Corrective Action Plans

Career and Technical Education Response/Corrective Action Plan: The department agrees with this recommendation The department has developed a system to identify which subrecipients are subject to required audits and are tracking subrecipients to ensure timely submission of required audit reports and appropriate corrective actions. Contact Person: Wayde Sick, Director and Executive Officer and Gwen Ferderer, Finance Director Anticipated Completion Date: August 2024

Department of Public Instruction Response/Corrective Action Plan: We agree with the finding. We have updated our grant award templates to include all required information. Contact Person: Jamie Mertz, CFO Anticipated Completion Date: This has already been implemented effective 2/1/2025.

State Treasurer’s Office Response/Corrective Action Plan: The Office of State Treasurer does agree with finding that our grant award template did not make subrecipients aware of all required grant award information for the Mineral Leasing Act as required. The Office of State Treasurer will review and update its grant award templates to ensure that subrecipients are made aware of all required grant award information. Contact Person: Nicole Krivoruchka, Director of Finance Anticipated Completion Date: December 31, 2025

DHS: New Directions, Cash Grants The DHS Office of Income Maintenance (OIM) has implemented fiscal onsite monitoring starting October 1, 2024, which will be part of its regular program monitoring going forward. Anticipated Completion Date: 06/30/2025 Contact Name: Joel O’Donnell, Dir., Bureau of Prog. Support, OIM Alternatives to Abortion Despite repeated attempts and efforts by the DHS Office of Policy Development (OPD) to engage this subrecipient in monitoring activities, they were uncooperative and unresponsive to the requests and therefore regular monitoring was not completed. Effective December 31, 2023, the grant agreement with this subrecipient ended and was not renewed. Anticipated Completion Date: Completed Contact Name: Louie Marven, Executive Policy Specialist, OPD L&I: TANF Youth Development Program (TANF YDP) operations transitioned from the Bureau of Workforce Development Administration (BWDA) to the Bureau of Workforce Partnerships and Operations (BWPO) in January 2023. Due to this transition, BWPO did not conduct on-site monitoring of the TANF YDP program in program year 2023. BWPO did begin onsite monitoring in program year 2024 on a limited basis as a pilot with 3 local areas in September of 2024. BWPO plans to expand monitoring efforts in 2025 by aligning TANF YDP monitoring with the onsite WIOA Data Validation schedule. Larger areas will be monitored annually with smaller areas monitored on a 3-year rotating schedule concurrent with WIOA Data Validation which is expected to commence late summer or early fall 2025. BWPO intends to also facilitate exit meetings with each area monitored and provide a written communication within 45 days post monitoring to issue results, concerns, recommendations, and corrective actions as needed. The goal of monitoring activities is to ensure that TANF YDF funding is used for authorized purposes by subrecipients, in compliance with Federal statutes and regulations. Also, that the TANF YDP program is being implemented in accordance with current L&I policies and procedures. Anticipated Completion Date: 11/30/2025 Contact Name: Dorraine Rauch, Division Chief

PDOA: 1. Designing a means to follow-up and ensure timely action of deficiencies through an audit tracking log to monitor reporting submissions, document when they were received, initiated, findings requiring follow-up, and subsequent steps to finalize the audit. 2. Management decisions for applicable findings will be issued and tracked. 3. Improvements have been made with regards to regularity in reporting to more effectively monitor activities of subrecipients consistently with respect to Federal statutes and regulations. 4. PDOA is looking to fill a vacant position with a focus of tracking subrecipient expenditures in the aggregate and tracking single audit submissions on a Commonwealth-wide basis since the Aging Cluster program is material and has material sub-granted expenditures in NSIP and Title III. 5. It is PDOA’s impression that having increased oversight of the SEFA will allow for timely dissemination of management decision letters (MDL) in the six-month timeframe for making a management decision for federal award findings. 6. Discussions have started regarding considerations to take enforcement action against noncompliance by building language into the terms and conditions of the Cooperative Block Grant Agreements to exercise ability to withhold funding as approved in the Cost Allocation Plan. 7. PDOA has reached out to the BAFM to verify all outstanding audit items for PDOA since action is required within six months of receipt. 8. Follow-up procedures resulting from this finding will be reviewed and adjusted as needed to deliver optimal outcomes. Anticipated Completion Date: 06/30/2025 Contact Name: Jennifer Cave, Fiscal Management Specialist, PDOA Audit Liaison PDA: PDA has added a Financial Management Specialist 1 (FMS1) to its complement with the primary duty of agency audit liaison. The FMS1 will report to the PDA’s Budget Office. This is a new position and role within the department and has training and certification requirements to complete which will allow the position to: 1. Evaluate single audit report submissions received from BAFM to determine program purpose acceptability by verifying, at a minimum, that all agency-funded programs are properly included on the applicable financial schedules; that findings affecting the agency contain sufficient information to facilitate a management decision; and that the subrecipient has submitted an adequate corrective action plan. 2. Issue management decisions relative to audit findings and crosscutting findings assigned to the agency for resolution, as required by 2 CFR §200.521. If responsible for the resolution of crosscutting findings, notify the affected agency or agencies upon resolution of such findings. 3. Impose or coordinate the imposition of remedial action in accordance with 2 CFR Part 200.339 and Management Directive 325.08 Amended, Remedies for Recipient Noncompliance with Audit Requirements, when subrecipients fail to comply with the provisions of Subpart F. The new FMS1 will help ensure effective and efficient audit resolutions. This newly created position will also be responsible for the department wide audit tracking log that is in development. Anticipated Completion Date: 06/30/2025 Contact Name: Nichole Nedinsky, Fiscal Management Specialist, PDA Audit Coordinator PDE: The PDE Audit Section is working with divisions to develop processes to ensure timely responses. A training will be conducted by April 2025 on audit procedures, best practices, and federal regulations governing single audit management decisions. Anticipated Completion Date: 04/30/2025 Contact Names: Clayton P. Carroll II, Audit Coordinator; Jessica Sites, Director, Bureau Financial Operations DEP: DEP has updated the concur subrecipient letter to include the specific language related to the management decision that was previously in our non-concur letters. This ensures whichever template is used, the management decision and related finding information will be included in the subrecipient letter. Revised letters were sent to both subrecipients, in which DEP was the lead agency and had findings for in the audited timeframe. Staff are reviewing all the steps of our standard operating procedures to ensure we will be in compliance regardless of whether DEP is or is not the lead agency and regardless of whether we are preparing a concur or non-concur letter for the subrecipient. Anticipated Completion Date: 06/30/2025 Contact Names: Jennifer Brandt, Senior Fiscal Mgmt. Specialist; Kristen Szwajkowski, Lead Fiscal Mgmt. Specialist DHS: As stated in the DHS finding response, this was the result of human oversight, and not a systemic issue with internal controls. We have reminded staff to make sure that a management decision is timely communicated to subrecipients at the time of making the management decision. Anticipated Completion Date: Completed Contact Names: David Bryan, Mgr., Audit Res. Section; Alexander Matolyak, Dir., Div. of Audit & Rev.

DHS: TANF – Child Care All applicable federal Notice of Awards (NOAs), which include the Federal Award Identification Number, will be emailed to the grantees both prior to the spending period and as they become available for the spending as indicated on the NOA. They will also be included in the annual Audit Guidelines. Anticipated Completion Date: Completed Contact Names: Nia Harris, Dir, Bur. of Early Learning Res. Center Ops.; Adrienne Smyth, Human Service Prgm. Executive; Paula Piasecky, Human Serv. Prgm. Rep. TANF – Other The DHS Office of Policy Development (OPD) will perform risk assessments for all grantees annually. Anticipated Completion Date: 06/30/2025 The DHS Office of Income Maintenance (OIM) reestablished the completion of risk assessments in the fall of 2024 and has provisionally completed them for all subrecipients, including TANF – Other, for FY23-24. The risk assessments seek to test various financial controls of subrecipients based on their risk assessment scores and will also assist in ranking subrecipients across the risk continuum. Anticipated Completion Date: Completed Contact Names: Louie Marven, OPD, Exec. Policy Splst.; Sheldon Marcus, OIM, Dir., Div. of Mgmt. & Bgt.; Ron Seliga, OIM, Mgr., Fin. Planning; Judy Alfaro, OIM, Mgr., Financial Accountability; Laura Schlagnhaufer, OIM, Dir., Div. of Contr. Progs. & Sys. Social Services Block Grant (SSBG) OPD will provide all grantees receiving federal funding with a letter identifying federal award information and applicable requirements. OPD will provide this letter annually. Anticipated Completion Date: Completed Contact Name: Louie Marven, OPD, Exec. Policy Specialist DOH: DOH planned to develop and implement a robust subrecipient monitoring program which included establishing a new section within the Budget Office. The PA Legislature did not approve a budget with funding that could accommodate a new section. Alternatively, a consulting firm was engaged to perform a review of policies and procedures across the agency, including providing a gap analysis to determine compliance. A recommendation report is to be provided to DOH by March 31, 2025. DOH will initiate a comprehensive training plan for department staff based on the recommendation report. DOH will then develop training materials with an anticipated completion of June 30, 2025, with a goal to conduct training across the department by September 30, 2025. Anticipated Completion Date: 09/30/2025 Contact Name: Andrea Race, CFO PDA: PDA’s Bureau of Food Assistance (BFA) will develop a process to evaluate each subrecipient’s risk of noncompliance with federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. The evaluation will be based on Key Performance Indicators, such as leadership tenure; prior incidents of food spoilage; or qualitative feedback from clients served. If the evaluation determines that additional monitoring tools beyond the routine performance of on-site reviews of the subrecipient’s program operations are necessary, such conditions will be laid out in a separate letter communication to the sub-awardee. PDA will also develop and implement a system to document the evaluation of each subrecipients risk of noncompliance. Anticipated Completion Date: 09/30/2025 Contact Name: Caryn Long Earl, Director, Bureau of Food Assistance PDOA: Concerning the evaluation of each Subrecipient’s Risk of Noncompliance, PDOA has developed a new monitoring component, consisting of fifteen measurable elements, to actively monitor compliance of the 52 Area Agencies on Aging (AAA) subrecipients through a revised Phase IX monitoring tool. The revised tool, used by three Fiscal Field Representatives, includes a review of Program and Procurement, Contract Monitoring, Record Retention and Environmental Modifications. • Timelines have been established to evaluate each subrecipients risk of noncompliance with Federal statutes, regulations and the terms and conditions of their subaward. - The Bureau of Finance coordinated with the Bureau of Quality Assurance to ensure schedules do not conflict and become burdensome to the AAA network. - The Fiscal Representatives plan to follow-up on any Performance Issues identified within the succeeding 6-9 months as identified in the approved Cost Allocation Plan. - Prior to the start of a new State Fiscal Year, the Risk Assessment surveys are distributed to adequately evaluate each subrecipient’s risk of noncompliance timely. • PDOA has drafted a AAA Fiscal Monitoring process map to formally document the monitoring process which highlights the requirement to disseminate Risk Assessments. • PDOA has been working with the AAAs to correct reporting in preparation of the next round of monitoring to ensure accuracy of Financial Reporting requirements and Line-Item Budgets on record. • To avoid future deficiencies in compliance, revised risk assessments have been developed to evaluate each subrecipient’s risk of noncompliance to proactively address any weaknesses in internal controls over Federal programs. • Despite PDOA recognizing time and insufficient staffing as a barrier to achieving the goal of performing a risk assessment for every AAA, we have surpassed our expectation of reaching half at a minimum by conducting a full assessment of all 52 for fiscal year ending June 30, 2024. • PDOA confirmed the Comprehensive Aging Performance Evaluation (CAPE) approach to evaluations of aging services provided by AAAs a success and shifted it out of pilot status which features a fiscal component. • To best review internal controls for financial issues concerning the Aging Cluster, a fiscal component will be administered since multiple Federal funding streams are involved. • This finding has aided in our approach to the subrecipient section of contract language as the Cooperative Block Grants are actively being developed. The proposed policy addresses Subrecipient requirements in the Admin Chapter as opposed to the appendix as a result. Anticipated Completion Date: 06/30/2025 Contact Name: Jennifer Cave, Fiscal Management Specialist, PDOA Audit Liaison DDAP: DDAP understands the need to develop policies to ensure all required federal award information is disseminated to all subrecipients at the time of the subaward. DDAP currently includes the following federal award information in its grant agreements to subrecipients: • Subaward Period of Performance Start and End Date • Total amount of Federal funds obligated to the subrecipient • Total amount of the Federal award committed to the subrecipient • Name of Federal awarding agency, pass-through entity, and contact information for awarding official of pass-through entity • Assistance Listings Number (ALN) and title However, not all the required information is available at the time the grant agreements are executed, such as the Federal Award Identification Number (FAIN) and the Federal award date. To ensure subrecipients are compliant with the Uniform Guidance in 2 CFR Section 200 and other applicable federal regulations, DDAP will develop policies to ensure notification is sent to all subrecipients that includes all required federal award information once the information has been received through the Notice of Award from the Substance Abuse and Mental Health Services Administration (SAMHSA). • First draft of P&P and proposed letter to subrecipients: Person responsible - Ellie Stache and Tia Roebuck: Anticipated completion date - 03/28/2025 • Review of first draft and letter by Bureau Director: Person responsible - Marie Plumer, Director, Bureau of Administration: Anticipated completion date - 04/11/2025 • Revision to first drafts: Person responsible - Ellie Stache: Anticipated completion date - 04/25/2025 • Review of second drafts by Executive staff: Person responsible - Kelly Primus, Deputy Secretary: Anticipated completion date - 05/09/2025 • Revisions to second drafts: Person responsible - Ellie Stache: Anticipated completion date - 05/23/2025 • Final review by Bureau Director and Executive staff: Person responsible - Marie Plumer and Kelly Primus: Anticipated completion date - 06/06/2025 • Submission to auditor: Person responsible - Tia Roebuck: Anticipated completion date - 06/30/2025 Anticipated Completion Date: 06/30/2025 Contact Names: Tia Roebuck, Director, Division of Budget and Procurement; Ellie Stache, Section Chief, Fiscal Planning and Contractual Operations L&I: Once L&I’s Bureau of Workforce Development Administration (BWDA) identified that the incorrect funding source was listed on the Notice of Obligation (NOO) associated with the TANF Youth Development Program contract, BWDA updated the list of funding sources in the Commonwealth Workforce Development System to encompass ALN 93.558. This update was implemented on February 20, 2025, and the updated NOOs were disseminated through CWDS. This change ensures that all NOOs created under ALN 93.558 now and in the future will have the correct funding source listed for the subrecipient. Anticipated Completion Date: Completed Contact Names: Brenda Duppstadt, Director; Gordon Zook, Division Chief

Type of Finding: Material Weakness in Internal Control Over Compliance, Material Noncompliance (Modified Opinion) Condition: Kansas Division of Emergency Management (Management) did not issue subawards to subrecipients until after the fiscal year ended. Recommendation: We recommend that Management reviews and enhances its internal controls and procedures to ensure that subawards are issued timely to subrecipients, and that subawards include all required federal award information. Views of responsible officials: Management partially agrees with this finding. Although the 2023 2 CFR § 200.332 does state that the award letters should be sent at the time of the award, there needs to be some reasonableness to the interpretation of this regulation. KDEM currently has 13 open disasters with over 100 open projects and more being written. It is not reasonable to interpret that the award letters be sent on the date that the award is granted. Action taken in response to finding: Management will utilize the report run for FFATA to send award letters to sub-recipients. Name(s) of the contact person(s) responsible for corrective action: Jennifer Deal, Fiscal & Grants Management Section Chief Planned completion date for corrective action plan: Ongoing

COUNTY OF MERCED CORRECTIVE ACTION PLAN FOR THE YEAR ENDED JUNE 30, 2024 Federal Award Findings and Questioned Costs Finding 2024-001 – Procurements and Suspension and Debarment (Significant Deficiency) Management’s Response or Department’s Response Management agrees with the finding and recommendation. Views of Responsible Officials and Corrective Action The County has confirmed that the internal procurement process incorporates the verification that contractors are in possession of valid, applicable licenses and are not barred, suspended or otherwise excluded from receiving federal funds prior to engaging in contracted work. Reference to this process has not been regularly documented; going forward, verifications will be documented on the contract review cover sheet to further support the completion of the process. Copies of supporting documentation will be attached, when applicable, to demonstrate eligibility. Anticipated Completion Date/Completion Date April 2025 Contact Information of Responsible Official Name: Vanessa Anderson Title: Deputy County Executive Officer Phone: 209-385-7456

FINDING 2024-001 Contact Person Responsible for Corrective Action: Rachel Dutoi Contact Phone Number: 574-254-4503 Views of Responsible Official: We concur with the finding. Description of Corrective Action Plan: The amount transferred during the time period of July 1, 2024-December 31, 2024 will be transferred back to Fund 0800. This transfer will be done once the Form 9 for period 2 of 2024 is complete and the month of December is closed. An indirect cost rate for Fiscal Year 2026 has been applied for and this rate will be used to capture these costs from Fund 800 if approved beginning 7.1.2025. Anticipated Completion Date: The fund transfer back to Fund 0800 will occur by March 31, 2025. The claiming of the indirect cost rate will begin 7.31.2025 dependent upon the approval of the corporation’s indirect cost rate application.

Responsible Contact Person(s): Ousman Kah, Subrecipient Monitoring Coordinator Corrective Action Planned: A Grants Management solution is being pursued by DSS in anticipation that it can be deployed with Subrecipient Monitoring capabilities needed to comply with these requirements. A new budget request has been submitted for funding of a contingent Subrecipient Monitoring System solution. This will help bridge the deficiencies noted util an integrated permanent solution is implemented. Estimated Completion Date: 6/30/2025

Responsible Contact Person(s): Diana Clark, Associate Director Senior Corrective Action Planned: A spreadsheet to track monitoring activities by the BP SRM Coordinator was developed and implemented to ensure that Program Consultants adhere to the developed schedule. The BP SRM Coordinator reviews the completed audit documents to ensure that all required audit documents are uploaded to the enterprise management application timely and that reviews are conducted in accordance with the SRM Plan. A SRM monitoring desk tool will be created for Practice Consultants as a quick reference to the SRM Plan. Training for all Program Consultants conducting SRM will be provided on the new updated monitoring plan as well as ongoing training for newly hired Program Consultants. Estimated Completion Date: 3/31/2025

Responsible Contact Person(s): Diana Clark, Associate Director Senior Corrective Action Planned: A risk assessment tool was developed as part of the SFY2024 SRM Plan and will be implemented with the new plan. Risk Assessments were included in the FY2024 and FY2025 Business Plan Subrecipient Monitoring plans. Both the Regional Practice Consultants and Home Office staff completing SRM are required to complete Risk Assessments for the upcoming review year. DSS has found some issues with a few staff members not completely understanding the process; however, after additional trainings were completed, this should not occur with the FY2026 review cycle. Estimated Completion Date: 8/1/2025

Responsible Contact Person(s): Ousman Kah, Subrecipient Monitoring Coordinator Kevin Platea, Chief Information Officer Corrective Action Planned: A Grants Management solution is being pursued by DSS in anticipation that it can be deployed with Subrecipient Monitoring capabilities needed to comply with these requirements. A new budget request has been submitted for funding of a contingent Subrecipient Monitoring System solution. This will help bridge the deficiencies noted until an integrated permanent solution is implemented. Additionally, an interim solution is being considered where these subrecipients will be reviewed and tracked through a manual system. Estimated Completion Date: 6/30/2025

Responsible Contact Person(s): Michele Skaggs, Director of General Services Adrienne Childress, Strategic Sourcing Purchasing Manager Ousman Kah, Subrecipient Monitoring Coordinator Corrective Action Planned: DSS will dedicate the necessary resources to reviewing federal regulations to include all required information in subaward renewal agreements. Estimated Completion Date: 12/31/2025

Responsible Contact Person(s): Kimberly Boehme, OPGS Director Corrective Action Planned: Policies and procedures for grant management - to include subrecipient monitoring and FFATA reporting - will be revised. Oversight responsibilities will be determined for the Office of Grant Management, Office of Purchasing and General Services, and Office of Financial Management. Employees responsible for managing grants and subrecipients will receive training on the new process. Estimated Completion Date: 12/31/2025

FINDING 2024-002 Finding Subject: PPHF Geriatric Education Centers - Subrecipient Monitoring Summary of Finding: Audit Finding 2024-002 states that the University of Southern Indiana did not establish a system of internal controls to ensure that subrecipient audit reports are received and reviewed, when required, to ensure that subrecipients are properly monitored in accordance with Federal regulations. Contact Person Responsible for Corrective Action: Jina Platts, Assistant Vice President for Finance and Administration and Assistant Treasurer Contact Phone Number and Email Address: 812-465-7090; jlplatts@usi.edu Views of Responsible Officials: We concur with the finding that the University should have ensured that subrecipient audit reports were received and reviewed, when required, to ensure that subrecipients are properly monitored in accordance with Federal regulations. The University had other controls in place related to subrecipient monitoring including the review of financial reports and requests for reimbursement for subrecipient expenses. One purpose of collecting and reviewing subrecipient audit reports is to determine the level of monitoring required as high, medium, or low. Although the University treats all subrecipients as high risk, we are unable to issue a formal management decision to subrecipients within six months of acceptance of the audit report by the Federal Audit Clearinghouse without assurance that audit reports are received and reviewed in a timely manner. Description of Corrective Action Plan: The University will update subrecipient monitoring procedures as follows: 1. Upon issuance of a subaward, the Business Office will verify if a subrecipient is subject to single audit according to OMB Uniform Guidance. If so, the subrecipient must provide a complete copy of their most recent independent audit used to meet their OMB Uniform Guidance requirement or a link to their record on the Federal Audit Clearinghouse. 2. The Business Office will review the report to verify that there are no findings that may impact the proposed subaward. In the event there are such findings, the Business Office will notify the Office of Sponsored Projects & Research. Together the two offices will determine an appropriate plan of action and issue a Management Decision Letter as required by Uniform Guidance. 3. The Business Office will identify subrecipients receiving payments quarterly and verify that their most recent audit reports have been received and reviewed. Any audit reports completed after issuance of a subaward will be reviewed as described in #2 above. Anticipated Completion Date: Planned corrective actions to be implemented in January 2025.

MANAGEMENT’S CORRECTIVE ACTION PLAN 2 CFR § 200.511(c) June 30, 2024 Finding Number: 2024-001 – Internal Control over Compliance and Compliance with Period of Performance Planned Corrective Action: The errors identified took place during September 2023, during a period when the financial management of Council’s grants, including subrecipient monitoring and allowable cost review, were under the purview of the program teams. In May 2024, these responsibilities were deemed to be more appropriately aligned with the Finance and Business Operations Team’s skill sets and brought under that team’s management. Additionally, in December 2023, the accounts payable process was automated, enabling a more thorough review of each reimbursement package. Anticipated Completion Date: May 6, 2024 Responsible Contact Person: Stan Harrell, Chief Financial Officer

The Organization concurs with the finding and will implement the following: Develop additional policies and procedures that require documentation of subrecipient monitoring including a risk assessment for each subrecipient Revise all federal subrecipient contracts to include federal award identification number and the amount of federal funds awarded to each subrecipient Distribute policies and procedures and contract templates to all applicable finance and programmatic staff Train staff on the new policies and procedures

FINDINGS AND QUESTIONED COSTS – MAJOR FEDERAL AWARD PROGRAMS AUDIT 2024-001 Internal Controls Systems and Compliance Over Subrecipient Monitoring – U.S. Department of Treasury, COVID-19 Coronavirus State and Local Fiscal Recovery Funds, Passed Through the State of Nevada Department of Education Criteria: In accordance with 2 CFR 200.332(a)(1), the auditee must maintain a system of internal control to ensure information related to federal awards is clearly identified to the subrecipient at the time of the subaward and if any data elements change, include the changes in a subsequent subaward modification. Condition: The Organization receives funding for the Nevada Ready! program through the State of Nevada and the amount of funding provided by federal and state sources changes annually. The Organization did not identify that certain information required to be communicated for federally sourced awards was missing from the information provided to subrecipients for subawards they received during the year. Context: Nineteen preschool centers did not receive notification that the funding they received included funds that were federally sourced and additional information required to be communicated related to the federal funding was not provided. Cause: The design and implementation of internal controls over subrecipient monitoring was not effective. Effect: Not communicating the inclusion of federal funding in a subaward and all related requirements in a subaward to subrecipients could result in the subrecipients not complying with federal regulations. Recommendation: We recommend management design and implement a system of internal controls whereby every subaward that includes federal funding be clearly identified to the subrecipient as a federal subaward and include all data elements required to be provided to the subrecipient at the time of the subaward and if any of the data elements change, include the changes in a subsequent subaward modification. Views of Responsible Officials and Planned Corrective Action: We appreciate the identification of this compliance issue and are committed to addressing the finding with a robust corrective action plan. The following steps outline the measures we will take to ensure compliance with federal requirements for subrecipient monitoring under 2 CFR 200.332, effective June 30, 2024, and related guidance: 1. Implementation of Updated Grant Award Communication Procedures Future Grants to Centers: - We will estimate the amount of federal funds included in each grant and include this amount in the agreement at the time of award issuance. - Agreements will be updated to clearly delineate the specific requirements for both federal and state funds. - Each Center will acknowledge their responsibilities and obligations for federal and state funds, with detailed requirements provided for both funding sources. Annual Notifications: - A statement will be provided to each Center annually, clearly notifying them of the amount of federal funding included in their subaward. 2. Prioritization of FY24 Subrecipients - Upon receipt of these findings, immediate focus was placed on Nonprofit Centers, and we confirmed that none received more than $749,999 in federal awards (either directly as a recipient or indirectly as a subrecipient) in aggregate for all its projects during the fiscal year. - A statement will be provided to each Center annually, clearly notifying them of the amount of federal funding included in their subaward. - The corrective actions will be implemented by January 31, 2025. 3. FY25 Proactive Measures - Notifications of federal requirements and the Q1 statement for FY25 will be distributed by January 31, 2025. - We conducted an initial high-level overview of these updated requirements at the Director Training on November 15, 2024. - A comprehensive training session will follow in January 2025 to ensure all subrecipients fully understand their obligations under Uniform Guidance, including subaward identification and compliance monitoring. 4. Alignment with 2 CFR 200.332 Requirements for Pass-Through Entities In compliance with the updated requirements for pass-through entities under 2 CFR 200.332: -Each subaward will be clearly identified as a federal subaward and include all required data elements at the time of issuance. Any subsequent changes will be communicated through a formal subaward modification process. - Indirect cost rate requirements under 2 CFR 200.332 (i) will be explicitly addressed. Specifically: If the subrecipient has an approved federally recognized indirect cost rate, it will be honored. If no approved rate exists, we will collaborate with the subrecipient to determine an appropriate rate. This may include using a previously negotiated rate between the subrecipient and another pass-through entity, without requiring additional justification from the subrecipient. By implementing these measures, we will establish a robust system of internal controls to ensure full compliance with the Uniform Guidance and related federal requirements. We are confident these steps will address the identified issue and strengthen our subrecipient monitoring practices. Responsible Official: Samuel Rudd, President & CEO

NONCOMPLIANCE 2024-001 – SUBRECIPIENT MONITORING Recommendation: The auditors recommended the Organization maintain documentation that evidences its compliance with required subrecipient monitoring activities in accordance with 2 CFR 200. Actions Taken or Planned: Management will ensure results of risk assessment and monitoring are documented in writing annually. Person Responsible: Wayne Shen, Chief Operating Officer Estimated Date of Completion: January 31, 2025

Finding: The Foundation is not in compliance with recordkeeping for program monitoring and evaluation, as the Foundation did not comprehensively assess all subrecipients using risk-based/subrecipient monitoring policies and procedures. Staff were not aware of the extent of the requirements to monitor program and fiscal compliance of project sponsors and document results and evidence of compliance or noncompliance. Therefore, a number of project sponsors/subrecipients were not monitored. Corrective Action Taken or Planned: The Foundation has updated its Quality Management Plan to include comprehensive subrecipient monitoring policies. The Foundation’s Quality Management team is working with all programming to implement a robust monitoring process, including risk assessments, adherent to grantor regulations, service delivery, and program outcomes. Date of Completion: January, 2024 Name of Contact Person: Laurie Wettstead, Chief Finance Officer

2024-003 Contact Person Tonya Hunskor Planned Corrective Action The Cooperative will ensure proper subrecipient monitoring is implemented. Planned Completion Date June 30, 2025.

Funding Agency: U.S. Department of the Interior National Park Service. Assistance Listing Number: 15.954. Finding: Reporting - The Trust did not provide timely Federal Funding Accountability and Transparency Act (FFATA) reporting for ALN #15.954 subawards subject to the FFATA reporting requirements. Corrective Action Plan: The Trust agrees with the finding. The Trust will review all subawards for subrecipients and ensure that FFATA reporting is completed in a timely manner for subawards subject to the requirements. The Trust will add a clause in subawards stating this requirement and will submit FFATA reports immediately upon subaward disbursement. Responsible Official: Mike Hoehn, Senior Director of Finance and Administration Anticipated Completion Date: November 22, 2024

Funding Agency: Department of Commerce Assistance Listing Number: 11.469, 11.472 Finding: Reporting - The Commission did not provide timely Federal Funding Accountability and Transparency Act (FFATA) reporting for ALN #11.469 and #11.472 subawards subject to the FFATA reporting requirements. Corrective Action Plan: The Commission agrees with the finding. The Commission will review all subawards for subrecipients and ensure that FFATA reporting is completed in a timely manner for subawards subject to the requirements. The Commission will add a clause in our Sub-awards stating this requirement. Responsible Official: Laura Leach, Director of Finance and Administration Anticipated Completion Date: December 31, 2024

2024-004 Subaward Agreements The Center is the recipient of GEAR UP awards based on prior grant applications submitted with its related program partners which include local educational agencies and other partners. While the audit revealed that no formal agreement was in place during the audit year, the Center did have documentation in place with each partner that included a detailed budget, program operating procedures manual, partner commitment form signed by each partner’s superintendent of schools, program monthly meetings, onsite visits, and other activities stipulated in the grant. A new program requirement was published on August 29, 2024, as amended in 34 CFR 75.127 through 75.129 for future Partnership Grants Application and includes language related to a binding agreement. The Center will ensure all future grant applications comply with this new requirement. Proposed Completion Date: February 1, 2025 Name of contact person: Rumalda Ruiz, Deputy Director - Business, Operations, & School Finance Support Contact: (956) 984-6290