Corrective Action Plans

The Organization will update its subrecipient monitoring policies to ensure all required elements as defined in 2 CFR § 200.332 (a)(1) are included in subrecipient agreements, Additionally, a checklist will be established to perform a risk assessment process to evaluate subrecipient risk prior to contract execution and annually thereafter and to verify each subrecipient’s that meets the audit threshold and if required has a current Single Audit on file or is otherwise in compliance.

Views of Responsible Officials and Planned Corrective Actions: We are committed to strengthening our internal controls and procedures to ensure full compliance with Uniform Guidance requirements. We also acknowledge that the audit waiver BRAC Bangladesh received from the USAID Mission in Bangladesh was not sufficient to exempt them from conducting a program-specific audit of the Department of State (BPRM) funded project, SPRMCO23CA0152. In response to the finding, BRAC Bangladesh has already conducted an audit of the project, which demonstrated that the financial statements and schedule of expenditures were free from material misstatements. Moving forward, we will amend our subagreement templates to include specific language around USG audit requirements, and the submission of audit reports will be included in the reporting section of the agreements. We will also update our Fiscal Policies and Procedures Manual to formalize the process for receiving and reviewing audit reports, and establishing follow-up procedures to resolve potential audit findings. We will also maintain clear documentation of the submission, review, and follow up of audits.

Program: AL 97.036 – Disaster Grants – Public Assistance (Presidentially Declared Disasters) – Subrecipient Monitoring Corrective Action Plan: NEMA has implemented a process, effective immediately, to review the information submitted by subrecipient organizations regarding their 2 CFR Single Audit Certification. Responses will be cross-referenced with our own records of Federal funds passed through NEMA to the subrecipient. Any subrecipient responding that it was not required to conduct a single audit will prompt NEMA to validate against payment data. Any subrecipient’s noncompliance will be followed up by NEMA staff. Contact: Erv Portis Anticipated Completion Date: February 11, 2025

Career and Technical Education Response/Corrective Action Plan: The department agrees with this recommendation The department has developed a system to identify which subrecipients are subject to required audits and are tracking subrecipients to ensure timely submission of required audit reports and appropriate corrective actions. Contact Person: Wayde Sick, Director and Executive Officer and Gwen Ferderer, Finance Director Anticipated Completion Date: August 2024

PDOA: 1. Designing a means to follow-up and ensure timely action of deficiencies through an audit tracking log to monitor reporting submissions, document when they were received, initiated, findings requiring follow-up, and subsequent steps to finalize the audit. 2. Management decisions for applicable findings will be issued and tracked. 3. Improvements have been made with regards to regularity in reporting to more effectively monitor activities of subrecipients consistently with respect to Federal statutes and regulations. 4. PDOA is looking to fill a vacant position with a focus of tracking subrecipient expenditures in the aggregate and tracking single audit submissions on a Commonwealth-wide basis since the Aging Cluster program is material and has material sub-granted expenditures in NSIP and Title III. 5. It is PDOA’s impression that having increased oversight of the SEFA will allow for timely dissemination of management decision letters (MDL) in the six-month timeframe for making a management decision for federal award findings. 6. Discussions have started regarding considerations to take enforcement action against noncompliance by building language into the terms and conditions of the Cooperative Block Grant Agreements to exercise ability to withhold funding as approved in the Cost Allocation Plan. 7. PDOA has reached out to the BAFM to verify all outstanding audit items for PDOA since action is required within six months of receipt. 8. Follow-up procedures resulting from this finding will be reviewed and adjusted as needed to deliver optimal outcomes. Anticipated Completion Date: 06/30/2025 Contact Name: Jennifer Cave, Fiscal Management Specialist, PDOA Audit Liaison PDA: PDA has added a Financial Management Specialist 1 (FMS1) to its complement with the primary duty of agency audit liaison. The FMS1 will report to the PDA’s Budget Office. This is a new position and role within the department and has training and certification requirements to complete which will allow the position to: 1. Evaluate single audit report submissions received from BAFM to determine program purpose acceptability by verifying, at a minimum, that all agency-funded programs are properly included on the applicable financial schedules; that findings affecting the agency contain sufficient information to facilitate a management decision; and that the subrecipient has submitted an adequate corrective action plan. 2. Issue management decisions relative to audit findings and crosscutting findings assigned to the agency for resolution, as required by 2 CFR §200.521. If responsible for the resolution of crosscutting findings, notify the affected agency or agencies upon resolution of such findings. 3. Impose or coordinate the imposition of remedial action in accordance with 2 CFR Part 200.339 and Management Directive 325.08 Amended, Remedies for Recipient Noncompliance with Audit Requirements, when subrecipients fail to comply with the provisions of Subpart F. The new FMS1 will help ensure effective and efficient audit resolutions. This newly created position will also be responsible for the department wide audit tracking log that is in development. Anticipated Completion Date: 06/30/2025 Contact Name: Nichole Nedinsky, Fiscal Management Specialist, PDA Audit Coordinator PDE: The PDE Audit Section is working with divisions to develop processes to ensure timely responses. A training will be conducted by April 2025 on audit procedures, best practices, and federal regulations governing single audit management decisions. Anticipated Completion Date: 04/30/2025 Contact Names: Clayton P. Carroll II, Audit Coordinator; Jessica Sites, Director, Bureau Financial Operations DEP: DEP has updated the concur subrecipient letter to include the specific language related to the management decision that was previously in our non-concur letters. This ensures whichever template is used, the management decision and related finding information will be included in the subrecipient letter. Revised letters were sent to both subrecipients, in which DEP was the lead agency and had findings for in the audited timeframe. Staff are reviewing all the steps of our standard operating procedures to ensure we will be in compliance regardless of whether DEP is or is not the lead agency and regardless of whether we are preparing a concur or non-concur letter for the subrecipient. Anticipated Completion Date: 06/30/2025 Contact Names: Jennifer Brandt, Senior Fiscal Mgmt. Specialist; Kristen Szwajkowski, Lead Fiscal Mgmt. Specialist DHS: As stated in the DHS finding response, this was the result of human oversight, and not a systemic issue with internal controls. We have reminded staff to make sure that a management decision is timely communicated to subrecipients at the time of making the management decision. Anticipated Completion Date: Completed Contact Names: David Bryan, Mgr., Audit Res. Section; Alexander Matolyak, Dir., Div. of Audit & Rev.

To ensure fiscal compliance and operational efficiency, grant activities will undergo enhanced monitoring through the addition of monthly reviews of review revenue and expense recognition, regular comparisons against budget and award terms, and provide targeted training for new grant managers and accounting staff on expenditures to meet grant spend down schedules. This finding relates to one legacy grant.

Type of Finding: Material Weakness in Internal Control Over Compliance, Other Matters Condition: Kansas Division of Emergency Management (Management) did not track, determine or monitor the audit verification requirement for its subrecipients in a timely manner. Recommendation: We recommend that the agency review its procedures for monitoring of annual audits for subrecipients to ensure that subrecipients are audited in accordance with Subpart F timely. We recommend that a clear timeline and tracking for this monitoring be added to the policies and procedures. Views of responsible officials: Management does not agree with this finding. Action taken in response to finding: Explanation of disagreement with audit finding: • KDEM manages the grant expenditures during the entire lifespan of the project. Scope of work is matched with actual expenses and validated before sending to FEMA for close-out. • KDEM’s audit tracker identifies when audit letters were sent and can be verified through email verification sent to sub-recipients. • There is no regulation stipulating what is “timely”. KDEM verifies audits annually. Name(s) of the contact person(s) responsible for corrective action: Jennifer Deal, Fiscal & Grants Management Section Chief Planned completion date for corrective action plan: See above.

Finding: The Foundation is not in compliance with recordkeeping for program monitoring and evaluation, as the Foundation did not comprehensively assess all subrecipients using risk-based/subrecipient monitoring policies and procedures. Staff were not aware of the extent of the requirements to monitor program and fiscal compliance of project sponsors and document results and evidence of compliance or noncompliance. Therefore, a number of project sponsors/subrecipients were not monitored. Corrective Action Taken or Planned: The Foundation has updated its Quality Management Plan to include comprehensive subrecipient monitoring policies. The Foundation’s Quality Management team is working with all programming to implement a robust monitoring process, including risk assessments, adherent to grantor regulations, service delivery, and program outcomes. Date of Completion: January, 2024 Name of Contact Person: Laurie Wettstead, Chief Finance Officer

The Institution is aware of the deadline and will be filing on time going forward.

The audit for the year ended June 30, 2023 was not submitted to the Federal Audit Clearinghouse due to issues with the UEI numbers not being renewed timely on the Academy’s side. The Finance Director is now responsible for the renewals going forward, and this will not be an ongoing issue in the futur

The audit for the year ended June 30, 2023 was not submitted to the Federal Audit Clearinghouse due to issues with the UEI numbers not being renewed timely on the Academy’s side. The Finance Director is now responsible for the renewals going forward, and this will not be an ongoing issue in the future.

• The Fiscal Director position has not been continuously filled, and since COVID 19 it has proven difficult to hire qualified staff at the rate of pay offered by the Agency . The Fiscal Director is responsible for providing training and supervision to staff, and for completing such tasks as working with our Auditors and scheduling the annual audit. The Organization has hired a CFO for hire however, there are still sometimes difficulty in maintaining steady work flow, meeting deadlines and ensuring year end closing entries and reconciliations are completed timely. In addition, the Auditors contracted with the Agency have begun their reviews much later than they had pre-Covid, also lending to difficulty in meeting deadlines. • Community Action of Greene County Inc. will work to improve employee retention and engagement through coaching, training, wage equity, and improved Human Resource practices. • Community Action of Greene County Inc. will continue to incorporate automated accounting and payroll processes to improve the efficiency and accuracy of fiscal reporting. • A year end closing checklist and calendar has been developed and utilized by the fiscal staff as of Spring 2024. The completed checklist will be shared with the Executive Director following the close out period. • The Executive Director will schedule the Auditors to begin their reviews within 90 days of year end as a condition of their contract. • The Executive Director is responsible for ensuring this corrective action plan is implemented.

The Office of Mental Health (OMH) has updated the federal certification forms in March of 2022 for the MHBG COVID Relief and ARPA awards to include the following award identification information: federal fiscal year of award, federal award period, federal award identification number (FAIN), and federal award document number. The federal certification forms for the annual MHBG awards are created to align with each new Notice of Award (NOA) and include the same award identification information noted above. Due to the timing of when we received the Federal NOA’s in comparison to when the federal certification forms were distributed to sub-recipients, not all sub-recipients may have received the updated form in fiscal year end March 31, 2024. These revised forms were used for all subrecipients in SFY 2024-25. OMH will continue to amend the certification and applicable policies, procedures, and internal controls to incorporate all required identifying characteristics outlined in 45 CFR 75 Section 352 (a) in SFY 2024-25. Additionally, OMH initiated an expense report process to review award specific expense reports for all COVID Relief and ARPA federal grant subrecipients to ensure provider expenditures are following federal guidelines. This process will be rolled out to the other MHBG awards in SFY 2024-25. While a formalized risk assessment was not conducted, one has been developed to assess subrecipient risk of non-compliance. This risk assessment will be used in conjunction with the review of reward specific expense reports to determine those subrecipients that need additional monitoring. Applicable policies and procedures will be updated as appropriate upon completion. Lastly, OMH has adopted a tracking mechanism that will be used to track and review all subrecipients single audit submissions during the upcoming review cycle.

2024-001 – Subrecipient Monitoring Cluster: Research and Development Cluster (“R&D Cluster”) Grantor: Various - All R&D Cluster awards with subrecipients Award Name: Various - All R&D Cluster awards with subrecipients Award Year: FY2024 Assistance Listing Number: Various – All R&D Cluster awards with subrecipients Pass-through entities and ID Number: Various - All R&D Cluster awards with subrecipients Management acknowledges that certain subrecipient Uniform Guidance reports for subrecipients were not reviewed. As noted, 1 of the 25 selections tested was not included in the Post-Award review of subrecipient Uniform Guidance reports. Following a comprehensive review, 12 subrecipients were identified as inadvertently omitted from the overall report data used to conduct the subrecipient Uniform Guidance report analysis for the year ended June 30, 2024. After identification of the missing subrecipients and completed prior to the issuance of this report, the University reviewed the 12 respective entities’ Uniform Guidance reports or appropriate documentation and determined that there was no impact on Tufts University and no follow-up was deemed necessary. By June 30, 2025, and on an annual basis, the University’s Post-Award office will utilize automated reports including the complete data set to review all subrecipient Uniform Guidance reports, consistently document report information, findings noted, and follow-up performed with the subrecipient, if necessary. The consolidated analysis will be reviewed by the Director of Post-Award Research Administration and the University Controller.

The audit for the year ended June 30, 2023 was not submitted to the Federal Audit Clearinghouse due to issues with the UEI numbers not being renewed timely on the Academy’s side. The Finance Director is now responsible for the renewals going forward, and this will not be an ongoing issue in the future.

Condition - The data collection form was not submitted within the required time as required by 2 CFR 200.512 for the year ended June 30, 2023. Planned Corrective Action - The audit for the year ended June 30, 2023 was not submitted to the Federal Audit Clearinghouse due to issues with the UEI numbers not being renewed timely on the Academy's side. The Finance Director is now responsible for the renewals going forward, and this will not be an ongoing issue in the future. Anticipated Completion Date: November 15, 2024 Point of Contact: Mary Ann Johnson

Trailhead is establishing a new Contract and Compliance Coordinator role to oversee contract compliance processes and to ensure that Trailhead’s policy on subrecipient monitoring is followed. This role will be responsible for ensuring that compliance requirements are integrated at the outset of each grant. This role will be responsible for internal monitoring and auditing. This role will ensure that all grant kick-off meetings follow a standard procedure and include: 1) A clear understanding of federal requirements for all involved fiscal, program, and compliance staff 2) Delegated assignments to program staff for implementing and documenting: a) Suspension and debarment prior to contracting with subrecipients b) Subrecipient vs contractor determinations c) Evaluation of each subrecipient’s risk of noncompliance i) Establish the appropriate subrecipient monitoring level based on risk. This compliance role will have the authority to ensure the procedures are completed by the assigned staff. Evidence of the completed procedure must be documented and saved in a newly created contracts database. This database will be a centralized storage that will be reviewed during internal compliance checks to ensure all required steps have been completed and documented. These documents and associated grant and contract documents will be part of an official repository.

Finding Number 2023-014 Subject Heading (Financial) or AL no. and program name (Federal) ALN: 21.027 Federal Program name: Coronavirus State And Local Fiscal Recovery Funds (CSLFRF) Planned Corrective Action Management Response The Oklahoma Office of Management and Enterprise Services – Grants Management Office (OMES-GMO) partially agrees with the finding. OMES-GMO acknowledges the importance of robust subrecipient monitoring in accordance with 2 CFR § 200.332(d) and (f), which includes ensuring that all subrecipients expending $750,000 or more in federal funds obtain a Single Audit, as required by 2 CFR § 200.501. OMES-GMO concurs with the identified inconsistency with agencies notifying subrecipients of the single audit threshold amount, despite having deficient tracking of the total of federal expenditures across all federal programs that an entity was engaged in. OMES-GMO holds a good faith belief that this deficiency on behalf of the agencies was the result of a lack of clarity; and ergo, a misinterpretation between individual program thresholds and aggregate thresholds across all programs in a fiscal year. Error may further be attributed to the limitations in tracking mechanisms, rather than a lack of awareness or intent to comply. OMES-GMO has followed up with each of the agencies named in the finding and has verified that, although subrecipient monitoring was in place, additional controls are needed to ensure accurate tracking of total federal expenditures and timely collection of required audits. Listed below are the corrective actions that have or will be implemented. Corrective Actions • Standardized Monitoring Procedures: OMES-GMO will issue updated subrecipient monitoring guidance to all state agencies administering federal funds. This guidance will include clear expectations for tracking total federal expenditures, identifying subrecipients approaching the Single Audit threshold, and documenting audit compliance. • Improved Tracking Mechanisms: OMES-GMO will work with agencies to assess their internal systems for tracking cumulative federal expenditures across funding sources, ensuring timely identification of entities requiring a Single Audit. • Ongoing Support and Oversight: OMES-GMO will incorporate further Single Audit compliance into established review processes. Agency-Specific Actions • Agency 619: Single Audits through 2022 have been obtained and archived. Requests for FY2023 audits have been issued, and responses are currently being collected. FY2024 audits will be requested no later than September 30, 2025, to allow sufficient time for completion and submission. • Agency 340: The Finance Division will begin tracking all subrecipient expenditures, including secondary recipients. Verification of Single Audit compliance will be incorporated into the agency’s annual site visits. • Agency 830: A process is already in place through the Office of Inspector General (OIG) to identify subrecipients exceeding the $750,000 threshold. All subrecipient contracts include language requiring submission of a Single Audit if the threshold is met. These audits are collected, reviewed, and stored accordingly. These corrective actions reflect OMES-GMO’s and the respective agencies’ commitment to strengthening internal controls, ensuring proper oversight of federal funds, and maintaining compliance with all applicable federal requirements. Anticipated Completion Date 6/30/2025 Responsible Contact Person OMES: Parker Wise 619: Sara Librandi, Kami Fullingim 340: Diane Brown, Danielle Smith, Tracey Douglas 830: Jaretta Murphy, Lindsey Kanaly, Danielle Durkee, Katey Campbell

Finding Number 2023-026 Subject Heading (Financial) or AL no. and program name (Federal) ALN: 21.019 Federal Program name: Emergency Rental Assistance Program (ERA) Planned Corrective Action Oklahoma Office of Management and Enterprise Services (OMES) acknowledges the Oklahoma State Auditor and Inspector Office’s (SAI) findings that OMES did not implement the proper internal controls and oversight of the ERA Program during FY2023. However, OMES has taken steps to correct these findings and follow the recommendations set forth by SAI. Beginning with FY2025, OMES has taken the following measures: • Oversight and management of the ERA program has been transferred to the OMES Grant Management Office (OMES-GMO) which has staff with several years of grant experience. OMES-GMO has recently hired additional staff, and the two staff members dedicated to the management of the ERA program have 20+ years of combined federal grant specific experience. • To ensure that the subrecipient agreement includes all the required terms under the ERA Program and that the agreement does not expire, OMES-GMO and the Communities of Foundation of Oklahoma (CFO) have recently executed a Subrecipient Grant Agreement Amendment that details the responsibilities of OMES to monitor CFO and the duties and processes that CFO must follow in regard to ERA Program, including detailed cash management policies. See Attached – Grant Agreement Amendment. (See page 15 of attached Grant Agreement.) • OMES-GMO required the return of the remaining ERA2 Program funds from CFO to ensure proper oversight and review of ERA expenditures is performed. • OMES-GMO has a multi-level system of internal controls for grant management and oversight that includes routine monitoring, desk review, and site visits for all projects and associated project/administrative expenditures to ensure allowability, accuracy, and assist in the detection of fraud. For example, OMES-GMO’s process for disbursing funds to a subrecipient requires a written request from the subrecipient with supporting documentation, then OMES-GMO assigns a staff lead and secondary grant analyst to perform a primary and secondary review for compliance and to require additional supporting documentation if needed to approve the request. Once those reviews are completed and approved by the OMES-GMO staff, the Director of the OMESGMO must approve the request before it is sent to the OMES Finance Division, who will then verify the calculated amount(s) before completing the disbursement to the subrecipient. These internal controls and policies have been implemented for the management and oversight of the ERA Program and provide a multi-layer review that will prevent fraud and risk factors applicable to the ERA program. Additionally, the OMES- GMO staff assigned to the ERA program have the training and knowledge to ensure compliance with the Federal grant requirements. • Risk assessments have been obtained and are attached. • Depending on the level of risk, OMES-GMO conducts monthly, bi-weekly or weekly meetings with each subrecipient to monitor the progress of projects and address any issues or changes that might impact the project. For the ERA Program, OMES-GMO conducts biweekly monitoring meetings with CFO and is currently reviewing documentation provided by CFO to ensure all current ERA projects are eligible under the ERA guidelines and that CFO is exercising the proper oversight over their subrecipients. • OMES-GMO will continue with their current ERA monitoring steps and internal controls and will work with CFO to ensure ERA program funds are spent in accordance with ERA program guidelines and state and federal regulations. Anticipated Completion Date Ongoing throughout the life of the grant Responsible Contact Person Brandy Manek

The Organization has remedied its controls and procedures to ensure the single audit is completed within the required timeline.

Rural Coalition has implemented clear, standardized procedures for all program and services. We have also implemented a comprehensive review of current resource allocation and set in place a more effective budget management plan so the grant funds can be managed efficiently removing the reporting backlog we believe we will no longer face. Views of Responsible Officials and Planned Corrective Actions: In Fiscal Year 2023 we are still managing additional complex projects, and though we closed out our grant reporting and deliverables sooner, the delay in the start and therefore the completion of the FY 2022 still left us behind schedule. We completed the close out process much more quickly with new procedures in place, but we are still delayed. We also once again had an increased workload corresponding to additional grant funds, which coupled with the backlog we faced, we exacerbated the challenges surrounding this year’s year end closing process. We moved during late FY 2023 to a new credit card that allowed us to collect and code receipts as expenditures were made, and this helped us for 2024 get closer to a quicker closeout. Our FY 2024 audit is now underway and we believe for 2024 we will be able to complete the single audit in time to meet the deadline for submitting the single audit report to the Office of Management and Budget. We guarantee that in future years, the year-end closing will be completed earlier now that we have overcome the backlog and have developed and implemented the necessary systems. We also guarantee that we will start the single audit within 4 months after the fiscal year-end and that the single audit will be completed timely moving forward.

Chairman of the Board of County Commissioners: Oklahoma County will comply with federal laws and regulations and grant agreements by creating award agreements that are designed and implemented to ensure Subrecipient Monitoring is performed. Anticipated Completion Date: 6/30/2025 Responsible Contact Person: Myles Davidson, BOCC Chairman

Public Health agrees with the recommendation. Public Health will develop a process for conducting risk assessments of subrecipient funding, develop and implement procedures for obtaining single audit reports from subrecipients, as well as a system to monitor and track compliance with the single audit mandate among subrecipients. Public Health will ensure each subaward includes all requirements imposed on the subrecipient so that the federal award is used in accordance with Federal Statutes, regulations, and terms of conditions of the federal award. Estimated Implementation Date: May 2025 Contact: Melissa Relles, Assistant Deputy Director Division of Operations, Center for Preparedness and Response California Department of Public Health

A meeting is held prior to audit with all accountants, Controller and CFO prior to audit to review total amount of grants awarded and/or funds received or spent. Responsible Contact Person - Mary Lou Tate, CFO Anctipated Completion Date - June 2024

Federal Agency: U.S. Department of Transportation Program/Cluster: Highway Planning and Construction Federal Assistance Listing Number: 20.205 Pass‐through: California Department of Transportation Award No. and Year: 5923, 2022/2023 Compliance Requirement: Subrecipient Monitoring Type of Finding: Material Weakness in Internal Control over Compliance, Material Noncompliance Views of Responsible Officials and Corrective Action Plan: Management agrees with the finding. All Public Works contracts receiving federal funding will be evaluated to determine if the vendor is a contractor or subrecipient going forward. This practice is already followed for the other divisions within the Department, and Public Works will now be included. Responsible Individual(s): James Bezek, Director of Resources Management Anticipated Completion Date: June 30, 2024