Corrective Action Plans

Department: Labor Title: Internal control over CSLFRF subrecipient risk evaluation procedures needs improvement Questioned Costs: None Status: Corrective action in progress Corrective Action: The Department will evaluate and establish procedures to assess risk at the appropriate level for subrecipients. Completion Date: June 30, 2025 Agency Contact: Kimberley Moore, Director, Bureau of Employment Services, DOL, 207-620-0183

Department: Administrative and Financial Services Title: Internal control over CSLFRF reporting needs improvement Questioned Costs: None Status: Corrective action in progress Corrective Action: The Security and Employment Service Center will review contracts with the agencies to verify the classifications. Completion Date: June 30, 2025 Agency Contact: Marilyn Leimbach, Director, Security and Employment Service Center, DFPS, DAFS, 207-248-2556

Department: Professional and Financial Regulation Title: Internal control over HAF Program subrecipient monitoring needs improvement Questioned Costs: None Status: Corrective action in progress Corrective Action: The Department will continue to engage the services of a third-party vendor for subrecipient monitoring. Completion Date: March 6, 2025 Agency Contact: Rachel Hendsbee, Director Administrative Services Division, PFR, 207-624-8500

Department: Education Title: Internal control over CNC subrecipient monitoring procedures needs improvement Questioned Costs: None Status: Corrective action in progress Corrective Action: The Department will implement a monthly status check of the current tracking tool to ensure compliance with the review The Department will update the current high-risk procedure. The Department will develop a procedure for evaluating base year reviews and add a procedure for timelines for adjustments to the claims. Completion Date: July 1, 2025, September 1, 2025, and June 1, 2025, respectively Agency Contact: Jane McLucas, Director of Child Nutrition, DOE, 207-624-6880

Concur. Due to key vacant positions and the inability to fill these positions, the required subrecipient monitoring activities were not completed during the fiscal year ending June 30, 2024. During the current fiscal year, the County has been successful in recruiting these positions and will ensure that the monitoring activities occur. In addition, policies and procedures will be documented on subrecipient monitoring activities to ensure that they are performed on a regular basis.

Management agrees with the finding. The Office of Sponsored Programs will conduct a review of the subrecipient issuance and monitoring process to ensure that roles and responsibilities regarding the timely monitoring of subrecipients' single audit reports are clear and that any personnel engaged in review of the single audit reports receives training regarding these activities.

2 CFR 1000.10 gives regulatory effect to the U.S. Department of Treasury for 2 CFR 200.332 which states, in part, pass-through entities must ensure every subaward includes requirements that the pass-through entity imposes on the subrecipient in order for the pass-through entity to meet its own responsibility to the Federal awarding agency including identification of any required financial and performance reports. The grant’s pass-through entity is the Ohio Office of Budget and Management (OBM). State Fiscal Recovery Funds K-12 School Safety Grants Frequently Asked Questions require recipient schools to complete quarterly financial status reports via the OBM grants portal until they have spent all funds and completed their projects. The District did not have proper internal controls in place to ensure the accurate completion and submission of the quarterly financial status reports. During testing of quarterly financial status reports for the Coronavirus State and Local Fiscal Recovery Funds (AL #21.027), we noted the quarterly financial status report for the period of July 1, 2023 through September 30, 2023 omitted $360,084 in grant expenditures paid during this period. Failure to have the proper controls in place to ensure the accurate submission of the quarterly financial status reports could result in Treasury taking action against the District for failure to comply with programmatic requirements. The District should implement and have controls in place to ensure the quarterly expenditure reports are accurate.

2024-003 Subrecipient Monitoring Responsible Official Mary Chase, Director of Finance Plan Detail Management plans to complete the fiscal year 2024 monitoring of its subrecipient and review its policies and procedures to ensure future monitoring of subrecipients is completed as least on an annual basis. Anticipated Completion Date The corrective action is in the process of being implemented and expected to be completed in fiscal year 2025.

Views of Responsible Officials: Management acknowledges the comment and, following the fiscal year-end, has implemented internal procedures to evaluate subrecipients. These procedures assess risk levels, determine the scope and frequency of monitoring, and ensure compliance with applicable Federal statutes and regulations.

Views of Responsible Officials and Planned Corrective Actions: We are committed to strengthening our internal controls and procedures to ensure full compliance with Uniform Guidance requirements. We also acknowledge that the audit waiver BRAC Bangladesh received from the USAID Mission in Bangladesh was not sufficient to exempt them from conducting a program-specific audit of the Department of State (BPRM) funded project, SPRMCO23CA0152. In response to the finding, BRAC Bangladesh has already conducted an audit of the project, which demonstrated that the financial statements and schedule of expenditures were free from material misstatements. Moving forward, we will amend our subagreement templates to include specific language around USG audit requirements, and the submission of audit reports will be included in the reporting section of the agreements. We will also update our Fiscal Policies and Procedures Manual to formalize the process for receiving and reviewing audit reports, and establishing follow-up procedures to resolve potential audit findings. We will also maintain clear documentation of the submission, review, and follow up of audits.

Finding No. 2024-002 21.027: COVID - 19: Coronavirus State and Local Fiscal Recovery Funds Personnel Responsible for Corrective Action: Name: Edith Robles Department: Finance Title: Director of Finance Anticipated Completion Date: June 30, 2025 Corrective Action Plan: An adequate subrecipient risk assessment policy will be put in place to evaluate and monitor subrecipients. Southwest Organizing Project will provide subrecipients with all required Federal awards identifiers. Edith Robles will ensure that Federal award identifiers are included in subrecipients grant agreements.

Reference Number: 2024-011 Prior Year Finding: No Federal Agency: U.S. Department of Transportation State Agency: Agency of Transportation Federal Program: Highway Planning and Construction Assistance Listing Number: 20.205 Award Number and Year: FFY2023 – FFY2024 Compliance Requirement: Subrecipient Monitoring Type of Finding: Significant Deficiency in Internal Control over Compliance, Other Matters Recommendation: VTrans should review and enhance internal controls and procedures to ensure that all required federal award information is included in subawards and that on-site subrecipient monitoring is conducted timely per the terms of its subrecipient monitoring plan. Views of responsible officials: Management agrees with the finding. Corrective Action Plan: Missing Federal Award Date: The Contract Administration, Grants Unit addressed the deficiency of missing federal award dates during the FY23 State Single Audit (in effect as of 1/12/2024). As part of the updated award execution process, the Grants Unit now verifies that all awards include the federal award date and applicable FAIN number. Awards executed prior to the implementation of this process are being updated during amendments to ensure compliance. Subrecipient Monitoring: The root cause of the subrecipient monitoring deficiency was staffing shortages, which affected the Agency of Transportations (AOT) ability to meet monitoring requirements on time. The AOT monitoring requirements have been transitioned from the Audit Bureau to the Contract Administration, Grants Unit. The Grants Unit has already identified and will prioritize Subrecipients based on the last date monitored. Workflow modifications to include efficiencies are also in progress. These efficiencies will help with timeliness. The revisions to the monitoring activities will be in the VTrans Granting Plan effective July 1, 2025. Scheduled Completion Date of Corrective Action Plan: All corrective actions will be implemented as of July 1, 2025. Contacts for Corrective Action Plan: Tricia Scribner, Administrative Services Manager III tricia.scribner@vermont.gov

Corrective action plan: N/A Implementation dates: N/A Responsible persons: Tim Urbanovsky, Director of Accounting & Financial Reporting Services

Corrective action plan: During discussions with HOME staff, it was determined that the IDIS system, used by the Single-Family Program division for HUD reporting, generates contract activity reports that should alleviate the discrepancy noted during this review. CMSM has requested read-only access to IDIS in order to generate a risk population. Implementation dates: The Department is pending review and approval of IDIS access for appropriate staff. Upon receiving IDIS access CMSM staff will coordinate with HOME staff for training. CMSM anticipates using IDIS in either the third or fourth quarter of the Department’s current fiscal year depending on HUD’s response. Responsible persons: Earnest Hunt, Director of Compliance Subrecipient Monitoring, Robert Moore, Manager of Compliance Subrecipient Monitoring and Ben Rose, Monitor.

Corrective action plan: TANF: The Early Childhood Intervention program will amend all out of compliance contracts to reflect the correct UEI information prior to end of fiscal year 2025. For each new contract moving forward, Program will update its internal contract development checklist to add an item to confirm the UEI is included and correct. SSBG: New contract development procedures will include updated templates that include the most current federal award requirements, including the documentation of UEI. Implementation dates: TANF: May 30, 2025 SSBG: September 1, 2025 Responsible persons: TANF: Janene Roch, Manager of Contracts and Finance, Early Childhood Intervention SSBG: Amy Pedersen, Director of Contracts, Fiscal and Data Management

Views of Responsible Officials and Planned Corrective Action: Current staff believes the 3 requirements listed above were not performed in the past. For remaining active SLFRF subgrants, ASBO will establish a fraud/risk/noncompliance rating and set appropriate monitoring standards. Should any new applications for SLFRF funding be procured, ASBO will require financial statements and a PE Stamp prior to grant agreement execution. ASBO will provide 2 CFR 200 training and ARC rules training to our staff and contractors. Anticipated Completion Date: April 1, 2025 Contact Person: Glen Howie, Jr. Director, Ark State Broadband Office Department of Commerce 1 Commerce Way Little Rock, AR 72202 (501) 682-1123 Glen.Howie@Arkansas.gov

Views of Responsible Officials and Planned Corrective Action: The Department will execute an amendment to the grant agreements for all ARPA funding not disbursed as of 7/1/2024 to include the missing data as detailed in the finding. Staff will be trained on Uniform Guidance requirements. Anticipated Completion Date: June 30, 2025 Contact Person: Debby Dickson Water Development Division Manager Arkansas Department of Agriculture-Natural Resources Division 1 Natural Resources Drive Little Rock, AR 72205 (501) 225-1598 Debra.Dickson@agriculture.arkansas.gov

Views of Responsible Officials and Planned Corrective Action: In 2023, ASBO sent out Amendment #1 for all SLFRF subgrants. This amendment was a one-page sheet providing information for all the requirements listed in 2 CFR § 200.332(a)(1). The subrecipient listed in this finding, Extreme Broadband, did not acknowledge or return their amendment. We will begin to request acknowledgement from this provider on a continuous quarterly basis. Anticipated Completion Date: March 4, 2025 Contact Person: Glen Howie, Jr. Director, Ark State Broadband Office Department of Commerce 1 Commerce Way Little Rock, AR 72202 (501) 682-1123 Glen.Howie@Arkansas.gov

Program: AL 20.509 – Formula Grants for Rural Areas – Allowability & Subrecipient Monitoring Corrective Action Plan: • NDOT will continue to enhance its financial review procedures to ensure that all subrecipients provide adequate supporting documentation for expenditures, including personnel charges and cost allocations. • Training sessions will continue to be conducted for subrecipients to reinforce compliance requirements related to allowable costs, proper documentation, and cost allocation methods. • Revised internal procedures will clarify expectations for travel costs, fuel charges, personnel reimbursements, and revenue reporting to prevent improper charges to the grant. • Assigning audit staff to conduct periodic sampling throughout the year enhances our ability to ensure costs are properly supported, adapt to necessary changes, and effectively communicate updates to our subrecipients. Contact: Jodi Gibson Anticipated Completion Date: NDOT appreciates the audit’s recommendations and remains committed to ensuring compliance with Federal requirements through strengthened internal controls and enhanced subrecipient oversight. This will be an ongoing and continual effort to address anticipated compliance requirements and evolving state and federal regulations.

Program: AL 15.611 – Wildlife Restoration and Basic Hunter Education and Safety – Allowability & Subrecipient Monitoring Corrective Action Plan: NGPC will continue to work closely with our subrecipients. We will review subrecipient monitoring procedures and determine documentation that can be provided to meet the intent of federal regulations. Contact: Eli Kass Anticipated Completion Date: July 1, 2025

Program: AL 97.036 – Disaster Grants – Public Assistance (Presidentially Declared Disasters) – Subrecipient Monitoring Corrective Action Plan: NEMA has implemented a process, effective immediately, to review the information submitted by subrecipient organizations regarding their 2 CFR Single Audit Certification. Responses will be cross-referenced with our own records of Federal funds passed through NEMA to the subrecipient. Any subrecipient responding that it was not required to conduct a single audit will prompt NEMA to validate against payment data. Any subrecipient’s noncompliance will be followed up by NEMA staff. Contact: Erv Portis Anticipated Completion Date: February 11, 2025

COMMONWEALTH OF PUERTO RICO CORRECTIVE ACTION PLAN MUNICIPALITY OF NARANJITO FOR THE FISCAL YEAR ENDED JUNE 30, 2024 Audit Report: Reports on Compliance and Internal Control in Accordance with Government Auditing Standards and 2 CFR 200 Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards Audit Period: July 1, 2023 – June 30, 2024 Fiscal Year: 2023-2024 Principal Executive: Hon. Orlando Ortíz Chevres - Mayor Contact Person: Mrs. Carmen López, Interim Finance Director Phone: (787) 869 – 2200 Original Finding Number: 2024-004 Statement of Concurrence or Nonconcurrence: We concur with the finding. Corrective Action: The Municipality appointed a person to work on all the required reports and instructed them on the deadlines that apply. We were able to submit all past reports on January 2025. And subsequently we are complying with the reporting requirements. Implementation Date: June 30, 2025 Responsible Person: Carmen I. López – Interim Finance Director

Views of Responsible Officials: Because the subawards were given to partners who NSF requested that ESA work with, it was not deemed necessary to perform the risk assessment. These will be done in the future. To address audit finding regarding subawardee risk assessments, ESA will create a defined risk assessment policy that will be implemented for all subawardees.

University System Response/Corrective Action Plan Agree. A new Subrecipient Policy and new Subrecipient Monitoring Procedure were put in place effective November 2024. In accordance with the new Policy and Procedure, risk assessments are being completed before subaward agreements are issued. Contact Person: Lauren Pite, Director Grants & Contracts Anticipated Completion Date: Completed

Career and Technical Education Response/Corrective Action Plan: The department agrees with this recommendation The department has: A. Communicated all required information of 2 CFR 200.332(b) to subrecipients B. Developed procedures to ensure grant agreement templates are updated and that all Coronavirus Capital Projects Fund award information is communicated to subrecipients C. Reissued grant agreements to outline the required information. Contact Person: Wayde Sick, Director and Executive Officer and Gwen Ferderer, Finance Director Anticipated Completion Date: September 2024