Corrective Action Plans

Corrective Action Plan Year Ended December 31, 2025 Finding 2025-001 – Procurement and Suspension and Debarment Condition: Texas Biomed did not comply with procurement requirements per the Uniform Guidance. Specifically, Texas Biomed did not comply with informal procurement methods for small purchases and noncompetitive procurement requirements. Texas Biomed also did not comply with its own procurement policy in relation to procurements of small purchases and noncompetitive procurements. Texas Biomed did not maintain records for certain procurements sufficient to detail the history of procurement, including the rationale for the method of procurement, selection of contract type, contractor selection or rejection, the basis for the contract price, and the performance of a cost or price analysis, when required. Corrective Action Plan: To ensure compliance and adherence to purchasing policies and procedures, Texas Biomed introduced a Purchasing Compliance Program in November 2025. This program included training and oversight procedures for procurement. The training included ongoing quarterly purchasing training for end users and purchasing staff and new hire training. The purchasing team maintains training documents and ensures new and existing employees have the most current policy, procedures, and requirements to guide them through the purchasing process. The oversight procedures are performed by the Assistant Director of Supply Chain Management and include auditing of purchase orders over the micro-purchase threshold to ensure proper documentation is present. We believe these steps address the procurement findings that have been identified; however, additional controls have been implemented to further ensure compliance. In January 2026, an additional approval step was added to the purchase requisition approval workflow in the procurement system for all federal procurements above the micro-purchase threshold. This step documents review and approval by the Assistant Director of Supply Chain Management or the Director of Finance after reviewing the procurement to ensure compliance with procurement requirements and policies. In addition, Texas Biomed is developing a new sole source justification form for the end users to use. This will include more detail to better document sole source justification, and the end-users will be advised of the new format and how to use it. The Assistant Director of Supply Chain Management also leads efforts of continuous improvement to update and communicate the Purchasing Compliance Program to all Texas Biomed staff. Key dates shall include: • Enhanced new hire training November 2025 • Oversight procedures developed November 2025 • Quarterly training sessions January, April, July and October 2026 • New user training April 2026 • New sole-source template developed and deployed July 2026 Responsible Parties: Eva Zepeda, Director, Finance; Eric McGowin, Assistant Director, Supply Chain Management Completion Date: Corrective action to address internal controls and noncompliance was implemented as of November 2025. Management continues to implement best practices in procurement, including the procedures mentioned above.

MANAGEMENT VIEWS AND CORRECTIVE ACTION PLAN REPORT ON FEDERAL AWARDS IN ACCORDANCE WITH THE OMB UNIFORM GUIDANCE SEPTEMBER 30, 2025 Finding 2025-001 Procurement- Lack of Cost or Price Analysis Cluster: Research and Development, and also applies to Expanded Food and Nutrition Education Programs, which is not a cluster Sponsoring Agency: National Aeronautics and Space Administration and Department of Agriculture Award Names: NASA 90NSSC24K0999 and NI22eFNEPXXXG004-0003 Award Numbers: 208905 and 385076 Assistance Listing Title: Mission Support and Expanded Food and Nutrition Education Program Assistance Listing Number: 43.009 and 10.514 Award Year: 2024 – 2025 Management notes 2025-001 is a repeat finding of 2024-001, but given the timing of the finding last year, our 2024 CAP was anticipated to be completed as of October 1, 2025. To ensure Auburn University is in compliance with 2CFR 200.324, Auburn University has implemented the following corrective action plan: In addition to our current policies that required three quotes for purchases between $15,000-$75,000 and a formal competitive bid for purchases greater than $75,000, Auburn University revised our policies to require a cost or price analysis for items greater than $250,000, documenting that the purchase is reasonable. For items greater than $250,000, we will include a certification on the Professional Services Contracts and the Sole Source request forms indicating an analysis of cost or price has occurred and that the purchase is reasonable. As part of the cost or price analysis, we will utilize available data points. In addition to our analysis, we will ensure that our reviews have been appropriately documented and included in our files. Prior to the implementation date noted below, we will review any purchases greater than $250,000 in fiscal year 2026 and ensure proper cost or price analysis is completed and documented. The corrective actions noted herein have been implemented as of October 1, 2025. Contact: Missty Kennedy Chief Procurement Officer and Executive Director Procurement and Payment Services Amy Douglas Associate VP Financial Services/Controller Completed Date: October 1, 2025

The University acknowledges the audit finding and is committed to ensuring compliance with the procurement requirements outlined in 2 CFR 200.324 (a), which mandates that recipients perform a cost or price analysis for every procurement transaction exceeding the simplified acquisition threshold. During the audit period, it was identified that 4 sampled transactions exceeding the University’s simplified acquisition threshold of $50,000 lacked documented evidence of an independent cost or price analysis prior to March 31, 2025. In April 2025, the University remediated this policy and procedure. No exceptions were identified during the remediation period, and the finding is considered remediated. In April 2025, to address this finding and strengthen compliance, the University initiated the following corrective actions. First, the University worked with leadership to update its procurement policy to increase the simplified acquisition threshold to $250,000, aligning with federal guidelines. This change ensures that the University’s procurement processes are more consistent with federal standards. Second, a new requirement was implemented, mandating that a price analysis form be completed and retained for each procurement transaction exceeding the simplified acquisition threshold. This form documents the University’s independent price analysis. Third, the University provided targeted training to procurement staff and relevant stakeholders to ensure understanding and adherence to the updated policy and the new price analysis requirement. The training emphasized the importance of maintaining contemporaneous documentation in procurement files. Finally, the University implemented enhanced internal controls to ensure that all procurement transactions exceeding the simplified acquisition threshold are reviewed and approved by designated leadership, with documented evidence of a price analysis retained in the procurement files. Primary responsibility for implementing and monitoring this corrective action plan rests with Beth Connelly, Senior Director of Procurement Operations, 216-368-6332.

Management's Response: The School District concurs with the recommendation. We recognize the importance of maintaining strong internal controls to ensure that all procurement activities are conducted in full compliance with Uniform Guidance (2 CFR Part 200) requirements. To address this recommendation, the District will enhance its existing procurement procedures by: 1. Developing and Formalizing Written Internal Controls. 2. Implementing Staff Training. 3. Strengthening Monitoring and Review Processes.

Develop and formally adopt a written procurement policy compliant with 2 CFR 200.317 - 200.327 Train all staff involved in procurement to ensure consistent understanding and proper implementation Perform periodic reviews and updates of the procurement policy to maintain compliance with evolving federal requirements.

As part of the Uniform Guidance audit, OU Health will maintain and provide documentation outlining the process by which eligible vendors will be identified and selected. To ensure internal controls are documented to the level necessary under current audit standards, OU Health will update policies in accordance with applicable standards, as well as develop a checklist to document the selection of vendors and the associated purchases made for federal programs. The supporting documentation will be reviewed by management to ensure vendor selection and procurement activities comply with Uniform Guidance requirements. The checklist and all correspondence will be retained with the report and within the Audit Folder.

Reference Number: 2025-017 Prior Year Finding: No Federal Agency: U.S. Department of Health and Human Services State Agency: Agency of Human Services Federal Program: COVID-19 - Activities to Support State, Tribal, Local and Territorial (STLT) Health Department Response to Public Health or Healthcare Crises Assistance Listing Number: 93.391 Award Number and Year: NH75OT000034 (6/1/2021 – 3/24/2025) Compliance Requirement: Procurement Type of Finding: Significant Deficiency in Internal Control Over Compliance, Other Matters Recommendation: We recommend the Agency review and enhance internal controls and procedures to ensure that it maintains documentation that it performs a cost analysis for all procurement actions in accordance with Agency of Administration Bulletin No. 3.5 and federal requirements. Views of responsible officials: Management agrees with the finding. Corrective Action Plan: The VDH Director of Communications will ensure that copies of any cost analysis performed as part of the RFP review process are collected from department staff and saved in the procurement files for the associated contract. Documentation will be maintained according to Administrative Bulletin 3.5 and federal records retention requirements. Scheduled Completion Date of Corrective Action Plan: March 1, 2026 Contacts for Corrective Action Plan: Katie Warchut, Director of Communications, Vermont Department of Health, katie.warchut@vermont.gov Megan Hoke, Financial Director, Vermont Department of Health, megan.hoke@vermont.gov Peter Moino, Director of Internal Audit, Vermont Agency of Human Services, peter.moino@vermont.gov

The University acknowledges the audit finding and is committed to ensuring compliance with the procurement requirements outlined in 2 CFR 200.324 (a), which mandates that recipients perform a cost or price analysis for every procurement transaction exceeding the simplified acquisition threshold. During the audit period, it was identified that 4 sampled transactions exceeding the University’s simplified acquisition threshold of $50,000 lacked documented evidence of an independent cost or price analysis prior to March 31, 2025. In April 2025, the University remediated this policy and procedure. No exceptions were identified during the remediation period, and the finding is considered remediated. In April 2025, to address this finding and strengthen compliance, the University initiated the following corrective actions. First, the University worked with leadership to update its procurement policy to increase the simplified acquisition threshold to $250,000, aligning with federal guidelines. This change ensures that the University’s procurement processes are more consistent with federal standards. Second, a new requirement was implemented, mandating that a price analysis form be completed and retained for each procurement transaction exceeding the simplified acquisition threshold. This form documents the University’s independent price analysis. Third, the University provided targeted training to procurement staff and relevant stakeholders to ensure understanding and adherence to the updated policy and the new price analysis requirement. The training emphasized the importance of maintaining contemporaneous documentation in procurement files. Finally, the University implemented enhanced internal controls to ensure that all procurement transactions exceeding the simplified acquisition threshold are reviewed and approved by designated leadership, with documented evidence of a price analysis retained in the procurement files. Primary responsibility for implementing and monitoring this corrective action plan rests with Beth Connelly, Senior Director of Procurement Operations, 216-368-6332.

View of Responsible Officials and Corrective Action Plan We acknowledge the finding regarding the use of gift cards and bonus payments to contractors. During the Covid-19 pandemic, our staff and contractors were tasked with responding to urgent and overwhelming public health demands, particularly as the New Mexico Department of Health became overextended. To recognize the efforts and to ensure timely case reporting and investigations for tribal communities, gift cards and bonuses were used as a form of appreciation. Corrective Action Plan Moving forward, we will ensure full compliance with federal grant requirements. Specifically: 1. We will adhere strictly to the cost principles and allowability guidance outlined in federal regulations and the terms of each Notice of Award. 2. In instances where the allowability of an expense is unclear, we will proactively seek guidance and written approval from our Federal Grant Management Officer before incurring the cost. 3. We will provide refresher training to program and fiscal staff on allowable costs under federal awards to prevent recurrence of similar findings. These corrective actions will ensure future expenditures are fully compliant with federal guidelines. Corrective Action Plan Timeline As part of being a continued finding, AAIHB has already ceased the use of gift cards. Going forward we will also discontinue the use of bonuses for contractors. Within the next quarter, Finance and Program Leadership will review current grant guidance, the applicable Notice of Award, and other relevant federal requirements to ensure compliance. To prevent this issue for recurring, whenever there is uncertainty regarding the allowability of a cost, staff will consult Grants Management Officers prior to obligating or expending funds. Designation of Employee Position Responsible for Meeting Deadline Program Managers/Directors, Finance Officer, and Accounting Manager.

Finding 2024-005 – Inadequate Procurement Documentation (Material Weakness) Name of Federal Agency: U.S. Environmental Protection Agency Federal Program Name: Nonpoint Source Implementation Grants Assistance Listing Numbers: 66.460 Pass-Through Entity: Oregon Department of Environmental Quality Name of Federal Agency: U.S. Department of Commerce – National Oceanic and Atmospheric Administration Federal Program Name: Pacific Coast Salmon Recovery Program Assistance Listing Numbers: 11.438, 15.015, 15.244 Pass-Through Entity: State of Oregon – Oregon Watershed Enhancement Board (OWEB) Name of Federal Agency: U.S. Department of Agriculture Federal Program Name: National Fish and Wildlife Foundation Assistance Listing Numbers: 10.665 Pass-Through Entity: U.S. Forest Service Name of Federal Agency: U.S. Department of Agriculture Federal Program Name: Natural Resources Conservation Service Assistance Listing Numbers: 10.905 Pass-Through Entity: U.S. Forest Service Name of Federal Agency: U.S. Department of the Interior Federal Program Name: Wildlife, Sport Fish and Restoration Program Assistance Listing Numbers: 15.244 Pass-Through Entity: Bureau of Land Management Name of Federal Agency: U.S. Department of the InteriorFederal Program Name: Secure Rural Schools and community Self-Determination – Watershed and water-quality improvements Assistance Listing Numbers: 15.234 Pass-Through Entity: Bureau of Land Management Criteria: Federal procurement standards require non-Federal entities to maintain records sufficient to detail the history of procurement, including the method of procurement, selection of contract type, contractor selection or rejection, and basis for the contract price. Competitive procurement must follow the entity’s written procedures consistent with 2 CFR §§200.317-200.327, including:  Written procedures for procurement (§200.318(a)).  Full and open competition requirements (§200.319).  Methods of procurement (sealed bids, proposal requirements, and required documentation (§200.320).  Contract cost and price justification, (§200.324).  Suspension/debarment verification for covered transactions (§200.214; §200.213). Condition: During the audit period, the Entity did not retain sufficient procurement documentation for several contracts funded under the above Assistance Listings. Specifically, files lacked one or more of the following:  Evidence of the procurement method used.  Price or cost analysis.  Suspension/debarment checks for vendors where required.  Documentation of competition.  Conflict-of-interest attestations. Cause: Partnership for the Umpqua Rivers procurement procedures were not sufficiently detailed or consistently applied to federal purchases. No evidence of procedures or review for procurement or suspension / debarment was provided to auditors. Turnover and limited training on Uniform Guidance procurement standards contributed to the inconsistent file completeness. Effect or Potential Effect: Without complete procurement documentation, the Entity cannot demonstrate compliance with federal procurement requirements, increasing the risk of:  Noncompetitive awards or unreasonable prices.  Unallowable costs for the award requirements.  Potential disallowance or repayment of federal funds.  Findings in federal or pass-through monitoring and future audits. Questioned Cost: Yes, $902,496 related to expenditures that had no procurement support or detail. Context: During our audit, it was found that the Partnership for the Umpqua Rivers had experienced complete staff turnover in Financial Management for the year being audited. No current finance employees had worked for the organization during the year being audited. Award files provided to auditors did not contain information related to procurement, suspension or debarment procedures or processes. Repeat of a Prior-Year Finding: No, Prior- year did not require a Single Audit. Recommendation: We recommend that Partnership for the Umpqua Rivers: Update Written Procurement Procedures o Incorporate Uniform Guidance thresholds and methods (§200.320), competition requirements (§200.319), and documentation expectations (history of procurement). o Embed steps for suspension / debarment checks and Appendix II Contract clauses.  Standardized Procurement Checklist o Pre-award checklist that verifies: method, competition evidence, cost/price analysis, conflict of interest attestations, SAM exclusion check, and required federal clauses. o Post -award checklist ensuring complete contract file (award memo, bid tab / evaluation, signed agreement, clause verification).  Cost/Price Analysis Guidance o Require documented price reasonableness for small purchases, formal cost or price analysis for larger or sole-source awards, per (§200.324).  Training & Accountability o Provide targeted training to procurement and program staff on 2 CFR §§200.317- 20.327 and Assistance Listing award conditions. o Implement supervisory pre-award review and periodic file audits. District Response: Partnership for the Umpqua Rivers acknowledges the deficiencies. Corrective Action Plan: ____________ (To be completed by Partnership for the Umpqua Rivers) Planned Implementation Date: _____________ Responsible Person: Partnership for the Umpqua Rivers Finance Manager

Views of Auditee and Corrective Actions: GDOE disagrees with the finding. GDOE does allow for vendors to provide quotes for brand name or equal products. In this case, the substitute product offered was not equal to the product GDOE was soliciting. The end user provided justification that the substitute product did not meet the needs or specifications requested.

Views of Auditee and Corrective Actions: GDOE disagrees with the finding. Auditors cited the lack of procurement policies that meet 2 CFR 200.324(a), but did not find any evidence that GDOE did not comply with procurement regulations.

Prospectively, Historic South will review best practices related to the contract awarding process and formal contracting arrangements for construction work. In addition, Historic South will implement policies of: 1. Requiring the solicitation of multiple bids for all construction work in excess of $10,000 2. Establishing criteria for awarding all construction work 3. Implementing formal contracting processes for all construction work

Internal Controls over Compliance and Compliance with Procurement Standards Individual Responsible for Corrective Action Plan: Christopher Holleman, Interim CFO Anticipated Completion Date: December 31, 2025 Corrective Action Plan: Management will ensure that the policy be redistributed for retraining purposes underscoring the vital importance of following the policy and federal guidelines related to procurements. In addition, the CFO will take lead to ensure that the procurement policy is appropriately applied, and documentation meets required standards.

2024-001 – Internal Controls over Compliance and Compliance with Procurement Standards Individual Responsible for Corrective Action Plan: Meghan Davies, Chief Operating Officer Anticipated Completion Date: Effective immediately Corrective Action Plan: WWH’s Chief Operating Officer will be the single point person responsible for ensuring all federally funded procurements are managed properly and that all documentation is maintained. In addition, an extra step will be taken to duplicate the filing system for all federally funded procurements into the grants management files themselves.

Finding 2024-002 – Procurement and Suspension and Debarment Condition: Texas Biomed did not comply with procurement requirements per the Uniform Guidance. Specifically, Texas Biomed did not comply with informal procurement methods for small purchases and noncompetitive procurement requirements. Texas Biomed also did not comply with its own procurement policy in relation to procurements of small purchases and noncompetitive procurements. Additionally, Texas Biomed did not maintain records for certain procurements sufficient to detail the history of procurement, including the rationale for the method of procurement, selection of contract type, contractor selection or rejection, the basis for the contract price, and the performance of a cost or price analysis, when required. Three of the four procurements noted as findings were, in fact, sole source procurements but lacked timely documentation of sole source rationale. Corrective Action Plan: Texas Biomed made a change in management over the procurement function and hired an experienced and knowledgeable Assistant Director of Supply Chain Management on September 15, 2025 to oversee procurement and ensure compliance with the necessary requirements. To ensure compliance and adherence to purchasing policies and procedures, Texas Biomed will introduce a Purchasing Compliance Program. This program will include training and oversight procedures for the purchasing program. The training will include: new hire training, ongoing quarterly purchasing training for end users and purchasing staff. The purchasing team will maintain training documents and ensure new and existing employees have the most current policy, procedures, and requirements to guide them through the purchasing process. The oversight procedures will be performed by the Assistant Director of Supply Chain Management and shall include auditing purchase orders over the micro-purchase threshold to ensure proper documentation is present. The Assistant Director of Supply Chain Management will also lead efforts of continuous improvement to update and communicate the Purchasing Compliance Program to all Texas Biomed staff. Key dates shall include: • Enhanced new hire training October 2025 • Quarterly training session January 2026 • Oversight procedures developed November 2025 Responsible Parties: Eva Zepeda, Director, Finance; Eric McGowin, Assistant Director, Supply Chain Management Completion Date: October 31, 2025

We agree with the finding that internal controls were not sufficient to maintain compliance with federal procurement standards under Title 2, Subtitle A, Chapter II, Part 200, Subpart D, 200.318 to 200.327 for a non-federal entity. However, the funds were expended for the intended purpose of the federal award. The Health System is committed to implementing internal controls to ensure procurement related to federal awards follow 2 CFR section 200.318 to 200.327. The Health System will create a procurement policy to ensure it complies with the requirements of 2 CFR section 200.318 through 200.327, that includes the written standards of conduct covering conflicts of interest, governing the actions of its employees who select, award and administer procurement contracts. This policy will include procedures to ensure proper procurement for small purchases to ensure sufficient price quotations are obtained from the required number of qualified sources, proper sealed bids or proposals are obtained through public advertising, an appropriate cost or price analysis is performed for procurement actions exceeding the simplified acquisition threshold, documentation is retained, and proper oversight is exercised to demonstrate compliance with 2 CFR section 200.318 through 200.327. Contact Person: Daniel Cooper, Vice President of Finance and Accounting Expected Completion Date: December 31, 2025

Finding Number: 2024-003 Finding Title: Procurement, Suspension, and Debarment Program: 10.561 State Administrative Matching Grants for the Supplemental Nutrition Assistance Program Name of Contact Person Responsible for Corrective Action: Lisa DeBoer – Director of Business Management Jenny Severson – Fiscal Officer Tiffany Bailey – Fiscal Officer Corrective Action Planned: The planned corrective action is to improve and update the agency guidelines and policy for procurement and implement a process with supporting documentation that ensures federal requirements are met. Anticipated Completion Date: November 30, 2025

We agree with the finding that internal controls were not sufficient to maintain compliance with federal procurement standards under Title 2, Subtitle A, Chapter II, Part 200, Subpart D, 200.318 to 200.327 for a non-federal entity. However, the funds were expended for the intended purpose of the federal award. The Company is committed to implementing internal controls to ensure procurement related to federal awards follow 2 CFR section 200.318 to 200.327. The Company will update the procurement policy to ensure it complies with the requirements of 2 CFR section 200.318 through 200.327, that includes the written standards of conduct covering conflicts of interest, governing the actions of its employees who select, award and administer procurement contracts. This policy will include procedures to ensure proper procurement for small purchases to ensure sufficient price quotations are obtained from the required number of qualified sources, proper sealed bids or proposals are obtained through public advertising, an appropriate cost or price analysis is performed for procurement actions exceeding the simplified acquisition threshold, documentation is retained, and proper oversight is exercised to demonstrate compliance with 2 CFR section 200.318 through 200.327. While the Company did not perform a check of each vendor against the SAM Exclusions prior to selecting a vendor, the Company has procedures in place to ensure the vendors are approved by Corporate purchasing and in good standing, which limits the risk of conflict of interest between employees and vendors, and contracting with a vendor who is suspended or debarred from federal related contracting. Further, the Company confirmed the vendors that were contracted with were not included on the SAM Exclusions listing. Contact Person Michael Davis, Chief Financial Officer of Southern Regional Hospital Expected completion date: The procurement policy will be updated by September 30, 2025, and training will be provided to all employees who are relevant to the procurement process of federal contracts by December 31, 2025.

2024 – 007 – Procurement and Suspension and Debarment Federal Agency: Department of the Treasury Department of Interior Federal Program Title: Coronavirus State and Local Fiscal Recovery Funds (ARPA) Outdoor Recreation Acquisition, Development and Planning ALN: 21.027 15.916 Pass-Through Agency: Coronavirus State and Local Fiscal Recovery Funds (ARPA) N/A Outdoor Recreation Acquisition, Development and Planning Arizona State Park Trails Pass-Through Number(s): Coronavirus State and Local Fiscal Recovery Funds (ARPA) N/A Outdoor Recreation Acquisition, Development and Planning 04-007-652304 Award Number and Period: Coronavirus State and Local Fiscal Recovery Funds (ARPA) 1505-0271 3/3/2021 – 12/31/2024 Outdoor Recreation Acquisition, Development and Planning 04/18/2022-12/31/24 Statistically Valid Sample: No, and not intended to be a statistically valid sample Type of Finding: Material Weakness in Internal Control over Compliance and Noncompliance Condition/Context: Coronavirus State and Local Fiscal Recovery Funds (ARPA) – Audit procedures included selection and testing of five competitively procured vendor contracts. • Three out of five vendors tested for procurement did not provide support for the procurement method used, price/bid comparison, and cost analysis performed. • One out of five vendors tested did not have a valid contract on file. • Five out of five vendors tested did not provide support for the SAMS verification check that the winning vendor was not suspended nor debarred from receiving federal funds prior to awarding the contract. Outdoor Recreation Acquisition, Development and Planning – Audit procedures included selection and testing of five competitively procured vendor contracts. • Five out of five vendors tested for procurement did not provide sample support requested to test procurement method selected, price/bid comparison, and cost analysis performed. • Five out of five vendors tested did not provide support for the SAMS verification check that the winning vendor was not suspended nor debarred from receiving federal funds prior to awarding the contract.  FEDERAL AWARD FINDINGS (Continued) 2024 – 007 – Procurement and Suspension and Debarment (Continued) Corrective Action Plan: The City concurs with this finding. A restructuring is happening within the Finance Department. With the addition of the Grants Coordinator, this allows for the staff accountant to take on the duties of Procurement. The Procurement position was eliminated from the department in April 2019. The Procurement position will be responsible for oversight of all the City’s procurement processes. Anticipated completion date: December 2025 Contact Person: Mr. Joel Kramer, City Manager

Create a detailed, step-by-step process for federal procurement to ensure compliance and awareness among all staff responsible for spending and reporting federal funds. Washington Local Schools - Federal Grants Management Process Moving forward, the district will perform a cost/price analysis for procurement in excess of $250,000.

2024-001 Procurement Cluster: Not applicable Grantor: Department of Health and Human Services (DHHS) Award Name: Congressionally Directed Spending Award Number: 6 CE1HS52894‐01‐04, 6 CE1HS52345‐01‐05 Award Year: FY2024 Assistance Listing Number: 93.493 Assistance Listing Title: Congressional Directives Pass-through Entity: Not applicable In accordance with 2 CFR 200.318 the System must maintain procurement records of sufficient detail that include the rationale for the procurement method, contract type selection, contractor selection or rejection, and the basis for the contract price. For two of two of the auditors’ selections sufficient documentation was not retained from the time of procurement during fiscal year 2023 to demonstrate sole source justification or the competitive bidding process for these samples. For one mammography technology asset, documentation of sole source vendor justification was not documented and retained by the System following Policy HA-50-42, Capital Equipment Requests. For the second selection, while competitive bids were obtained, management did not adequately retain documentation to support the vendor ultimately selected for the selected hardware component and the other bids obtained. Management has reviewed the Capital Equipment Request policy and the related capital request process and will reinforce the need to adhere to existing policies and the importance of retaining appropriate documentation during fiscal year 2025. Primary responsibility of implementing the Corrective Action Plan for this finding rests with Brian Huggins, Senior Vice President of Finance, Corporate Controller, (508) 334-0252.

Condition: Controls were not sufficient to ensure that the history of procurement decisions was documented, as required by 2 CFR 200 and management's internal policies and procedures related to procurement, suspension, and debarment. Planned Corrective Action: Management agrees with the improvement of documentation of procurement, suspension, and debarment. As noted below, purchasing policies are being followed, but were not always formally documented. Careful consideration was done in selecting the vendors to look at obtaining the best cost for the value of the service as IWS was responsible for a portion of the expenses. The findings noted three procurement contracts that were more than $50,000 that did not properly document the rationale for selection and/or sole procurement. The first contract was a single source provider for the replacement of thermostats. Other heating and air conditioning vendors would not handle the replacement of the thermostats as it was not their equipment. There was also a preventative maintenance agreement with the vendor: Phoenix Heating and Air. We will document the use of a single source contractor as allowed in our purchasing policies. We did follow the other control procedures regarding contract approvals, obtaining Certificates of Insurance and verifying completion of the work. The second contract was related to our website and marketing company: Brand Vibe. We did an open bid process, two years earlier, and renewed the contract without a formal bid process. As mentioned above, we did follow the proper approval process and verified the work was completed. The total of this contract for FY 2024 was $74,665, however only $3,600 was charged against the federal grant. Going forward, we will document the rationale for renewing the contract. The third contract was for a bi-lingual APN, with a Psych. Certificate, who was a former employee. She wanted to work part-time, and we switched her to a 1099 employee. With her experience and work record, we allowed her to transition to a part-time contractor. Our experience finding bi-lingual providers has been difficult, and the agency costs are almost double the cost paid for this contractor. The amount charged to the Trauma-Informed Centers of Care was $47,769. In the future, we will formally document the selection and use of this contractor. As noted, we did have a formal contract. and all providers are approved by the Board. Management will make necessary revisions to the existing procurement processes and controls in a timely manner to ensure that procurement decisions are documented, as required by 2 CFR Part 200. Specifically, management will ensure the history of procurement - whether obtained through quotes, formal competitive bids, or through non-competitive means – is documented, including evidence that a cost-price analysis was performed for all purchases in excess of the simplified acquisition threshold. Additionally, before entering a covered transaction with third parties, management will have a form completed by the outside parties stating they are not suspended or debarred from engaging in federal activity before entering a covered transaction. This form will be retained, and we will check and document Sam.gov, excluded parties listing. Contact person responsible for corrective action: Karen L. Williams, Chief Financial Officer Anticipated Completion Date: 06/30/2025

MANAGEMENT VIEWS AND CORRECTIVE ACTION PLAN REPORT ON FEDERAL AWARDS IN ACCORDANCE WITH THE OMB UNIFORM GUIDANCE SEPTEMBER 30, 2024 Finding 2024-001 Procurement- Lack of Cost or Price Analysis Cluster: Research and Development, SNAP, and also applies to COVID-19 – Coronavirus State and Local Fiscal Recovery Funds, which is not a cluster Sponsoring Agency: Various agencies Award Names: DE-CR0000033, USDA-58-6010-9-011, WICHITA ST UN-23-01534, AL DHR-AGREE 4153-FY24, and ADF-RURAL HLTH INITIATIVE-OPS Award Numbers: 212514, 204805, 245195, 376563, and 223331 Assistance Listing Title: Cybersecurity, Energy Security & Emergency Response (CESER), Agricultural Research Basic and Applied Research, Other Financial Assistance, State Administrative Matching Grants for the Supplemental Nutrition Assistance Program, and COVID-19 – Coronavirus State and Local Fiscal Recovery Funds Assistance Listing Number: 81.008, 10.001, 12.RD, 10.561, and 21.027 Award Year: 2023 – 2024 To ensure Auburn University is in compliance with 2CFR 200.324, Auburn University will implement the following corrective action plan: In addition to our current policies that require three quotes for purchases between $15,000-$75,000 and a formal competitive bid for purchases greater than $75,000, Auburn University will revise our policies to require a cost or price analysis for items greater than $250,000, documenting that the purchase is reasonable. The items identified within the audit were either a Professional Service Contract, advertising services (which are both exempt from State of Alabama Bid Law) or a sole source purchase. For items greater than $250,000, we will include a certification on the Professional Services Contracts and the Sole Source request forms indicating an analysis of cost or price has occurred and that the purchase is reasonable. As part of the cost or price analysis, we will utilize available data points. In addition to our analysis, we will ensure that our reviews have been appropriately documented and included in our files. Prior to the implementation date noted below, we will review any purchases greater than $250,000 in fiscal year 2025 and ensure proper cost or price analysis is completed and documented. Contact: Missty Kennedy Chief Procurement Officer and Executive Director Procurement and Payment Services Amy Douglas Associate VP Financial Services/Controller Anticipated Completion Date: October 1, 2025

Name of Auditee: California Community Foundation (CCF) Audit Period: Year Ended June 30, 2024 Finding Reference #: 2024-001 – Procurement Finding Description: The Foundation did not document the required cost or price analysis for procurement actions exceeding the Simplified Acquisition Threshold prior to receiving bids or proposals, as required by 2 CFR 200.324 and 2 CFR 200.303. Corrective Action Planned: CCF acknowledges the finding and will enhance compliance with federal procurement standards by reinforcing staff training on cost and price analysis requirements, strengthening internal oversight mechanisms, and implementing a formalized process to ensure proper documentation is completed and retained. Periodic reviews and audits will verify adherence to these standards and maintain consistent implementation. Anticipated Completion Date: Corrective action will be implemented by November 30, 2024. Responsible Official(s): Jose Najera, Sr. Compliance & Operations Officer (213) 452-6218 - jnajera@calfund.org Management Comments: CCF remains committed to compliance with federal regulations and will take all necessary steps to ensure this issue is resolved. While existing procurement policies include the requirements noted in 2 CFR 200.324, these corrective actions will ensure that the implementation and documentation processes meet federal standards.