Corrective Action Plans

2025-003 Lack of Formal Subrecipient Monitoring Criteria: According to 2 CFR §200.332 (Requirements for Pass-Through Entities), a pass-through entity must monitor the activities of subrecipients as necessary to ensure that federal funds are used for authorized purposes and in compliance with applicable statutes, regulations, and terms and conditions of the Federal award. Required monitoring includes, but is not limited to, the following: a. Reviewing financial and programmatic reports; b. Performing risk assessments of subrecipients; c. Following up on deficiencies identified through audits or reviews; and d. Ensuring subrecipients have required audits under 2 CFR §200.501. Lack of documented subrecipient monitoring constitutes noncompliance with Uniform Guidance. Client Response: While the organization was in constant contact with subrecipients regarding the progress of their programming, those meetings were not transcribed. In the future, the organization will require mid year and year-end impact reports from each grant subrecipient. Proposed Implementation Date – 12/31/2025 Name of Contact Person – John Edwards, Sr. Email: jledwards@umadaop.org Phone: 419-255-4444

Views of Responsible Officials: In practice, BRAC USA has consistently evaluated subrecipient risk prior to issuing subawards by considering factors such as prior experience with similar awards, historical audit results, organizational capacity, and financial stability. However, we acknowledge that these assessments were not formalized or consistently documented in a standardized format, as required by 2 CFR § 200.332(c). To address this gap, BRAC USA will develop and implement written procedures and a standardized subrecipient risk assessment tool to be completed and filed prior to issuing Federal subawards. The tool will capture required criteria, including prior audit results, prior performance under similar awards, financial stability indicators, internal control considerations, and any recent staffing or systems changes. These procedures will be incorporated into BRAC USA’s Fiscal Policies and Procedures Manual. The results of each risk assessment will be used to tailor the level and nature of ongoing subrecipient monitoring, and records will be maintained in the grant file to evidence compliance with 2 CFR § 200.332(c). Planned Completion Date: April 30, 2026

The following actions will be taken to ensure compliance with the Uniform Guidance requirements over internal controls: Management concurs with the finding. Effective immediately, The Greater Washington Community Foundation has implemented the following corrective actions: (1) Prior to entering into any subaward agreement involving federal funds as well as at the time of each payment, designated staff will verify that potential subrecipients are not suspended or debarred by conducting searches in the System for Award Management (SAM) at www.sam.gov, with documentation maintained in the grant file. This verification will also be performed when subaward agreements are amended or extended. (2) The standard subaward agreement template will be updated to include all required information specified in 2 CFR §200.332(b)(1), including the federal assistance listing number, subrecipient's unique entity identifier, federal award project description, amount of federal funds obligated, total federal award amount, applicable compliance requirements, and reporting and monitoring requirements. To strengthen ongoing compliance, the Foundation's procurement and cash management policies have been updated to incorporate these federal compliance requirements and will be reviewed annually. Given that federal funding is not received on a recurring basis, upon receipt of future federal funding, the Controller will serve as the Compliance Coordinator with full oversight of compliance activities. The Controller will review applicable federal regulations, update internal procedures as necessary, and provide comprehensive training to appropriate staff managing the contract to ensure adherence to all grant requirements. The finance team will complete a quarterly review process to verify that all active federal subawards contain required compliance elements, with the Controller maintaining oversight of this review and reporting any deficiencies to the Chief Financial Officer for immediate remediation. Individual Responsible for Corrective Action Plan: Contact: Rachel Crawford Title: Controller Phone Number: 202-303-2437 Estimated Completion Date: December 31, 2025

Finding Number: 2025-001 Condition: The Authority did not provide sufficient evidence that there was adequate monitoring of subrecipients. Planned Corrective Action: SMART has implemented a subrecipient review schedule and created a monitoring checklist. All entities receiving any passthrough funding from SMART are included on the schedule. This will ensure no missed subrecipients, including Monroe agencies. The new checklist will ensure all required monitoring activities are considered during the review and will document all monitoring performed. SMART believes this new schedule and checklist will satisfy all federal monitoring requirements. Contact person responsible for corrective action: Ryan Byrne, CFO; Allyssa Gartrelle, Manager of Community Mobility Programs Anticipated Completion Date: 6/30/2026

Item: 2025-002 Assistance Listing Number: 93.332 Program: Cooperative Agreement to Support Navigators in Federally-Facilitated Exchanges Federal Agency: U.S. Department of Health and Human Services Pass-Through Agencies: N/A Pass-Through Grantor Identifying Number: N/A Award Year: August 27, 2021 through August 26, 2024; August 27, 2024 through August 26, 2029 Compliance Requirement: Subrecipient Monitoring Criteria: In accordance with 2 CFR 200.332 (e), (g) and (h) - pass-through entities must monitor subrecipient activity through reviewing financial and performance reports, verifying that subrecipients are audited if they meet the single audit criteria, and ensure that subrecipients take corrective action on single audit findings. Condition: While AACHC performed several of the required subrecipient monitoring tasks, AACHC’s system of internal controls did not include a process to monitor the subrecipients’ financial and performance reports by verifying that subrecipients are audited if they meet the single audit criteria, and ensure that subrecipients take corrective action on single audit findings. Name of Contact Person: Brenda Hanserd, CFO Phone Number: 602-288-7559 Anticipated Completion Date: March 31, 2026 Views of Responsible Officials and Corrective Action Plan: AACHC will update their subrecipient monitoring policies and procedures to specifically include a process to monitor subrecipient activity through reviewing financial and performance reports, verifying that subrecipients are audited if they meet the single audit criteria, and ensure that subrecipients take corrective action on single audit findings. AACHC will also regularly attend trainings on the Uniform Guidance to ensure they are knowledge of the required compliance procedures.

Item: 2025-001 Assistance Listing Number: 21.027 Program: COVID-19 – Coronavirus State and Local Fiscal Recovery Funds Federal Agency: U.S. Department of the Treasury Pass-Through Agencies: Maricopa County Pass-Through Grantor Identifying Number: None Award Year: November 1, 2021 through September 30, 2026 Compliance Requirement: Subrecipient Monitoring Criteria: In accordance with 2 CFR 200.332 (e), (g) and (h) - pass-through entities must monitor subrecipient activity through reviewing financial and performance reports, verifying that subrecipients are audited if they meet the single audit criteria, and ensure that subrecipients take corrective action on single audit findings. Condition: While AACHC performed several of the required subrecipient monitoring tasks, AACHC’s system of internal controls did not include a process to monitor the subrecipients’ financial and performance reports by verifying that subrecipients are audited if they meet the single audit criteria, and ensure that subrecipients take corrective action on single audit findings. Name of Contact Person: Brenda Hanserd, CFO Phone Number: 602-288-7559 Anticipated Completion Date: March 31, 2026 Views of Responsible Officials and Corrective Action Plan: AACHC will update their subrecipient monitoring policies and procedures to specifically include a process to monitor subrecipient activity through reviewing financial and performance reports, verifying that subrecipients are audited if they meet the single audit criteria, and ensure that subrecipients take corrective action on single audit findings. AACHC will also regularly attend trainings on the Uniform Guidance to ensure they are knowledge of the required compliance procedures.

Undocumented Subrecipient Monitoring Recommendation: We recommend that the Alliance establishes a formal policy for subrecipient monitoring in accordance with requirements outlined in 2 CFR §200.331 and 2 CFR §200.332 to ensure its sub-recipients are properly monitored. Explanation of disagreement with audit finding: There is no disagreement with the audit finding. Action taken in response to finding: The Alliance did monitor the subrecipients, but the documentation was not properly saved. This policy has since been revised to save the monitoring documentation to the grant management software. Name of the contact person responsible for corrective action: Lisa Wolf Planned completion date for corrective action plan: July 1st 2026

The Board of County Commissioners will take measures to ensure future compliance with all requirements of federal grants.

Finding No.: 2024-031 Subrecipient Monitoring Responding Agency: Bureau of Budget and Management Research (BBMR) Responsible Personnel: Lester Carlson, Director BBMR will create Standard Operating Procedures as well as a checklist, to assist in the monitoring of subrecipient compliance.

Finding No.: 2024-028 Subrecipient Monitoring Responding Agency: Department of Administration (DOA) Responsible Personnel: Edward M. Birn, Director The Agency disagrees with this finding. Please refer to a letter dated March 31, 2026, regarding Reports on Compliance September 30, 2024.

Finding No.: 2024-016 Subrecipient Monitoring Responding Agency: Bureau of Budget and Management Research (BBMR) Responsible Personnel: Lester Carlson, Director BBMR will create Standard Operating Procedures as well as a checklist, to assist in the monitoring of subrecipient compliance.

SUBRECIPIENT MONITORING ALN Number 93.558 Temporary Assistance for Needy Families (TANF) 93.489. 93.575. 93.596 Child Care Development Fund (CCDF) 93.568 Low Income Household Energy Assistance Program (LII-IEAP) 2024-039 Strengthen Controls over Subrecipient Monitoring to Ensure Compliance with Uniform Guidance Auditing Requirement . Federal Award No. All Current Active Grants Response : MDHS concurs that controls should be strengthened over subrecipient monitoring to ensure compliance with Uniform Guidance Auditing Requirements. Corrective Action Plan: 1. Strengthen Controls over Subrecipient Monitoring to ensure compliance with Uniform Guidance. A. The Office of Compliance. Division of Monitoring has made significant strides in strengthening controls over the subrecipient monitoring process ensuring compliance with Uniform Guidance Auditing Requirements. The Division continues to review and update the processes and procedures as necessary to ensure processes are adequate and effective. Staff are constantly notified/trained on updates to policies. procedures. and regulations to ensure continued compliance with monitoring the agency's subgrant agreements. B. Responsible Party: Laketha Gilmore. Director of Monitoring and Kameron Harris. Chief Compliance Officer C. Completion Date: The corrective action has been implemented and is ongoing.

Assistance listing numbers and program names 84.010 Title I Grants to Local Education Agencies 84.367 Supporting Effective Instruction state Grants, Title II (formerly Improving Teacher Quality State Grants) Agency: Arizona Department of Education (ADE) Name of contact person and title: Sarka J. White, Deputy Associate Superintendent Anticipated completion date: December 2027 Agency’s Response: Concur Monitoring of CMO We will update protocols and implement an annual monitoring process specifically for charter schools with CMO relationships by integrating defined procedures to evaluate additional conflicts of interest, related party transactions, and segregation of duties concerns, while assigning a programmatic risk label in addition to the one assessed by Grants Management. To ensure accurate identification and appropriate separation of responsibilities, Title I and Title II will incorporate procedures for detecting CMO associations within both the grant review process and programmatic monitoring functions, supported by coordinated information sharing across relevant departments. Updated policies will also include requirements for disclosure of organizational associations and embed these indicators into the LEA level risk framework that determines monitoring frequency and representation based on assessed risk. Checks and balances will include programmatic follow-up on these disclosures prior to review of funding applications and or any assistance provided. Title I and Title II will revise monitoring tools to include CMO specific review steps, provide targeted staff training on identifying CMO relationships and apply enhanced oversight procedures, and carry out funding and program approval activities and monitoring activities. These can be in the form of financial and performance report reviews, Grant approvals, Data submissions, technical assistance, and onsite or virtual visits, in alignment with the strengthened risk-based model. Completion will be demonstrated through finalized procedures, documented staff training, and the application of revised monitoring methods during the next annual grant and monitoring cycle. Monitoring – Programmatic – Grant Monitoring We have revised LEA monitoring policies and procedures to incorporate coordinated processes between departments for clear identification of charter schools with CMO relationships, require now disclosure of organizational associations, and strengthen oversight of conflicts of interest, related party transactions, and segregation of duties risks. Updated procedures also define a structured, risk-based monitoring framework that assigns LEA monitoring levels, representation, and monitoring frequency based on assessed risk, independent of CMO affiliation, while integrating new indicators into monitoring tools to support consistency through equal representation and ensuring each LEA is treated as an individual LEA without respect to associations. Staff have and will continue to receive targeted training on the revised requirements, and completion will be demonstrated through the approval and publication of updated procedures, documented staff training, and application of the enhanced risk-based monitoring approach during the next LEA monitoring cycle.

Assistance listing number and program name: 21.027 COVID-19 Coronavirus State and Local Fiscal Recovery Funds Agency: Governor’s Office of Strategic Planning and Budgeting (OSPB) Arizona Department of Housing (ADOH) Arizona Department of Water Resources (ADWR) Arizona Office of Tourism (AOT) Industrial Commission of Arizona (ICA) Name of contact persons and titles: Ben Henderson, Director Governor’s Office of Strategic Planning & Budgeting Keon Montgomery, ADOH Assistant Deputy Director of Programs Will Palmisano, ADWR Finance and Administration Assistant Director Mary-Ellen Kane, AOT Assistant Deputy Director Sylvia Simpson, ICA Chief Financial Officer Anticipated completion date: See below Agency’s response: Concur OSPB anticipated completion date: April 2027 As indicated by the auditors, OSPB has demonstrated compliance with subrecipient monitoring requirements in FY24. The audit report limits OSBP’s inclusion in this finding to the questioned costs ($1,623,846) identified by OSPB through its subrecipient monitoring. However, the identification of questioned costs is not evidence of a deficiency in OSPB’s subrecipient monitoring; rather, the opposite, it demonstrates that OSPB has sound internal controls and an effective subrecipient monitoring system in place. Accordingly, OSPB will continue with the existing comprehensive subrecipient monitoring framework as outlined below: ● On-going Grantee Support - The Office provides a variety of subrecipient support including technical assistance, Communities of Practice(COP), and regular status check meetings. ● Training - Office staff facilitate ongoing training and provide resources and guides to improve understanding of compliance requirements and provide tools to support proper grants management. ● Financial Report-Reimbursement Requests—The Office reviews the grantee's financial reports to ensure costs align with the approved budget, program objectives, and federal cost principles. ● Performance Reports—The Office reviews the submission of programmatic reports to track progress on grant goals. ● Single Audit Reports—The Office confirms any required subrecipient Single Audits, reviews a copy of the most recent Single Audit Reporting Package (SARP), issues any necessary management decisions, and conducts follow-up monitoring of Corrective Action Plans. ● Risk Assessment (RA)—The Office conducts a Risk Assessment (RA) of grantees when applying for grants to inform the grant award decision and possible grantee oversight or restrictions. Additionally, the Office conducts an annual RA of any grantee currently awarded funding. ● Monitoring Reviews - The Office utilizes the RA results to prioritize high risk grantees to be reviewed through a desk or on-site monitoring. Medium risk grantees will receive additional support and will be referred to our Compliance and Reporting team for further review if additional concerns arise. The Office has implemented all past recommendations and OSPB is committed to continuing these ongoing efforts to actively reduce the risks of waste, fraud, and abuse of federal dollars through our subrecipient monitoring process. OSPB will continue Coronavirus State and Local Fiscal Recovery Funds subrecipient monitoring and follow-up through the grant closeout in April 2027. ADOH anticipated completion date: March 2026 The ADOH has begun to develop and implement formal, documented subrecipient risk assessment procedures to ensure monitoring activities are aligned with assessed levels of risk. This will include establishing standardized criteria to evaluate subrecipient risk and documenting risk determinations. These enhancements are also consistent with recommendations identified in the State’s most recent Sunset Audit, and the Agency has already begun implementation of these procedures. The ADOH will update policies and procedures accordingly and provide staff training to ensure consistent application. These actions will strengthen internal controls and ensure compliance with applicable subrecipient monitoring requirements. The ADOH will implement procedures to strengthen subrecipient monitoring related to Single Audit requirements. This will include verifying submission to the Federal Audit Clearinghouse, obtaining and retaining copies of all applicable Single Audit reports, and maintaining a tracking mechanism to document receipt and review. The ADOH will also establish procedures to review audit findings and ensure appropriate follow-up, including verification of subrecipient corrective actions, and will support consistent implementation. ADWR anticipated completion date: December 31, 2026 Before approving an application from an eligible subrecipient for federal grant monies, ADWR as a passthrough entity, will conduct a risk assessment of the subrecipient as part of the initial award approval. ADWR will create a standardized checklist that will enable ADWR to make an informed decision regarding what monitoring tasks will be necessary consistent with 2 CFR 200.332. Once an eligible subrecipient applies for federal grant monies, ADWR will require the applicant subrecipient to fill out the checklist and establish a monitoring program consistent with the results. ADWR will develop staff training and a standard work to implement this program. If the award spans more than one year, the results of any applicable single audits will inform ADWR if changes to the monitoring program for a particular subrecipient are required. As part of a program standard work, ADWR will send a questionnaire to subrecipients regarding federal award expenditures and remind them of any single audit requirements as well as expected completion date of any applicable audits. Failure of any prescribed monitoring items will trigger award review and possible reclassification of risk, additional monitoring, and/or withholding of pending reimbursements until the subrecipient remedies an issue. AOT anticipated completion date: March 20, 2026 AOT has established a process to verify that subrecipients who receive a grant award greater than $750,000.00 are able to provide a current single audit. AOT will provide sub recipients additional written documentation identifying required completion dates and any additional instructions required. Processes and procedures have been developed and implemented. The program has concluded and no further action will be taken. AOT has established a process to ensure the required backup documentation provided by the subrecipient is acceptable for reimbursement. AOT will continue to communicate with OSPB on updates to policy to ensure the processes and procedures are being implemented within federal and state funding guidelines. The program has concluded and no further action will be taken. ICA anticipated completion date: December 31, 2025 The ICA concurs with the finding regarding subrecipient monitoring. The ICA’s involvement as a pass-through entity for the SLFRF program was a unique, one-time occurrence designed to facilitate the equitable distribution of funds to Arizona fire districts based on a methodology approved by the Office of Strategic Planning and Budgeting (OSPB). The ICA does not expect to serve as a pass-through entity for federal funds in the future. While the ICA implemented rigorous validation steps, including the thorough review of payroll records, receipts, and attestations prior to any reimbursement, the agency recognizes that formal risk assessments and subaward agreements were not executed at the onset of the program. The ICA became aware of these specific documentation deficiencies through the audit process after the program had already ended on December 31, 2025. The ICA will address the underlying control deficiency by updating its internal grant management procedures to ensure in the event the agency was to act as a pass-through entity again, formal risk assessments and standardized subaward agreements would be completed by the subrecipient as part of the requirements to receive federal monies. Additionally, the ICA has since obtained 100% of the required single audit reports from the applicable subrecipients and has verified that all necessary corrective actions for unrelated findings have been addressed.

Assistance listing number and program name: 21.027 Coronavirus State and Local Fiscal Recovery Funds Agency: Department of Economic Security (DES) Name of contact person and title: Molly Bright, Community Services Division Assistant Director Anticipated completion date: June 30, 2026 Agency’s Response: Concur The Department of Economic Security will address the audit recommendations as follows: 1. Include information required by federal regulations in its subawards to subrecipients, including federal award identification information and any additional requirements the Department imposed on the subrecipients to meet its responsibilities under the federal award. The Department will analyze and improve its information dissemination practices to ensure that all information required by federal regulations is included in the subawards to subrecipients. This will include the federal award identification information and any further requirements the Department imposes on the subrecipients to meet the responsibilities under the federal award and applicable state laws. 2. Perform required monitoring of its subrecipients and their compliance with the award terms and program requirements. The Department will revise its agency-wide policies and procedures related to single audit requirements for pass-through entities to include guidance regarding how to establish effective subrecipient monitoring procedures. The Department will also offer additional subrecipient monitoring guidance for programs administered by divisions with existing subrecipient monitoring findings. A divisional Monitoring and Compliance Policy and Procedure Manual is currently being developed to ensure compliance with these regulations across all program areas, including those subject to the Coronavirus State and Local Fiscal Recovery Funds (CSLFRF) Grant. 3. Develop, implement, and train all divisions on entity-wide written subrecipient-monitoring policies and procedures requiring all divisions to: a. Ensure that every subaward is clearly identified to the subrecipient as a subaward by including in its award terms with subrecipients information necessary for the subrecipient to administer the program in accordance with federal requirements. Required information includes federal award identification, all requirements of the subaward, any additional requirements the Department imposes on the subrecipient for the Department to meet its responsibilities under the federal award, indirect cost rate, and audit and closeout requirements. b. Assess the risk of each subrecipient’s noncompliance and carry out monitoring activities based on those risk assessments such as providing training or technical assistance on program-related matters, and performing on-site reviews, selective audits, and/or other monitoring procedures. c. Review financial and performance reports. d. Verify subrecipients receive timely single audits, if required; follow up on and ensure that corrective action is taken on any audit findings that could potentially affect the program; and issue management decisions for any audit findings pertaining to the federal award. e. Maintain documentation of monitoring procedures demonstrating they were performed, including the monitoring procedures’ results and any Department actions taken, if appropriate. In addition to the revisions in policy and procedures outlined in Recommendation #2 above, the Department will train staff responsible for administering compliance requirements for pass-through entities. This training will include instructions to formulate a risk assessment, review controls related to compliance requirements, review timely single audit submittal, follow up on audit findings, issue management decisions for findings, and maintain adequate documentation of monitoring procedures. Furthermore, the training will be inclusive of proper information dissemination practices aimed at ensuring every subaward is clearly identified to the subrecipient as a subaward by including in its award terms with subrecipients information necessary for the subrecipient to administer the program in accordance with federal requirements. The training and revised procedures will be provided to all staff responsible for administering programs with pass-through entities. 4. Allocate sufficient resources, such as staffing, to comply with the award terms and program requirements, and designate individuals within each division to perform necessary subrecipient-monitoring procedures. The Department will conduct analyses to determine resources needed, including staffing, to ensure compliance with applicable requirements. For example, the Department will assess the efficiency of its subrecipient-monitoring procedures, estimate future workloads, determine staffing needed to meet those workloads, and assign sufficient staff the responsibility for ensuring compliance with each requirement outlined in the federal award. The Department will also ensure the staff responsible for administering the compliance requirements prioritize this responsibility and communicate anticipated compliance deficiencies to management.

Assistance listing number and program name: 17.258 WIOA Adult Program 17.259 WIOA Youth Activities 17.278 WIOA Dislocated Worker Formula Grants Agency: Department of Economic Security (DES) Office of Economic Opportunity (OEO) Name of contact persons and titles: David Almaraz, DES DERS Business Administrator Stephen Sifuentes, OEO Finance Administrator Senior Anticipated completion date: See below Agency’s Response: Concur DES Anticipated completion date: December 31, 2026 The Department will address the audit recommendations by amending its ISA subaward with the Arizona Office of Economic Opportunity. The Department will also adjust its subrecipient monitoring schedule, procedures and offer training and assistance on conference-related requirements to the Arizona Office of Economic Opportunity. OEO Anticipated completion date: June 30, 2027 The Office of Economic Opportunity (OEO) acknowledges the finding regarding the use of WIOA Dislocated Worker Formula Grant funds for conference meals and promotional items. To address these concerns, OEO has undertaken proactive measures to strengthen internal controls, enhance oversight, and improve compliance with federal cost principles. As such, OEO will utilize these findings to strengthen its existing system, address any identified deficiencies, and continue to enhance fiscal management. Through these corrective actions, the OEO is committed to full compliance and the effective stewardship of federal funds. 1. Ensure Summit costs charged to the WIOA federal program are appropriate, necessary, and managed to minimize charges to the federal award. The OEO acknowledges the auditors’ findings regarding the management of Summit costs charged to the Workforce Innovation and Opportunity Act (WIOA) federal program. OEO is committed to ensuring that all expenditures are appropriate, necessary, and managed with the highest level of fiscal responsibility to ensure charges are necessary and allowable to the federal award. To address this finding, OEO will collaborate closely with the Arizona Department of Economic Security (ADES) to develop and implement comprehensive formal policies and procedures governing the State Workforce Development Board and WIOA funded events including Summit expenditures. Our joint efforts will focus on implementing a documented review and approval process to ensure costs charged to the federal award are supported by documentation and evaluated in accordance with 2 CFR §§ 200.403. As part of this corrective action, the process will integrate cost-containment measures into the planning and approval of the events budget planning phase. This will include requiring staff to assess whether proposed costs are necessary, reasonable, allocable and limited to helping the workforce development system achieve the purpose of the Workforce Innovation and Opportunity Act (WIOA). OEO and ADES will conduct working sessions to develop, implement, and monitor these protocols, with the goal of finalizing a standardized procedure for all WIOA-funded event expenditures. This approach ensures consistency across agencies and establishes clear oversight to prevent recurrence. 2. Develop and implement written procedures, including a standardized review process, to ensure that costs charged to the WIOA federal program are allowable prior to requesting reimbursement from DES. The OEO recognizes the importance of verifying the allowability of expenditures prior to the reimbursement phase. We concur that a standardized documented review process is necessary to maintain fiscal integrity and compliance of WIOA federal program funding and federal regulations. OEO, in partnership with the ADES, will develop and formalize written internal control procedures designed to vet all costs before they are submitted to ADES for reimbursement. The proposed standardized review process will align with existing practices for monitoring and expending federal funds as described under WIOA for the State Workforce Development Board and will include: ● Pre-submission verification: Implementation of an internal review checklist based on 2 CFR 200 Subpart E Cost Principles and applicable State policy. This will ensure that every line item is: ○ Allowable under both WIOA statutory requirements and federal cost principles. ○ Allocable to the specific federal award in proportion to the benefits received. ○ Compliant with the State of Arizona Accounting Manual ○ Documented with sufficient supporting evidence (pictures, invoices, receipts, and justifications) to withstand audit scrutiny. ● Standardized approval workflow: Establishment of a clear designated approval framework. ● Policy Integration: These procedures will be codified into an OEO Fiscal Manual, providing staff with a clear roadmap for processing WIOA-related expenditures. OEO will coordinate with ADES technical assistance teams to ensure our internal review templates align with ADES’s appropriate reimbursement systems. This collaborative design phase will ensure that once a request reaches ADES, it has already undergone a vetting process, thereby reducing errors. 3. Work with federal grantor and/or DES to resolve the $90,015 of questioned costs associated with the 2024 Summit and any subsequently held Summits. OEO will collaborate with the ADES, the primary grant recipient, to establish the most appropriate course of action for resolving any unallowable expenditures. Initially, OEO will work with ADES to precisely define the actual allowable amount based on programmatic cost allowability, which may require consultation with the original federal grantor, for final clarification on disputed cost. Subsequent steps for resolution will be guided by ADES’s direction and the requirements of the federal grantor.

Assistance listing numbers and program names 10.558 Child and Adult Care Food Program Agency: Arizona Department of Education (ADE) Name of contact person and title: Cara Alexander, Deputy Associate Superintendent Anticipated completion date: December 2026 Agency’s Response: Concur We have an established process in place for collecting the information necessary to determine total fiscal year expenditures for federal awards (the questionnaire) for entities that do not participate in any federal programs housed within the ADE's Grants Management Enterprise. The policy and procedures will be updated by April 1, 2026, to the following: (1) include additional internal controls such as the annual Child and Adult Care Food Program renewal process and serious deficiency process; and (2) detail the procedures to review single audit reports for findings related to the program and issue management decision letters when applicable. Finally, training will be provided to personnel responsible for collecting and reviewing the questionnaires and single audit reports when submitted.

SDWP acknowledges the requirement under 2 CFR 200.332(b) to provide specified Federal award information to subrecipients at the time of subaward. During the audit period, certain required elements (including Assistance Listing information, Federal Award Identification Number, and other required data elements) were not consistently included in subaward agreements at the time of issuance. This condition was primarily due to the absence of a standardized subaward agreement template and checklist to ensure all required elements under Uniform Guidance were included and communicated to subrecipients at the time of subaward. To address this finding, effective April 1, 2026, the Contract Manager will include all required data elements in a standardized subaward agreement template, confirm source of funding for each subaward, and include required data elements in all applicable subaward agreements.

Finding Number: 2024-049 Finding Name: Inadequate Review of Subrecipient Single Audit Reports Finding Condition(s): The Illinois Department on Aging (IDOA) did not adequately document review of single audit reports received from its subrecipients for the Aging Cluster program on a timely basis. Name of Contact Person(s): • Teri McKeon, Deputy Chief Financial Officer / Bureau Chief Business Services - Illinois Department on Aging, Division of Financial Administration • Sarah Harris, Chief Financial Officer - Illinois Department on Aging, Division of Financial Administration Corrective Action(s): The IDOA does not currently issue management decision letters but is working with the Grants Accountability & Transparency Unit to retroactively complete management decision letters once staff is fully hired and trained. As the IDOA brings the management decision letters and reconciliations up to date, it will allow for a determination of whether additional staff for these functions is necessary to maintain compliance. Proposed Completion Date: October 31, 2026

Finding Number: 2024-044 Finding Name: Inadequate Fiscal Monitoring of Subrecipients Finding Condition(s): The Illinois Criminal Justice Information Authority (ICJIA) did not follow its established policies and procedures for monitoring subrecipients of the Crime Victim Assistance (CVA) program. Name of Contact Person(s): • Hemant Modi, Chief Fiscal Officer – Illinois Criminal Justice Information Authority, Office of Fiscal Management • Karen Crawford, Chief Grantee Auditor - Illinois Criminal Justice Information Authority, Office of Fiscal Management Corrective Action(s): ICJIA will include the additional factors outside the formal policy that may also need to be considered to ensure the process is comprehensive, practical, and fully aligned with program requirements. These considerations will be incorporated into the annual risk assessment documentation to strengthen consistency and oversight going forward. Proposed Completion Date: December 31, 2026

Finding Number: 2024-043 Finding Name: Inadequate Review of Subrecipient Single Audit Reports Finding Condition(s): The Illinois Criminal Justice Information Authority (ICJIA) did not adequately review single audit reports received from its subrecipients for the Crime Victim Assistance Program (CVA) program on a timely basis. Name of Contact Person(s): • Hemant Modi, Chief Fiscal Officer – Illinois Criminal Justice Information Authority, Office of Fiscal Management • Karen Crawford, Chief Grantee Auditor – Illinois Criminal Justice Information Authority, Office of Fiscal Management Corrective Action(s): ICJIA is in the process of hiring a full-time staff person to focus on the State’s Grant Accountability and Transparency Act (GATA) requirements over ICJIA’s reviews of its subrecipients’ single audit reports. Proposed Completion Date: July 1, 2026

Finding Number: 2024-042 Finding Name: Failure to Adequately Monitor Subrecipients Finding Condition(s): The Illinois Criminal Justice Information Authority (ICJIA) did not follow its established program monitoring policies and procedures for subrecipients of the Crime Victim Assistance (CVA) program for fiscal year 2024. Name of Contact Person(s): • Aaron O’Brien, Director – Illinois Criminal Justice Information Authority, Federal and State Grants Unit • Shataun Hailey, Program Manager – Illinois Criminal Justice Information Authority, Federal and State Grants Unit Corrective Action(s): In fiscal year 2025, ICJIA implemented updated subrecipient monitoring procedures and documentation requirements, which are currently in effect. Within the updated procedures, ICJIA enhanced internal tracking mechanisms and established clear timelines for the completion of monitoring reports and follow up to support timely and consistent subrecipient oversight. Additionally, ICJIA provided site visit training to grant staff to strengthen understanding and consistent application of the updated policies and procedures. Proposed Completion Date: June 30, 2025 – Completed

Finding Number: 2024-041 Finding Name: Failure to Communicate Award Information to Subrecipients Finding Condition(s): The Illinois Department of Transportation (IDOT) did not follow its established policies and procedures for monitoring subrecipients of the Highway Planning and Construction program. Specifically, the auditors noted several subrecipient agreements that had missing required information. Name of Contact Person(s): • Teresa Cline, Agreement Analyst - Illinois Department of Transportation, Bureau of Local Roads and Streets (BLRS) • Melanie Turner, Grants Administration Section Manager - Illinois Department of Transportation, Bureau of Business Services (BoBS) • Aubrey Schuckman, Grants Unit Chief (Unit B) - Illinois Department of Transportation, Bureau of Business Services (BoBS) • Carissa Calloway, Grants Unit Chief (Unit A) - Illinois Department of Transportation, Bureau of Business Services (BoBS) Corrective Action(s): The required award information was incorporated into our standard agreement forms several years ago, and therefore, should be included in all agreements moving forward. The Office of Planning & Programming (OPP) agreement template has been in existence with the required fields since 2017 and the BLRS agreement template was updated in July 2021. Both agreement templates include all the required fields. To address the finding, IDOT has a process in place where a supervisor will review all draft agreements before they are finalized or sent to Office of Chief Counsel (OCC) for review. This should ensure that any missing or incorrect information is caught during the supervisor review process. Proposed Completion Date: March 31, 2026

Finding Number: 2024-025 Finding Name: Inadequate Monitoring of 21st Century Subrecipients Finding Condition(s): The Illinois State Board of Education (ISBE) did not adequately monitor and document program monitoring procedures performed over subrecipients of the 21st Century Community Learning Centers (21st Century) program. Additionally, ISBE’s internal controls over subrecipient on-site monitoring are not designed at an appropriate level of precision to ensure monitoring of subrecipients is completed, documented, and retained as required by ISBE’s policies and procedures. Name of Contact Person(s): • Jeffrey Judge, Director – Illinois State Board of Education, Wellness and Student Care Management Department • Nehemiah Ankoor, Supervisor; 21st Century Community Learning Centers (CCLC) State Education Agency Coordinator – Illinois State Board of Education, Wellness and Student Care Management Department Corrective Action(s): To ensure that 21st Century Community Learning Centers (21st CCLC) subgrantees’ progress and performance are monitored in accordance with 2 CFR 200.331(d), 2 CFR 200.331(b), and 2 CFR 200.303, Wellness and Student Care Management and the 21st CCLC team developed processes and structures to facilitate the procedures, protocols, and efficacy of subgrantee monitoring. Components of this work included, but were not limited to: • Evaluating and revising the program’s subgrantee risk analysis procedures and tools to ensure that they are relevant and accurately reflect the items/actions that suggest higher levels of subgrantee risk (2 CFR 200.331(b)). Complete. After careful examination, we have revised the risk analysis procedures and tools and have begun using them to inform our fiscal year 2026 monitoring. • Reviewing and revising the procedures and/or documentation that is collected for all three tiers of subgrantee monitoring to ensure that all processes are relevant; are not simply perfunctory; ensure compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that the subaward performance goals are achieved (2 CFR 200.331(d)). Complete. We have determined which of the documents we have historically collected meet those requirements, and we have evaluated all remaining documents (extraneous to ED requirements) to determine which we feel are most necessary to keep and what we are able to discontinue requiring. • Establishing and implementing specific processes and protocols to ensure that all components of subgrantee monitoring are timely, that management reviews and provides approval for key components of the process, and that accurate and complete documentation is produced and maintained (2 CFR 200.303). Complete. The expectations herein have been communicated to staff and have begun to be implemented (i.e. management approval, maintaining documentation, etc.). We still need to ensure that we precisely document these expectations and protocols, but through meetings and less formal communications, the required changes to our practices have been implemented. Proposed Completion Date: December 31, 2025 - Completed

Finding Number: 2024-007 Finding Name: Failure to Follow Established Program Subrecipient Monitoring Procedures Finding Condition(s): The Illinois Department of Human Services (IDHS) did not follow its established program monitoring policies and procedures for subrecipients of the Temporary Assistance for Needy Families (TANF), Child Care Development Fund Cluster (CCDF), Social Services Block Grant (SSBG), and Block Grants for Prevention and Treatment of Substance Abuse (SAPT) programs. Further, the auditors noted that the IDHS did not have adequate policies or procedures to ensure fiscal and administrative reviews were completed timely to detect potential non-compliance. Name of Contact Person(s): • Kasey Reagan, Interim Director – Illinois Department of Human Services, Division of Family and Community Services (FCS) • Christina Miller, Fund Disbursement Manager – Illinois Department of Human Services, Division of Behavioral Health and Recovery (IDHS-SAPT-Program) • Maureen Bilek, Audit Compliance and Programmatic Monitoring Administrator – Illinois Department of Human Services, Division of Early Childhood (DEC) • Brian Bond, Director – Illinois Department of Human Services, Office of Contract Administration (OCA) Corrective Action(s): The IDHS has completed or will take the following actions within four of its divisions/offices: Division of Family and Community Services (FCS) The FCS (1) has worked to identify the late subrecipient monitoring reviews and created a plan to address the backlog, (2) will utilize the plan to eliminate the back log of subrecipient monitoring reviews, (3) will meet with staff to reinforce the importance of adhering to the agreed upon monitoring processes and timeframes, (4) will update and circulate to staff the revised monitoring standard operating procedure, and (5) will review staff adherence to monitoring SOP timeframes during weekly meetings with staff who conduct monitoring. Division of Behavioral Health and Recovery (IDHS-SAPT PROGRAM) The IDHS-SAPT PROGRAM will (1) hire an administrative assistant to assist with compliance monitoring tracking activities to maintain communication about important deadlines, (2) hire compliance monitors to engage in conducting compliance reviews, (3) meet weekly to track monitoring activities to ensure deadlines are met, (4) review policy and procedures to assess timelines associated with the monitoring process, and (5) train all monitors to use the updated tool, templates and updated policies and procedures and the new electronic system. Division of Early Childhood (DEC) The DEC will (1) develop and implement a standardized deadline tracking tool to monitor review completion dates and required subrecipient notifications, including documented supervisory review and management oversight to ensure timeliness, (2) establish and implement internal Corrective Action Plan (CAP) procedures that outline standardized processes for CAP tracking, documentation, and escalation efforts and define protocols when subrecipients fail to submit required CAPs within established timeframes, (3) initiate and implement a CAP tracking tool to monitor review dates, findings issuance, subrecipient notification dates, CAP receipt, and implementation follow-up activities, with documented management oversight and approval to ensure timeliness, accountability, and consistent monitoring, and (4) conduct formal staff training on procedures for accurately completing and maintaining the CAP tracking tool, including documentation standards, required data elements, and supervisory review expectations to ensure consistent and compliant use. Office of Contract Administration (OCA) The OCA (1) has formally briefed leadership and management the issues noted in the finding and initiated a cross-division review of current subrecipient monitoring execution to identify gaps, inconsistencies, and needed revisions, (2) will complete a structured validation of monitoring expectations to ensure programmatic on-site reviews and expenditure/performance report reviews are occurring at the required frequency and depth, consistent with pass-through monitoring responsibilities, (3) will review minimum documentation standards and supervisory quality control checkpoints for review workpapers, expenditure/performance report review evidence, and monitoring report issuance, to strengthen internal controls over compliance, (4) will standardize and revise the data tracking definitions to ensure program findings from subrecipient monitoring are issued, tracked, and followed through to corrective action completion, including defined escalation steps when responses are delinquent or incomplete, (5) will align enforcement actions with the Statewide Grantee Compliance Enforcement System (GCES) framework (e.g., stop-payment status triggers, notices, objection windows, and resolution and closure steps), and ensure staff understand how and when to apply GCES in response to unresolved monitoring deficiencies, (6) finalize recommendations to streamline Fiscal Administrative Review (FAR) production triggers (pre-draft and post-draft), clarify program engagement in special condition processing post-FAR, and reduce reliance on informal technical assistance in CAP in favor of documented compliance correction and closure, (7) revised procedures and controls will be implemented for FARs scheduled on/after August 1, 2026 (target), with interim guidance applied as feasible to active cases prior to that date, and (8) will conduct structured database integrity review and update process aligned with official guidance and source documentation to ensure accuracy, completeness, consistency, and reliability of all FAR database records. Proposed Completion Date: December 31, 2026