Corrective Action Plans

Finding 2023-012 - Single Audit Reporting Auditee's Response and Planned Corrective Action The Town will work with the accounting department, fee accountant, and audit fmn to file the required reports timely. Planned Implementation Date of Corrective Action: January 2026 Person Responsible for Corrective Action: Fred Costello, T own Supervisor

It has been brought to our attention that we need an additional policy that covers conflict of interests and govern the performance of its employees engaged in the selection, award, and administration of contracts. We have taken this recommendation and are implementing the proper language, for all employees to acknowledge in our County Handbook. We will strengthen this control and add this be updated yearly, so that all conflict can be disclosed. Creek County prides itself in moving toward complete transparency and holding each employee accountable to disclose all information needed to make a proper selection of purchases. Creek County Clerk’s Office will work with the District Attorney’s Office for proper language.

The County Board is continuously monitoring award recipients and bas a process established that prevents disbursement of fonds until proof of use is provided to the County Board.

The County acknowledges the deficiency in internal controls over financial reporting. The transition to the Workday ERP system in 2023 resulted in delays and challenges in producing timely and accurate financial data. The County is strengthening reconciliation and review processes while continuing to refine system functionality and staff proficiency. Although the 2024 audit represents the first full year in the new system, some delays have continued. The County expects processes to stabilize and reporting timelines to improve, with full resolution anticipated in the 2025 audit cycle.

We will implement the required procedures surrounding the subrecipient monitoring process and follow them consistently.

Trailhead is establishing a new Contract and Compliance Coordinator role to oversee contract compliance processes and to ensure that Trailhead’s policy on subrecipient monitoring is followed. This role will be responsible for ensuring that compliance requirements are integrated at the outset of each grant. This role will be responsible for internal monitoring and auditing. This role will ensure that all grant kick-off meetings follow a standard procedure and include: 1) A clear understanding of federal requirements for all involved fiscal, program, and compliance staff 2) Delegated assignments to program staff for implementing and documenting: a) Suspension and debarment prior to contracting with subrecipients b) Subrecipient vs contractor determinations c) Evaluation of each subrecipient’s risk of noncompliance i) Establish the appropriate subrecipient monitoring level based on risk. This compliance role will have the authority to ensure the procedures are completed by the assigned staff. Evidence of the completed procedure must be documented and saved in a newly created contracts database. This database will be a centralized storage that will be reviewed during internal compliance checks to ensure all required steps have been completed and documented. These documents and associated grant and contract documents will be part of an official repository.

Finding Number 2023-014 Subject Heading (Financial) or AL no. and program name (Federal) ALN: 21.027 Federal Program name: Coronavirus State And Local Fiscal Recovery Funds (CSLFRF) Planned Corrective Action Management Response The Oklahoma Office of Management and Enterprise Services – Grants Management Office (OMES-GMO) partially agrees with the finding. OMES-GMO acknowledges the importance of robust subrecipient monitoring in accordance with 2 CFR § 200.332(d) and (f), which includes ensuring that all subrecipients expending $750,000 or more in federal funds obtain a Single Audit, as required by 2 CFR § 200.501. OMES-GMO concurs with the identified inconsistency with agencies notifying subrecipients of the single audit threshold amount, despite having deficient tracking of the total of federal expenditures across all federal programs that an entity was engaged in. OMES-GMO holds a good faith belief that this deficiency on behalf of the agencies was the result of a lack of clarity; and ergo, a misinterpretation between individual program thresholds and aggregate thresholds across all programs in a fiscal year. Error may further be attributed to the limitations in tracking mechanisms, rather than a lack of awareness or intent to comply. OMES-GMO has followed up with each of the agencies named in the finding and has verified that, although subrecipient monitoring was in place, additional controls are needed to ensure accurate tracking of total federal expenditures and timely collection of required audits. Listed below are the corrective actions that have or will be implemented. Corrective Actions • Standardized Monitoring Procedures: OMES-GMO will issue updated subrecipient monitoring guidance to all state agencies administering federal funds. This guidance will include clear expectations for tracking total federal expenditures, identifying subrecipients approaching the Single Audit threshold, and documenting audit compliance. • Improved Tracking Mechanisms: OMES-GMO will work with agencies to assess their internal systems for tracking cumulative federal expenditures across funding sources, ensuring timely identification of entities requiring a Single Audit. • Ongoing Support and Oversight: OMES-GMO will incorporate further Single Audit compliance into established review processes. Agency-Specific Actions • Agency 619: Single Audits through 2022 have been obtained and archived. Requests for FY2023 audits have been issued, and responses are currently being collected. FY2024 audits will be requested no later than September 30, 2025, to allow sufficient time for completion and submission. • Agency 340: The Finance Division will begin tracking all subrecipient expenditures, including secondary recipients. Verification of Single Audit compliance will be incorporated into the agency’s annual site visits. • Agency 830: A process is already in place through the Office of Inspector General (OIG) to identify subrecipients exceeding the $750,000 threshold. All subrecipient contracts include language requiring submission of a Single Audit if the threshold is met. These audits are collected, reviewed, and stored accordingly. These corrective actions reflect OMES-GMO’s and the respective agencies’ commitment to strengthening internal controls, ensuring proper oversight of federal funds, and maintaining compliance with all applicable federal requirements. Anticipated Completion Date 6/30/2025 Responsible Contact Person OMES: Parker Wise 619: Sara Librandi, Kami Fullingim 340: Diane Brown, Danielle Smith, Tracey Douglas 830: Jaretta Murphy, Lindsey Kanaly, Danielle Durkee, Katey Campbell

Finding Number 2023-026 Subject Heading (Financial) or AL no. and program name (Federal) ALN: 21.019 Federal Program name: Emergency Rental Assistance Program (ERA) Planned Corrective Action Oklahoma Office of Management and Enterprise Services (OMES) acknowledges the Oklahoma State Auditor and Inspector Office’s (SAI) findings that OMES did not implement the proper internal controls and oversight of the ERA Program during FY2023. However, OMES has taken steps to correct these findings and follow the recommendations set forth by SAI. Beginning with FY2025, OMES has taken the following measures: • Oversight and management of the ERA program has been transferred to the OMES Grant Management Office (OMES-GMO) which has staff with several years of grant experience. OMES-GMO has recently hired additional staff, and the two staff members dedicated to the management of the ERA program have 20+ years of combined federal grant specific experience. • To ensure that the subrecipient agreement includes all the required terms under the ERA Program and that the agreement does not expire, OMES-GMO and the Communities of Foundation of Oklahoma (CFO) have recently executed a Subrecipient Grant Agreement Amendment that details the responsibilities of OMES to monitor CFO and the duties and processes that CFO must follow in regard to ERA Program, including detailed cash management policies. See Attached – Grant Agreement Amendment. (See page 15 of attached Grant Agreement.) • OMES-GMO required the return of the remaining ERA2 Program funds from CFO to ensure proper oversight and review of ERA expenditures is performed. • OMES-GMO has a multi-level system of internal controls for grant management and oversight that includes routine monitoring, desk review, and site visits for all projects and associated project/administrative expenditures to ensure allowability, accuracy, and assist in the detection of fraud. For example, OMES-GMO’s process for disbursing funds to a subrecipient requires a written request from the subrecipient with supporting documentation, then OMES-GMO assigns a staff lead and secondary grant analyst to perform a primary and secondary review for compliance and to require additional supporting documentation if needed to approve the request. Once those reviews are completed and approved by the OMES-GMO staff, the Director of the OMESGMO must approve the request before it is sent to the OMES Finance Division, who will then verify the calculated amount(s) before completing the disbursement to the subrecipient. These internal controls and policies have been implemented for the management and oversight of the ERA Program and provide a multi-layer review that will prevent fraud and risk factors applicable to the ERA program. Additionally, the OMES- GMO staff assigned to the ERA program have the training and knowledge to ensure compliance with the Federal grant requirements. • Risk assessments have been obtained and are attached. • Depending on the level of risk, OMES-GMO conducts monthly, bi-weekly or weekly meetings with each subrecipient to monitor the progress of projects and address any issues or changes that might impact the project. For the ERA Program, OMES-GMO conducts biweekly monitoring meetings with CFO and is currently reviewing documentation provided by CFO to ensure all current ERA projects are eligible under the ERA guidelines and that CFO is exercising the proper oversight over their subrecipients. • OMES-GMO will continue with their current ERA monitoring steps and internal controls and will work with CFO to ensure ERA program funds are spent in accordance with ERA program guidelines and state and federal regulations. Anticipated Completion Date Ongoing throughout the life of the grant Responsible Contact Person Brandy Manek

The Organization has remedied its controls and procedures to ensure the single audit is completed within the required timeline.

Rural Coalition has implemented clear, standardized procedures for all program and services. We have also implemented a comprehensive review of current resource allocation and set in place a more effective budget management plan so the grant funds can be managed efficiently removing the reporting backlog we believe we will no longer face. Views of Responsible Officials and Planned Corrective Actions: In Fiscal Year 2023 we are still managing additional complex projects, and though we closed out our grant reporting and deliverables sooner, the delay in the start and therefore the completion of the FY 2022 still left us behind schedule. We completed the close out process much more quickly with new procedures in place, but we are still delayed. We also once again had an increased workload corresponding to additional grant funds, which coupled with the backlog we faced, we exacerbated the challenges surrounding this year’s year end closing process. We moved during late FY 2023 to a new credit card that allowed us to collect and code receipts as expenditures were made, and this helped us for 2024 get closer to a quicker closeout. Our FY 2024 audit is now underway and we believe for 2024 we will be able to complete the single audit in time to meet the deadline for submitting the single audit report to the Office of Management and Budget. We guarantee that in future years, the year-end closing will be completed earlier now that we have overcome the backlog and have developed and implemented the necessary systems. We also guarantee that we will start the single audit within 4 months after the fiscal year-end and that the single audit will be completed timely moving forward.

Chairman of the Board of County Commissioners: Oklahoma County will comply with federal laws and regulations and grant agreements by creating award agreements that are designed and implemented to ensure Subrecipient Monitoring is performed. Anticipated Completion Date: 6/30/2025 Responsible Contact Person: Myles Davidson, BOCC Chairman

Public Health agrees with the recommendation. Public Health will develop a process for conducting risk assessments of subrecipient funding, develop and implement procedures for obtaining single audit reports from subrecipients, as well as a system to monitor and track compliance with the single audit mandate among subrecipients. Public Health will ensure each subaward includes all requirements imposed on the subrecipient so that the federal award is used in accordance with Federal Statutes, regulations, and terms of conditions of the federal award. Estimated Implementation Date: May 2025 Contact: Melissa Relles, Assistant Deputy Director Division of Operations, Center for Preparedness and Response California Department of Public Health

A meeting is held prior to audit with all accountants, Controller and CFO prior to audit to review total amount of grants awarded and/or funds received or spent. Responsible Contact Person - Mary Lou Tate, CFO Anctipated Completion Date - June 2024

Federal Agency: U.S. Department of Transportation Program/Cluster: Highway Planning and Construction Federal Assistance Listing Number: 20.205 Pass‐through: California Department of Transportation Award No. and Year: 5923, 2022/2023 Compliance Requirement: Subrecipient Monitoring Type of Finding: Material Weakness in Internal Control over Compliance, Material Noncompliance Views of Responsible Officials and Corrective Action Plan: Management agrees with the finding. All Public Works contracts receiving federal funding will be evaluated to determine if the vendor is a contractor or subrecipient going forward. This practice is already followed for the other divisions within the Department, and Public Works will now be included. Responsible Individual(s): James Bezek, Director of Resources Management Anticipated Completion Date: June 30, 2024

All future federal expenditures will be reconciled to the disbursement ledger.

We are in agreement with the auditors' finding. In the future, we will be prepared for the reporting requirements and the data collection form will be submitted within 30 days after the receipt of the auditor’s report or nine months after the end of the audit period. Moving forward, the SEFA will be prepared alongside other necessary documents to facilitate the audit process efficiently, and the audit submission will be completed on time. The organization has implemented new measures to monitor the progress of audit activities, including the preparation of the audit by their independent auditing firm, and ensure adequate time is allotted for submission and correspondences within the required deadlines.

Finding Reference: 2023-004 Views of Responsible Officials and Planned Corrective Actions The Agency agrees with this finding and recommendation as presented. In some contexts, the Agency experienced significant turnover in the Finance department during the third quarter, and a new Finance Director was hired during the fourth quarter of fiscal year 2023. The turnover in fiscal staff hindered the accounting processes and oversight that included journal entry review and postings and account reconciliations promptly. As a corrective measure to ensure adhering to a closing schedule and maintaining timely account reconciliations, the Agency reevaluated the fiscal department’s needs and hired new staff, including a finance director, accounts payable, part-time fiscal support specialist, and contracted with a CPA to assist with the following scope of work:  Review all trial fund balance processes.  Prepare a closing schedule that includes reporting and data processing deadlines.  Reconcile all balance sheet accounts in the general ledger chart of accounts.  Timely prepare and file all financial reports required by each award.  Work with the independent auditor to implement an interim audit fieldwork schedule to reduce required work subsequent to fiscal year-end. Name of the contact person responsible for corrective action: Michael Young, President, (301) 274-4474. Planned completion date for corrective action plan: December 31, 2025

CONDITION: The Regional Office of Education No. 39 did not have adequate controls over subrecipient monitoring in compliance with the Code. PLAN: The ROE drafted subrecipient monitoring policies and procedures for FY24 after receiving the FY22 audit finding December 2023. Policies and procedures will include required reporting, monitoring, and award notification for the subrecipients of the ARP- Social Emotional Learning grant. ANTICIPATED DATE OF COMPLETION: Implemented April 2024 CONTACT PERSON: Jill Reedy, Regional Superintendent

SUBRECIPIENT MONITORING ALN Number 93.558 Temporary Assistance for Needy Families (TANF) 93.489, 93.575, 93.596 Child Care Development Fund (CCDF) 93.568 Low Income Household Energy Ass istance Program (LIHEAP) 2023-018 Strengthen Controls over Subrecipient to Ensure Compliance with Uniform Guidance Auditing Requirements. Response: MOHS concurs that it needs to strengthen controls over subrecipient monitoring for the Child Care Development Fund (CCDF) and Temporary Assistance for Needy f amilies (TANF) programs to conform with Uniform Guidance. Corrective Action Plan: I . Strengthen cont rol over the subrecipient to ensure compliance with Uniform Guidance Requirements: A. The Office of Compliance, Division of Monitoring has made significant strides in strengthening controls over the subrecipient monitoring process. The Division continues to review and update the processes and procedures as necessary to ensure processes are adequate and effective. Staff are constantly notified/trained on updates to policies, procedures. and regulations to ensure continued compliance with monitoring the agency's subgrant agreements. Additionally, the Division is in the process of implementing a case management system to assist with this process. 8. Responsible Parties: Kameron Harris, Chief Compliance Officer, Director of Monitoring, Laketha Gilmore C. Anticipated Completion Date: This corrective action has been implemented and is ongoing.

Reference Number: 2023-002 Prior Year Finding: Yes, 2022-023 Federal Agency: U.S. Department of Labor Department Name: Mississippi Department of Employment Security Federal Program: WIOA Cluster Assistance Listing Number: 17.258, 17.259, 17.278 Award Number and Year: 7/1/22 – 6/30/23 Compliance Requirement: Subrecipient Monitoring Type of Finding: Material Weakness in Internal Control over Compliance, Material Noncompliance Criteria or specific requirement: Compliance – Per 2 CFR section 200.332(a), all pass-through entities must ensure that every subaward is clearly identified to the subrecipient as a subaward and includes information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. 2 CFR section 200.332 also states that pass-through entities must: (d) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: 1) The subrecipient's prior experience with the same or similar subawards; 2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F - Audit Requirements of this part, and the extent to which the same or similar subaward has been audited as a major program; 3) Whether the subrecipient has new personnel or new or substantially changed systems; 4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). (e) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and other means. (3) Issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient from the pass-through entity as required by § 200.521 Management decision. (f) Verify that every subrecipient is audited as required by Subpart F - Audit Requirements of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501 Audit requirements. Control – Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: The Mississippi Department of Employment Security (MDES) was unable to provide documentation of subaward agreements and monitoring activities performed. Context: Six subrecipients were selected for testing and the following exceptions were noted:  1 of 6 subawards was not available for audit. Auditors were unable to verify if the subaward contained all required information nor if it was reviewed and approved by appropriate program staff prior to issuance.  For 3 of 6 subrecipients, MDES was unable to provide documentation that it performed monitoring activities nor that it ensured the subrecipients were audited as required by Subpart F. Questioned costs: Undetermined. Cause: Internal controls were not sufficient to ensure that copies of subaward agreements were maintained and available for audit, nor that it maintained documentation of subrecipient monitoring activities performed. Effect: Auditors were unable to verify that subawards were issued in accordance with Federal requirements nor that the subrecipients had been adequately monitored and were audited as required by Subpart F. Recommendation: MDES should review and enhance internal controls and procedures to ensure that it maintains copies of all subaward agreements, that proper subrecipient monitoring is conducted, and that evaluation of independent audits is performed for all subrecipients. Copies of subawards and documentation of subrecipient monitoring activities should be readily available for audit. Views of responsible officials: MDES Response MDES concurs with this finding. Corrective Action Plan: a. MDES Plan: MDES will establish a checklist to verify receipt of the documents responsive to this compliance requirement. Using the checklist, MDES will ensure that all documents indicated in this finding will be readily available for the auditors as early as possible in the audit process. Additionally, MDES will develop a timeline and plan for the submission of documentation to ensure timely review. b. Contact Person Responsible: Director of Grant Management. c. Anticipated Corrective Action Plan Completion Date: July 31, 2024.

Finding No. 2023-001: Compliance with Single Audit Requirements Description of the Finding: Big Sky Economic Development Corporation, Inc. (BSEDC) did not engage to conduct a single audit for FY23 despite meeting the expenditure threshold, and the required audit report was not submitted within the prescribed due dates. This oversight necessitated the reissuance of the FY23 financial statement audit to complete and issue a single audit. Planned Corrective Actions: BSEDC’s Senior Director of Finance engaged with an independent auditor to complete the single audit for FY23 and re-issue the financial statement audit which was missed during the performance of the FY23 financial statement audit due to the Senior Director of Finance and the parties they engaged to perform the audit not having a clear understanding of the calculation for federal expenditures for the federal revolving loan fund. The Senior Director of Finance now has a clear understanding of the requirements for the calculation and reporting of federal expenditures in the Schedule Expenditures of Federal Awards as it relates to the federal revolving laon fund. Timeline for Completion: BSEDC engaged with an independent auditor to complete the single audit for FY23 and reissue the FY23 financial statement audit in June 2024. Expected completion is November 2024. Responsible Person or Party: BSEDC’s Senior Director of Finance is responsible for implementing the corrective action.

We agree with this finding. The Chief Financial Officer in collaboration with the Assistant Director for Finance and the Assistant Director for Financial Compliance will set a calendar at the end of the fiscal year to ensure timely closeout of the books that will allow ample time to engage and complete the audit prior to the deadline for the FAC filing.

View of Responsible Officials and Corrective Action Plan – The Academies will develop a reliable system that will lead to the timely processing of the financial records by reviewing existing procedures to identify bottlenecks and areas of improvement. Feedback will be gathered from team members involved in the financial record keeping process so that standard procedures can be development and implemented. Furthermore, opportunities to automate processes and use software to assist with data entry, record reconciliation, and reporting can be used. This will significantly decrease manual workload and improve accuracy and timeliness.

U.S. Department of Health and Human Services AL No. 93.940 HIV Prevention Activities Health Department Based Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: No Auditee’s Corrective Action Plan: BCHD has updated its subrecipient monitoring policy to ensure compliance with Federal standards for monitoring of subawards. BCHD will use the contract unit’s internal contract tracker via Smartsheet to develop the subrecipient monitoring schedule. The contract tracker now includes a column to identify if an agreement is a subaward, which will ensure all subrecipients are included in the monitoring schedule. Contact Person: Chief Financial Officer – Unyime Ekpa Completion Date: December 2024

U.S. Department of Health and Human Services AL No. 93.914 HIV Emergency Relief Project Grants Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: No Auditee’s Corrective Action Plan: BCHD has updated its subrecipient monitoring policy to ensure compliance with Federal standards for monitoring of subawards. BCHD will use the contract unit’s internal contract tracker via Smartsheet to develop the subrecipient monitoring schedule. The contract tracker now includes a column to identify if an agreement is a subaward, which will ensure all subrecipients are included in the monitoring schedule. Contact Person: Chief Financial Officer – Unyime Ekpa Completion Date: December 31, 2024