Corrective Action Plans

The Institution is aware of the deadline and will be filing on time going forward.

The audit for the year ended June 30, 2023 was not submitted to the Federal Audit Clearinghouse due to issues with the UEI numbers not being renewed timely on the Academy’s side. The Finance Director is now responsible for the renewals going forward, and this will not be an ongoing issue in the futur

The audit for the year ended June 30, 2023 was not submitted to the Federal Audit Clearinghouse due to issues with the UEI numbers not being renewed timely on the Academy’s side. The Finance Director is now responsible for the renewals going forward, and this will not be an ongoing issue in the future.

• The Fiscal Director position has not been continuously filled, and since COVID 19 it has proven difficult to hire qualified staff at the rate of pay offered by the Agency . The Fiscal Director is responsible for providing training and supervision to staff, and for completing such tasks as working with our Auditors and scheduling the annual audit. The Organization has hired a CFO for hire however, there are still sometimes difficulty in maintaining steady work flow, meeting deadlines and ensuring year end closing entries and reconciliations are completed timely. In addition, the Auditors contracted with the Agency have begun their reviews much later than they had pre-Covid, also lending to difficulty in meeting deadlines. • Community Action of Greene County Inc. will work to improve employee retention and engagement through coaching, training, wage equity, and improved Human Resource practices. • Community Action of Greene County Inc. will continue to incorporate automated accounting and payroll processes to improve the efficiency and accuracy of fiscal reporting. • A year end closing checklist and calendar has been developed and utilized by the fiscal staff as of Spring 2024. The completed checklist will be shared with the Executive Director following the close out period. • The Executive Director will schedule the Auditors to begin their reviews within 90 days of year end as a condition of their contract. • The Executive Director is responsible for ensuring this corrective action plan is implemented.

The Office of Mental Health (OMH) has updated the federal certification forms in March of 2022 for the MHBG COVID Relief and ARPA awards to include the following award identification information: federal fiscal year of award, federal award period, federal award identification number (FAIN), and federal award document number. The federal certification forms for the annual MHBG awards are created to align with each new Notice of Award (NOA) and include the same award identification information noted above. Due to the timing of when we received the Federal NOA’s in comparison to when the federal certification forms were distributed to sub-recipients, not all sub-recipients may have received the updated form in fiscal year end March 31, 2024. These revised forms were used for all subrecipients in SFY 2024-25. OMH will continue to amend the certification and applicable policies, procedures, and internal controls to incorporate all required identifying characteristics outlined in 45 CFR 75 Section 352 (a) in SFY 2024-25. Additionally, OMH initiated an expense report process to review award specific expense reports for all COVID Relief and ARPA federal grant subrecipients to ensure provider expenditures are following federal guidelines. This process will be rolled out to the other MHBG awards in SFY 2024-25. While a formalized risk assessment was not conducted, one has been developed to assess subrecipient risk of non-compliance. This risk assessment will be used in conjunction with the review of reward specific expense reports to determine those subrecipients that need additional monitoring. Applicable policies and procedures will be updated as appropriate upon completion. Lastly, OMH has adopted a tracking mechanism that will be used to track and review all subrecipients single audit submissions during the upcoming review cycle.

2024-001 – Subrecipient Monitoring Cluster: Research and Development Cluster (“R&D Cluster”) Grantor: Various - All R&D Cluster awards with subrecipients Award Name: Various - All R&D Cluster awards with subrecipients Award Year: FY2024 Assistance Listing Number: Various – All R&D Cluster awards with subrecipients Pass-through entities and ID Number: Various - All R&D Cluster awards with subrecipients Management acknowledges that certain subrecipient Uniform Guidance reports for subrecipients were not reviewed. As noted, 1 of the 25 selections tested was not included in the Post-Award review of subrecipient Uniform Guidance reports. Following a comprehensive review, 12 subrecipients were identified as inadvertently omitted from the overall report data used to conduct the subrecipient Uniform Guidance report analysis for the year ended June 30, 2024. After identification of the missing subrecipients and completed prior to the issuance of this report, the University reviewed the 12 respective entities’ Uniform Guidance reports or appropriate documentation and determined that there was no impact on Tufts University and no follow-up was deemed necessary. By June 30, 2025, and on an annual basis, the University’s Post-Award office will utilize automated reports including the complete data set to review all subrecipient Uniform Guidance reports, consistently document report information, findings noted, and follow-up performed with the subrecipient, if necessary. The consolidated analysis will be reviewed by the Director of Post-Award Research Administration and the University Controller.

The audit for the year ended June 30, 2023 was not submitted to the Federal Audit Clearinghouse due to issues with the UEI numbers not being renewed timely on the Academy’s side. The Finance Director is now responsible for the renewals going forward, and this will not be an ongoing issue in the future.

Condition - The data collection form was not submitted within the required time as required by 2 CFR 200.512 for the year ended June 30, 2023. Planned Corrective Action - The audit for the year ended June 30, 2023 was not submitted to the Federal Audit Clearinghouse due to issues with the UEI numbers not being renewed timely on the Academy's side. The Finance Director is now responsible for the renewals going forward, and this will not be an ongoing issue in the future. Anticipated Completion Date: November 15, 2024 Point of Contact: Mary Ann Johnson

The County acknowledges the deficiency in internal controls over financial reporting. The transition to the Workday ERP system in 2023 resulted in delays and challenges in producing timely and accurate financial data. The County is strengthening reconciliation and review processes while continuing to refine system functionality and staff proficiency. Although the 2024 audit represents the first full year in the new system, some delays have continued. The County expects processes to stabilize and reporting timelines to improve, with full resolution anticipated in the 2025 audit cycle.

We will implement the required procedures surrounding the subrecipient monitoring process and follow them consistently.

Trailhead is establishing a new Contract and Compliance Coordinator role to oversee contract compliance processes and to ensure that Trailhead’s policy on subrecipient monitoring is followed. This role will be responsible for ensuring that compliance requirements are integrated at the outset of each grant. This role will be responsible for internal monitoring and auditing. This role will ensure that all grant kick-off meetings follow a standard procedure and include: 1) A clear understanding of federal requirements for all involved fiscal, program, and compliance staff 2) Delegated assignments to program staff for implementing and documenting: a) Suspension and debarment prior to contracting with subrecipients b) Subrecipient vs contractor determinations c) Evaluation of each subrecipient’s risk of noncompliance i) Establish the appropriate subrecipient monitoring level based on risk. This compliance role will have the authority to ensure the procedures are completed by the assigned staff. Evidence of the completed procedure must be documented and saved in a newly created contracts database. This database will be a centralized storage that will be reviewed during internal compliance checks to ensure all required steps have been completed and documented. These documents and associated grant and contract documents will be part of an official repository.

Finding Number 2023-014 Subject Heading (Financial) or AL no. and program name (Federal) ALN: 21.027 Federal Program name: Coronavirus State And Local Fiscal Recovery Funds (CSLFRF) Planned Corrective Action Management Response The Oklahoma Office of Management and Enterprise Services – Grants Management Office (OMES-GMO) partially agrees with the finding. OMES-GMO acknowledges the importance of robust subrecipient monitoring in accordance with 2 CFR § 200.332(d) and (f), which includes ensuring that all subrecipients expending $750,000 or more in federal funds obtain a Single Audit, as required by 2 CFR § 200.501. OMES-GMO concurs with the identified inconsistency with agencies notifying subrecipients of the single audit threshold amount, despite having deficient tracking of the total of federal expenditures across all federal programs that an entity was engaged in. OMES-GMO holds a good faith belief that this deficiency on behalf of the agencies was the result of a lack of clarity; and ergo, a misinterpretation between individual program thresholds and aggregate thresholds across all programs in a fiscal year. Error may further be attributed to the limitations in tracking mechanisms, rather than a lack of awareness or intent to comply. OMES-GMO has followed up with each of the agencies named in the finding and has verified that, although subrecipient monitoring was in place, additional controls are needed to ensure accurate tracking of total federal expenditures and timely collection of required audits. Listed below are the corrective actions that have or will be implemented. Corrective Actions • Standardized Monitoring Procedures: OMES-GMO will issue updated subrecipient monitoring guidance to all state agencies administering federal funds. This guidance will include clear expectations for tracking total federal expenditures, identifying subrecipients approaching the Single Audit threshold, and documenting audit compliance. • Improved Tracking Mechanisms: OMES-GMO will work with agencies to assess their internal systems for tracking cumulative federal expenditures across funding sources, ensuring timely identification of entities requiring a Single Audit. • Ongoing Support and Oversight: OMES-GMO will incorporate further Single Audit compliance into established review processes. Agency-Specific Actions • Agency 619: Single Audits through 2022 have been obtained and archived. Requests for FY2023 audits have been issued, and responses are currently being collected. FY2024 audits will be requested no later than September 30, 2025, to allow sufficient time for completion and submission. • Agency 340: The Finance Division will begin tracking all subrecipient expenditures, including secondary recipients. Verification of Single Audit compliance will be incorporated into the agency’s annual site visits. • Agency 830: A process is already in place through the Office of Inspector General (OIG) to identify subrecipients exceeding the $750,000 threshold. All subrecipient contracts include language requiring submission of a Single Audit if the threshold is met. These audits are collected, reviewed, and stored accordingly. These corrective actions reflect OMES-GMO’s and the respective agencies’ commitment to strengthening internal controls, ensuring proper oversight of federal funds, and maintaining compliance with all applicable federal requirements. Anticipated Completion Date 6/30/2025 Responsible Contact Person OMES: Parker Wise 619: Sara Librandi, Kami Fullingim 340: Diane Brown, Danielle Smith, Tracey Douglas 830: Jaretta Murphy, Lindsey Kanaly, Danielle Durkee, Katey Campbell

Finding Number 2023-026 Subject Heading (Financial) or AL no. and program name (Federal) ALN: 21.019 Federal Program name: Emergency Rental Assistance Program (ERA) Planned Corrective Action Oklahoma Office of Management and Enterprise Services (OMES) acknowledges the Oklahoma State Auditor and Inspector Office’s (SAI) findings that OMES did not implement the proper internal controls and oversight of the ERA Program during FY2023. However, OMES has taken steps to correct these findings and follow the recommendations set forth by SAI. Beginning with FY2025, OMES has taken the following measures: • Oversight and management of the ERA program has been transferred to the OMES Grant Management Office (OMES-GMO) which has staff with several years of grant experience. OMES-GMO has recently hired additional staff, and the two staff members dedicated to the management of the ERA program have 20+ years of combined federal grant specific experience. • To ensure that the subrecipient agreement includes all the required terms under the ERA Program and that the agreement does not expire, OMES-GMO and the Communities of Foundation of Oklahoma (CFO) have recently executed a Subrecipient Grant Agreement Amendment that details the responsibilities of OMES to monitor CFO and the duties and processes that CFO must follow in regard to ERA Program, including detailed cash management policies. See Attached – Grant Agreement Amendment. (See page 15 of attached Grant Agreement.) • OMES-GMO required the return of the remaining ERA2 Program funds from CFO to ensure proper oversight and review of ERA expenditures is performed. • OMES-GMO has a multi-level system of internal controls for grant management and oversight that includes routine monitoring, desk review, and site visits for all projects and associated project/administrative expenditures to ensure allowability, accuracy, and assist in the detection of fraud. For example, OMES-GMO’s process for disbursing funds to a subrecipient requires a written request from the subrecipient with supporting documentation, then OMES-GMO assigns a staff lead and secondary grant analyst to perform a primary and secondary review for compliance and to require additional supporting documentation if needed to approve the request. Once those reviews are completed and approved by the OMES-GMO staff, the Director of the OMESGMO must approve the request before it is sent to the OMES Finance Division, who will then verify the calculated amount(s) before completing the disbursement to the subrecipient. These internal controls and policies have been implemented for the management and oversight of the ERA Program and provide a multi-layer review that will prevent fraud and risk factors applicable to the ERA program. Additionally, the OMES- GMO staff assigned to the ERA program have the training and knowledge to ensure compliance with the Federal grant requirements. • Risk assessments have been obtained and are attached. • Depending on the level of risk, OMES-GMO conducts monthly, bi-weekly or weekly meetings with each subrecipient to monitor the progress of projects and address any issues or changes that might impact the project. For the ERA Program, OMES-GMO conducts biweekly monitoring meetings with CFO and is currently reviewing documentation provided by CFO to ensure all current ERA projects are eligible under the ERA guidelines and that CFO is exercising the proper oversight over their subrecipients. • OMES-GMO will continue with their current ERA monitoring steps and internal controls and will work with CFO to ensure ERA program funds are spent in accordance with ERA program guidelines and state and federal regulations. Anticipated Completion Date Ongoing throughout the life of the grant Responsible Contact Person Brandy Manek

The Organization has remedied its controls and procedures to ensure the single audit is completed within the required timeline.

Rural Coalition has implemented clear, standardized procedures for all program and services. We have also implemented a comprehensive review of current resource allocation and set in place a more effective budget management plan so the grant funds can be managed efficiently removing the reporting backlog we believe we will no longer face. Views of Responsible Officials and Planned Corrective Actions: In Fiscal Year 2023 we are still managing additional complex projects, and though we closed out our grant reporting and deliverables sooner, the delay in the start and therefore the completion of the FY 2022 still left us behind schedule. We completed the close out process much more quickly with new procedures in place, but we are still delayed. We also once again had an increased workload corresponding to additional grant funds, which coupled with the backlog we faced, we exacerbated the challenges surrounding this year’s year end closing process. We moved during late FY 2023 to a new credit card that allowed us to collect and code receipts as expenditures were made, and this helped us for 2024 get closer to a quicker closeout. Our FY 2024 audit is now underway and we believe for 2024 we will be able to complete the single audit in time to meet the deadline for submitting the single audit report to the Office of Management and Budget. We guarantee that in future years, the year-end closing will be completed earlier now that we have overcome the backlog and have developed and implemented the necessary systems. We also guarantee that we will start the single audit within 4 months after the fiscal year-end and that the single audit will be completed timely moving forward.

Chairman of the Board of County Commissioners: Oklahoma County will comply with federal laws and regulations and grant agreements by creating award agreements that are designed and implemented to ensure Subrecipient Monitoring is performed. Anticipated Completion Date: 6/30/2025 Responsible Contact Person: Myles Davidson, BOCC Chairman

Public Health agrees with the recommendation. Public Health will develop a process for conducting risk assessments of subrecipient funding, develop and implement procedures for obtaining single audit reports from subrecipients, as well as a system to monitor and track compliance with the single audit mandate among subrecipients. Public Health will ensure each subaward includes all requirements imposed on the subrecipient so that the federal award is used in accordance with Federal Statutes, regulations, and terms of conditions of the federal award. Estimated Implementation Date: May 2025 Contact: Melissa Relles, Assistant Deputy Director Division of Operations, Center for Preparedness and Response California Department of Public Health

A meeting is held prior to audit with all accountants, Controller and CFO prior to audit to review total amount of grants awarded and/or funds received or spent. Responsible Contact Person - Mary Lou Tate, CFO Anctipated Completion Date - June 2024

Federal Agency: U.S. Department of Transportation Program/Cluster: Highway Planning and Construction Federal Assistance Listing Number: 20.205 Pass‐through: California Department of Transportation Award No. and Year: 5923, 2022/2023 Compliance Requirement: Subrecipient Monitoring Type of Finding: Material Weakness in Internal Control over Compliance, Material Noncompliance Views of Responsible Officials and Corrective Action Plan: Management agrees with the finding. All Public Works contracts receiving federal funding will be evaluated to determine if the vendor is a contractor or subrecipient going forward. This practice is already followed for the other divisions within the Department, and Public Works will now be included. Responsible Individual(s): James Bezek, Director of Resources Management Anticipated Completion Date: June 30, 2024

All future federal expenditures will be reconciled to the disbursement ledger.

We are in agreement with the auditors' finding. In the future, we will be prepared for the reporting requirements and the data collection form will be submitted within 30 days after the receipt of the auditor’s report or nine months after the end of the audit period. Moving forward, the SEFA will be prepared alongside other necessary documents to facilitate the audit process efficiently, and the audit submission will be completed on time. The organization has implemented new measures to monitor the progress of audit activities, including the preparation of the audit by their independent auditing firm, and ensure adequate time is allotted for submission and correspondences within the required deadlines.

Finding Reference: 2023-004 Views of Responsible Officials and Planned Corrective Actions The Agency agrees with this finding and recommendation as presented. In some contexts, the Agency experienced significant turnover in the Finance department during the third quarter, and a new Finance Director was hired during the fourth quarter of fiscal year 2023. The turnover in fiscal staff hindered the accounting processes and oversight that included journal entry review and postings and account reconciliations promptly. As a corrective measure to ensure adhering to a closing schedule and maintaining timely account reconciliations, the Agency reevaluated the fiscal department’s needs and hired new staff, including a finance director, accounts payable, part-time fiscal support specialist, and contracted with a CPA to assist with the following scope of work:  Review all trial fund balance processes.  Prepare a closing schedule that includes reporting and data processing deadlines.  Reconcile all balance sheet accounts in the general ledger chart of accounts.  Timely prepare and file all financial reports required by each award.  Work with the independent auditor to implement an interim audit fieldwork schedule to reduce required work subsequent to fiscal year-end. Name of the contact person responsible for corrective action: Michael Young, President, (301) 274-4474. Planned completion date for corrective action plan: December 31, 2025

CONDITION: The Regional Office of Education No. 39 did not have adequate controls over subrecipient monitoring in compliance with the Code. PLAN: The ROE drafted subrecipient monitoring policies and procedures for FY24 after receiving the FY22 audit finding December 2023. Policies and procedures will include required reporting, monitoring, and award notification for the subrecipients of the ARP- Social Emotional Learning grant. ANTICIPATED DATE OF COMPLETION: Implemented April 2024 CONTACT PERSON: Jill Reedy, Regional Superintendent

SUBRECIPIENT MONITORING ALN Number 93.558 Temporary Assistance for Needy Families (TANF) 93.489, 93.575, 93.596 Child Care Development Fund (CCDF) 93.568 Low Income Household Energy Ass istance Program (LIHEAP) 2023-018 Strengthen Controls over Subrecipient to Ensure Compliance with Uniform Guidance Auditing Requirements. Response: MOHS concurs that it needs to strengthen controls over subrecipient monitoring for the Child Care Development Fund (CCDF) and Temporary Assistance for Needy f amilies (TANF) programs to conform with Uniform Guidance. Corrective Action Plan: I . Strengthen cont rol over the subrecipient to ensure compliance with Uniform Guidance Requirements: A. The Office of Compliance, Division of Monitoring has made significant strides in strengthening controls over the subrecipient monitoring process. The Division continues to review and update the processes and procedures as necessary to ensure processes are adequate and effective. Staff are constantly notified/trained on updates to policies, procedures. and regulations to ensure continued compliance with monitoring the agency's subgrant agreements. Additionally, the Division is in the process of implementing a case management system to assist with this process. 8. Responsible Parties: Kameron Harris, Chief Compliance Officer, Director of Monitoring, Laketha Gilmore C. Anticipated Completion Date: This corrective action has been implemented and is ongoing.

Reference Number: 2023-002 Prior Year Finding: Yes, 2022-023 Federal Agency: U.S. Department of Labor Department Name: Mississippi Department of Employment Security Federal Program: WIOA Cluster Assistance Listing Number: 17.258, 17.259, 17.278 Award Number and Year: 7/1/22 – 6/30/23 Compliance Requirement: Subrecipient Monitoring Type of Finding: Material Weakness in Internal Control over Compliance, Material Noncompliance Criteria or specific requirement: Compliance – Per 2 CFR section 200.332(a), all pass-through entities must ensure that every subaward is clearly identified to the subrecipient as a subaward and includes information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. 2 CFR section 200.332 also states that pass-through entities must: (d) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: 1) The subrecipient's prior experience with the same or similar subawards; 2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F - Audit Requirements of this part, and the extent to which the same or similar subaward has been audited as a major program; 3) Whether the subrecipient has new personnel or new or substantially changed systems; 4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). (e) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and other means. (3) Issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient from the pass-through entity as required by § 200.521 Management decision. (f) Verify that every subrecipient is audited as required by Subpart F - Audit Requirements of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501 Audit requirements. Control – Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: The Mississippi Department of Employment Security (MDES) was unable to provide documentation of subaward agreements and monitoring activities performed. Context: Six subrecipients were selected for testing and the following exceptions were noted:  1 of 6 subawards was not available for audit. Auditors were unable to verify if the subaward contained all required information nor if it was reviewed and approved by appropriate program staff prior to issuance.  For 3 of 6 subrecipients, MDES was unable to provide documentation that it performed monitoring activities nor that it ensured the subrecipients were audited as required by Subpart F. Questioned costs: Undetermined. Cause: Internal controls were not sufficient to ensure that copies of subaward agreements were maintained and available for audit, nor that it maintained documentation of subrecipient monitoring activities performed. Effect: Auditors were unable to verify that subawards were issued in accordance with Federal requirements nor that the subrecipients had been adequately monitored and were audited as required by Subpart F. Recommendation: MDES should review and enhance internal controls and procedures to ensure that it maintains copies of all subaward agreements, that proper subrecipient monitoring is conducted, and that evaluation of independent audits is performed for all subrecipients. Copies of subawards and documentation of subrecipient monitoring activities should be readily available for audit. Views of responsible officials: MDES Response MDES concurs with this finding. Corrective Action Plan: a. MDES Plan: MDES will establish a checklist to verify receipt of the documents responsive to this compliance requirement. Using the checklist, MDES will ensure that all documents indicated in this finding will be readily available for the auditors as early as possible in the audit process. Additionally, MDES will develop a timeline and plan for the submission of documentation to ensure timely review. b. Contact Person Responsible: Director of Grant Management. c. Anticipated Corrective Action Plan Completion Date: July 31, 2024.