Corrective Action Plans

Reporting – Financial and Performance Assistance Listing Number 14.251 – Economic Development Initiative, Community Project Funding, and Miscellaneous Grants U.S. Department of Housing and Urban Development (HUD) Federal Award Identification Number(s): B-22-CP-CO-0165 and B-23-CP-CO-0280 Award Year – 2022 and 2023 Condition: During testing, it was noted that the semiannual performance reports required to be submitted during calendar year 2025 were not submitted by the required deadlines. The reports, which were due in January 2025 and July 2025, were not submitted until September 2025. As a result, the Grantee did not submit required financial and performance reports within the timeframe prescribed by the grant agreement and 2 CFR §§ 200.328 and 200.329. Additionally, management could not provide evidence of review for one of the reports. Planned Corrective Action: Departments that administer grants will establish and maintain a grant tracking process to identify required reporting, due dates, and personnel responsible for the completion and review of the required reporting. This tracking process will be documented and shared with the Controller’s Office. In addition, Departments will maintain documentation of the review and approval of reports as part of the grant documentation. City of Aurora Responsible Party: Stephanie Keiper, Homelessness Division Manager; Matthew Kipp, Manager of Business Services; Tim Sherbondy, Grant Compliance Officer; and Tyra Litzau, Controller Anticipated Completion Date: March 31, 2027

Due to the organization’s transition period, the reports were submitted late. After the new Finance Director started in June 25, 2025. In January 30, 2026, we received system access, all reports were submitted on February 4, 2026. This matter was presented in the most recent focus Area II monitoring by the Agency, with no complaints noted. We will request additional system access for reporting purposes in case the person responsible is unavailable. Contact Person: Carlos Rivera Nora Boschetti Team: Finance Team Anticipated Completion Date: September 30, 2026

2025 – 003 Community Development Block Grant (CDBG) – Assistance Listing 14.218 – Reporting Name of Contact Person Responsible for Corrective Action Plan: Wanzina Jackson, Economic and Community Development Director Corrective Action Plan: Management will implement a process to ensure all required reports are submitted as required in a timely manner. Anticipated Completion Date: Fiscal year 2026

Audit Finding Reference: 2025-002 Improve Controls Over Reporting Planned Corrective Action: Director of Operations & Impact created an 18-month reporting deliverables schedule and is reviewed quarterly on 9/22/25. The schedule of reporting deliverables has been added to a dedicated calendar in SharePoint, shared with the President and programs team staff, and a series of reminders and notifications are integrated into the system. The system itself will be reviewed every six months going forward to address any technological issues and make recommendations for improved functionality. Planned Implementation Date of Corrective Action: 9/22/25 Person Responsible for Corrective Action: Director of Operations & Impact

Finding 2025-005 Late Reporting and Noncompliance with Reporting Requirements Name of Contact Person: Amber Jusefowytsch / Kim Newman / Anna Simmons Corrective Action Plan: A calendar of required reporting dates will be created with a one-month reminder to all involved parties to mitigate last minute issues with reporting compliance. Proposed Completion Date: This finding and corrective action plan have been reached near the end of FY26, the calendar will be implemented by December 31st, 2026 but we anticipate a similar finding for FY26.

Corrective Action Plan: The Community Development department will establish written procedures for federal performance reporting that includes a reporting calendar, assigned responsibilities, supervisory review, verification against grant and financial records, timely submission and retention of documentation demonstrating federal acceptance. The written policy will be reviewed annually and updated as needed. All Community Development staff will be trained on the procedures upon implementation and when updates are made. Responsible Individual: Joseph Maiorana, Assistant Community Development Project Supervisor, Town of Riverhead, is the employee responsible for development and implementation of the procedures for the EPA grant and any other existing grants specifically assigned to him. Dawn Thomas, Town of Riverhead Community Development Director, will be the employee responsible for review and supervision to ensure that the corrective action plan is implemented by all staff and that all written policies and procedures are adhered to for all existing and future grants. Planned Date of Implementation: September 30, 2026

FINDING 2025-003 Sherry Lockard, 812-283-1500, slockard@townofclarksville.com A. Coronavirus State and Local Fiscal Recovery Funds (IDOH fire dept grant) The Town concurs with the finding. INDIANA STATE BOARD OF ACCOUNTS 23 The Town will create a form for the Fire Department to use to have a second person review any reporting and requests for reimbursements when federal funds are involved. The form will be an attachment at the end of this document, therefore no further action is necessary.

Reporting California Governor’s Office of Emergency Services Based on CSA's Federal Compliance Audit Report for the Fiscal Year Ended June 30, 2024 - Finding 2024-020, Cal OES revised its FFATA reporting procedures and has taken several actions to strengthen internal controls, resolve discrepancies among reporting systems, and ensure staff are fully trained to maintain compliance with all FFATA reporting requirements. In March of 2025, Cal OES developed the Financial Administrative Branch (FAB) FFATA SOP (Attachment #1) for FFATA reporting which outlines steps for collecting subrecipient data, preparing reports, and submitting reports within the required time frames. In addition, Cal OES enhanced its existing FFATA reporting procedures using a software platform to provide accurate data reports for federally funded grant projects. These reports are then used to ensure accurate reporting and timely updates to existing FFATA records. To ensure clear assignment of accountability, Cal OES FAB analysts are responsible for completing and submitting FFATA reporting accurately, with all required fields completed, and obtaining review and approval from their respective peer reviewer analysts and managers to verify accuracy and completeness. Furthermore, in June of 2025, Cal OES FAB staff were provided with a comprehensive FFATA training course to ensure staff understand the process and reporting requirements for FFATA (Attachment #2). Cal OES continues to provide training for staff responsible for submitting FFATA reports during onboarding and on an as-needed basis. Because the revised FFATA reporting procedures were not fully implemented by the close of Fiscal Year 2024-2025, Cal OES was not able to capture all projects concluding the reporting cycle. Moreover, the procedures have been fully implemented and in effect since the start of Fiscal Year 2025-2026. Estimated Implementation Date: Implemented Contact: - Heidi Palchik, Chief, Recovery Financial Administration Branch lnteragency, Recovery Coordination Section

Reporting California Department of Social Services CDSS will implement improved procedures and consider if a grant management solution would be feasible and necessary. CDSS has already begun establishing a process that determines and documents whether funding actions are reportable subrecipients or contractors. CDSS has also begun establishing a field within the CDSS accounting system that identifies subrecipients at the contract level so this data is automatically included when extracted for FFATA reporting, which will ensure reports are submitted accurately and timely. CDSS is also developing a Federal Reporting Dashboard to track all grants with FFATA reporting requirements, including due dates and completion status. Additionally, CDSS will designate a primary point and a backup person within the Federal Reporting Section to monitor all FFATA reporting deadlines. This designated staff member will issue 45 days advance notifications to the grant owner and reviewing manager, set calendar reminders for grant owners, and provide regular status updates to Accounting Management. To strengthen timely compliance, these reminders will also instruct grant owners to complete the FFATA submission 10 days before the federal deadline, ensuring sufficient time to resolve any errors that may occur during the upload process. Estimated Implementation Date: November 2026 Contact: - Rosali Bautista, Chief, Accounting and Reporting Bureau, Accounting and Fiscal Systems Branch, Finance and Accounting Division

Special Tests and Provisions California Department of Social Services CDSS agrees in part and disagrees in part with this finding. Section 10.1 of the State Plan, “Effective Internal Controls” which establishes the review cycle for CDSS’s monitoring activities inadvertently contains a conflicting timing requirement for contractor reviews. This finding is based upon the language in subsection 10.1.2 “Fiscal management practices,” which states that CDSS must conduct contract monitoring review of each contracting agency every three years. However, subsection 10.1.1 “Organizational structure to support integrity and internal controls,” and the related regulation in Title 5 California Code of Regulations Section 18023(b), both require onsite monitoring every three years, or as resources permit. Importantly, CDSS conducts an annual risk assessment and schedules monitoring visits based on both contractor risk level and time since previous review. Staffing constraints required prioritizing higher-risk contractors, which resulted in two lower-risk contractors not receiving onsite monitoring within a threeyear review cycle. This was not due to a lack of internal controls, but a strategic decision based on resource levels, level of risk, and within the allowable parameters of Subsection 10.1.1 of the State Plan. CDSS will correct this section within the State Plan to ensure that it is clear that all contract monitoring is subject to the same every three years, or as resources permit, requirement. Estimated Implementation Date: October 2027 Contact: - Jeff Fowler, Child Care Administration Bureau Chief Central Operations Branch, Child Care and Development Division

Reporting California Department of Social Services CDSS agrees with this finding and has already begun developing appropriate procedures that will support this recommendation, using the CCDF program area as a model. CDSS will implement improved procedures and consider if a grant management solution would be feasible and necessary. CDSS has already begun establishing a process that determines and documents whether funding actions are reportable subrecipients or contractors. CDSS has also begun establishing a field within the CDSS accounting system that identifies subrecipients at the contract level so this data is automatically included when extracted for FFATA reporting, which will ensure reports are submitted accurately and timely. CDSS is also developing a Federal Reporting Dashboard to track all grants with FFATA reporting requirements, including due dates and completion status. Additionally, CDSS will designate a primary point and a backup person within the Federal Reporting Section to monitor all FFATA reporting deadlines. This designated staff member will issue 45 days advance notifications to the grant owner and reviewing manager, set calendar reminders for grant owners, and provide regular status updates to Accounting Management. To strengthen timely compliance, these reminders will also instruct grant owners to complete the FFATA submission 10 days before the federal deadline, ensuring sufficient time to resolve any errors that may occur during the upload process. Estimated Implementation Date: November 2026 Contact: - Jeff Fowler, Child Care Administration Bureau Chief Central Operations Branch, Child Care and Development Division - Rosali Bautista, Chief, Accounting and Reporting Bureau, Accounting and Fiscal Systems Branch, Finance and Accounting Division

Reporting California Department of Social Services CDSS does not agree with this finding and its characterization as an ACF-696 reporting inaccuracy. The discrepancy between the ACF-696 and the general ledger is primarily due to timing differences. The ACF-696 was due on July 30, 2025, and relies on preliminary figures that were prepared before final cost allocations and accruals were posted. In contrast, the general ledger is based on the final expenditure data, including all adjustments, and finalized in September 2025. Any discrepancies or adjustments from the June 2025 quarter were reported in the following quarter. The Administration for Children and Families has confirmed with CDSS Accounting that the current practice of reflecting these adjustments in the subsequent quarter for federal reporting is acceptable. CDSS began performing the reconciliation of the ACF-696 and the general ledger following the close of FY 2024–25. However, completion of this process was delayed due to an unprecedented volume of ongoing audit activities and the significant demands associated with supporting the Department, the California Health and Human Services Agency, the continual flux of federal funding changes, and federal shutdown preparedness drills. CDSS submitted a Budget Change Proposal in response to the previous audit finding 2024-015 to complete this reconciliation between ACF-696 and the general ledger. This request has been approved, and we are in the process of hiring for this position. Once this position is filled, responsibility for the reconciliation activities will be transferred to the newly assigned staff member to ensure consistent oversight, timely completion, and ongoing maintenance of the reconciliation process. Estimated Implementation Date: September 2026 Contact: - Rosali Bautista, Chief, Accounting and Reporting Bureau, Accounting and Fiscal Systems Branch, Finance and Accounting Division

Reporting California Department of Social Services CDSS does not agree with this finding that the FFATA reporting deadline was not met for the subaward reporting for all 58 counties for the Foster Care grant. The FFY 2025 FFATA report was originally submitted on November 27, 2024, which met the federal submission deadline of November 30, 2024. During this initial submission, however, data lines for two counties failed to upload into the legacy FSRS.gov system and required additional research. The corrected data was subsequently submitted on December 10, 2024. Since that time, FSRS.gov has migrated to SAM.gov, and the new system only displays the most recent submission date as the official record. It appears that SAM.gov does not retain or display the historical log of submissions FSRS.gov. As a result, the system reflects only the December 10 submission date, even though the original, timely submission occurred on November 27, 2024. CDSS is developing a Federal Reporting Dashboard to track all grants with FFATA reporting requirements, including due dates and completion status. Additionally, CDSS will designate a primary point and a backup person within the Federal Reporting Section to monitor all FFATA reporting deadlines. This designated staff member will issue 45 days advance notifications to the grant owner and reviewing manager, set calendar reminders for grant owners, and provide regular status updates to Accounting Management. To strengthen timely compliance, these reminders will also instruct grant owners to complete the FFATA submission 10 days before the federal deadline, ensuring sufficient time to resolve any errors that may occur during the upload process. Estimated Implementation Date: November 2026 Contact: - Rosali Bautista, Chief, Accounting and Reporting Bureau, Accounting and Fiscal Systems Branch, Finance and Accounting Division

Subrecipient Monitoring California Department of Public Health The California Department of Public Health (CDPH) agrees with this finding. CDPH has not yet formalized procedures governing the issuance of Direct Allocation Letters. CDPH is currently developing a comprehensive process in collaboration with the Program Support Division and the Office of Legal Services to ensure compliance with federal audit requirements and state contracting guidelines. The revised procedures will require each Direct Allocation Letter to include the applicable Assistance Listing Number (ALN) and Federal Award Identification Number (FAIN). CDPH is prioritizing this effort and expects to publish written procedures that establish consistent practices and provide clear guidance to ensure compliance with all applicable requirements. Estimated Implementation Date: December 2026 Contact: - Louise Karsten, Emergency Funding Coordination Branch Manager, Center for Preparedness and Response

Reporting California Department of Aging California Department of Aging (CDA) partially agrees with this finding as this was a prior audit finding that was communicated to CDA. CDA has implemented corrective actions in response to that finding, but the actions were implemented during the scope of this current audit. The cause of the lack of FFATA reporting was due to a lack of staffing for the reporting responsibilities. CDA has already created processes and procedures and is continuing to update them as more information is available or roles and responsibilities change within the Budget Team. CDA hired an employee in April 2024 to fulfill the FFATA duties and CDA has been able to keep current with FFATA reporting. In addition, CDA has recently updated the FFATA procedures to include a Review and Approval process and to include a process for identifying when FFATA reporting needs to be completed. This process involves multiple members of the Budget Team depending upon the program. Since this has been a recent update to the procedures, this will not be in effect if there is an audit next year. In addition, the analyst assigned to FFATA reporting is continually monitoring the Federal website (SAM.gov) for any additional training or guidance. Please note that FFATA reporting has been converted to SAM.gov and the FSRS website mentioned in the Reporting Requirements is no longer valid. Any links for training that were on the FRSR website are no longer valid and can’t be viewed. Estimated Implementation Date: Procedures and processes updated July 2026. Contact: - Kim Elliott, Chief Budget Officer

Reporting Employment Development Department Recognizing the finding does not include any questioned costs, EDD agrees that during the sampled time period it did not have a formal reconciliation process to ensure Form 9130 reports align with the general ledger. As a result, differences emerged between the amounts reported on the Form 9130 and those reflected in the Administrative Fund (0870) general ledger. Since then, EDD’s Fiscal Programs Division (FPD) formed a workgroup at the end of 2025 to identify key staff responsible for establishing a formal reconciliation process. This effort is documented in an artifact titled, General Ledger 9130 to SEFA Recon Procedure (Final)’. The workgroup consisted of representatives from the Budget and Forecasting Section and the Accounting Section and resulted in the creation of a draft reconciliation procedure. FPD assigned Accounting Section personnel to lead the overall process, including coordinating deadlines, reviewing completed reconciliations, and ensuring any issues are investigated and resolved. Budget and Forecasting Section staff are responsible for providing accurate and timely expenditure data, while the Accounting Section prepares the reconciliations and documents any variances. In addition, EDD provided initial training to staff to ensure a consistent understanding of the new procedures and responsibilities. In late May 2026, EDD began its first pilot testing of the new reconciliation procedure using data from the quarter ending March 2026. The pilot was successful, and EDD has finalized the reconciliation procedures and distributed them to all relevant staff. Estimated Implementation Date: Currently implemented Contact: - Diane Underwood, Division Chief, Unemployment Insurance Branch

Reporting California Department of Social Services California Department of Social Services (CDSS) agrees with this finding. CDSS is developing a Federal Reporting Dashboard to monitor all federal reporting requirements, including due dates and completion status. This dashboard will be used by both staff and management to track upcoming deadlines and ensure timely submission of all federal reports. While the dashboard is still in development, the preparer and reviewer of the FNS-46 have implemented interim controls by setting calendar reminders for the FNS-46 reporting deadlines. Estimated Implementation Date: October 2026 Contact: - Rosali Bautista, Chief, Accounting and Reporting Bureau, Accounting and Fiscal Systems Branch, Finance and Accounting Division

Reporting California Department of Education Partially Concur. The Department agrees that timely submission of FFATA reports is an important requisite. However, the circumstances that triggered the late submission were created by the control agency shifting to a new system without ensuring it met everyone’s needs, not by a lack of Department staffing or resources. Nevertheless, to strengthen existing procedures, the Department will review processes and determine if contingency procedures are appropriate and feasible. Management will also continue to monitor federal system changes, document implementation challenges, and maintain communication with federal agencies to ensure awareness of external system limitations that could affect reporting timelines. The Department will continue to work with the U.S. General Services Administration on automated reporting solutions to mitigate any future late submittals and to ensure timely submission of all FFATA reports. Estimated Implementation Date: September 30, 2026 Contact: - Yiping Hu, Accounting Administrator, Fiscal and Administrative Services Division

Finding Summary: Material noncompliance was noted in reporting as reported amounts did not agree to underlying supporting documentation. Responsible Individuals: Kim Clay, Corporate Controller and Paul DiTomasso, Site`2 Controller Corrective Action Plan: Management will review and improve internal controls over reporting to ensure that reported amounts agree to underlying supporting documentation. Anticipated Completion Date: June 30, 2026

The Department of Community Development will implement the following corrective measures using existing systems, including exploring the capabilities of Amplifund, the City’s grant management software, to address the finding and to establish a durable compliance framework for all federal grant reporting obligations: 1. Designation of a Federal Grants Compliance Officer;2. Staff Training and Cross-Training;3. Grants Management and Reporting Calendar Reminders;4. Federal Portal Access Redundancy and Technical Escalation Protocol; and5. Internal Compliance Audits.

The Board of County Commissioners will ensure that the reports are accurate and reported in the proper period.

Finding No. 2025-006 – Internal control deficiencies over accounting for federal funds received from the United States Department of Homeland Security (DHS) Corrective Action Plan Single Audit 2025 Page 6 April 30, 2026 Condition During our procedures over the Authority’s funds received from FEMA we noticed the following: 1. Return of interest earned on FEMA-related funds totaling approximately $211,853 was not timely recorded in the general ledger and was subsequently recorded through a post-closing entry dated January 26, 2026. 2. Management initially misclassified approximately $6 million received under the Coronavirus State and Local Fiscal Recovery Funds as state funds rather than federal awards. As a result, the amount was originally excluded from the Schedule of Expenditures of Federal Awards (the Schedule). Views of Responsible Officials and Corrective Actions It should be noted that, although certain funds received were not properly identified as working capital advances, those funds were properly considered as received from FEMA through the COR-3 office of the Government of Puerto Rico. This situation basically arises because the federal funds coming from FEMA are being handled by outside consultants, without any coordination with the Federal Funds Management Office (FFMO). The Authority’s management will ensure that, in the future, the FFMO will coordinate with the assigned outside consultants all the efforts necessary for the proper handling, identification and classification of funds received from FEMA. Name(s) of the Contact Person(s) Responsible for Corrective Action Romel Pedraza Claudio. P.E. – Assistant Executive Director for Planning & Engineering Elena González – DEA Finance Miguel La Torre – Interim Finance Director Anticipated Completion Date During FY-2026-2027

Finding 2025-002 Federal Agency Name: U.S. Department of Treasury Program Name: Coronavirus State and Local Fiscal Recovery Funds FFALN # 21.027 Finding Summary: Eide Bailly LLP prepared our single audit for Federal Coronavirus State and Local Fiscal Recovery Funds where the Town is a subrecipient to Douglas County who is the recipient of the funds. Eide Bailly LLP identified that the Town did not have documented or consistently applied internal controls to ensure compliance with the County’s subrecipient guidance requiring the submission of formal special reports for ALN 21.027. Responsible Individuals: Mark Henderson, Assistant Director of Castle Rock Water Corrective Action Plan: Staff will complete quarterly reports including project progress and estimated project infrastructure costs. The reports will be reviewed by management prior to submission to the recipient of the Federal Funds (Douglas County). Anticipated Completion Date: Ongoing during the period that the Town is a subrecipient of these funds for the project.

Subject: 2025 Single Audit Finding 2025-004 2025-004 Management Response: Management acknowledges the finding. DEMRS did not submit the required quarterly financial and performance reports to the Illinois Emergency Management Agency (IEMA) for the Homeland Security Grant Program during the fiscal year. Root Cause Analysis: Over multiple years, DEMRS experienced significant turnover in key finance and grant management positions, which created gaps in continuity and delayed the department's transition to IEMA's Amplifund reporting system. As prior management departed and new staff were onboarded, the department faced operational challenges that affected the consistency of its grant reporting processes. Due to Amplifund's requirement that reimbursement requests be submitted sequentially before performance reports can be filed, the delays in prior period submissions prevented DEMRS from accessing and submitting the quarterly reports. Statewide pauses in FEMA and IEMA grant processing further contributed to the backlog. Corrective Action: DEMRS will complete and submit all outstanding reimbursement requests and performance reports for UASI 2022, UASI 2023, and UASI 2024 to bring the County into full compliance with grantor requirements. Preventive Action: DEMRS will implement a grants compliance calendar that tracks all reporting deadlines. Future reports will be prepared by the Manager of Grants & Contracts and reviewed and approved by the Associate Director of Finance, with documented evidence of review. Responsible Party: Damian Albert, Associate Director of Finance, damian.albert@cookcountyil.gov. 312.603.8177 Tina Bhaga, Manager, Grants & Contracts, tina.bhaga@cookcountyil.gov, 312.603.8543 Planned Completion Date: January 1, 2027

The City will review due dates to ensure proper reporting requirements are met.