Corrective Action Plans

Finding Number 2023-062 Subject Heading (Financial) or AL no. and program name (Federal) ALN: 21.019 Federal Program name: Coronavirus Relief Fund (CRF) Planned Corrective Action The State agrees with this finding. The State is attaching OIG Financial Progress Reports. Cycle 11 accounts for the full and final amount of the grant. The State of Oklahoma agrees and has strengthened their controls over financial reporting of federal grant awards to ensure the amounts are accurately reported. Also, the State will ensure quarterly Financial Progress Reports are properly retained for the appropriate length of time by abiding by state and federal guidelines for the retention of documentation. Within OMES, oversight and management of Federal grants has been transferred to the OMES Grant Management Office (OMES-GMO) which is staffed with individuals with several years of grant experience. OMES-GMO has a multilevel system of internal controls for grant management and oversight that includes routine monitoring, desk review, and site visits for all projects and associated project/administrative expenditures to ensure allowability, accuracy, and assist in the detection of fraud. Anticipated Completion Date September 2022 Responsible Contact Person Brandy Manek

Finding Number 2023-035 Subject Heading (Financial) or AL no. and program name (Federal) #17.225 Unemployment Insurance Planned Corrective Action The agency concurs with the findings and agrees with the recommendation. The agency acknowledges our responsibility for program integrity and proper controls for the RESEA program. As we referenced in our response last year, the agency has undertaken modernization efforts to provide better solutions for the RESEA program. EmployOklahoma is the first result of this effort in the workforce employment area and it launched in January 2025 as the replacement for OKJM. The majority of the findings above were related to cases pulled for the period between July 2022 and December 2022; there was improvement in the period from January 2023 to June 2023. We anticipate continued progress and improvement going forward, but there will continue to be elevated risk for inaccuracies until the agency’s modernization efforts are successful in implementing solutions to address both the case management and data reporting requirements needed to fully resolve these findings. Anticipated Completion Date Ongoing until modernization of RESEA tools is complete Responsible Contact Person Tammy Wood, RESEA/TAA Program Manager

Finding Number 2023-031 Subject Heading (Financial) or AL no. and program name (Federal) #17.225 Unemployment Insurance Planned Corrective Action OESC concurs with the audit finding and agrees with the recommendation. The agency also acknowledges the importance of data integrity in submitting the ETA 9050, ETA 9052 and ETA 9055 reports. Programming was completed in June 2023 to retain backup of the detailed data at the time each report is run. As part of OESC’s technology modernization efforts, technical resources continue to review reporting requirements for all regulatory reports and validate the accuracy of programming that supports such reporting. DOL completed a Data Validation monitoring of OESC in May 2024, and the DOL reviewers shared favorable comments regarding OESC’s modernization efforts, and the agency was able to satisfy DOL with regard to the area of concern and finding identified in their review. OESC leadership expects to address the underlying causes for this finding as part of our modernization efforts. Anticipated Completion Date Programming completed in June 2023 to retain backup data; data validation for regulatory reports is ongoing as part of OESC technology modernization efforts. Responsible Contact Person Michelle Britten, Chief Administrative Officer

VIEWS OF RESPONSIBLE OFFICIALS As part of the digitization project process, ADSEF seeks to standardize procedures and ensure the organization and proper location of documents within the files. For this Digitalization project we have available matching funds of approximately 7 million dollars IMPLEMENTATION DATE December 2027 RESPONSIBLE PERSON Administration for Socioeconomic Development of the Family (ADSEF, by its Spanish Acronym)

VIEWS OF RESPONSIBLE OFFICIALS It is recommended, among other things, to establish internal controls that provide certainty, effective monitoring, data validation, and accountability for those employees who execute the reporting processes. To this end, the personnel responsible will be convened and written processes will be issued to expedite the information requests and ensure their rapid submission. This will be in accordance with both state and federal regulations. Once the agreements are finalized, they will be submitted to the auditing firm. IMPLEMENTATION DATE During Fiscal Year 2025-2026. RESPONSIBLE PERSON Administration for Socioeconomic Development of the Family (ADSEF, by its Spanish Acronym)

VIEWS OF RESPONSIBLE OFFICIALS Review the accounting system to ensure consistency with SF– 425 reporting. Establish a protocol for the review and approval of financial reports. Designate a financial compliance officer to validate reports prior to submission. IMPLEMENTATION DATE During Fiscal Year 2025-2026. RESPONSIBLE PERSON Administration for Families and Children (ADFAN, by the Spanish Acronym)

VIEWS OF RESPONSIBLE OFFICIALS ADSEF has controls and procedural manuals related to data collection. As part of the digitization project process, ADSEF seeks to standardize procedures and ensure the organization and proper location of documents within the files. Annexes IMPLEMENTATION DATE Up to Date RESPONSIBLE PERSON Administration for Socioeconomic Development of the Family (ADSEF, by its Spanish Acronym) AUDITORS’ COMMENT ADSEF did not provide us with a manual describing the data collection process as requested during the auditing procedures. An unsigned and undated Manual was attached to the Corrective Action Plan. Also, ADSEF was required to provide us with the corresponding participant worksheet appendix and the physical file to corroborate the information included in the report. ADSEF provided us with evidence of the hand-completed forms; however, we were not provided with the physical files to validate the information included in each document. This represents a scope limitation.

VIEWS OF RESPONSIBLE OFFICIALS It is recommended, among other things, to establish internal controls that provide certainty, effective monitoring, data validation, and accountability for those employees who execute the reporting processes. To this end, the personnel responsible will be convened and written processes will be issued to expedite the information requests and ensure their rapid submission. This will be in accordance with both state and federal regulations. Once the agreements are finalized, they will be submitted to the auditing firm. IMPLEMENTATION DATE During Fiscal Year 2025-2026. RESPONSIBLE PERSON Administration for Socioeconomic Development of the Family (ADSEF, by its Spanish Acronym)

VIEWS OF RESPONSIBLE OFFICIALS It is recommended, among other things, to establish internal controls that provide certainty, effective monitoring, data validation, and accountability for those employees who execute the reporting processes. To this end, the personnel responsible will be convened and written processes will be issued to expedite the information requests and ensure their rapid submission. This will be in accordance with both state and federal regulations. Once the agreements are finalized, they will be submitted to the auditing firm. IMPLEMENTATION DATE During Fiscal Year 2025-2026. RESPONSIBLE PERSON Administration for Socioeconomic Development of the Family (ADSEF, by its Spanish Acronym)

VIEWS OF RESPONSIBLE OFFICIALS As part of the digitization project process, ADSEF seeks to standardize procedures and ensure the organization and proper location of documents within the files. For this Digitalization project we have available matching funds of approximately 7 million dollars. IMPLEMENTATION DATE Awaiting System Implementation RESPONSIBLE PERSON Administration for Socioeconomic Development of the Family (ADSEF, by its Spanish Acronym)

VIEWS OF RESPONSIBLE OFFICIALS In Process Develop an operational procedures manual for each program under Uniform Guidance. Include flow outlining key processes. Assign personnel responsible for each function and establish periodic review mechanisms. IMPLEMENTATION DATE During Fiscal Year 2025-2026. RESPONSIBLE PERSON Administration for Families and Children (ADFAN, by the Spanish Acronym)

VIEWS OF RESPONSIBLE OFFICIALS It is recommended, among other things, to establish internal controls that provide certainty, effective monitoring, data validation, and accountability for those employees who execute the reporting processes. To this end, the personnel responsible will be convened and written processes will be issued to expedite the information requests and ensure their rapid submission. This will be in accordance with both state and federal regulations. IMPLEMENTATION DATE During Fiscal Year 2025-2026. RESPONSIBLE PERSON Administration for Socioeconomic Development of the Family (ADSEF, by its Spanish Acronym)

VIEWS OF RESPONSIBLE OFFICIALS It is recommended, among other things, to establish internal controls that provide certainty, effective monitoring, data validation, and accountability for those employees who execute the reporting processes. To this end, the personnel responsible will be convened and written processes will be issued to expedite the information requests and ensure their rapid submission. This will be in accordance with both state and federal regulations. Once the agreements are finalized, they will be submitted to the auditing firm. IMPLEMENTATION DATE During Fiscal Year 2025-2026. RESPONSIBLE PERSON Administration for Socioeconomic Development of the Family (ADSEF, by its Spanish Acronym)

VIEWS OF RESPONSIBLE OFFICIALS It is recommended, among other things, to establish internal controls that provide certainty, effective monitoring, data validation, and accountability for those employees who execute the reporting processes. To this end, the personnel responsible will be convened and written processes will be issued to expedite the information requests and ensure their rapid submission. This will be in accordance with both state and federal regulations. Once the agreements are finalized, they will be submitted to the auditing firm. IMPLEMENTATION DATE During Fiscal Year 2025-2026. RESPONSIBLE PERSON Administration for Socioeconomic Development of the Family (ADSEF, by its Spanish Acronym)

The Organization acknowledges this repeat finding and will take steps to address the deficiencies noted. Since the prior year's audit, management will implement updated procedures to strengthen internal controls around documentation of allowable costs charged to federal awards. These measures include the development of a formal time and effort reporting system, which requires all grant-funded employees to submit periodic certifications that reflect actual hours worked and funding source allocation. Supervisors are now required to review and approve these certifications to ensure alignment with actual program activities. Additionally, the Organization will reinforce its invoice documentation and review process. All expenditures charged to the Block Grant and Opioid STR programs must now be supported by detailed invoices and documentation that clearly demonstrate allocability, allowability, and consistency with the approved grant budget and period of performance. These requirements are monitored through monthly reviews by the finance department. The Organization has also adopted a document retention policy aligned with 2 CFR §200.334, and relevant staff have received training on documentation and compliance requirements for federal awards. These corrective actions are being actively monitored by the Director of Finance to ensure full implementation and ongoing compliance. Organization Contact Person Responsible for Corrective Action: Joseph Koehler, Director of Finance Anticipated Completion Date: June 30, 2025

Recommendation: Implement enhanced procedures for the systematic maintenance and retrieval of all financial records related to expenditures, including staff training on these protocols. Action Taken: Management agrees with the auditor’s finding and recommendation. The newly appointed Deputy Director of Finance will oversee the implementation of these enhanced procedures.

Inadequate Controls Over Expenditures Condition: During our testing of a sample of 40 expenditures of McKinney Education for Homeless Children grant funds by the Regional Office of Education #56, we noted that six expenditures totaling $52,005 did not have any supporting documentation. In addition, for those expenditures with supporting documentation, none of the invoices were stamped “paid”. During our testing of an additional sample of 40 expenditure transactions of the Regional Office of Education #56 for purposes of testing controls over financial reporting, we noted the following: ∙ No documentation was available for four expenditures ∙ No supporting invoices, but only purchase orders, were available for three expenditures ∙ One invoice was not stamped “paid”. Plan: We agree with the finding. Expenditures of federal funds will be more closely monitored, more adequately supported, and paid invoices will be marked as paid. Uniform Guidance will be more closely followed. Anticipated Date of Completion: June 30, 2025 Name of Contact Person: Dr. Lisa Caparelli-Ruff, Regional Superintendent

Assistance listing number and program name: 21.023 COVID-19 - Emergency Rental Assistance Program Agency: Arizona Department of Economic Security (DES) Name of contact person and title: Molly Bright, DES CCSD Assistant Director Anticipated completion date: June 30, 2025 Agency’s response: Concur The Department of Economic Security will address the audit recommendations as follows: The Department will prepare and retain detailed documentation including system reports, queries, screenshots, and other evidence supporting the program information being reported to the federal agency for each Emergency Rental Assistance Program (ERAP) award. DES will also abide by its policies and procedures to retain all records relating to federal awards for a period of 5 years after all the federal funds are expended. For future related programs with this requirement, the Department will develop and implement internal control policies and procedures that ensure systems properly display complete and accurate data on the federal reporting dashboard as instructed by the federal agency’s reporting guidelines. Additionally, these policies and provisions will ensure that any future ERAP award funding received by the Department will be separately reported to avoid commingling. Finally, the Department will require that ERAP personnel verify the reported program information to ensure all report element sections are complete and accurate, and that it matches the underlying benefits and financial systems data. The Department sunset the ERAP program on October 13th, 2023, due to an exhaustion of ERA 1 and ERA 2 funding.

Assistance listing number and program name: 17.225 Unemployment Insurance Agency: Arizona Department of Economic Security (DES) Name of contact person and title: Tracy Raymer, DES Business Analyst Manager Anticipated completion date: June 30, 2025 Agency’s Response: Concur The Department of Economic Security will address the audit recommendations as follows: Develop and implement written policies and procedures to ensure it prepares and retains detailed documentation, such as system reports, queries, or screenshots, to support the program information it reports to the federal agency for the UI program for a period of at least three (3) years. Beginning July 2024, the Department has assembled and retained all detailed supporting source documentation that supports the data provided in the 9050 - Time Lapse of All First Payments except Workshare report and will retain it for a period of no less than three (3) years.

Assistance listing number and program name: 14.267 Continuum of Care Program Agency: Arizona Department of Housing (DOH) Name of contact person and title: Lori Moreno, DOH Human Resources and Procurement Administrator Anticipated completion date: March 31, 2025 Agency’s Response: Concur The Department will update written policies and procedures related to procurement to incorporate applicable aspects of Federal Regulations 2 CFR §§200.321, 200.322, 200.323, and 200.327. The updated policy will address competition through competitive bids, sole source selections, and retention of procurement documents. In addition, the policy will state the Federal requirements that are to be included in purchase orders and contracts.

FINDING 2023-003 Finding Subject: Child Nutrition Cluster - Eligibility Summary of Finding: The School Corporation had not properly designed or implemented a system of internal controls, which would include appropriate segregation of duties, that would likely be effective in preventing, or detecting and correcting, noncompliance related to the eligibility determination of a child receiving meals. The School Corporation could not provide documentation supporting the eligibility for 10 of 40 students that received free or reduced-price meals for fiscal year 2022-2023. Of the 30 students for which documentation was provided, the School Corporation could not provide documentation that the one student’s benefits were calculated properly. Due to the lack of supporting documentation we were unable to determine the School Corporation's compliance with the Eligibility compliance requirement. Contact Person Responsible for Corrective Action: Juli Windsor Contact Phone Number:765-689-9131 Views of Responsible Official: We concur with the finding Description of Corrective Action Plan: This will include all reimbursements which are submitted to the treasurer must be signed by the school cafeteria managers and the food service director. The school will also implement policies to ensure that the Verification of Free and Reduced-Price applications have an adequate internal control to ensure the validity of the free and reduced applications. This will provide for segregation of duties to ensure appropriate reviews, approvals, and oversight are taking place. Anticipated Completion Date: April 2024

FINDING 2023-006 Finding Subject: Community Development Block Grants/ State’s program and non-Entitlement Grants in Hawaii Reporting Summary of Finding: Reporting - Material Weakness, Modified Opinion Supporting documentation was not retained to be able to verify the information presented in the CDBG-CC Report on Jobs Retained report. Contact Person Responsible for Corrective Action: Heather Huff Contact Phone Number and Email Address: 812-274-3866 heather.huff@jeffersoncounty.in.gov Views of Responsible Officials: We concur with the findings. Explanation and Reasons for Disagreement: n/a Description of Corrective Action Plan: The original Corrective Action plan from 2021 audit was not followed once the previous employes was no longer with Jefferson County. The current employee will be documenting all reporting requirements with the Auditor’s Office and retaining a copy of the balance. Jefferson County is also working with Department of Housing and Urban Development to eliminate the loan cycle and establish a one time grant. Anticipated Completion Date: 12-31-2024

2023-005 Allowable Costs/Cost Principles – Indirect Costs U.S. Department of Education Education Stabilization Fund – Assistance Listing No. 84.425 Pass-Through Agency: Arizona Department of Education Pass-Through Number(s): All Pass-Through Numbers Present in the SEFA Recommendation: We recommend management to incorporate a management review control to ensure the calculation is complete and accurate and all supporting documents including the general ledger used for the calculation is retained in accordance with UG. Explanation of disagreement with audit finding: There is no disagreement with the audit finding. Action taken in response to finding: The district will have a process in place to update all documentation related to indirect costs and the calculations from the general ledger. Name(s) of the contact person(s) responsible for corrective action: Clementina Carlyle, Chief Financial Officer.

Planned Corrective Actions: MARR will retain a CPA consultant to implement a document retention policy that is consistent with federal document retention requirements.

The Bureau was unable to provide documentation that their annual report was submitted to the Kentucky Department of Tourism and as such, the report was unable to be tested. Mary Watkins and Julie Kirkpatrick will ensure that copies of all reports submitted to the Kentucky Department of Tourism, and documentation of timely submission will be retained.