Corrective Action Plans

We acknowledge that some timesheets were currently unavailable because the employees in question are no longer employed at DPNR, and as a result, their user profile is no longer active within the system. We have requested assistance from the Department of Finance in retrieving the necessary timesheets unfortunately, the required information has not yet been provided. DPNR will continue to collaborate with the Department of Finance to ensure the retrieval of any relevant files or reports, and we remain committed to resolving all the findings. We recognize that these findings highlight areas where improvements are necessary to ensure better compliance with applicable policies and regulations governing payroll and grant management. We are committed to implementing corrective actions and enhancing internal controls to prevent recurrence.

The Government concurs with the finding. OTAG implemented enhanced payroll controls including a dual manual and electronic timesheet system, verification of pay rates against NOPA forms, and separation controls to discontinue benefit charges upon employee separation or retirement.

VIDE acknowledges the audit finding regarding the Child Nutrition Cluster payroll and concurs with the recommendation. Because this is a recurring finding from prior year 2022-023, VIDE will develop and institute stricter fiscal controls to address the root causes of documentation and allocation discrepancies for this program. To prevent discrepancies including unapproved project codes and pay rate mismatches between NOPAs and payroll registers, the Fiscal Team will take the lead in preparing and maintaining the official staffing list for federally funded personnel within this program, an effort that involves reviewing the grant application for all positions and informing HR of required action entries. Furthermore, VIDE will implement a control where the Budget Team and the Deputy Commissioner of Fiscal and Administrative Services will review and approve every personnel action in the ERP prior to the NOPA being executed to match the action against the approved grant application or staffing list and ensure the project code and pay rate are accurate before the payroll cycle begins. To address the unavailability of timesheets, the program will implement a strict reconciliation protocol wherein the Program Director or designee will verify that the payroll register aligns with approved timesheets prior to performing the drawdown and posting. These timesheets will then be digitally archived in a centralized SharePoint repository organized by pay period to ensure that time and effort documentation is securely retained and immediately available for audit review. To support these new protocols, mandatory training will be conducted for relevant staff and supervisors on these new timesheet procedures, federal time and effort requirements, and the new NOPA reconciliation workflow. Finally, the Office of Fiscal and Administrative Services will conduct monthly spot checks of the SharePoint repository and ERP logs to measure the effectiveness of these controls.

The Department of Human Services (DHS) adopted the electronic Timeforce (STATS) system for payroll, replacing manual processes. Time and attendance are approved through management levels, with payroll based on Notice of Personnel Action (NOPA) cost centers. Financial Analysts reconcile payroll, and a workflow ensures accurate NOPA listings for payroll purposes. Additionally, in order to ensure that Notices of Personnel Actions are updated on a timely basis, ensuring that salaries are charged to the respective account, DHS has implemented the following process: Provisional Payroll Codes are requested (1) Provisional Payroll Codes are requested prior to the close of the Fiscal Year by the Department of Finance through the Office of Management and Budget through the established process.(2)Once the codes are received, the Division of Human Resources will update the most current Personnel Distribution Sheets to reflect active employees. (3) The sheets will be submitted to Fiscal for certification by the CFO. (4) NOPA's are updated with the provisional codes.

We acknowledge that the purchase of gift cards was not an allowable expense under federal grant guidelines. During the COVID-19 pandemic, our staff were tasked with responding to urgent and overwhelming public health demands, particularly as the New Mexico Department of Health became overextended. To recognize staff who went above and beyond to ensure timely case reporting and investigations for tribal communities, gift cards were used as a form of appreciation. Moving forward, we will ensure full compliance with federal grant requirements. Specifically: 1. We will adhere strictly to the cost principles and allowability guidance outlined in federal regulations and the terms of each Notice of Award. 2. In instances where the allowability of an expense is unclear, we will proactively seek guidance and written approval from our Federal Grant Management Officer before incurring the cost. 3. We will provide refresher training to program and fiscal staff on allowable costs under federal awards to prevent recurrence of similar findings. These corrective actions will ensure future expenditures are fully compliant with federal guidelines and that staff recognition practices remain appropriate, allowable, and consistent with award terms. • Immediate (Already in Effect): Ceased use of gift cards and other unallowable incentives. • Within 30 Days: Finance and program leadership will review current grant guidance and distribute a written summary of allowable/unallowable costs to all program managers. • Within 60 Days: Refresher training on federal cost principles (2 CFR 200) and Notice of Award guidance will be provided to all program and fiscal staff. • Ongoing: When ambiguity exists regarding allowable costs, staff will consult with the Federal Grant Management Officer prior to obligating or expending funds. Designation of Employee Position Responsible for Meeting Deadline Program Managers/Directors, Finance Officer, and Accounting Manager.

Personnel Responsible for Corrective Action: Jim Keeney, CFO Anticipated Completion Date: Completed. Review and Approval continue consistently. Corrective Action Plan: Management has implemented a time and activity method that meets the requirements of federal regulations. It includes the use of JIRA Software and an Excel Spreadsheet. Staff are entering time on an ongoing and consistent basis, including both actual and allowable time, for federal and non-federal contracts/agreements. These tools are reviewed and approved by executive management before any billing has transpired. Management is providing ongoing training for existing staff and new staff on an annual basis. This includes review and analysis from the accounting department to ensure proper expense accrual and revenue recognition. Management has also written an improved and detailed policy and procedure on recording actual and allowable time.

Recommendation: We recommended the City enhance its subrecipient monitoring activities and establish a formal record-keeping policy to ensure complete and timely documentation of expenses. Views of Responsible Officials: Management concurs with the finding. The City of Adelanto experienced higher than expected staff turnover in the finance department during the timeframe noted in this audit, which caused a backlog in audit preparation and submission, along with certain financial controls implementation interruption. At the time of this audit publishing, Management believes that implementation of such procedures is in compliance with the noted recommendation. Persons Responsible for Corrective Action: City Finance Staff (various) City Department Heads applying for grant funding (various) Anticipated Completion Date for Corrective Action: Corrective action has been immediately implemented in response to the auditors’ recommendation. As financial reporting is still in the process of becoming current, the City anticipates finding to be removed in future fiscal years.

SAOP will establish more robust internal contols to guarantee that all non-payoll charges are incurred within the tauthoized period of performance. This should involve consistent monitoring of gran periods, providing staff training on the perfoormance period, and conducting periodic reviews of expenditure documentation.

2023-003 Compliance and Internal Controls over Matching (Material Weakness) Internal Controls over Period of Performance and Earmarking (Material Weakness) U.S. Department of Housing and Urban Development 14.267 – Continuum of Care Program 2023 Funding Recommendation: We recommend that part of the review process for payroll include verification that the cost charged to the grant does not exceed the grant hours reported on employee timesheet. Corrective Action: In response to the first finding, we have implemented a comprehensive payroll review process that addresses both the initial concern and the subsequent finding. The new payroll process that has been established will ensure that costs charged to the grant do not exceed the hours reported on employee timesheets, effectively eliminating both issues: Responsible Parties: Sandra Robicheaux – Executive Director Claudia Dixon – CFO Tyler Starkel - YPTC Date to be Corrected: Implementation for above changes went into effect 6/01/2024

As noted above, we are working with consultants and our government partners to determine and define the requirements for each relevant program. We understand the recommendations offered and will review, and possibly revise, our policies and procedures, including supervisory review of documentation to support the allowability of costs charged to federal agreements. We will also review existing policies and procedures for preventing or detecting and correcting unallowable costs charged to federal agreements to ensure consistent application of those policies and procedures for all costs charged to federal agreements.

As noted above, we are working with consultants and our government partners to understand the requirements for each relevant program. We understand the recommendations offered and are exploring a comprehensive indirect cost allocation policy that would align with applicable requirements.

Finding 2023-005 – Allowable Cost Documentation In response to the finding, GEM addressed allowable cost documentation by instituting the following: A formal policy was established on 9/30/23, and going forward, GEM will implement additional oversight procedures to ensure the policy is followed and that all requirements are met. GEM has also incorporated the formal credit card policy into the employee handbook, outlining the procedures for submitting receipts on a monthly basis. Anticipated date of completion: This policy has been in effect since September 30, 2023. Responsible party: Jamie Hicks, Senior Accounting Manager

Description: Management’s schedule of Expenditures of Federal Awards was incomplete, resulting in lack of identification of the need for a Single Audit and the delay in its completion. The State funder indicated that no Federal Single Audit was required. Management had not implemented a formal process for preparation of the SEFA. Recommendation: Management should prepare a master tracking schedule for government grants which includes the source of funding and audit and reporting requirements. The schedule should be prepared by someone with knowledge of the grant agreements and reviewed by a leader in the accounting department to ensure completeness. Responsible Contact: Laura McQuay, Vice President & Chief Financial Officer Corrective Action Planned: Management has implemented a master tracking schedule for government grants that includes the source of funding and audit and reporting requirements. This tracker is a joint effort between finance and grants management teams. Anticipated Completion Date: December 31, 2025

We will allocate shared costs appropriately among federal awards

FINDING 2023-003 Finding Subject: COVID-19 – Coronavirus State and Local Fiscal Recovery Funds - Activities Allowed or Unallowed, Allowable Costs/Cost Principles Contact Person Responsible for Corrective Action: Tyler Pearson, Clerk Treasurer Contact Phone Number and Email Address: 574-739-1416 clerktreasurer@cityoflogansport.org Views of Responsible Officials: We concur with the findings. Description of Corrective Action Plan: As a measure of corrective action, I will be implementing a check sheet that will be attached to every claim sheet. This new procedure requires that you go through the check sheet and initial each item to ensure that all procedures have been followed correctly before submission. Additionally, I will also maintain a check sheet in my office since I am the last person to review each claim. This will help to ensure thoroughness and accuracy in our claims processing. Furthermore, moving forward, any grant funds will be placed into their own individual funds and distributed through an individual account. This approach will allow us to track payments for any expenses associated with these funds more effectively. Additionally, the BOT expenditure is done and in the future we will do a better job. Anticipated Completion Date: October 31,2025

Finding Number 2023-104 Subject Heading (Financial) or AL no. and program name (Federal) 93.575 – CCDF Cluster Planned Corrective Action The Oklahoma Department of Human Services (OKDHS) respectfully does not concur with the finding as written. We believe the State Auditor and Inspector (SAI) has not fully considered the federal flexibility afforded under the American Rescue Plan (ARP) Act, and that some conclusions were drawn from incomplete documentation. The Child Care Desert Grant program was thoughtfully developed in response to urgent needs during the COVID-19 recovery, with the goal of expanding access to child care in underserved communities using the discretion and authority granted to states under federal guidance. While OKDHS acknowledges that improvements could have been made to certain aspects of the program’s implementation—particularly regarding documentation clarity, post-award monitoring, and technical assistance— the SAI findings do not reflect the intent, structure, or compliance framework outlined in federal guidance. 2 CFR § 200.303(a) – Internal Controls DHS has strengthened internal controls consistent with federal expectations. For example, in the instance involving a grantee related to a DHS official, the potential conflict was identified and escalated by OKDHS to SAI as well as the Ethics Commission, and the individual was not directly involved in the reviewing and approving award process. In addition, the employee’s spouse was not included on any documentation included in the facilities application. This demonstrates that internal controls operated effectively. 2 CFR § 200.403 – Allowability of Costs This regulation applies to allowability under the Uniform Guidance, but per 45 CFR § 75.101(d), Subpart E (which ncludes § 200.403) does not apply to CCDF ARP discretionary funds unless explicitly stated. Federal guidance, including ACF-IM-2021-03, affirms that states were given broad flexibility in the design and implementation of such programs. Accordingly, DHS used its discretion to structure payments and allowable uses consistent with that guidance. Many costs questioned by SAI—such as business technology, minor remodeling, and start-up costs—were clearly allowable per the Desert Grant Guidance. 42 U.S. Code § 9858c(c)(2)(I) DHS did not fund sectarian instruction or activities. Expenditures were related to facility compliance and licensing, which is expressly permitted under this section when needed to meet health and safety standards. Providers affirmed compliance in their applications. 42 U.S. Code § 9858k(a) No funding was used for sectarian worship or instruction. All grantees signed affirmations that they would comply with all federal requirements, including those related to religious neutrality. Where expenditures were found that may raise concerns, they are being reviewed for compliance with these requirements. 42 U.S. Code § 9858k(b) DHS did not provide funding for services rendered during the regular school day or for academic credit. In the referenced after-school program, funds were used to expand access to licensed child care outside of regular instructional hours. Documentation of use is being reviewed, and additional guidance will be provided to ensure clarity in future programs. 42 U.S. Code § 9858d(b) and 45 CFR § 98.2 – Construction and Renovation DHS recognizes that one provider exceeded the $350,000 minor remodeling limit. This was an isolated case. At the time, DHS did not interpret the project scope as meeting the federal definition of "major renovation." DHS is enhancing its oversight process and guidance to providers to ensure full alignment with federal cost limits moving forward. Additional Clarifications • Expenditures cited as unallowable often fall within the scope of minor remodeling, technology, or business development explicitly allowed in Desert Grant FAQs and ACF guidance. • SAI’s estimate of questioned costs includes speculative assumptions based on documentation gaps—not confirmed misuse. • Many of the questioned costs SAI appears to be extrapolating were supplied directly from OKDHS’ own internal audit team and have either been addressed or are under investigation and should not be included in any additional questioned cost extrapolation. • The program was developed under severe federal timelines (obligation by 9/30/23), and ACF’s memoranda explicitly encouraged innovative approaches, including expansion grants to new and small providers. Corrective Actions (Planned or Completed) to be implemented on future emergency awards 1. Policy & Procedure Enhancements – Revised award language, documentation standards, and milestone disbursement options are being implemented. 2. Conflict of Interest Controls – OKDHS had a conflict of interest control in place to try and capture all potential conflicts based on the structure of the agency. OKDHS is expanding the process to extend to any staff members that have decision making approval. 3. Improved Monitoring – Targeted post-award reviews, site checks, and spending verification measures are being conducted. 4. Provider Training & Technical Assistance – Providers are receiving additional education on fiscal documentation, grant compliance, and reporting expectations. Anticipated Completion Date N/A Responsible Contact Person Kayla Urtz

Finding Number 2023-099 Subject Heading (Financial) or AL no. and program name (Federal) 93.575 – CCDF Cluster Planned Corrective Action The Oklahoma Department of Human Services (DHS) respectfully disagrees with several assertions made in this finding and believes the State Auditor has misapplied certain federal guidance, including Section 2202(e)(1) of the ARP Act, and incorrectly characterized the Department’s internal controls and program intent. Specifically: 1. Allowability of Costs: The activities cited as “unallowable” by the auditor do not appear to violate Section 2202(e)(1) of the ARP Act. That provision explicitly allows for a broad set of uses including “goods and services necessary to maintain or resume child care services.” DHS maintains that the expenditures made by the providers fall within the permissible categories outlined in the statute and that the audit applies a narrower interpretation than what federal guidance supports. 2. Documentation and Internal Controls: DHS issued grant funding as stabilization support to preserve child care operations during a critical period of recovery and transition, as encouraged by the federal guidance. In accordance with ARP Act expectations around expediting support, DHS designed a simplified reapplication process focused on accessibility and participation, especially for providers historically underrepresented in the quality rating system. While DHS did not require pre-spending documentation from providers—consistent with the stabilization nature of the funding—it did provide clear guidance on allowable uses and will further strengthen post-award monitoring protocols going forward. DHS acknowledges that improvements could be made in documentation expectations and will take steps to implement a structured sampling and review process for provider expenditures to enhance accountability without deterring participation. 3. Stars System Reapplication and Ratings: The temporary policy to waive certain visits and allow self-nominated Stars levels was a deliberate effort to incentivize participation and improve provider engagement with the new QRIS. The assertion that increased Star ratings led to unjustified funding increases does not consider the system’s transitionary design nor the planned monitoring that follows implementation. DHS was transparent in its guidance to providers and structured the increases to align with system reforms in development since before the ARP funding was issued. 4. Commingling of Funds: DHS did not require separate accounts for stabilization grants, consistent with federal practice and provider burden considerations. We do, however, acknowledge that clearer expectations and technical assistance on fund tracking would be beneficial. DHS will issue revised guidance encouraging, but not mandating, the separation of grant-related expenditures and will explore cost-effective technical supports for provider-level financial documentation. Anticipated Completion Date N/A Responsible Contact Person Kayla Urtz

Finding Number 2023-209 Subject Heading (Financial) or AL no. and program name (Federal) 93.323: Epidemiology and Laboratory Capacity for Infectious Diseases Planned Corrective Action The flagged contract and incorporated section were negotiated by OSDH's prior leadership at that time (May- June 2021). After a leadership change in October 2021, Commissioner Reed promptly terminated the contract - well before any such flagged services were engaged in or provided by the contractor. To OSDH's knowledge, it did not pay for any such services. Current OSDH leadership and Legal work diligently during the contract review process to ensure that unallowable activities are not included in vendor contracts. Anticipated Completion Date 6/30/24 Responsible Contact Person Stefan Von Dollen, Interim CFO

Finding Number 2023-208 Subject Heading (Financial) or AL no. and program name (Federal) 93.268: Immunizations Cooperative Agreements Planned Corrective Action The flagged contract and incorporated section were negotiated by OSDH's prior leadership at that time (May- June 2021). After a leadership change in October 2021, Commissioner Reed promptly terminated the contract - well before any such flagged services were engaged in or provided by the contractor. To OSDH's knowledge, it did not pay for any such services. Current OSDH leadership and Legal work diligently during the contract review process to ensure that unallowable activities are not included in vendor contracts. Anticipated Completion Date 6/30/24 Responsible Contact Person Stefan Von Dollen, Interim CFO

Finding Number 2023-005 Subject Heading (Financial) or AL no. and program name (Federal) ALN: 21.027 Federal Program name: Coronavirus State And Local Fiscal Recovery Funds (CSLFRF) Planned Corrective Action Management Response: OMES-GMO concurs with the finding that CSLFRF program funds were applied to GEER and ERA expenses. OMES-GMO specifically notes that while the applied expenditures are indeed allowable under federal programs, the application of CSLFRF to these programs was in error ostensibly due to administrative challenges experienced throughout this tumultuous period. During the COVID-19 pandemic, states across the country faced numerous operational and compliance challenges, including frequently changing federal guidance and firsttime handling of federal funds. In response to the growing complexity of managing multiple federal funding programs, OMES established the Grants Management Office (OMESGMO). However, in its initial phase, the OMES-GMO experienced consistent instability with a high frequency of employee turnover, understaffing, limited resources, restricted internal controls, and practiced leadership. These factors contributed to classification errors and delays with internal review. Since then, OMES-GMO has taken steps to stabilize operations by maintaining consistent leadership, hiring additional staff, and the uniform application of organizational processes. These improvements have strengthened internal controls and allowed for the identification of previously misapplied expenditures. Prior to the finding, OMES-GMO reviewed and flagged these expenditures and is actively working to correct the issue. To resolve the misclassification, OMES has requested state appropriations to properly adjust and reallocate these expenses to their appropriate funding sources. Anticipated Completion Date Controls have been put into place and will continue through the end of the Federal Period of Performance and closeout. Responsible Contact Person Parker Wise

Finding Number 2023-091 Subject Heading (Financial) or AL no. and program name (Federal) ALN: 21.019 Federal Program name: Emergency Rental Assistance Program (ERA) Planned Corrective Action 1. Condition and Context: While documenting controls over Period of Performance for the ERA 1 grant, we noted payments made to subrecipients in the Statewide Accounting System were all put under one fund and were not distinguishable between ERA 1 and ERA 2. Therefore, OMES was unable to determine at a glance whether the funds distributed to subrecipients were attributable to ERA 1 or ERA 2. Further, we determined one of the subrecipients, Communities Foundation of Oklahoma (CFO), did not have sufficient internal controls over ERA 1 program spending to ensure all funds were expended by the end of the period of performance. • We disagree with SAI on the Statewide Accounting System separation of funds. The Statewide Accounting System did distinguish between ERA1 and ERA2. The Statewide Accounting System has funds 49400 and 49200 shows establishment of both federal funds in 2021. • We disagree with SAI on CFO’s internal controls. CFO did have internal controls in place to ensure funds were expended during the period of performance. Per ERA 1 Closeout Resource “The end date of the award period of performance is the last day for a grantee to obligate funds for ERA1 activities (September 30, 2022, for award funds received pursuant to the grantee’s initial allocation and December 29, 2022, for reallocated funds). Per documentation provided by SAI the general ledger shows a date before December 29, 2022. (Attachment 494,492, ERA Closeout Resource) 2. For eight of 30, or 26.67% of adjustments tested, the adjustment was to move expenses from ERA 2 to ERA 1 to meet ERA 1 spending requirements prior to closeout of the program. CFO comingled ERA 1 and ERA 2 funds and could not directly support each recharacterization with documentation for the specific transactions involved, but stated it was recharacterized to meet ERA 1 spending limits prior to the end of the period. In addition, CFO did not go back to revise any prior monthly or quarterly reports as required by Treasury. • We partially agree. We agree that funds cannot be moved from ERA 2 to ERA 1. • We disagree with SAI on comingling of funds. CFO did not comingle funds. CFO has 31 separate accounts within C-Suite their financial software. All accounts are listed and examples provided in the ERA Fund Open Report. • We disagree with SAI’s evaluation of the Treasury reporting requirement. CFO was not required to go back and revise prior monthly and quarterly reports per federal guidance. “As of December 2022, ERA1 grantees will only be able to edit their Final Report or as applicable, their Q4 2022 report. However, grantees may submit revisions to certain financial data submitted with their past quarterly reports, specifically, subrecipient/contractor/direct payee records; subaward/contract/direct payment records; and expenditure records when completing their Final Report or as applicable, their Q4 2022 Report. “While ERA1 grantees are no longer able to submit or revise any prior ERA1 quarterly reports, grantees may receive additional communications from Treasury’s compliance team to make corrections to past quarterly reports and as appropriate, the Final Report…” (Attachment ERA Closeout Resource pg 5) 3. For 11 of 30, or 36.67%, the adjustment was to move expenses between jurisdictions (City, State, County), which is unallowable per FAQ #42 and ERA reporting guidance. • We disagree with SAI’s unallowable cost. Due to a misunderstanding, CFO staff misstated that funds were moved between jurisdictions. Funds were not moved between jurisdictions. If a computer error occurred due to the large volume of checks that were being sent every week (approximately 1,600), not all errors were caught immediately. However, when further reviews were conducted and it was discovered a payment was issued incorrectly, the proper accounting procedures for correcting the errors were completed. (Attachment OneDrive_2025- 4-23(1)) • We disagree. FAQ 42 says nothing about jurisdictions. FAQ #42 states, “May a grantee provide ERA funds to another entity for the purpose of making payments more rapidly? To speed the delivery of assistance, grantees may enter into a written agreement with a nonprofit organization to establish a payment fund for the sole purpose of delivering assistance using ERA funds while a household’s application remains in process. A grantee may use such a process if: The process is reserved for situations in which an expedited payment could reasonably be viewed as necessary to prevent an eviction or loss of utility services that precludes employing the grantee’s standard application and payment procedures on a timely basis. The nonprofit organization has the requisite financial capacity to manage the ERA funds, such as being a certified community development financial institution. The nonprofit organization deposits and maintains the ERA funds in a separate account that is not commingled with other funds. The grantee receives all required application and eligibility documentation within six months. The nonprofit organization agrees in writing to return to the grantee any assistance that the household was ineligible for or for which the required documentation is not received within six months. Any funds not used by the nonprofit organization are ultimately returned to the grantee. If a payment made by the nonprofit organization is subsequently found to have been used for an ineligible household or an ineligible expense, or if the required application and eligibility documentation are not timely submitted, the payment will be considered an ineligible use of ERA funds by the grantee. Any administrative expenses attributable to a payment fund should be considered in accordance with FAQ 29.” (Attachment ERA FAQs) 4. When performing our testwork to determine whether ERA 1 expenditures met period of performance requirements (incurred on or before September 30, 2022), we noted 207 transactions occurred after September 30, 2022. Of the 207 transactions, we noted 40 that resulted in $10,711,668 (of this amount $2,313,435 is already questioned above) in questioned costs. • We disagree with SAI’s questioning of expenditures incurred after September 30, 2022. Per the ERA 1 Closeout Resource, “The end date of the award period of performance is the last day for a grantee to obligate funds for ERA1 activities (September 30, 2022, for award funds received pursuant to the grantee’s initial allocation and December 29, 2022, for reallocated funds). Per documentation provided by SAI, the general ledger shows a date before December 29, 2022. (Attachment ERA Closeout Resource pgs 1, 4) 5. For 13 of 207, or 6.28% of transactions tested, the adjustment was to move funds between funding jurisdictions (City, State, County), which is unallowable per FAQ #42 and ERA reporting guidance. (This resulted in $1,594,881 in questioned costs, of which $24,450 is questioned above) • We disagree with SAI’s questioned cost. Due to a misunderstanding CFO staff misstated that funds were moved between jurisdictions. Funds were not moved between jurisdictions. If a computer error occurred due to the large volume of checks that were being sent every week (approximately 1,600), not all errors were caught immediately. However, when further reviews were conducted and it was discovered a payment was issued incorrectly, the proper accounting procedures for correcting the errors were completed. (Attachment OneDrive_2025- 4-23(1)) • We disagree. FAQ #42 says nothing about jurisdictions. FAQ #42 states “May a grantee provide ERA funds to another entity for the purpose of making payments more rapidly? To speed the delivery of assistance, grantees may enter into a written agreement with a nonprofit organization to establish a payment fund for the sole purpose of delivering assistance using ERA funds while a household’s application remains in process. A grantee may use such a process if: The process is reserved for situations in which an expedited payment could reasonably be viewed as necessary to prevent an eviction or loss of utility services that precludes employing the grantee’s standard application and payment procedures on a timely basis. The nonprofit organization has the requisite financial capacity to manage the ERA funds, such as being a certified community development financial institution. The nonprofit organization deposits and maintains the ERA funds in a separate account that is not commingled with other funds. The grantee receives all required application and eligibility documentation within six months. The nonprofit organization agrees in writing to return to the grantee any assistance that the household was ineligible for or for which the required documentation is not received within six months. Any funds not used by the nonprofit organization are ultimately returned to the grantee. If a payment made by the nonprofit organization is subsequently found to have been used for an ineligible household or an ineligible expense, or if the required application and eligibility documentation are not timely submitted, the payment will be considered an ineligible use of ERA funds by the grantee. Any administrative expenses attributable to a payment fund should be considered in accordance with FAQ 29.” (Attachment ERA FAQs) 6. For 11 of 207, or 5.31%, the adjustment was to move funds between ERA 2 and ERA 1 and the adjustment was not directly supported with documentation for the specific transactions involved. It was noted as recharacterized to meet ERA 1 spending limits prior to the end of the period, and CFO did not go back to revise any prior monthly or quarterly reports as required by Treasury. (This resulted in $7,003,715 in questioned costs, of which $2,200,000 is questioned above) • Partially agree. • We agree that funds cannot be moved from ERA2 to ERA1 • We disagree with SAI’s evaluation of the Treasury reporting requirement. CFO was not required to go back and revise prior monthly and quarterly reports per federal guidance. “As of December 2022, ERA1 grantees will only be able to edit their Final Report or as applicable, their Q4 2022 report. However, grantees may submit revisions to certain financial data submitted with their past quarterly reports, specifically, subrecipient/contractor/direct payee records; subaward/contract/direct payment records; and expenditure records when completing their Final Report or as applicable, their Q4 2022 Report. “While ERA1 grantees are no longer able to submit or revise any prior ERA1 quarterly reports, grantees may receive additional communications from Treasury’s compliance team to make corrections to past quarterly reports and as appropriate, the Final Report…” (Attachment ERA Closeout Resource pg 5) 7. For 7 of 207, or 3.38% of transactions tested, the adjustment was to ‘correct accounts’ or ‘tie out accounts’; we determined these were not attributable to specific transactions but were ‘plug’ numbers to zero out the ERA 1 balance prior to the end of the period of performance to meet spend down requirements and were not supported by actual expenditures that can be determined to have been incurred on or before September 30, 2022. (This resulted in $1,837,072 in questioned costs, of which $88,985 is questioned above) • We partially agree. • We agree that funds cannot be moved from ERA 1 to ERA 2 • We disagree with SAI’s questioning of expenditures incurred after September 30, 2022. Per the ERA 1 Closeout Resource, “The end date of the award period of performance is the last day for a grantee to obligate funds for ERA1 activities (September 30, 2022, for award funds received pursuant to the grantee’s initial allocation and December 29, 2022, for reallocated funds). Per documentation provided by SAI, the general ledger shows a date before December 29, 2022. (Attachment ERA Closeout Resource pgs 1, 4) 8. For 7 of 207, or 3.38% of transactions tested, the adjustment was to CFO management fees. Management fees were retained on a percentage basis; therefore, the fee is not supported by actual expenditures that can be determined to have been incurred on or before September 30, 2022. (This resulted in $1,430,228 in questioned costs which were all questioned on finding 2023-028). We disagree with SAI’s questioning of expenditures incurred after September 30, 2022. Per the ERA 1 Closeout Resource, “The end date of the award period of performance is the last day for a grantee to obligate funds for ERA1 activities (September 30, 2022, for award funds received pursuant to the grantee’s initial allocation and December 29, 2022, for reallocated funds). Per documentation provided by SAI, the general ledger shows a date before December 29, 2022. (Attachment ERA Closeout Resource pgs 1, 9. We noted a total of $8,271,796 in management fees that were not expended for ERA 1 and therefore were not spent within the period of performance. Of this amount, $6,841,568 were management fees questioned in the SFY2021 and SFY2022 State of Oklahoma Single Audit reports and the remaining $1,430,228 is questioned on finding 2023-028. We disagree with SAI’s questioning of expenditures incurred after September 30, 2022. Per the ERA 1 Closeout Resource, “The end date of the award period of performance is the last day for a grantee to obligate funds for ERA1 activities (September 30, 2022, for award funds received pursuant to the grantee’s initial allocation and December 29, 2022, for reallocated funds). Per documentation provided by SAI, the general ledger shows a date before December 29, 2022. (Attachment ERA Closeout Resource pgs 1, 4) 10. For 2 of 207, or 0.97% of transactions tested, the payment was not supported by an itemized invoice to enable a determination that all the costs were incurred prior to September 30, 2022. (This resulted in $276,000 in questioned costs) • We disagree with SAI questioning cost and have provided supporting documentation in OneDrive - 2025-04-23(2) to show questioned expenditures. • We disagree with SAI’s questioning of expenditures incurred after September 30, 2022. Per the ERA 1 Closeout Resource, “The end date of the award period of performance is the last day for a grantee to obligate funds for ERA1 activities (September 30, 2022, for award funds received pursuant to the grantee’s initial allocation and December 29, 2022, for reallocated funds). Per documentation provided by SAI, the general ledger shows a date before December 29, 2022. (Attachment OneDrive -2025-04-23(2), ERA Closeout Resource pgs 1, 4 ) Oklahoma Office of Management and Enterprise Services (OMES) acknowledges the Oklahoma State Auditor and Inspector Office’s (SAI) findings that OMES did not implement the proper internal controls and oversight of the ERA Program during FY2023. However, OMES has taken steps to correct these findings and follow the recommendations set forth by SAI. Beginning with FY2025, OMES has taken the following measures: • Oversight and management of the ERA program has been transferred to the OMES Grant Management Office (OMES-GMO) which has staff with several years of grant experience. OMES-GMO has recently hired additional staff, and the two staff members dedicated to the management of the ERA program have 20+ years of combined federal grant specific experience. To ensure that the subrecipient agreement includes all the required terms under the ERA Program and that the agreement does not expire, OMES-GMO and the Communities of Foundation of Oklahoma (CFO) have recently executed a Subrecipient Grant Agreement Amendment that details the responsibilities of OMES to monitor CFO and the duties and processes that CFO must follow in regard to ERA Program, including detailed cash management policies. See Attached – Grant Agreement Amendment. • OMES-GMO required the return of the remaining ERA2 Program funds from CFO to ensure proper oversight and review of ERA expenditures is performed. • OMES-GMO has a multi-level system of internal controls for grant management and oversight that includes routine monitoring, desk review, and site visits for all projects and associated project/administrative expenditures to ensure allowability, accuracy, and assist in the detection of fraud. For example, OMES-GMO’s process for disbursing funds to a subrecipient requires a written request from the subrecipient with supporting documentation, then OMES-GMO assigns a staff lead and secondary grant analyst to perform a primary and secondary review for compliance and to require additional supporting documentation if needed to approve the request. Once those reviews are completed and approved by the OMES-GMO staff, the Director of the OMES-GMO must approve the request before it is sent to the OMES Finance Division, who will then verify the calculated amount(s) before completing the disbursement to the subrecipient. These internal controls and policies have been implemented for the management and oversight of the ERA Program and provide a multilayer review that will prevent fraud and risk factors applicable to the ERA program. Additionally, the OMES-GMO staff assigned to the ERA program have the training and knowledge to ensure compliance with the Federal grant requirements. • Depending on the level of risk, OMES-GMO conducts monthly, bi-weekly or weekly meetings with each subrecipient to monitor the progress of projects and address any issues or changes that might impact the project. For the ERA Program, OMES-GMO conducts bi-weekly monitoring meetings with CFO and is currently reviewing documentation provided by CFO to ensure all current ERA projects are eligible under the ERA guidelines and that CFO is exercising the proper oversight over their subrecipients. • OMES-GMO will continue with their current ERA monitoring steps and internal controls and will work with CFO to ensure ERA program funds are spent in accordance with ERA program guidelines and state and federal regulations. Anticipated Completion Date Ongoing throughout the life of the grant Responsible Contact Person Brandy Manek

Finding Number 2023-088 Subject Heading (Financial) or AL no. and program name (Federal) ALN: 21.019 Federal Program name: Emergency Rental Assistance Program (ERA) Planned Corrective Action Condition and Context: When reviewing SFY23 payroll administrative expenditures, we noted that Communities Foundation of Oklahoma paid $2,372,400 in bonuses to 146 employees. Of these bonuses, 47 people received between $10,000 - $19,999, and 44 people received more than $20,000. We found the expenditures to be unallowable; we found no guidance that stated ERA administrative funds could be expended on bonuses. • Community Cares Partners (CCP) was established as a temporary, emergencyresponse initiative tasked with administering Emergency Rental Assistance Program (ERAP) funds on behalf of the State of Oklahoma and multiple jurisdictions. Although initially conceived as a short-term project, CCP ultimately administered nearly $150 million in federal funds over multiple years in response to a historic public health and housing crisis. To meet U.S. Treasury mandates to rapidly disburse funds—or risk recapture—CCP had to scale quickly, adapt continuously, and deliver results under unprecedented pressure. The complexity of federal guidance, evolving compliance expectations, and intense audit scrutiny required a workforce that was agile, highly skilled, and capable of operating in a fast- paced, high-stakes environment. To achieve this, Communities Foundation of Oklahoma (CFO), as CCP’s fiscal sponsor, implemented an innovative staffing model in which all CCP team members—including leadership—were engaged as independent contractors. This model allowed for rapid onboarding and deployment of services without placing undue strain on CFO’s internal team or disrupting the core functions of other nonprofit and government agencies during the pandemic. However, because these contractors were not employees, they did not receive traditional benefits such as health insurance, paid time off, or retirement contributions. To support retention, motivation, and high performance in the absence of such benefits, CCP established a performance bonus structure, as outlined in its “Fee-for-Services Rendered” policy. Bonuses were based on merit and tied directly to both individual and team accomplishments. Performance Bonuses Were Structured, Purposeful, and Aligned with Program Goals Bonuses were awarded in recognition of critical achievements, such as the complete spend-down of ERA-1 funds before the federal deadline—a milestone that required sustained, coordinated effort well beyond routine contract deliverables. These incentives were calculated using a combination of objective factors, including: · Tenure with the organization (recognizing longterm commitment); Recommendation of the team director (based on direct performance observations); · Average weekly hours worked (accounting for parttime vs. full-time contributions); · Pay rate and level of responsibility (reflecting role complexity and expectations); · Performance indicators such as quality of work, accuracy, initiative, leadership, teamwork, positive attitude, and contributions to process improvements. Bonuses were not automatic or uniformly distributed. Rather, they were awarded based on documented performance and in alignment with the responsibilities and accomplishments of each contractor. The process involved director-level recommendations and required approvals from CCP’s Chief Operating Officer and the Executive Director of CFO, ensuring appropriate oversight and accountability. Allowability Under Federal Guidelines While the ERA guidance does not specifically address performance bonuses, U.S. Treasury FAQs instruct grantees to establish their own internal policies and procedures—consistent with the statutes—and to follow them consistently when specific guidance is not provided. CCP’s bonus practices followed this directive. Moreover, the incentive structure aligns with the principles in 2 CFR § 200.430(f), which permits incentive compensation when it is reasonable, tied to performance, and paid pursuant to a good-faith agreement established before services are rendered. These bonus payments were not arbitrary. They were essential tools for incentivizing high-quality performance, encouraging efficiency and innovation, and sustaining a capable team during a national emergency. Each bonus was grounded in documented policy, approved through established protocols, and tied to clearly defined. For 4 of 116, or 3.45% of claims tested, the contract was for an unreasonable rate and the invoices provided were not itemized and specific enough to determine if the time spent was for an allowable activity related to ERA 1 or ERA 2. • The contract rates for CCP’s executive leadership—specifically, Executive Director and Chief Operating Officer were reasonable and justified given the scope of responsibility, experience, and industry standards. Both leaders operated as full-time independent contractors (a structure applied to all team members at CCP), and neither received employee benefits such as health insurance or paid time off, which materially impacts total compensation calculations. CCP was a high-capacity public-private partnership program of CFO. CCP/CFO was responsible for administering over $440 million in Emergency Rental Assistance Program (ERAP) funds from the U.S. Department of the Treasury on behalf of the State of Oklahoma and multiple local jurisdictions. CCP executive leadership managed a team of more than 150 individuals and carried out complex, time- sensitive operations to deliver critical housing stability services during the COVID- 19 public health emergency. Industry benchmarks (e.g., Guidestar / Candid data, 990 analyses) show that for nonprofits with comparable annual budgets ($150M+), full-time executive compensation for experienced leaders often ranges from $175,000 to over $300,000 annually— excluding benefits. Both contractors brought more than 15 years of relevant leadership experience and operated within that reasonable range. Their rates reflected both the magnitude of the public responsibility and the demands of launching and managing a large-scale, federally funded program under emergency conditions. Regarding invoice specificity, the submitted invoices reflected agreed- upon deliverables and outcomes consistent with contract terms and allowable activities under federal guidance. While not time-stamped or broken down by hour, they were reviewed and approved based on performance milestones. Additional documentation is uploaded to further demonstrate the alignment of time spent with allowable ERAP administrative activities. Invoices submitted followed the contract terms, including hours rendered. A sample calendar page was provided and redacted for PII. § 200.338 Restrictions on public access to records. For 9 of 116, or 7.76% of claims tested, the payment was for more than the contracted rate. • PARTIALLY AGREE: overpayment of $37 • DISAGREE: see Bonus justification below. • 4.2.22 addendum with $29.60/hr rate • 4.2.22 addendum with $29.60/hr • 4.2.22 addendum with $36/hr rate • 4.2.22 addendum with $31.25/hr rate • 4.2.22 addendum with $29.60/hr rate • 4.2.22 addendum with $38/hr rate • 4.2.22 addendum with $28/hr rate Also see CCP Contractor Increases April, 2022 spreadsheet Attachments OneDrive_1_4-22-2025 OneDrive_3_4-22-2025- Contracts For 23 of 116, or 9.83% of claims tested, the subrecipient was unable to provide a contract for the period paid. • The Independent contractors each signed contracts in 2021 which laid out specific terms and conditions under which the independent contractors would provide their services and be compensated. Although some of these contracts expired, second contracts and/or addendums were signed by those same independent contractors in 2023. The independent contractors continued to work under the same terms and conditions and continued to be paid the same remuneration in the time period between the expiration of the original contracts and when the new contracts and/or addendums were created and signed. According to 15 O.S. Section 133, an implied contract is on where the existence and terms are not explicitly stated but are inferred from the conduct of the parties. Because the original contracts contained the specific terms regarding services and payment and because these independent contractors continued to operate under those same terms and receive payment even in the interim between signed contracts, this shows that an implied contract existed under Oklahoma law. The original contracts expired in 2021 which was at the height of the Covid- 19 crisis. The entities involved were addressing more urgent matters to assist the people of Oklahoma with the objectives of the program and did not have the bandwidth to draft and sign new agreements when responding to more urgent matters. Therefore, given the surrounding circumstances and the overall intent of the parties, it can be logically deduced that an implied contract existed in the interim periods between any expiration of an original contract and the second contract and/or addendum being signed. For 9 of 116, or 7.76% of claims tested, the contract was not signed by the Executive Director and was not valid. • We partially agree the contracts for three are not currently available with the Executive Director’s signature. • We disagree, fully executed contracts for two are available for review in the attachment OneDrive_3_4-22- 2025. For 22 of 115, or 19.13% of claims tested, the payroll cost was allowable; however, the expense was attributable to multiple jurisdictions and only 90.33% of the cost should have been charged to the State of Oklahoma, but the subrecipient was unable to support the allocation was completed and that 100% of the cost was not charged to the State. • See response to audit finding 2023-028 regarding the second Condition and Context. Oklahoma Office of Management and Enterprise Services (OMES) acknowledges the Oklahoma State Auditor and Inspector Office’s (SAI) findings that OMES did not implement the proper internal controls and oversight of the ERA Program during FY2023. However, OMES has taken steps to correct these findings and follow the recommendations set forth by SAI. Beginning with FY2025, OMES has taken the following measures: • Oversight and management of the ERA program has been transferred to the OMES Grant Management Office (OMES-GMO) which has staff with several years of grant experience. OMES-GMO has recently hired additional staff, and the two staff members dedicated to the management of the ERA program have 20+ years of combined federal grant specific experience. • To ensure that the subrecipient agreement includes all the required terms under the ERA Program and that the agreement does not expire, OMES-GMO and the Communities of Foundation of Oklahoma (CFO) have recently executed a Subrecipient Grant Agreement Amendment that details the responsibilities of OMES to monitor CFO and the duties and processes that CFO must follow in regard to ERA Program, including detailed cash management policies. See Attached – Grant Agreement Amendment. • OMES-GMO required the return of the remaining ERA2 Program funds from CFO to ensure proper oversight and review of ERA expenditures is performed. • OMES-GMO has a multi-level system of internal controls for grant management and oversight that includes routine monitoring, desk review, and site visits for all projects and associated project/administrative expenditures to ensure allowability, accuracy, and assist in the detection of fraud. For example, OMES-GMO’s process for disbursing funds to a subrecipient requires a written request from the subrecipient with supporting documentation, then OMES-GMO assigns a staff lead and secondary grant analyst to perform a primary and secondary review for compliance and to require additional supporting documentation if needed to approve the request. Once those reviews are completed and approved by the OMES-GMO staff, the Director of the OMES-GMO must approve the request before it is sent to the OMES Finance Division, who will then verify the calculated amount(s) before completing the disbursement to the subrecipient. These internal controls and policies have been implemented for the management and oversight of the ERA Program and provide a multilayer review that will prevent fraud and risk factors applicable to the ERA program. Additionally, the OMES-GMO staff assigned to the ERA program have the training and knowledge to ensure compliance with the Federal grant requirements. • Depending on the level of risk, OMES-GMO conducts monthly, bi-weekly or weekly meetings with each subrecipient to monitor the progress of projects and address any issues or changes that might impact the project. For the ERA Program, OMES-GMO conducts bi-weekly monitoring meetings with CFO and is currently reviewing documentation provided by CFO to ensure all current ERA projects are eligible under the ERA guidelines and that CFO is exercising the proper oversight over their subrecipients. OMES-GMO will continue with their current ERA monitoring steps and internal controls and will work with CFO to ensure ERA program funds are spent in accordance with ERA program guidelines and state and federal regulations. Anticipated Completion Date Ongoing throughout the life of the grant Responsible Contact Person Brandy Manek

Finding Number 2023-018 Subject Heading (Financial) or AL no. and program name (Federal) 20.509 - Formula Grants for Rural Areas Planned Corrective Action We concur with the auditor’s recommendations. As of SFY 2025, OMPT has revised its procedures to strengthen internal controls and ensure payroll expenditures are charged to the appropriate grant. A project was established for each FTA grant program to receive payroll charges based on actual charges. Training was provided to OMPT staff on June 28, 2024. Anticipated Completion Date 7/1/2025 Responsible Contact Person Eric Rose/Bobby Parkinson

CONDITION: During the calendar year 2023, the City did not utilize a formal general ledger system of accounting to track the financial activity (financial position and results of operations) for several ‘Funds’ held at the City. The activity of these funds is either 1) maintained in spreadsheet fashion similar to a checkbook used in personal finances, 2) recorded partially (expenses only with no revenue), or 3) not tracked at all. As these funds are not maintained using the City’s accounting software package, management does not have the ability to efficiently generate financial reports necessary to provide management with the proper fiscal oversight. This condition included the American Rescue Plan Act (ARPA) funding known as the Coronavirus State and Local Fiscal Recovery Fund. However, it should be noted that City personnel were able to prepare spreadsheets to document which expenditures were utilized to prepare the necessary quarterly reporting requirements to the Department of Treasury. This is a repeat finding (2022-002) from the prior year. CRITERIA: Prudent internal control procedures in the areas of general ledger management and financial reporting include maintaining a formal general ledger system of accounting to track the activity of all ‘Funds’ maintained by the City. In specific as it relates to federal programs, Section 2 CFR 200.403(g) of the Uniform Guidance requires that federal costs must be adequately documented which would include the maintaining of a formal general ledger system of accounting for all ‘Funds’ of the City. MANAGEMENT’S CORRECTIVE ACTION PLAN: Management of the City will assess the current workload and expertise of the City’s business office personnel in an effort to determine a feasible timeframe to continue the process of creating a formal general ledger system of accounting for all City ‘Funds’ that are not already entered into the software accounting system. The timeframe for completion of this review will occur during the first nine months of calendar year 2025 with the intention of having the City be in full compliance with Section 2 CFR 200.403(g) of the Uniform Guidance which requires federal costs to be adequately documented which would include the maintaining of a formal general ledger system of accounting for all ‘Funds’ of the City.

CONDITION: During the calendar year 2023, the City did not record the necessary adjustments to the various ‘Fund’ general ledgers of the City to properly reconcile the balance sheet accounts, such as cash, receivables, payables, and payroll-related liabilities to the underlying supporting documentation available at the City (which includes reconciliations of cash prepared independently by City personnel but do not agree to amounts reported in the various general ledgers). This included ‘Funds” containing significant federal funding such as the City’s Community Development Block Grant (CDBG) Program and American Rescue Plan Act (ARPA) funding known as the Coronavirus State and Local Fiscal Recovery Fund. As a result, the financial position and results of operations as shown throughout the calendar year were inaccurately stated. However, it should be noted that the Community Development Department of the City and other City personnel maintain separate financial reporting for these federal funds, independent of the aforementioned ‘Fund’ general ledgers sufficient to ascertain the revenues and expenditures of the federal programs. This is a repeat finding (2022-001) for the prior year. CRITERIA: Prudent internal control procedures in the areas of general ledger management and financial reporting include the reconciliation of all general ledger account balances to underlying supporting documentation monthly with independent oversight and approval as part of the process. In specific as it relates to federal programs, Section 2 CFR 200.403(g) of the Uniform Guidance requires that federal costs must be adequately documented which would include the applicable general ledgers of the City. MANAGEMENT’S CORRECTIVE ACTION PLAN: Management of the City will review the recommended options as presented by the Audit Firm’s recommendation for feasibility considering current manpower, expertise, and budgetary constraints. In addition, the City plans to ensure that written procedures for all accounting functions are implemented, reviewed and updated as necessary with the objective of ensuring that all balance sheet account balances are supported by the underlying documentation available at the City. The timeframe for completion of this review will occur during the first nine months of calendar year 2025 with the intention of having the City be in full compliance with Section 2 CFR 200.403(g) of the Uniform Guidance which requires federal costs to be adequately documented which would include the applicable general ledgers of the City.