Corrective Action Plans

The Department of Health (DOH) will enhance its internal controls and procedures, regarding federal subawards issued by other New Jersey State departments and agencies on behalf of DOH. The Department’s Memorandum of Agreement (MOA) and Memorandum of Understanding (MOU) documents will be updated and enhanced to list and define the specific responsibilities and requirements of other departments and pass-through entities more clearly when issuing subawards with federal funding derived from DOH. If necessary, the updated MOA/MOU documents may also include an Exhibit specific to Subrecipient Monitoring, containing the federal Uniform Guidance compliance requirements including mandatory reporting of subgrantee performance indicators and listing records retention requirements for all documentation of monitored subrecipient activities. COMPLETION DATE/ CONTACT PERSON April 5, 2024 Eric Carlsson (609) 376-8480 Eric.Carlsson@doh.nj.gov

2023-045 Oregon Housing and Community Services Obtain documentation to support expenditures or pursue cost recovery MANAGEMENT RESPONSE: We agree with this recommendation. OHCS is in the process of coordinating with agencies and contractor to resolve any outstanding compliance concerns. Expenses may be considered mitigated if documentation to support the questioned cost is obtained, or if agency is able to clarify policy and procedure to support existing documentation. If expenditure is not resolved and is identified as non-compliant with federal requirements, OHCS may pursue cost recovery. Anticipated Completion Date: July 31, 2024 Contact person: Liz Weber, Chief Policy Officer

Reference Number: 2023-003 Prior Year Finding: No Federal Agency: U.S. Department of Treasury Federal Program: COVID-19 – Coronavirus State and Local Fiscal Recovery Funds Assistance Listing Number: 21.027 Award Number and Year: ARP17SL1 (5/23/2021 – 12/31/2026) Compliance Requirement: Subrecipient Monitoring Type of Finding: Material Weakness in Internal Control Over Compliance, Material Noncompliance Criteria or specific requirement: Compliance: 2 CFR §200.332 - Requirements for Pass-Through Entities states, in part, that all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes: i. Subrecipient name (which must match the name associated with its unique entity identifier); ii. Subrecipient's unique entity identifier; iii. Federal Award Identification Number (FAIN); iv. Federal Award Date (see the definition of Federal award date in § 200.1 of this part) of award to the recipient by the Federal agency; v. Subaward Period of Performance Start and End Date; vi. Subaward Budget Period Start and End Date; vii. Amount of Federal Funds Obligated by this action by the pass-through entity to the subrecipient; viii. Total Amount of Federal Funds Obligated to the subrecipient by the pass-through entity including the current financial obligation; ix. Total Amount of the Federal Award committed to the subrecipient by the pass-through entity; x. Federal award project description, as required to be responsive to the Federal Funding Accountability and Transparency Act (FFATA); xi. Name of Federal awarding agency, pass-through entity, and contact information for awarding official of the Pass-through entity; xii. Assistance Listings number and Title; the pass-through entity must identify the dollar amount made available under each Federal award and the Assistance Listings Number at time of disbursement; xiii. Identification of whether the award is R&D; and xiv. Indirect cost rate for the Federal award (including if the de minimis rate is charged) per section 200.414. (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F - Audit Requirements of this part, and the extent to which the same or similar subaward has been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; (4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Passthrough entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and other means. (3) Issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient from the pass-through entity as required by § 200.521 Management decision. (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters. (2) Performing on-site reviews of the subrecipient's program operations. (3) Arranging for agreed-upon-procedures engagements as described in § 200.425 Audit services. (f) Verify that every subrecipient is audited as required by Subpart F of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. Control: Per 2 CFR Section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non- Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should comply with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: Prince George’s County (the County) was unable to provide support that subawards it issued contained all required federal information nor that it properly monitored its subrecipients. Context: Five subrecipients were selected for testing, and the following exceptions were noted: For one of five subrecipients, the County did not have a subaward agreement in place with the subrecipient. As such, all required information was not furnished to the subrecipient. Five of five subaward agreements were missing the following required information: o Federal Award Identification Number (FAIN) For two of five subrecipients, the County was unable to provide support that it conducted during the award monitoring. For one of five subrecipients, the County was unable to provide support that it had verified that the subrecipients were audited as required by Subpart F. Questioned costs: Undetermined. Cause: The County did not establish effective internal controls and procedures over subrecipient monitoring. Effect: Excluding the required federal grant award information at the time of the subaward may cause subrecipients and their auditors to be uninformed about specific programs and other regulations that apply to the funds they receive. There is also the potential for subrecipients to have incomplete Schedules of Expenditures of Federal Awards (SEFA) in their Single Audit reports, and federal funds may not be properly audited at the subrecipient level in accordance with the Uniform Guidance. Not conducting during the award monitoring may result in a failure of the Division to detect that its subrecipients used subawards for unauthorized purposes, managed them in violation of the terms and conditions of the subawards, or that subaward performance goals were not achieved. Without ensuring subrecipients have obtained audits as required by Subpart F, there is an increased risk that subrecipients could be inappropriately spending and/or inaccurately tracking and reporting federal funds over multiple year periods, and these discrepancies may not be properly monitored, detected, and corrected by Division personnel on a timely basis. Recommendation: The County should review and enhance internal controls and procedures to ensure that all required information is included in all subawards, that proper subrecipient monitoring is conducted, and that evaluation of independent audits is performed. Action taken in response to findings: OCR has submitted the subaward agreement to include all required information for review and approval in SPEED. The subaward agreement is awaiting approval and will be sent to the Office of Finance in April 2024. Name of the contact person responsible for corrective action: Ameria Williams, Budget and Human Resources Manager. Planned completion date for corrective action plan: April 30, 2024. Explanation of disagreement with audit findings: There is no disagreement with the audit findings. Views of responsible officials: The Office of Community Relations (OCR) is reviewing and working to enhance internal controls and procedures to ensure all required information is included in the subaward, that proper subrecipient monitoring is conducted, and the evaluation of independent audits are performed. OCR is working with the subrecipient to gather payroll receipts and proof of the disbursement of funds to grantees selected through the RFPs managed by the subrecipient. Any questions concerning the findings or corrective action plan can be directed to Euniesha Davis, Director, OCR, at 301-952-4729.

Finding Number: 2023-014 Federal Program: 10.557, U.S. Department of Agriculture – WIC Special Supplemental Nutrition Program for Women, Infants, and Children Condition Per Auditor: Controls in place were not adequate to ensure the County maintained responsibility for compliance with eligibility standards when eligibility determinations are made by the contractor. Planned Corrective Action: Management has fully implemented a process, as of January 2024, by which a county representee preforms review of contractor eligibility determinations. Anticipated Completion Date: 1/31/24 Responsible Contact Person: Nataline Dean-Woods

The Department of Health (DOH) will enhance its internal controls and procedures, regarding federal subawards issued by other New Jersey State departments and agencies on behalf of DOH. The Department’s Memorandum of Agreement (MOA) and Memorandum of Understanding (MOU) documents will be updated and enhanced to list and define the specific responsibilities and requirements of other departments and pass-through entities more clearly when issuing subawards with federal funding derived from DOH. If necessary, the updated MOA/MOU documents may also include an Exhibit specific to Subrecipient Monitoring, containing the federal Uniform Guidance compliance requirements including mandatory reporting of subgrantee performance indicators and listing records retention requirements for all documentation of monitored subrecipient activities. COMPLETION DATE/ CONTACT PERSON April 5, 2024 Eric Carlsson (609) 376-8480 Eric.Carlsson@doh.nj.gov

Finding No. 2023-010 Department(s): New York City Department for the Aging Program(s): Assistance Listing Number 93.044, 93.045 & 93.053, Aging Cluster Corrective Action(s): To ensure New York City Aging follows 2 CFR 200.332, we are updating our current process and procedures on how to track and inform providers of when the Single Audit is due, when extension for the Single Audit is granted and when the submission is due. We will be sending out this communication to our providers. We will also follow-up with providers three months prior to the audit being due and three months prior to the audit being due for those who were granted extensions. Anticipated Completion Date: April 12, 2024 and ongoing Person(s) Responsible for Implementation: Jose Mercado, Chief Financial Officer jmercado@aging.nyc.gov (212) 602-4471

Federal Agency: U.S. Department of Transportation Program/Cluster: Highway Planning and Construction Federal Assistance Listing Number: 20.205 Pass‐through: California Department of Transportation Award No. and Year: 5923, 2022/2023 Compliance Requirement: Subrecipient Monitoring Type of Finding: Material Weakness in Internal Control over Compliance, Material Noncompliance Views of Responsible Officials and Corrective Action Plan: Management agrees with the finding. All Public Works contracts receiving federal funding will be evaluated to determine if the vendor is a contractor or subrecipient going forward. This practice is already followed for the other divisions within the Department, and Public Works will now be included. Responsible Individual(s): James Bezek, Director of Resources Management Anticipated Completion Date: June 30, 2024

HSEM concurs with the finding. Condition A: NH HSEM Mitigation and Recovery leadership has updated the award letter templates to ensure the necessary information is included as outlined in the condition. Conditions B – D: NH HSEM Mitigation and Recovery leadership updated the Risk Assessment Quick Reference Guide (QRG) and Subrecipient monitoring QRG. A two hour in-person training was conducted on January 31, 2024, to Mitigation and Recovery staff which focused on conducting risk assessments and subrecipient monitoring. This will be reviewed with staff again during an upcoming Section meeting in March 2024.

Condition A: DHHS partially concurs. The review of expenditure details is an integral part of DHHS’ Subrecipient Monitoring and standard language is included in the templates for legal agreements. These five subrecipients were deemed low or no risk, examination of expenditure detail is considered sufficient monitoring. All five of these subrecipients had the inclusion of the monthly detail requirement in the contracts and this was performed prior to the invoice being submitted to AP for payment. DHHS will re-evaluate current practices to ensure that the documentation is sufficient for the current subrecipient monitoring process. Regarding the two selections identified as having risk assessments which did not specify recommended monitoring procedures: The Risk Assessment Tool for one subrecipient was performed after the subaward award. However, as indicated on the Tool, programmatic monitoring activities were included in the contract. DHHS reviewed the monthly back-up documentation provided with the submitted invoices prior to sending them to AP for payment. The risk assessment tool for the second selection was performed after the subaward award. However, as indicated on the tool, programmatic monitoring activities were included in the contract. We reviewed the monthly back-up documentation provided with the submitted invoices prior to sending them to AP for payment. Condition B: DHHS partially concurs. The review of expenditure details is an integral part of DHHS’ Subrecipient Monitoring and standard language is included in the templates for legal agreements. The subrecipients were deemed low or no risk, therefore, examination of expenditure detail is considered sufficient fiscal monitoring. DHHS employs the review of expenditure details, as allowed under 200.332 (d)(1), as an integral part of the Departments Subrecipient Monitoring. A review of the expenditures provides monitoring for the following concerns: • The familiarity a subrecipient has utilizing Federal funds • The subrecipient management teams’ familiarity with Federal funding • Single Audit findings • Any prior return of funding due to non-compliance • The subrecipient’s compliance with the requirements of 200.300 and 302 • Whether the subrecipient has a new financial system DHHS will re-evaluate the risk response parameters to determine that the level of documentation is sufficient to ensure that the procedures performed would be able to identify noncompliance at the subrecipient level. Condition C: DHHS concurs. DHHS will be updating procedures to include contacting vendors to remind them of the deadline regarding the submission of their single audit in the Federal Audit Clearinghouse.

Condition A: DHHS concurs. Pursuant to the Subrecipient Monitoring Policy, the risk assessment and determination of subrecipient monitoring activities is performed during the procurement process with the Grants Administrator and the Program Lead. It is the responsibility of Program to perform the requested subrecipient monitoring. The Department provides annual training on the Subrecipient Monitoring Policy. We will reinforce the requirements of the Policy and the ramifications for the Department for the non-compliance in this year’s annual training. Regarding the incomplete Risk Assessment Tool, we will update the Subrecipient Monitoring Policy to include a secondary review of the Tool prior to implementation, as part of our internal controls. Condition B: DHHS does not concur. The Department employs the review of expenditure details, as allowed under 200.332 (d)(1), as an integral part of the Departments Subrecipient Monitoring. The Department’s review of the expenditures provides monitoring for the following concerns: • The familiarity a subrecipient has utilizing Federal funds • The subrecipient management teams’ familiarity with Federal funding • Single Audit findings • Any prior return of funding due to non-compliance • The subrecipient’s compliance with the requirements of 200.300 and 302 • Whether the subrecipient has a new financial system Standard language for the submission of expenditure detail is included in all templates for legal agreements. These subrecipients were deemed low or no risk, therefore, examination of expenditure detail is considered sufficient monitoring. Subrecipient monitoring activities are memorialized in the legal agreements. The Risk Assessment Tool provides a space for the monitoring activities to be selected, however, the Subrecipient Monitoring Policy does require the memorialization of the activities on the Tool for compliance, only to be memorialized in the legal agreement. Condition C DHHS partially concurs. As the subrecipient’s audit report had no findings, we are not required to issue a management decision letter. However, we will be updating our procedures to include contacting the vendors to remind them of the deadline regarding the submission of their single audit in the Federal Audit Clearinghouse.

Federal Agency Name: U.S. Department of Transportation, Federal Highway Administration Pass‐Through Entity: Nebraska Department of Transportation Assistance Listing Number: 20.205 Program Name: Highway Planning and Construction Finding Summary MAPA is the pass-through entity for several subrecipients. MAPA does not appear to have a formal policy to evaluate each subrecipient’s risk of noncompliance for appropriate subrecipient monitoring. Further, MAPA does not have a formal policy to monitor the activities of the subrecipients to the extent deemed necessary by the federal government, including the verification that subrecipients are audited when they reach Uniform Guidance spending levels and evaluation of those audits. However, the current procedures require a review of the subrecipients’ invoices, including all detailed costs by an appropriate individual at MAPA prior to payment. This process helps reduce risk of inappropriate funding to subrecipients. Corrective Action Plan MAPA will establish written internal procedures and complete a compliance risk determination for every federal subaward to evaluate subrecipient risk of noncompliance in accordance with the guidance provided in 2 CFR 200.332: Requirements for pass-through entities. In particular with regard to this finding, MAPA will verify whether every subrecipient is audited as required by the conditions cited in 2 CFR 200.332(f), and MAPA will evaluate such audits for compliance risk as part of its internal procedures. Responsible Individual Matthew Eash, Director of Finance Anticipated Completion Date June 30, 2024

1. Person responsible: Division Chief, Auditor-Controller Accounting Division 2. Corrective action plan: The County agrees with the finding and recommendation. In September 2022, the County issued the Notice of Federal Subaward Information template, which contains the 14 reporting elements required by 2 CFR §200.332(a) that must be provided to subrecipients at the time of the subaward. The County will issue written correspondence reminding departments to complete the Notice of Federal Subaward Information template and provide a completed copy to the subrecipient at the time of the subaward. The County will also remind departments to provide all the required elements from 2 CFR §200.332(a) via letter or amended agreement to existing subrecipients that were not initially provided all the requirements. In the same correspondence, the County will remind departments to monitor their Coronavirus State and Local Fiscal Recovery Fund (CSLFRF) subrecipients, maintain sufficient records of the monitoring, and utilize the Subrecipient Monitoring Guide issued in June 2023. 3. Anticipated implementation date: June 28, 2024

Finding No. 2023-001 Subrecipient Monitoring Cluster: Research and Development Cluster Grantor: Department of Health and Human Services and National Aeronautics and Space Administration Award Names: Biomedical Research and Research Training and Science Award Year: July 1, 2022 – June 30, 2023 Award Number: 5R01GM140457-03 and 80NSSC21K0753 Assistance Listing Numbers: 93.859 and 43.001 Pass-through entity: Not applicable The College agrees with the finding noting that a business control process was in place for the regular monitoring of subrecipients, however, the College did not retain certain documentation evidencing this review. The ongoing risk inherent with subrecipient scenarios is taken seriously by the College, but the reviews have been informally performed and without standard documentation. The College has recently added a full time equivalent to the Controller’s Office for grant administration purposes, such as this control. Through the assistance of this new employee, the College will develop a formal subrecipient process and move forward with its implementation. We anticipate certain steps in place by June 30, 2024. Stephen Nigro, Controller is responsible for implementing this corrective action plan. Contact Person: Stephen Nigro, Controller (413) 542-2101

Community Partners acknowledges that while subrecipient monitoring was performed for federal subrecipients by hiring third party CPAs, the monitoring was based on randomly selected samples and a risk assessment was not included in the monitoring plan. Current leadership has enhanced the subrecipient monitoring plan by ensuring that risk assessments are incorporated into any future subrecipient monitoring. The person responsible for the corrective action detailed above will be Joyce Williams, Chief Financial and Operations Officer, (213) 346‐3202. We anticipate corrective action will be completed by June 30, 2024.

To improve the communication of the nature of the federal funding and associated requirements, C/CAG will ensure that future federal pass-through grant agreements include the following information and language: (1) The specific portion of funding that is federal funds, the Federal Awarding Agency, full funding amount and applicable Federal Project Number, listing number and title. (2) A portion of the funds included are federal funds, and the recipient is responsible for compliance with all relevant Federal requirements, including, but not limited to § 200.501 Audit requirements and 2 CFR § 200.332 Requirements for pass-through entities.

Finding: The Foundation is not in compliance with recordkeeping for program monitoring and evaluation, as the Foundation does not have comprehensive sponsor/subrecipient monitoring policies and procedures. Corrective Action Taken or Planned: The Foundation has updated its Quality Management Plan to include comprehensive subrecipient monitoring policies. The Foundation’s Quality Management team is working with all programming to implement a robust monitoring process, including risk assessments, adherent to grantor regulations, service delivery, and program outcomes. Anticipated Date of Completion: June 30, 2024 Name of Contact Person: Laurie Wettstead, Chief Finance Officer

PDA: PDA will be hiring a complement position to develop and maintain an audit tracking report to ensure that all single audits are properly logged and processed. In addition, this position will review the financial information in each audit report to determine if all pass-through funding is properly included and subject to audit. This position will coordinate with the bureaus within PDA to ensure all required follow-up is completed in a timely manner. Anticipated Completion Date: 06/30/2024 Contact Name: Tracee Gotwalt, Audit Coordinator PDOA: The PDOA is looking to improve management decision communications in addition to more thorough evaluations as a new Comprehensive Monitoring Process pilot is starting in April 2024 to address the noncompliance of subrecipient monitoring. This has resulted in management designing control activities to achieve timely submissions in the future by initiating the following: 1. An audit tracking log has been established to track report submissions, document when they were received, initiated, findings requiring follow-up, and subsequent steps to finalize the audit. 2. A separate tracking mechanism is in place to ensure the monitoring of subrecipient activities for compliance with federal statutes, regulations, and the terms and conditions of the Agreement for the 52 Area Agency on Aging subrecipients. 3. PDOA is looking to fill a vacant position with a focus of tracking subrecipient expenditures in the aggregate and tracks Single Audit submissions on a Commonwealth wide basis since the Aging Cluster is material and has material sub-granted expenditures. 4. Since receiving the finding, PDOA has reached out to the resource account where Subrecipient Single Audit reports are received by the Federal Audit Clearinghouse (FAC) to verify all outstanding audit items for PDOA, as action is required within six months of receipt. 5. It is PDOAs impression that having increased oversight of the Schedule of Expenditures of Federal Awards (SEFA) will allow for timely dissemination of Management Decision Letters (MDL) in the six-month timeframe for making a management decision for federal award findings. 6. Additionally, PDOA will confirm a closure letter was sent to the Philadelphia Corporation for Aging documenting PDOA’s management decision regarding federal award findings, as included in their FYE 06/30/2021 Single Audit report. 7. Follow-Up procedures resulting from this finding will be reviewed and adjusted as needed to deliver optimal outcomes. Preliminary procedures will be directed to the agency’s audit review committee for resolution of completeness. 8. In the event the audit review committee determines additional steps beyond the monitoring efforts outlined above are insufficient, additional efforts will be communicated to the AAA network. Anticipated Completion Date: 06/30/2024 Contact Name: Jennifer Cave, Fiscal Management Specialist, PDOA Audit Liaison DOH: DOH’s subrecipient single audit tracking report now includes a mechanism to monitor management decision deadlines related to each entity’s FAC submission date. The process for tracking subrecipient audit reports with findings has been updated to include and highlight subrecipients’ audit reports where DOH is the lead agency for finding resolution or the report contains findings that relate to the Department. Anticipated Completion Date: 03/31/2024 Contact Name: Steven Marsden, Chief, Audit Resolution Section PDE: PDE has implemented weekly, monthly and quarterly checks to ensure that all single audits are properly logged and processed. The clerk typist will conduct a weekly review and provide confirmation to the audit coordinator by signature. Bi-weekly, the clerk typist will follow up on any single audits that remain open. Anticipated Completion Date: Completed Contact Names: Clayton Carroll, Audit Coordinator, Bureau of Budget & Fiscal Management; Jessica Sites, Director, Bureau of Budget & Fiscal Management

Program: AL 97.036 – Disaster Grants - Public Assistance (Presidentially Declared Disasters) – Subrecipient Monitoring Corrective Action Plan: The Agency’s top priority is to respond to its vacancy needs by continuing working with department Human Resources to find, hire, and train viable candidates who can perform these important functions. Contact: Erv Portis Anticipated Completion Date: Ongoing

Program: Various, including AL 84.027 – Special Education Grants to States; AL 84.173 – COVID-19 Special Education Preschool Grants; AL 84.425D – COVID-19 Education Stabilization Fund – Elementary and Secondary School Emergency Relief Fund (ESSER I and ESSER II); AL 84.425U – COVID-19 Education Stabilization Fund – American Rescue Plan – Elementary and Secondary School Emergency Relief Fund (ARP ESSER) – Subrecipient Monitoring Corrective Action Plan: First SPED subrecipient – As education subrecipients have had a significant influx of subawards to mitigate post-COVID supports for Nebraska education with limited staff capacity, the Department has remained mindful of these conditions and is on schedule to complete its annual fiscal monitoring efforts within the normal timelines afforded each year. Second SPED subrecipient – Because the UNL utilizes PVS as allowed by 2 CFR 200.430 in regard to salary and wage benefit costs for employees working on a project under a contractual grant agreement, the NDE going forward will require PVS supporting documentation be submitted as a minimum semi-annually for each contract to verify the salary and benefit costs being requested for reimbursement as recommended by the U.S. Department of Education beginning with any payments occurring after March 1, 2023. Third SPED subrecipient – The documentation to support the review of purchased services and supplies during fiscal monitoring was provided to the APA on March 4, 2024. Single Audits – The Director of Grants Management and Director of Grants Compliance will work collaboratively to ensure all subrecipient audits are reviewed and applicable management decision letters are issued within the requested timeframe. Contact: Jen Utemark, Administrator, Office of Budget & Grants Management Anticipated Completion Date: July 1, 2024

2023-001 Program: Foster Care Federal Financial Assistance Listing Number: 93.658 Federal Grantor: U.S. Department of Health and Human Services Pass-Through: California Department of Social Services Award No. and Year: 2301CAFOST and 2023, 2201CAFOST and 2022 Compliance Requirements: Subrecipient Monitoring Type of Finding: Material Weakness in Internal Control over Compliance and Material Instance of Noncompliance Criteria: In accordance with Title 2 U.S. Code of Federal Regulations (CFR) 200.332, pass-through entities must comply with the following: • 2 CFR Part 200.332(a), Requirements for Pass-Through Entities, states that all pass- through entities must ensure that every subaward is clearly identified to the subrecipient as a subaward and includes certain information as well as all the requirements imposed by the pass-through entity on the subrecipient so that the Federal award is used in accordance with Federal statutes, regulations, and the terms and conditions of the award. • 2 CFR 200.332(b) – Evaluate each subrecipient’s risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward. This evaluation of risk may include consideration of such factors listed in 2 CFR 200.332(b)(1) through (4). • 2 CFR 200.332(d) – Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include the information at 2 CFR 200.332(d)(1) through (4). • 2 CFR 200.332(f) – Verify that every subrecipient is audited as required by Subpart F of this part when it is expected that the subrecipient’s Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 200.501. The California Department of Social Services further clarifies in its County Fiscal Letter No. 22/23- 91 that Foster Family Agency (FFA), Group Home, and Short Term Residential Therapeutic Programs (STRTP) are “considered subrecipients and subject to the same audit requirements and require the same degree of oversight as other subrecipients”. Further, while there are some licensing and oversight functions performed by the state over FFAs, group homes, and STRTPs, “counties are still ultimately responsible for review of these audits and their findings, any follow- up to ensure compliance, and any other form of monitoring and oversight required by federal and state laws and regulations.” 2 CFR Section 180.300a, Responsibilities of Participants Regarding Doing Business with Other Persons (and repeated in the California Department of Social Services - County Fiscal Letter No. 21/22 – 115) counties are required to verify that recipients or contracts have not been suspended or debarred by using the federal SAM (Systems for Award Management). Condition: The Social Services Agency (SSA) did not have any formal controls in place for evaluating each subrecipient’s risk of noncompliance or the purpose of determining the appropriate subrecipient monitoring or for subrecipient monitoring for the Foster Care program. Additionally, the following information was not provided at the time of the subaward for ten (10) of fourteen (14) subawards selected for testing from the SSA’s for the Foster Care program: • Subrecipient’s unique entity identifier • Federal award identification number • Federal award date of award to recipient by the Federal agency • Subaward period of performance • Amount of federal funds obligated to the subrecipient • Amount of federal funds committed to the subrecipient • Federal award project description • Name of federal awarding agency • CFDA/Assistance Listing number • Identification of whether the award is research and development • Indirect cost rate During our testing, we noted for four (4) of fourteen (14) subrecipients selected, SSA did not have documentation that the SAM clearance was performed prior to entering the contract with the subrecipient. The County’s policy was to verify the subrecipient was not suspended or debarred prior to entering the contract, but the County did not retain evidence of this check prior to entering the contract. Cause: The SSA’s procedures did not consistently ensure that the required award information and applicable requires were communicated to the subrecipients. The SSA did not follow their procedures to evaluate the risk of noncompliance or monitor the activities of each subrecipient, and the SSA did not maintain documentation of their verification that every subrecipient is audited, as required. Additionally, the SSA department did not follow their policy to retain documentation of the verification of the information prior to entering the contract. Effect: The County’s control policies were not consistently followed which require compliance with the Subrecipient Monitoring requirements in 2 CFR 200.332 and did not comply with subrecipient monitoring requirements related to the program. Additionally, the County’s control policies were not consistently followed, which required documentation of the verification prior to entering the contract. Questioned Costs: No questioned costs were identified as a result of our procedures. Context/Sampling: A nonstatistical sample of fourteen (14) out of seventy (70) subrecipients were sampled, which included seven (7) FFA, and seven (7) STRTP types. The condition noted above was identified during our procedures related to subrecipient monitoring and was pervasive to the program. Repeat Findings from Prior Years: Yes, Finding 2022-002,2022-005 and 2022-006. Recommendation: We recommend that the County adhere to their policies and procedures in accordance with 2 CFR 200.332 to ensure compliance with subrecipient monitoring requirements. We recommend that the County adhere to their procedures requiring documentation of the SAM clearance prior to entering the contract. Management Response and Corrective Action: Social Services Agency: 1. Person Responsible: Kristi Fiskum, Human Services Deputy Director and Karen Vu, Procurement Contract Manager, Senior 2. Corrective Action Plan: SSA has revised its Subrecipient Monitoring Policy in accordance with 2 CFR 200.332 to ensure compliance with subrecipient monitoring requirements and the updated policy was implemented in September 2023. A check list has been developed to track monitoring requirements and was also implemented in September 2023. 3. Anticipated Implementation Date: Fully implemented as of September 2023

FINDING 2023-002 Finding Subject: COVID-19 – Education Stabilization Fund – Subrecipient Monitoring Summary of Finding: The School Corporation received and passed through to subrecipients $495,386 of ESF funds. The School Corporation is to clearly identify the award and applicable requirements to the subrecipients, evaluate the risk of noncompliance related to the subrecipients to determine appropriate monitoring of the subaward, and monitor the activities of the subrecipients to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals. Contact Person Responsible for Corrective Action: Dr. Judi Hendrix, Director of WVEC and Michelle Cronk, CFO of West Lafayette Schools Contact Phone Number and Email Address: Dr. Judi Hendrix Michelle Cronk 765-894-0333 765-746-1602 judi.hendrix@esc5.k12.in.us cronkm@wl.k12.in.us Views of Responsible Officials: We concur with the finding regarding the informing and monitoring of subrecipients for federal grants. Description of Corrective Action Plan: We concur with the findings from the State Audit regarding the 3E grants funds; 2023-002. Our Corrective Action Plan would consist of the following:  Before ESF funds are dispersed to school districts (subrecipients), the WVEC Grant Director will ask districts for proper documentation such as receipts, college entrance letters, staff documented timesheets to support their request for funding.  The WVEC Grant Director will monitor the activities of the subrecipients to ensure that the financial subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals of the grant.  Once the school district’s information and documentation is received and approved, grant funding will be dispersed. Both the Service Center Executive Director and WVEC Grant Manager will approve and sign off on any payment made to a subrecipient.  On a biannual basis (periods ending June 30 and December 31), West Lafayette School Corporation will request the monitoring documentation from WVEC to ensure that proper monitoring is taking place. The WVEC Grant Director will create a sub-grantee reporting procedure:  Monthly spreadsheet with district allowable expense and sign off by Grant Manager, WVEC Executive Director and WVEC Treasurer approval.  This will take place every pay period to monitor the disbursement of any federal funds and to ensure that they are used for allowable expenditures under the grant.  This monitoring will begin in the month of March 2024 and continue until the end of the grant or Final Report, December 31, 2024. This procedure will also be used for other federal grants received.  On a biannual basis (periods ending June 30 and December 31), West Lafayette School Corporation will request the monitoring documentation from WVEC to ensure that proper monitoring is taking place. Anticipated Completion Date: Monthly monitoring will begin promptly (March 2024) and end with the final report of 3E grant activities on December 31, 2024.

Responsible Contact Person(s): Angela Morse, Director of Benefit Programs Frank Smith, Associate Director of Benefit Programs Corrective Action Planned: DSS has requested the vendor's records. Once received, DSS will audit those records to provide reasonable assurance that the contractor administered the LIHWAP federal grant program in accordance with federal statutes, regulations, and the terms and conditions of the federal award before it closes the grant award. Estimated Completion Date: 6/30/2024

The City agrees with the finding. The City's Grant Administrator will provide training to each City department which currently oversees subrecipients, ensuring that all department staff understand general and ARPA-specific subrecipient requirements. Additionally, the Grant Administrator will review City departments' subrecipient management checklists to ensure all required documentation is obtained from subrecipients and reviewed as required. This will be complete by June 30, 2024.

SUBRECIPIENT MONITORING School Building Authority (SBA) Assistance Listing Number 97.036, COVID-19 97.036 The SBA will ensure and review audits of all subrecipients yearly effective February 2024. The SBA will implement policies and procedures to monitor all subrecipients to ensure compliance with federal requirements. This will include, but is not limited to, performing a yearly risk assessment as required by 2 CFR 200.303. This assessment will take into consideration results from the yearly audit of each subrecipient as well as other criteria listed in 2CFR 200.303 paragraphs (b), (d) & (e).

SUBRECIPIENT MONITORING West Virginia Community Advancement and Development (WV CAD) Assistance Listing Number 93.568, COVID-19 93.568 Between the years 2022 and 2023, the Weatherization Assistance Program (WAP) experienced a significant turnover in its staff. As a result of this turnover, the proper adherence to the requirement of 2 CFR 200.332(f) for verifying subrecipients was not followed during the auditing process. To ensure that this requirement is met in the future, WV CAD has taken measures to document the policies and procedures related to the financial audit requirements of 2 CFR 200.332(f) in the current WAP State Plan. A designated team member has been assigned the responsibility of maintaining a comprehensive tracking list, which includes the due dates of audits, their review dates, any necessary subrecipient corrective action plans, the dates of letter correspondence, and the uploading of all relevant documents into the divisions Shared Drive. Additionally, this team member is also responsible for downloading the audits from the Federal Audit Clearinghouse and submitting the information to the Fiscal Monitor for a thorough accounting review. These measures aim to ensure proper compliance and accountability within the Weatherization Assistance Program. This action will be implemented in February 2024.