Corrective Action Plans

Management agrees with the finding. The Office of Sponsored Programs will conduct a review of the subrecipient issuance and monitoring process to ensure that roles and responsibilities regarding the timely monitoring of subrecipients' single audit reports are clear and that any personnel engaged in review of the single audit reports receives training regarding these activities.

2 CFR 1000.10 gives regulatory effect to the U.S. Department of Treasury for 2 CFR 200.332 which states, in part, pass-through entities must ensure every subaward includes requirements that the pass-through entity imposes on the subrecipient in order for the pass-through entity to meet its own responsibility to the Federal awarding agency including identification of any required financial and performance reports. The grant’s pass-through entity is the Ohio Office of Budget and Management (OBM). State Fiscal Recovery Funds K-12 School Safety Grants Frequently Asked Questions require recipient schools to complete quarterly financial status reports via the OBM grants portal until they have spent all funds and completed their projects. The District did not have proper internal controls in place to ensure the accurate completion and submission of the quarterly financial status reports. During testing of quarterly financial status reports for the Coronavirus State and Local Fiscal Recovery Funds (AL #21.027), we noted the quarterly financial status report for the period of July 1, 2023 through September 30, 2023 omitted $360,084 in grant expenditures paid during this period. Failure to have the proper controls in place to ensure the accurate submission of the quarterly financial status reports could result in Treasury taking action against the District for failure to comply with programmatic requirements. The District should implement and have controls in place to ensure the quarterly expenditure reports are accurate.

2024-003 Subrecipient Monitoring Responsible Official Mary Chase, Director of Finance Plan Detail Management plans to complete the fiscal year 2024 monitoring of its subrecipient and review its policies and procedures to ensure future monitoring of subrecipients is completed as least on an annual basis. Anticipated Completion Date The corrective action is in the process of being implemented and expected to be completed in fiscal year 2025.

Views of Responsible Officials: Management acknowledges the comment and, following the fiscal year-end, has implemented internal procedures to evaluate subrecipients. These procedures assess risk levels, determine the scope and frequency of monitoring, and ensure compliance with applicable Federal statutes and regulations.

Views of Responsible Officials and Planned Corrective Actions: We are committed to strengthening our internal controls and procedures to ensure full compliance with Uniform Guidance requirements. We also acknowledge that the audit waiver BRAC Bangladesh received from the USAID Mission in Bangladesh was not sufficient to exempt them from conducting a program-specific audit of the Department of State (BPRM) funded project, SPRMCO23CA0152. In response to the finding, BRAC Bangladesh has already conducted an audit of the project, which demonstrated that the financial statements and schedule of expenditures were free from material misstatements. Moving forward, we will amend our subagreement templates to include specific language around USG audit requirements, and the submission of audit reports will be included in the reporting section of the agreements. We will also update our Fiscal Policies and Procedures Manual to formalize the process for receiving and reviewing audit reports, and establishing follow-up procedures to resolve potential audit findings. We will also maintain clear documentation of the submission, review, and follow up of audits.

Finding No. 2024-002 21.027: COVID - 19: Coronavirus State and Local Fiscal Recovery Funds Personnel Responsible for Corrective Action: Name: Edith Robles Department: Finance Title: Director of Finance Anticipated Completion Date: June 30, 2025 Corrective Action Plan: An adequate subrecipient risk assessment policy will be put in place to evaluate and monitor subrecipients. Southwest Organizing Project will provide subrecipients with all required Federal awards identifiers. Edith Robles will ensure that Federal award identifiers are included in subrecipients grant agreements.

Reference Number: 2024-011 Prior Year Finding: No Federal Agency: U.S. Department of Transportation State Agency: Agency of Transportation Federal Program: Highway Planning and Construction Assistance Listing Number: 20.205 Award Number and Year: FFY2023 – FFY2024 Compliance Requirement: Subrecipient Monitoring Type of Finding: Significant Deficiency in Internal Control over Compliance, Other Matters Recommendation: VTrans should review and enhance internal controls and procedures to ensure that all required federal award information is included in subawards and that on-site subrecipient monitoring is conducted timely per the terms of its subrecipient monitoring plan. Views of responsible officials: Management agrees with the finding. Corrective Action Plan: Missing Federal Award Date: The Contract Administration, Grants Unit addressed the deficiency of missing federal award dates during the FY23 State Single Audit (in effect as of 1/12/2024). As part of the updated award execution process, the Grants Unit now verifies that all awards include the federal award date and applicable FAIN number. Awards executed prior to the implementation of this process are being updated during amendments to ensure compliance. Subrecipient Monitoring: The root cause of the subrecipient monitoring deficiency was staffing shortages, which affected the Agency of Transportations (AOT) ability to meet monitoring requirements on time. The AOT monitoring requirements have been transitioned from the Audit Bureau to the Contract Administration, Grants Unit. The Grants Unit has already identified and will prioritize Subrecipients based on the last date monitored. Workflow modifications to include efficiencies are also in progress. These efficiencies will help with timeliness. The revisions to the monitoring activities will be in the VTrans Granting Plan effective July 1, 2025. Scheduled Completion Date of Corrective Action Plan: All corrective actions will be implemented as of July 1, 2025. Contacts for Corrective Action Plan: Tricia Scribner, Administrative Services Manager III tricia.scribner@vermont.gov

Corrective action plan: N/A Implementation dates: N/A Responsible persons: Tim Urbanovsky, Director of Accounting & Financial Reporting Services

Corrective action plan: During discussions with HOME staff, it was determined that the IDIS system, used by the Single-Family Program division for HUD reporting, generates contract activity reports that should alleviate the discrepancy noted during this review. CMSM has requested read-only access to IDIS in order to generate a risk population. Implementation dates: The Department is pending review and approval of IDIS access for appropriate staff. Upon receiving IDIS access CMSM staff will coordinate with HOME staff for training. CMSM anticipates using IDIS in either the third or fourth quarter of the Department’s current fiscal year depending on HUD’s response. Responsible persons: Earnest Hunt, Director of Compliance Subrecipient Monitoring, Robert Moore, Manager of Compliance Subrecipient Monitoring and Ben Rose, Monitor.

Corrective action plan: TANF: The Early Childhood Intervention program will amend all out of compliance contracts to reflect the correct UEI information prior to end of fiscal year 2025. For each new contract moving forward, Program will update its internal contract development checklist to add an item to confirm the UEI is included and correct. SSBG: New contract development procedures will include updated templates that include the most current federal award requirements, including the documentation of UEI. Implementation dates: TANF: May 30, 2025 SSBG: September 1, 2025 Responsible persons: TANF: Janene Roch, Manager of Contracts and Finance, Early Childhood Intervention SSBG: Amy Pedersen, Director of Contracts, Fiscal and Data Management

Views of Responsible Officials and Planned Corrective Action: Current staff believes the 3 requirements listed above were not performed in the past. For remaining active SLFRF subgrants, ASBO will establish a fraud/risk/noncompliance rating and set appropriate monitoring standards. Should any new applications for SLFRF funding be procured, ASBO will require financial statements and a PE Stamp prior to grant agreement execution. ASBO will provide 2 CFR 200 training and ARC rules training to our staff and contractors. Anticipated Completion Date: April 1, 2025 Contact Person: Glen Howie, Jr. Director, Ark State Broadband Office Department of Commerce 1 Commerce Way Little Rock, AR 72202 (501) 682-1123 Glen.Howie@Arkansas.gov

Views of Responsible Officials and Planned Corrective Action: The Department will execute an amendment to the grant agreements for all ARPA funding not disbursed as of 7/1/2024 to include the missing data as detailed in the finding. Staff will be trained on Uniform Guidance requirements. Anticipated Completion Date: June 30, 2025 Contact Person: Debby Dickson Water Development Division Manager Arkansas Department of Agriculture-Natural Resources Division 1 Natural Resources Drive Little Rock, AR 72205 (501) 225-1598 Debra.Dickson@agriculture.arkansas.gov

Views of Responsible Officials and Planned Corrective Action: In 2023, ASBO sent out Amendment #1 for all SLFRF subgrants. This amendment was a one-page sheet providing information for all the requirements listed in 2 CFR § 200.332(a)(1). The subrecipient listed in this finding, Extreme Broadband, did not acknowledge or return their amendment. We will begin to request acknowledgement from this provider on a continuous quarterly basis. Anticipated Completion Date: March 4, 2025 Contact Person: Glen Howie, Jr. Director, Ark State Broadband Office Department of Commerce 1 Commerce Way Little Rock, AR 72202 (501) 682-1123 Glen.Howie@Arkansas.gov

Program: AL 20.509 – Formula Grants for Rural Areas – Allowability & Subrecipient Monitoring Corrective Action Plan: • NDOT will continue to enhance its financial review procedures to ensure that all subrecipients provide adequate supporting documentation for expenditures, including personnel charges and cost allocations. • Training sessions will continue to be conducted for subrecipients to reinforce compliance requirements related to allowable costs, proper documentation, and cost allocation methods. • Revised internal procedures will clarify expectations for travel costs, fuel charges, personnel reimbursements, and revenue reporting to prevent improper charges to the grant. • Assigning audit staff to conduct periodic sampling throughout the year enhances our ability to ensure costs are properly supported, adapt to necessary changes, and effectively communicate updates to our subrecipients. Contact: Jodi Gibson Anticipated Completion Date: NDOT appreciates the audit’s recommendations and remains committed to ensuring compliance with Federal requirements through strengthened internal controls and enhanced subrecipient oversight. This will be an ongoing and continual effort to address anticipated compliance requirements and evolving state and federal regulations.

Program: AL 15.611 – Wildlife Restoration and Basic Hunter Education and Safety – Allowability & Subrecipient Monitoring Corrective Action Plan: NGPC will continue to work closely with our subrecipients. We will review subrecipient monitoring procedures and determine documentation that can be provided to meet the intent of federal regulations. Contact: Eli Kass Anticipated Completion Date: July 1, 2025

Program: AL 97.036 – Disaster Grants – Public Assistance (Presidentially Declared Disasters) – Subrecipient Monitoring Corrective Action Plan: NEMA has implemented a process, effective immediately, to review the information submitted by subrecipient organizations regarding their 2 CFR Single Audit Certification. Responses will be cross-referenced with our own records of Federal funds passed through NEMA to the subrecipient. Any subrecipient responding that it was not required to conduct a single audit will prompt NEMA to validate against payment data. Any subrecipient’s noncompliance will be followed up by NEMA staff. Contact: Erv Portis Anticipated Completion Date: February 11, 2025

COMMONWEALTH OF PUERTO RICO CORRECTIVE ACTION PLAN MUNICIPALITY OF NARANJITO FOR THE FISCAL YEAR ENDED JUNE 30, 2024 Audit Report: Reports on Compliance and Internal Control in Accordance with Government Auditing Standards and 2 CFR 200 Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards Audit Period: July 1, 2023 – June 30, 2024 Fiscal Year: 2023-2024 Principal Executive: Hon. Orlando Ortíz Chevres - Mayor Contact Person: Mrs. Carmen López, Interim Finance Director Phone: (787) 869 – 2200 Original Finding Number: 2024-004 Statement of Concurrence or Nonconcurrence: We concur with the finding. Corrective Action: The Municipality appointed a person to work on all the required reports and instructed them on the deadlines that apply. We were able to submit all past reports on January 2025. And subsequently we are complying with the reporting requirements. Implementation Date: June 30, 2025 Responsible Person: Carmen I. López – Interim Finance Director

Views of Responsible Officials: Because the subawards were given to partners who NSF requested that ESA work with, it was not deemed necessary to perform the risk assessment. These will be done in the future. To address audit finding regarding subawardee risk assessments, ESA will create a defined risk assessment policy that will be implemented for all subawardees.

University System Response/Corrective Action Plan Agree. A new Subrecipient Policy and new Subrecipient Monitoring Procedure were put in place effective November 2024. In accordance with the new Policy and Procedure, risk assessments are being completed before subaward agreements are issued. Contact Person: Lauren Pite, Director Grants & Contracts Anticipated Completion Date: Completed

Career and Technical Education Response/Corrective Action Plan: The department agrees with this recommendation The department has: A. Communicated all required information of 2 CFR 200.332(b) to subrecipients B. Developed procedures to ensure grant agreement templates are updated and that all Coronavirus Capital Projects Fund award information is communicated to subrecipients C. Reissued grant agreements to outline the required information. Contact Person: Wayde Sick, Director and Executive Officer and Gwen Ferderer, Finance Director Anticipated Completion Date: September 2024

Career and Technical Education Response/Corrective Action Plan: The department agrees with this recommendation The department has developed a system to identify which subrecipients are subject to required audits and are tracking subrecipients to ensure timely submission of required audit reports and appropriate corrective actions. Contact Person: Wayde Sick, Director and Executive Officer and Gwen Ferderer, Finance Director Anticipated Completion Date: August 2024

Department of Public Instruction Response/Corrective Action Plan: We agree with the finding. We have updated our grant award templates to include all required information. Contact Person: Jamie Mertz, CFO Anticipated Completion Date: This has already been implemented effective 2/1/2025.

State Treasurer’s Office Response/Corrective Action Plan: The Office of State Treasurer does agree with finding that our grant award template did not make subrecipients aware of all required grant award information for the Mineral Leasing Act as required. The Office of State Treasurer will review and update its grant award templates to ensure that subrecipients are made aware of all required grant award information. Contact Person: Nicole Krivoruchka, Director of Finance Anticipated Completion Date: December 31, 2025

DHS: New Directions, Cash Grants The DHS Office of Income Maintenance (OIM) has implemented fiscal onsite monitoring starting October 1, 2024, which will be part of its regular program monitoring going forward. Anticipated Completion Date: 06/30/2025 Contact Name: Joel O’Donnell, Dir., Bureau of Prog. Support, OIM Alternatives to Abortion Despite repeated attempts and efforts by the DHS Office of Policy Development (OPD) to engage this subrecipient in monitoring activities, they were uncooperative and unresponsive to the requests and therefore regular monitoring was not completed. Effective December 31, 2023, the grant agreement with this subrecipient ended and was not renewed. Anticipated Completion Date: Completed Contact Name: Louie Marven, Executive Policy Specialist, OPD L&I: TANF Youth Development Program (TANF YDP) operations transitioned from the Bureau of Workforce Development Administration (BWDA) to the Bureau of Workforce Partnerships and Operations (BWPO) in January 2023. Due to this transition, BWPO did not conduct on-site monitoring of the TANF YDP program in program year 2023. BWPO did begin onsite monitoring in program year 2024 on a limited basis as a pilot with 3 local areas in September of 2024. BWPO plans to expand monitoring efforts in 2025 by aligning TANF YDP monitoring with the onsite WIOA Data Validation schedule. Larger areas will be monitored annually with smaller areas monitored on a 3-year rotating schedule concurrent with WIOA Data Validation which is expected to commence late summer or early fall 2025. BWPO intends to also facilitate exit meetings with each area monitored and provide a written communication within 45 days post monitoring to issue results, concerns, recommendations, and corrective actions as needed. The goal of monitoring activities is to ensure that TANF YDF funding is used for authorized purposes by subrecipients, in compliance with Federal statutes and regulations. Also, that the TANF YDP program is being implemented in accordance with current L&I policies and procedures. Anticipated Completion Date: 11/30/2025 Contact Name: Dorraine Rauch, Division Chief

PDOA: 1. Designing a means to follow-up and ensure timely action of deficiencies through an audit tracking log to monitor reporting submissions, document when they were received, initiated, findings requiring follow-up, and subsequent steps to finalize the audit. 2. Management decisions for applicable findings will be issued and tracked. 3. Improvements have been made with regards to regularity in reporting to more effectively monitor activities of subrecipients consistently with respect to Federal statutes and regulations. 4. PDOA is looking to fill a vacant position with a focus of tracking subrecipient expenditures in the aggregate and tracking single audit submissions on a Commonwealth-wide basis since the Aging Cluster program is material and has material sub-granted expenditures in NSIP and Title III. 5. It is PDOA’s impression that having increased oversight of the SEFA will allow for timely dissemination of management decision letters (MDL) in the six-month timeframe for making a management decision for federal award findings. 6. Discussions have started regarding considerations to take enforcement action against noncompliance by building language into the terms and conditions of the Cooperative Block Grant Agreements to exercise ability to withhold funding as approved in the Cost Allocation Plan. 7. PDOA has reached out to the BAFM to verify all outstanding audit items for PDOA since action is required within six months of receipt. 8. Follow-up procedures resulting from this finding will be reviewed and adjusted as needed to deliver optimal outcomes. Anticipated Completion Date: 06/30/2025 Contact Name: Jennifer Cave, Fiscal Management Specialist, PDOA Audit Liaison PDA: PDA has added a Financial Management Specialist 1 (FMS1) to its complement with the primary duty of agency audit liaison. The FMS1 will report to the PDA’s Budget Office. This is a new position and role within the department and has training and certification requirements to complete which will allow the position to: 1. Evaluate single audit report submissions received from BAFM to determine program purpose acceptability by verifying, at a minimum, that all agency-funded programs are properly included on the applicable financial schedules; that findings affecting the agency contain sufficient information to facilitate a management decision; and that the subrecipient has submitted an adequate corrective action plan. 2. Issue management decisions relative to audit findings and crosscutting findings assigned to the agency for resolution, as required by 2 CFR §200.521. If responsible for the resolution of crosscutting findings, notify the affected agency or agencies upon resolution of such findings. 3. Impose or coordinate the imposition of remedial action in accordance with 2 CFR Part 200.339 and Management Directive 325.08 Amended, Remedies for Recipient Noncompliance with Audit Requirements, when subrecipients fail to comply with the provisions of Subpart F. The new FMS1 will help ensure effective and efficient audit resolutions. This newly created position will also be responsible for the department wide audit tracking log that is in development. Anticipated Completion Date: 06/30/2025 Contact Name: Nichole Nedinsky, Fiscal Management Specialist, PDA Audit Coordinator PDE: The PDE Audit Section is working with divisions to develop processes to ensure timely responses. A training will be conducted by April 2025 on audit procedures, best practices, and federal regulations governing single audit management decisions. Anticipated Completion Date: 04/30/2025 Contact Names: Clayton P. Carroll II, Audit Coordinator; Jessica Sites, Director, Bureau Financial Operations DEP: DEP has updated the concur subrecipient letter to include the specific language related to the management decision that was previously in our non-concur letters. This ensures whichever template is used, the management decision and related finding information will be included in the subrecipient letter. Revised letters were sent to both subrecipients, in which DEP was the lead agency and had findings for in the audited timeframe. Staff are reviewing all the steps of our standard operating procedures to ensure we will be in compliance regardless of whether DEP is or is not the lead agency and regardless of whether we are preparing a concur or non-concur letter for the subrecipient. Anticipated Completion Date: 06/30/2025 Contact Names: Jennifer Brandt, Senior Fiscal Mgmt. Specialist; Kristen Szwajkowski, Lead Fiscal Mgmt. Specialist DHS: As stated in the DHS finding response, this was the result of human oversight, and not a systemic issue with internal controls. We have reminded staff to make sure that a management decision is timely communicated to subrecipients at the time of making the management decision. Anticipated Completion Date: Completed Contact Names: David Bryan, Mgr., Audit Res. Section; Alexander Matolyak, Dir., Div. of Audit & Rev.