s issue date. Reports shall cover a period of 12 months beginning from the end date of the prior audit period with the first report covering a period of 12 months from the execution date of this contract. The contractor shall provide unredacted SOC 1 Type 2 and/or SOC 2 Type 2 reports as described above for any subservice organizations which provide a service to the Contractor that may impact the Department’s financial, program operations, or data security as determined by the Department. Estimated Completion Date: 7/1/2026

View Audit 345214

Finding 526237 (2024-104)

Significant Deficiency 2024

Commonwealth of Virginia

VA

Subrecipient Monitoring Reporting Significant Deficiency § 200.303

Responsible Contact Person(s): Angela Morse, Director of Benefit Programs Frank Smith, Associate Director of Benefit Programs Corrective Action Planned: DSS will perform an analysis of identified reporting errors to determine causality and the appropriate actions to resolve reporting errors. Additio...

Responsible Contact Person(s): Angela Morse, Director of Benefit Programs Frank Smith, Associate Director of Benefit Programs Corrective Action Planned: DSS will perform an analysis of identified reporting errors to determine causality and the appropriate actions to resolve reporting errors. Additionally, DSS will create a systems modification request to correct errors that are identified as occurring as a result of inaccurate programming in the data modification phase of federal report creation. Estimated Completion Date: 12/31/2025

View Audit 345214

Finding 526226 (2024-106)

Significant Deficiency 2024

Commonwealth of Virginia

VA

Subrecipient Monitoring Matching / Level of Effort / Earmarking Internal Control / Segregation of Duties § 200.303

Responsible Contact Person(s): Ida Witherspoon, Chief Financial Officer Corrective Action Planned: Send periodic e-mail reminders to program staff responsible for submitting FFATA data to the Federal Reporting Unit for submission to the federal government. Estimated Completion Date: 3/15/2025

View Audit 345214

Finding 526224 (2024-102)

Significant Deficiency 2024

Commonwealth of Virginia

VA

HUD Housing Programs Reporting Significant Deficiency § 200.303

Responsible Contact Person(s): Angela Morse, Director of Benefit Programs Frank Smith, Associate Director of Benefit Programs Corrective Action Planned: DSS will perform an analysis of identified reporting errors to determine causality and the appropriate actions to resolve reporting errors. Additio...

Responsible Contact Person(s): Angela Morse, Director of Benefit Programs Frank Smith, Associate Director of Benefit Programs Corrective Action Planned: DSS will perform an analysis of identified reporting errors to determine causality and the appropriate actions to resolve reporting errors. Additionally, DSS will create a systems modification request to correct errors that are identified as occurring as a result of inaccurate programming in the data modification phase of federal report creation. Benefit Program is working with appropriate parties to resolve outstanding errors. Estimated Completion Date: 6/30/2025

View Audit 345214

Finding 526130 (2024-089)

Significant Deficiency 2024

Commonwealth of Virginia

VA

Internal Control / Segregation of Duties Subrecipient Monitoring Significant Deficiency § 200.303

Responsible Contact Person(s): Sherika Charity, Director of Financial Aid Lisa Boyko, Associate Director of Financial Aid Corrective Action Planned: Step 1: Develop a timeline to review information system Access for college financial aid staff and non-financial aid staff with financial aid access. ...

Responsible Contact Person(s): Sherika Charity, Director of Financial Aid Lisa Boyko, Associate Director of Financial Aid Corrective Action Planned: Step 1: Develop a timeline to review information system Access for college financial aid staff and non-financial aid staff with financial aid access. This will include the Director of Financial Aid and the Associate Director of Financial Aid Information Systems who will set scheduled meetings to conduct periodic reviews of the information system Access each semester using a designated report. Step 2: The Associate Director of Financial Aid Information Systems will create a repository to store the designated reports, which will be accessible by the Director of Financial Aid. Step 3: The Director of Financial Aid and the Associate Director of Financial Aid Information Systems will review access. If changes are needed, the appropriate IT forms will be submitted to have staff members access updated appropriately. Estimated Completion Date: 6/30/2025

View Audit 345214

Finding 526124 (2024-032)

Significant Deficiency 2024

Commonwealth of Virginia

VA

Significant Deficiency Internal Control / Segregation of Duties § 200.303

Responsible Contact Person(s): Paul Cormal, Chief Technology Officer Diane Carnohan, Chief Information Security Officer Corrective Action Planned: This finding was marked as FOIA Exempt (FOIAE) and as a result, the State Comptroller has determined that the resulting corrective actions are FOIAE unde...

Responsible Contact Person(s): Paul Cormal, Chief Technology Officer Diane Carnohan, Chief Information Security Officer Corrective Action Planned: This finding was marked as FOIA Exempt (FOIAE) and as a result, the State Comptroller has determined that the resulting corrective actions are FOIAE under §2.2-3705.2 (9.) of the Code of Virginia. Federal awarding agencies and pass-through entities, please see the Appendix titled “Applicable Management Contacts for Findings and Questioned Costs” to request the corrective action planned from the applicable entity. Estimated Completion Date: 9/30/2025

View Audit 345214

Finding 526123 (2024-010)

Significant Deficiency 2024

Commonwealth of Virginia

VA

Internal Control / Segregation of Duties Reporting Significant Deficiency § 200.303

Responsible Contact Person(s): Kevin Platea, Chief Information Officer Corrective Action Planned: DSS has 15 plus applications that are in active oversight, IT Business Administration is in receipt of the required SOC 2, Type 2 reports. However, additional requirements to capture the SOC 1, Type 2 ...

Responsible Contact Person(s): Kevin Platea, Chief Information Officer Corrective Action Planned: DSS has 15 plus applications that are in active oversight, IT Business Administration is in receipt of the required SOC 2, Type 2 reports. However, additional requirements to capture the SOC 1, Type 2 reports has not yet been accomplished. Estimated Completion Date: 12/31/2025

View Audit 345214

Finding 526120 (2024-004)

Material Weakness 2024

Frontier School Corporation

IN

Procurement, Suspension & Debarment School Nutrition Programs § 200.303 § 200.318 § 200.320

Context: The School Corporation had one vendor which exceeded the simplified acquisition threshold which was selected for testing. The School Corporation was unable to provide any supporting documentation for the procurement process required under School Corporation policy. The sample item amount...

Context: The School Corporation had one vendor which exceeded the simplified acquisition threshold which was selected for testing. The School Corporation was unable to provide any supporting documentation for the procurement process required under School Corporation policy. The sample item amount dispersed was $160,827 for food purchases in FY 2023. Additionally, the School Corporation did not have any support to show the vendor was not disbarred or suspended. Contact Person Responsible for Corrective Action: Steve Boulanger, Food Service Director Contact Phone Number: 765-240-2372 Views of Responsible Official: We concur with the finding. Description of Corrective Action Plan: As of October 2024, our Food Service Director has been running vendors through the SAM.gov website, printing the results, and filing them for audit purposes. Anticipated Completion Date: 10/01/2024

View Audit 345211

Finding 526117 (2024-003)

Material Weakness 2024

Frontier School Corporation

IN

Questioned Costs School Nutrition Programs Internal Control / Segregation of Duties § 200.303

Context: We noted that for two claims in a sample of four, the Food Service Director prepared the reimbursement claim without a secondary, documented review to ensure the accuracy of the reimbursement claim. Additionally, the number of meals claimed on two of the four claims sampled did not agree...

Context: We noted that for two claims in a sample of four, the Food Service Director prepared the reimbursement claim without a secondary, documented review to ensure the accuracy of the reimbursement claim. Additionally, the number of meals claimed on two of the four claims sampled did not agree to the supporting meal system reports. There was a gross overstatement of meals claimed of $349 and a gross understatement of meals claimed of $161 resulting in a net over reimbursement amount of $188. Contact Person Responsible for Corrective Action: Steve Boulanger, Food Service Director Contact Phone Number: 765-240-2372 Views of Responsible Official: We concur with the finding. Description of Corrective Action Plan: As of February 2024, the Food Service Director prepares the claim for reimbursement, and the Corporation Treasurer double checks all numbers and signs the claim. Anticipated Completion Date: 02/01/2024

View Audit 345211 Questioned Costs: $1

Finding 526114 (2024-002)

Material Weakness 2024

Frontier School Corporation

IN

School Nutrition Programs Internal Control / Segregation of Duties Eligibility § 200.303

Context: During testing over controls for eligibility, we noted there was no formal, secondary review for the applications entered in the food service software determining eligibility. Additionally, there was no documented annual review by School Corporation personnel of the income eligibility guide...

Context: During testing over controls for eligibility, we noted there was no formal, secondary review for the applications entered in the food service software determining eligibility. Additionally, there was no documented annual review by School Corporation personnel of the income eligibility guidelines used by the food service software. Contact Person Responsible for Corrective Action: Steve Boulanger, Food Service Director Contact Phone Number: 765-240-2372 Views of Responsible Official: We concur with the finding. Description of Corrective Action Plan: As of February 2024, our new Food Service Director has implemented a second check of all applications by the High School ECA Treasurer. Additionally, the Food Service Director will print the USDA income parameters after July 1st, compare it to the income guidelines in our nutrition software, and have the High School ECA Treasurer double check the numbers as well. Both employees will sign off on the form, and it will be filed for audit purposes. Anticipated Completion Date: 07/01/2025

View Audit 345211

Finding 526064 (2024-001)

Material Weakness 2024

The Hektoen Institute of Medicine, LLC

IL

Procurement, Suspension & Debarment § 200.303 § 200.317 § 200.318 § 200.324 § 200.327

Finding Number: 2024-001 Condition: Controls were not sufficient to establish written policies and procedures surrounding procured contracts and to ensure that the history of procurement decisions were documented, as required by 2 CFR 200. Context - Institute's Management did not maintain adequate...

Finding Number: 2024-001 Condition: Controls were not sufficient to establish written policies and procedures surrounding procured contracts and to ensure that the history of procurement decisions were documented, as required by 2 CFR 200. Context - Institute's Management did not maintain adequate records for three of the four noncompetitive contracts, including details on procurement history. Additionally, for contracts under both the Research and Development Cluster and the ELC contract, management failed to provide evidence of suspension and debarment checks for contractors before entering into transactions. However, there was no evidence of contractors being suspended or debarred, and no questioned costs were identified. Planned Corrective Action: Management agrees with the recommendation and will review the relevant guidance to ensure compliance. Necessary revisions will be made to the existing procurement policies and procedures in a timely manner to ensure that procurement decisions are documented, as required by 2 CFR Part 200. Contact person responsible for corrective action: Lavenia Bell, Accounting; Teresa Martinez, Senior Post Award Coordinator; Mariela Romo, Administrator Anticipated Completion Date: 8/31/2025

View Audit 345181

Finding 526003 (2024-004)

Material Weakness 2024

Weld County School District Re-8

CO

Subrecipient Monitoring Allowable Costs / Cost Principles Eligibility § 200.303

Child Nutrition Cluster – Assistance Listing No. 10.553, 10.555 and 10.559 Recommendation: We recommend the District retain all direct certification reports from the State and for the District to review applications submitted electronically through food service system to determine correct eligibili...

Child Nutrition Cluster – Assistance Listing No. 10.553, 10.555 and 10.559 Recommendation: We recommend the District retain all direct certification reports from the State and for the District to review applications submitted electronically through food service system to determine correct eligibility determination is made. Explanation of disagreement with audit finding: There is no disagreement with the audit finding. Action planned in response to finding: Direct Cert files received from the State starting in August 2024 will be kept on the Food Service Google drive. Names of the contact persons responsible for corrective action: Wesley Haselhorst and Dawn Koshio Planned completion date for corrective action plan: June 30, 2025

View Audit 345145

Finding 525800 (2024-006)

Significant Deficiency 2024

Madison Consolidated Schools

IN

Procurement, Suspension & Debarment Subrecipient Monitoring Internal Control / Segregation of Duties § 200.303

FINDING 2024-006 Finding Subject: Special Education – Procurement Summary of Finding: There was no control in place, such as an oversight, review, or approval process, to ensure that contractors or subrecipients were not suspended, debarred, or otherwise excluded from receiving federal funds for the...

FINDING 2024-006 Finding Subject: Special Education – Procurement Summary of Finding: There was no control in place, such as an oversight, review, or approval process, to ensure that contractors or subrecipients were not suspended, debarred, or otherwise excluded from receiving federal funds for the Special Education program. Contact Person Responsible for Corrective Action: Danica Houze Contact Phone Number and Email Address: 812-274-8103 dhouze@madison.k12.in.us Views of Responsible Officials: We concur with the finding. Description of Corrective Action Plan: The CFO will monitor encumbrance reports on a regular basis. When federal procurements exceeding $25,000 are encumbered, we will have vendors submit a Suspended and Debarment Certification with their contract agreement when federal dollars are being encumbered. If we are unable to obtain a certification in this manner, alternate procedures such as checking the SAM.gov website will be utilized and the appropriate documentation supporting this review will be retained Anticipated Completion Date: 6/30/2025

View Audit 344970

Finding 525798 (2024-005)

Material Weakness 2024

Madison Consolidated Schools

IN

Subrecipient Monitoring Matching / Level of Effort / Earmarking Internal Control / Segregation of Duties § 200.303 § 200.334

FINDING 2024-005 Finding Subject: Title I - Eligibility Summary of Finding: The October 1 Real Time report could not be presented for audit for 2021-2022, which would have been used to pull in enrollment and poverty information for the 2022-2023 grant. As such, we were unable to verify the amounts r...

FINDING 2024-005 Finding Subject: Title I - Eligibility Summary of Finding: The October 1 Real Time report could not be presented for audit for 2021-2022, which would have been used to pull in enrollment and poverty information for the 2022-2023 grant. As such, we were unable to verify the amounts reported in the grant application. Additionally, we were unable to verify if the correct socioeconomic status was properly reported for any of the students. Additionally, we were unable to verify nonpublic enrollment and poverty data included on the Title I application. Contact Person Responsible for Corrective Action: Janet McCreary Contact Phone Number and Email Address: 812-274-8001 jmccreary@madison.k12.in.us Views of Responsible Officials: We concur with the finding. Description of Corrective Action Plan: Due to the timing of the prior audit and the nature of the Real-Time report, this portion of the finding was not able to be completed timely for FY23’s grant. Beginning in FY24, The Data Management Specialist will save all reports submitted to the DOE. This will ensure that supporting documentation is kept that will be used determine Eligibility for Title I. Additionally, for the nonpublic enrollment and poverty data, the grants specialist meets with non-public partners to review enrollment information and verify the student population that encumbers funding. The data management specialist for MCS verifies all enrollment information and poverty identification in concert with the nutrition manager of MCS, building administrators, and the central office administration to verify all data reported to the state. Anticipated Completion Date: 6/30/2025

View Audit 344970

Finding 525796 (2024-004)

Material Weakness 2024

Madison Consolidated Schools

IN

Special Tests & Provisions Subrecipient Monitoring Material Weakness § 200.303

FINDING 2024-004 Finding Subject: Title I - Special Tests and Provisions - Assessment System Security Summary of Finding: The School Corporation had a process to provide assessment system security training and to ensure each employee that attended training signed the agreement indicating training wa...

FINDING 2024-004 Finding Subject: Title I - Special Tests and Provisions - Assessment System Security Summary of Finding: The School Corporation had a process to provide assessment system security training and to ensure each employee that attended training signed the agreement indicating training was received. However, there was no process in place to ensure that all documentation of school employees being trained was retained for audit. As a result, some of the Indiana Testing and Security agreements were not able to be provided for review. Contact Person Responsible for Corrective Action: Janet McCreary Contact Phone Number and Email Address: 812-274-8001 jmccreary@madison.k12.in.us Views of Responsible Officials: We concur with the finding. Description of Corrective Action Plan: This was corrected in FY24. Our testing security coordinator now ensures that all training certifications are on file as required and monitors this via a spreadsheet. Anticipated Completion Date: Already completed.

View Audit 344970

Finding 525794 (2024-003)

Material Weakness 2024

Madison Consolidated Schools

IN

Procurement, Suspension & Debarment § 200.303

FINDING 2024-003 Finding Subject: Child Nutrition Cluster – Procurement and Suspension and Debarment Summary of Finding: The School Corporation did not have effective controls in place to ensure that the verification was completed for prior to entering into covered transactions or that the correct p...

FINDING 2024-003 Finding Subject: Child Nutrition Cluster – Procurement and Suspension and Debarment Summary of Finding: The School Corporation did not have effective controls in place to ensure that the verification was completed for prior to entering into covered transactions or that the correct procurement method was utilized for one vendor in the audit period. Contact Person Responsible for Corrective Action: Judy Brooks Contact Phone Number and Email Address: 812-274-8108 jbrooks@madison.k12.in.us Views of Responsible Officials: We concur with the finding. Description of Corrective Action Plan: For federal procurements exceeding $25,000, the Food Service Coordinator will request a signed certification of compliance from the vendor. If she is unable to obtain a certification in this manner, alternate procedures such as checking the SAM.gov website will be utilized and the appropriate documentation supporting this review will be retained Anticipated Completion Date: 6/30/2025

View Audit 344970

Finding 525782 (2024-002)

Material Weakness 2024

Town of Merrimack

NH

Cash Management Internal Control / Segregation of Duties Material Weakness § 200.303

Audit Finding Reference: 2024-002 Management’s Response and Planned Corrective Action: We have developed a procedure of printing out all State of NH remittance advices. -Check bank receipts daily. -Print out the State of NH remittance advices. -Confirm Funds were received. -Book the receipt to U...

Audit Finding Reference: 2024-002 Management’s Response and Planned Corrective Action: We have developed a procedure of printing out all State of NH remittance advices. -Check bank receipts daily. -Print out the State of NH remittance advices. -Confirm Funds were received. -Book the receipt to Unifund. Name of Contact Person and Completion Date: Name 1: Paul Calabria Name 2: Xenia Simpson Anticipated Completion Date – February 25, 2025

View Audit 344936

Finding 525773 (2024-001)

Significant Deficiency 2024

Town of Merrimack

NH

Procurement, Suspension & Debarment Subrecipient Monitoring Allowable Costs / Cost Principles § 200.303

Audit Finding Reference: 2024-001 Management’s Response and Planned Corrective Action: We are developing a document for policies and procedures over Federal Grants. Name of Contact Person and Completion Date: Name 1: Paul Calabria Name 2: Xenia Simpson Anticipated Completion Date – April...

Audit Finding Reference: 2024-001 Management’s Response and Planned Corrective Action: We are developing a document for policies and procedures over Federal Grants. Name of Contact Person and Completion Date: Name 1: Paul Calabria Name 2: Xenia Simpson Anticipated Completion Date – April 1, 2025

View Audit 344936

Finding 525767 (2024-002)

Material Weakness 2024

South Vermillion Community School Corporation

IN

Procurement, Suspension & Debarment § 200.1 § 200.303 § 200.317 § 200.318 § 200.319

FINDING 2024-002 Finding Subject: Child Nutrition - Procurement, Suspension, and Debarment Summary of Finding: There were no controls in place to ensure that the School Corporation complied with the small purchase requirements. The School Corporation obtained quotes for the two vendors that qualifie...

FINDING 2024-002 Finding Subject: Child Nutrition - Procurement, Suspension, and Debarment Summary of Finding: There were no controls in place to ensure that the School Corporation complied with the small purchase requirements. The School Corporation obtained quotes for the two vendors that qualified for the small purchase threshold, but no oversight performed. There were no controls in place to ensure that the vendors included a suspension and debarment clause or check the Sam.gov website. Contact Person Responsible for Corrective Action: Micah Williams Contact Phone Number and Email Address: 765-832-2426/mwilliams@svcs.k12.in.us Views of Responsible Officials: We concur with the finding. Description of Corrective Action Plan: The finance department will work in conjunction with the Food Services Director to ensure that quotes are obtained from vendors that are listed on Sam.gov or have a suspension and debarment clause before making in purchases. There will be an email thread detailing the request, the quotes, and the process for ensuring suspension and debarment. Anticipated Completion Date: Immediate.

View Audit 344930

Finding 525761 (2024-001)

Material Weakness 2024

South Vermillion Community School Corporation

IN

School Nutrition Programs Subrecipient Monitoring Cash Management § 200.202 § 200.211 § 200.301 § 200.303 § 200.328

FINDING 2024-001 Finding Subject: Child Nutrition Cluster - Reporting Summary of Finding: There were no controls in place to ensure that the School Corporation complied with the reporting requirements. The reimbursement request reports were prepared and submitted by the Food Service Director without...

FINDING 2024-001 Finding Subject: Child Nutrition Cluster - Reporting Summary of Finding: There were no controls in place to ensure that the School Corporation complied with the reporting requirements. The reimbursement request reports were prepared and submitted by the Food Service Director without any oversight, review or approval process to ensure accuracy of the reports. There was no oversight to make sure that the number of meals served matched the report filed. The lack of internal controls was systemic throughout the audit period. Contact Person Responsible for Corrective Action: Amanda Myers Contact Phone Number and Email Address: 765-832-3551/amyers@svcs.k12.in.us Views of Responsible Officials: We concur with the finding. Description of Corrective Action Plan: Amanda Myers, Food Services Director, will continue to receive the information for the monthly meals served from the cafeteria managers at each school. Once she enters the information, the HS cafeteria manager will review the numbers to ensure that the information was entered correctly. The reimbursement forms and information that was entered will be submitted to the finance department to ensure the reimbursement process is correctly receipted. Anticipated Completion Date: Immediate.

View Audit 344930

Finding 525690 (2024-003)

Material Weakness 2024

East Washington School Corporation

IN

Matching / Level of Effort / Earmarking Internal Control / Segregation of Duties Special Tests & Provisions § 200.303

FINDING 2024-003 Finding Subject: Covid-19 – Education Stabilization Fund – Special Tests and Provisions – Wage Rate Requirements Summary of Finding: This is a repeat finding form the immediately prior audit report. An effective internal control system, which would include segregation of duties, was...

FINDING 2024-003 Finding Subject: Covid-19 – Education Stabilization Fund – Special Tests and Provisions – Wage Rate Requirements Summary of Finding: This is a repeat finding form the immediately prior audit report. An effective internal control system, which would include segregation of duties, was not in place at the School Corporation in order to ensure compliance with requirements related to the grant agreement and the Special Tests and Provisions – Wage Rate Requirements compliance requirement. The School Corporation had not designed, nor implemented a system of internal controls to ensure that the wage rate requirements were met for construction projects. Contact Person Responsible for Corrective Action: Joanna Trueblood, Treasurer Contact Phone Number and Email Address: 812-967-3926 ext.5790 | jtrueblood@ewsc.k12.in.us Views of Responsible Officials: We concur with the finding. Description of Corrective Action Plan: The Corporation Treasurer will ensure that any new construction contracts in excess of $2,000, which are financed by federal assistance funds, pay wages not less than those established for the locality of the project (prevailing wage rates) by the Department of Labor (DOL) to their laborers and mechanics. The previously implemented corrective action plan failed due to lack of knowledge of utilizing federal assistance funds. It was believed the language addressing prevailing wage within the contract met the prevailing wage rate requirement. The Corporation will require all vendors of any new construction contracts to submit a copy of the payroll and statement of compliance to the entity for each week in which contract work is performed. Also, a Corporation checklist will be created for all construction projects financed by federal assistance funds to ensure all requirements are met.􀀃 Anticipated Completion Date: March, 2025

View Audit 344846

Corrective Action Plans

Filters