Corrective Action Plans

CORRECTIVE ACTION PLAN Finding 2022-002: Subrecipient Monitoring Public Allies has developed a Risk Assessment tool that will be implemented with subgrantees ("local sites") for Program Year '23. The tool?s development was driven by noted best practices and guidance shared with AmeriCorps grantees and Public Allies? prior monitoring findings. The tool includes a self-assessment by local sites and the results will drive the level of monitoring and training and assistance each site receives. Public Allies will also be piloting a new Progress Report, that will provide an at-a-glance assessment of site performance based upon metrics determined in collaboration with subgrantees. The programmatic monitoring process will be led by a dedicated monitoring team that is supported by staff that provide direct programmatic training and technical assistance to sites. For fiscal monitoring, Public Allies has shifted from outsourcing all accounting and financial management to bringing all accounting in-house. As described above, this staff now includes a Finance Director, a Staff Accountant and Senior Accountant. This shift was the result of an evaluation of internal operations and financial management systems. The addition of multiple full-time accounting staff has improved our capacity to monitor and manage subgrantees, effectively track and manage process improvements, ensure fiscal-related grants compliance, and efficiently manage our federal grant funding requests and reports. A fiscal Grants Manager was hired to review subgrantee financial reporting, provide technical assistance, and implement financial monitoring of subrecipients. Finally, a desk audit will be implemented in FY23. The number of files to be reviewed for each site will be determined based upon risk factors assessed, including: AmeriCorps Monitoring Common Findings, staff retention data, prevalence of turnover in AmeriCorps members, and length of time since the site underwent an audit. Requested programmatic and fiscal documents will include: ? Ally/Member Leadership Journal Position Descriptions ? Time Logs ? Ally/Member Evaluations ? Exit Documentation ? Ally/Member Payroll Register, and ? Operating Partner Due Diligence ? Annual Financial Statement ? Separation of Duties Survey ? Internal Controls Questionnaire The Public Allies Network will be notified of the Desk-Based Audit by May 26th and the desk audit will conclude by fiscal year end. Findings of the audit, in the form of a Monitoring Report will be shared with subrecipients, including required follow-up necessary to remediate compliance findings. Results of the desk audit will be used to determine future training needs, policy recommendations, and future monitoring Person Responsible: Najah Woods, Apprenticeship Program Grants Manager Implementation Date: August 31, 2023

2022-026 Oregon Housing and Community Services Department Implement program monitoring over client assistance payments to ensure compliance Federal Awarding Agency: U.S. Department of the Treasury Assistance Listing Number and Name: 21.023 Emergency Rental Assistance Program (COVID-19) Federal Award Numbers and Years: ERA 1, 2021; ERA 2, 2021 (COVID-19) Compliance Requirement: Activities Allowed or Unallowed; Eligibility Type of Finding: Material Weakness; Material Noncompliance Prior Year Finding: N/A Questioned Costs: $21,624 (known); $11,067,350 (likely) (COVID-19) Criteria: 2 CFR 200.332(d); 2 CFR 200.501(g) Department management is responsible for monitoring the activities of subrecipients to ensure subawards are used for authorized purposes and are compliant with federal requirements. Additionally, department management is responsible for ensuring compliance when a contractor is responsible for program compliance or the contractor?s records must be reviewed to determine program compliance. The department provided $140 million and $46 million of phase one program funds to community action agencies (subrecipients) and a third-party vendor (contractor) to provide program delivery, respectively; and $132 million phase two program funds to only the contractor. Program delivery included determining client eligibility and making payments for direct client assistance for rent, utilities, internet, and other housing related costs. During implementation of the program, the department provided program manuals to the subrecipients and contractor. Due to the department?s limited staff, they focused on updating policies and procedures to address systemic issues identified; however, if a particularly challenging application required the department?s review, they were available to provide direct assistance. The department did not implement any predefined, systemic program monitoring of the subrecipients or contractor to ensure direct client assistance payments were paid to only eligible clients for only allowable and supported amounts. Therefore, auditors performed additional procedures at the subrecipient and contractor level to determine whether direct client assistance payments were paid to eligible clients for allowable activities. We tested a total of 62 randomly selected direct client assistance payments at 16 subrecipients totaling $183,515, and found the following: One subrecipient did not respond to audit requests for documentation, resulting in an inability to test one transaction in the amount of $360. One subrecipient did not obtain documentation to support that there was a lease agreement in place, resulting in questioned costs of $5,775. When extrapolated to the total population, these errors result in over $2.3 million in likely questioned costs. We tested 61 randomly selected contractor direct client assistance payments totaling $374,274, and found the following: One payment where an incorrect landlord was paid in the amount of $2,700. Attempts to recover the funds have been unsuccessful as of the date of the finding. Two payments where the rental amount was doubled, resulting in overpayments totaling $5,910. Seven payments where amounts already paid were not accurately reflected in the calculation of assistance provided, resulting in overpayments totaling $4,191. Three payments where amounts did not agree to supporting documentation, resulting in overpayments of $2,181. Three payments where there was insufficient documentation for amounts paid, resulting in overpayments of $432. One payment where costs were paid for the same household on alternate applications, resulting in an overpayment of $73. When extrapolated to the total population, these errors result in over $8.7 million in likely questioned costs. We recommend department management implement predefined, systemic program monitoring to ensure the subrecipients and contractor are administering program funds in accordance with program requirements. MANAGEMENT RESPONSE: We agree with this recommendation. OHCS agrees and had we not been operating during a global health pandemic and had we had adequate time and staffing, we would have addressed this issue more carefully as we have in previous years. However, given that this was a new program that lacked sufficient time and resources to design, launch and operate to meet the pressing needs of Oregonians facing eviction and homelessness, the work required unprecedented action that sometimes fell short of our usual standards for client assistance payment compliance. OHCS will use these lessons moving forward should we operate future emergency programs to move towards best practices. Corrective action plan: Lack of staff significantly limited our ability to perform the necessary monitoring. An additional contractor was brought on to monitor the work of our vendor in February of 2022. The contractor continued to provide program compliance support to OHCS through the end of January 2023. This contractor was also engaged in other projects and activities as needed during their contract term. The largest workload was investigating payments or cases that were identified as potentially non-compliant. All these cases were researched extensively, and findings were identified, and corrective action and collection activities were started if needed. Out of concern for the lack of administrative dollars associated with ERA staff knew an internal compliance effort would also be required. Since the summer of 2022 OHCS staff have been conducting internal random samples of applications and payments in addition to the work of our hired contractor. Additionally, this spring the program compliance team has engaged in a formalized review process focused on specific agencies administering ERA funds. Anticipated Completion Date: December 31, 2023 Contact: Jill Smith, Director of Housing Stabilization Division

Corrective Action Finding - The organization did not submit the audit and data collection form within the nine-month due date for the fiscal year 2021. Recommendation action ? The bookkeeper position was filled in May of 2022. The Fiscal Director is responsible for providing training and supervision and supporting this employee in developing the necessary skills to complete assigned tasks in a timely way. COI will work to improve employee retention and engagement through coaching, training, wage equity, and improved Human Resource practices. COI will continue to incorporate automated accounting and payroll processes to improve the efficiency and accuracy of fiscal reporting. The Financial Close Out and Reporting Policy will be updated to include due dates and the roles/responsibilities of COI staff and members of the Board of Directors. This policy will be in place by September 30, 2023. A month end closing checklist and calendar will be developed and utilized by the fiscal staff as of 8/18/2023. The completed checklist will be shared with the Executive Director and the COI Board of Directors Finance Committee by the 20th of each month following the close out period. The Executive Director is responsible for ensuring this corrective action plan is implemented.

Prepared by: Greg Burrell Date Prepared: 12/21/2022 Person Respomible for Corrective Action Plan: Warren County Fiscal Court Anticipated Completion Date: 3/31/2023 Official's Response: The Treasurer and County Judge have been in communication with Live the Dream Development about proper sub recipient reporting and they are providing quarterly reports. The project had not started and there was some confusion on whether they had to report that they hadn't started. They had communicated this verbally to the county but a written report was not received by June 30, 2022.

Finding #2022-009: regarding subrecipient monitoring were not performed on the Health Equity Grant, Award# 11442, CFDA # 93.391 as required by CCH Policy and Federal Regulations. Cause: The cause of this finding resulted from subrecipients being identified as vendors in the Grant application. The Program Lead informed Finance late which did not allow sufficient time to mobilize CCH staff and/or external consultant to perform subrecipient monitoring. Correction Action: The CCH Director of Grant Accounting will engage an outside consultant to conduct subrecipient monitoring for the grant and collaboratively work to modify the established policy. Anticipated completion of the corrective action will be December 31, 2023.

The Supervisor and Director of the CDBG program are now meeting weekly with the staff person assigned for review the Single Audits to understand the workload and assist in ensuring the backlog and the current audits are all reviewed in a timely manner. Additionally, going forward, the Agency is working to fund an agency-wide compliance officer to ensure impartial oversight of the agencies programs with regard to federal requirements (including single audit review), as well as avoiding taking the time of the CDBG program staff away from their duties. Scheduled Completion Date for Corrective Action Plan: Completed: Reviewed audits selected for testing September 30, 2023: Supervisor and Director have assisted in reviewing to ensure backlog brought current August 30, 2023: new position for Agency-wide compliance officer funded and position-filled Point of Contact: Ann Karlene Kroll, Federal Programs Director annkarlene.kroll@vermont.gov; (802) 828-5225.

Views of Responsible Officials and Planned Corrective Action The HPU Office of Sponsored Projects will work collaboratively with the Principal Investigators together to ensure that the required procedure for subrecipient monitoring is conducted and evidence of such procedure is maintained. The OSP staff will strengthen its policies and procedures so that the required subrecipient single audit report is obtained and reviewed periodically to confirm that the recipient is in compliance with all the applicable federal regulations. Person Responsible: Principal Investigator, Assistant VP of Office of Sponsored Projects and Manager of Office of Sponsored Projects, Grant and Contracts Specialist. Targeted Correction Date: June 30, 2023.

Responsible Contact Person(s): Danielle Robertson, Fiscal Officer Corrective Action Planned: The Emergency Rental Assistance federal grant program is winding down and near close out. As a result, the agency plans to create and implement procedures to retroactively test eligibility in order to document and confirm program compliance with federal statutes, regulations, and terms and conditions of the federal award. Procedures are currently being written and DHCD anticipates this process to be complete on or prior to March 31, 2023. Estimated Completion Date: 3/31/2023

Finding Reference Number: SA2022-006 - Subrecipient Monitoring Assistance Listing Number: 21.027 Assistance Listing Title: COVID-19 ? Coronavirus State and Local Fiscal Recovery Funds Name of Federal Agency: Department of the Treasury Federal Award Identification Number: EES4XJFTXC28 ? Name(s) of the contact person: Karen Chang, Finance Director ? Corrective Action Plan: City will incorporate this information in our grant policy to ensure the program staff is aware of this requirement. ? Anticipated Completion Date: July 1, 2023

Finding 2022-001 ? Subrecipient Monitoring Cluster: Research and Development Agency: Department of Commerce and Department of Health and Human Services Award Names: Standards/Guidance for Rapid Qualification of Metal-Based Additive Manufacturing and Development and Testing a Field-based Hazard/Near-Miss Sharing System for Commercial Fishing Vessels Award Numbers: 70NANB21H038 and U01OH012288 Assistance Listing Title: Measurement and Engineering Research and Standards and Occupational Safety and Health Program Assistance Listing Number: 11.609 and 93.262 Award Year: FY 2022 To ensure American Bureau of Shipping (ABS) is in compliance with 2 CFR 200.332(d) and 2 CFR 200.332(f), ABS will obtain and review annual Uniform Guidance reports or annual audited financial statements (if the entity was not subject to a Uniform Guidance audit) of all subrecipients. ABS has revised its Contracted Research and Development Process Instruction for subrecipient monitoring. The process instruction is supplemented by a subrecipient monitoring form and check sheet. The annual subrecipient monitoring form and check sheet outline the necessary steps to document and interpret the review of Uniform Guidance reports or financial reports. The annual review will be completed within two months of the grant date anniversary. The contracts administrator and project manager will provide two-step verification by reviewing, dating, and signing both the subrecipient monitoring form and check sheet to document their understanding of the type of opinion(s) expressed, findings associated with their awards, document their review, and assess whether there is any change in the initial risk assessment and subsequent monitoring need of each subrecipient. The annual reviews commenced in July 2023.

Children First Fund: The Chicago Public Schools Foundation State Single Audit Corrective Action Plan For the Fiscal Year Ended 2022 AUDIT FINDINGS Finding Reference Number: 2022-001 Description of Finding: CFF did not communicate the required information to subrecipients noted in the criteria including the communication of what funding represented federal funding and was subject to the related grant requirements. Statement of Concurrence or Nonconcurrence: The organization agrees with the finding and will implement corrective action when applicable. Corrective Action: The Chicago Connected initiative was supported by various external partners, including government and philanthropic funders. As the fiscal sponsor, the Children First Fund executed service agreements with each participating community-based organization (CBO), that noted the amount they were awarded. As deliverables were met, CFF made payments based on when the funds came in since they were not designated to a particular CBO by funder. As a result, CFF did not notify CBOs which payments came from federal vs philanthropic funding. Understanding that this is required when it comes to distributing federal funds to subrecipients, CFF will ensure that it's internal controls are updated to include this moving forward. Name of Contact Person: Yemisi Odedina, Managing Director of Finance & Operations E: yodedina@childrenfirstfund.org P: (312) 883-4977 Projected Completion Date: By the end of the calendar year of 2023, the organization will ensure that it?s internal controls are updated to include the federal uniform guidance standards that applies to federal awards to ensure future awards are managed per those guidelines.

PDE: Audits retrieved from the Federal Audit Clearinghouse are now reviewed after entry into PDE?s SharePoint website, to ensure PDE remains compliant with federal guidelines to respond to any and all findings pertaining to federal dollars it passes to subrecipients. Likewise, PDE Audit Section continues to improve upon its processes for timely determinations of those single audits with findings by multiple means, including periodic SharePoint enhancements designed to aid in timely review of single audit packages, working closely with PDE program areas to assist in timely responses and quickly addressing SharePoint access issues as they arise. Anticipated Completion Date: 06/30/2023 Contact Person and Title: Clayton P. Carroll, II, Audit Coordinator; Jessica Sites, Director, Bur. of Budget and Fiscal Mgmt DEP: BAFM now provides agencies with single audit reporting packages that have findings each week that have been accepted by the Federal Audit Clearinghouse (FAC). This allows for us to start our management decision process in a timelier manner and meet the six-month deadline for issuing our decision. This information first appeared in our notifications starting April 30, 2021. In addition, the DEP program that had been previously identifying agreements as contracts rather than subrecipient agreements has corrected this issue and all subrecipients have been notified in writing of this correction and provided the information for submitting their single audits (if necessary). The letters were sent to subrecipients on approximately May 31, 2022. DEP Fiscal Management staff will continue to monitor the BAFM SharePoint site and FAC for additional filings to attempt to avoid this issue in the future. DEP is also hiring additional staff for the oversight and monitoring of the subrecipient single audits to ensure compliance with all requirements. These positions are currently in the filing process, and we are hopeful that they will be filled, and staff trained by September 30, 2023. Anticipated Completion Date: 09/30/2023 Contact Person and Title: Jennifer L. Brandt, Senior Fiscal Management Specialist, Federal Grants and Audits DOH: NORTH Inc.?s Single Audit report for the period ending 9/30/2020 was officially submitted and showing on the FAC on 2/9/2023. Bureau of WIC staff reached out to the Director and CFO of NORTH Inc. by phone and email. Emails were sent with instructions on how to submit the report as well as the importance of submitting the report timely per their grant agreement. Each follow-up phone call included discussion on the importance of submitting their single audit as soon as possible. Moving forward the Bureau of WIC will implement the following procedure: 1 .Three months after the end of the audit period (Federal Fiscal Year), Project Officers will send an email that outlines the process for submitting a single audit reporting package to the FAC to their respective WIC local agencies. This email will provide a date that the single audit is due to be submitted to the FAC in order to stay in compliance with their current WIC grant agreement. 2. Six months after the end of the audit period (three months from the due date of the single audit reporting package) an official letter from the Bureau Director will go out to the WIC local agencies that are due to submit a single audit. The letters will include instructions on how to submit the single audit in FAC and the Audit Requirements link referenced in their grant agreement. 3. If the WIC local agency notifies the Bureau of WIC that their auditor will not be able to submit their agency?s single audit by the due date, then the Project Officer will work with the local agency to get a projected date of completion and a timeline on when the local agency?s auditor is able to finalize the audit and submit it to the FAC. The Bureau of WIC will then notify DOH?s Audit Coordinator and OB-BAFM of this information, so they are able to track it. 4. If the WIC local agency does not submit the report by the due date and fails to notify their project officer; a notice to cure letter will be sent to the agency. Concerning NORTH Inc.?s Single Audit report for the period ending September 30, 2021: 1. The Bureau of WIC will contact NORTH Inc. and request a meeting with their auditor. 2. Following the meeting with NORTH Inc.?s auditor, the Bureau Director will send an official letter to NORTH Inc. The letter will include the instructions on how to submit the single audit in the FAC and the Audit Requirements link referenced in their grant agreement. They will also be made aware of the actions that could result from them not submitting this audit by the agreed upon date. 3. If the single audit is not received by the agreed upon date, then the Bureau of WIC will send a notice to cure letter. Anticipated Completion Date: 03/24/2023 Contact Person and Title: Sally Zubairu-Cofield, Director, Bureau of WIC DHS: Regarding the timeliness of finding resolution and procedures related to the SEFA reviews, the Audit Resolution Section (ARS) hired an additional staff member in August 2021 and hired two additional staff members in February 2022, and an additional staff member in January 2023. Finally, the ARS worked with Office of the Budget, Bureau of Accounting and Financial Management to develop a risk-based approach for single audit reviews, which will greatly streamline the process of single audit reviews to gain substantial efficiencies. Regarding late audit report submissions, we will continue to follow the requirements of 2 CFR ?200.339 and Commonwealth Management Directive 325.8. We will continue to work with counties and their independent auditors to obtain any late Single Audit reports. Anticipated Completion Date: 06/30/2023 Contact Person and Title: David Bryan, Manager, ARS; Alexander Matolyak, Director, Division of Audit & Review

Finding Reference: 2022-005 Federal Agency: Department of Health and Human Services Compliance Requirement: Reporting Type of Finding: Significant Deficiency in Internal Control over Compliance, Other Matters Federal Program: Impacts All Federal Award Programs Grant Award: Various Condition/Context: The single audit report was not submitted to the Office Management and Budget in accordance with the reporting requirement. Criteria: COSO/Internal Control Framework defines control activities as ?policies and procedures that help ensures management?s directives are carried out? This would include preparation of the Schedule of Expenditures of Federal Awards and the related Data Collection Form in a timely manner. Uniform Guidance 2 CFR 200.501 states that the audit shall be completed, and the data collection form shall be submitted within the earlier of 30 days after the receipt of the auditor?s report, or nine months after the end of the audit period. Accordingly, audits for fiscal years ending June 30, 2022 would be due on March 31, 2023. Cause: The single audit report was not submitted due to delays in year-end closing entries, schedules, and reconciliations. Effect: As a result of the finding, SMTCCAC did not provide required information to its federal oversight agency in a timely manner. Questioned Costs: None Recommendation: We believe that the year-end closing process could proceed in a timely manner by adhering to a closing schedule and maintaining timely account reconciliations. Progress should be monitored by management to determine that due dates are being met and required reports are submitted to regulatory agencies within the compliance time frame. Views of Responsible Officials and Planned Corrective Actions: See Corrective Action Plans section.

Federal Program: ALN 10.557, U.S. Department of Agriculture (? WIC Special Supplemental Nutrition Program for Women, Infants, and Children) Condition per Auditor: Controls in place were not adequate to ensure the County maintained responsibility for compliance with eligibility standards when eligibility determinations are made by the contractor. Planned Corrective Action: Management will implement and follow a process of reviewing of eligibility intake and certification performed by contractor employees by internal County representative. This will be completed by the internal county WIC Compliance Manager or designee and will utilize the audit tools provided by the state that includes monitoring of eligibility intake and certification. The WIC Compliance Manager will request contractors to complete audit reporting templates monthly and flag any items in need of further investigation with the contractor. Anticipated Completion Date: 9/30/2024 Responsible Contact Person: Natalie Dean Wood and Dr. Avani Sheth

Finding 2022-061 Disaster Grants - Public Assistance (Presidentially Declared Disasters), ALN 97.036 - Subrecipient Audits Management Views MSP agrees with the finding. Planned Corrective Action MSP will improve monitoring by reconciling expenditures by program to ensure that all subrecipients are included on the single audit tracking sheet for review. In addition, MSP will transition to each division having the responsibility for the completion of their own single audit reviews beginning October 1, 2023. Anticipated Completion Date MSP will reconcile expenditures by program by October 1, 2023, and each division will have their single audit reviews completed by September 30, 2024. Responsible Individual(s) Matt Opsommer, MSP

Finding 2022-040 Formula Grants for Rural Areas and Tribal Transit Program, ALN 20.509 - Subrecipient Audits Management Views MDOT agrees with the finding. Planned Corrective Action MDOT will update and implement its procedures to include management decision letter timelines that are consistent with the Uniform Guidance related to subrecipient report review. Anticipated Completion Date September 30, 2023 Responsible Individual(s) Adam Feldpausch, MDOT Dave Wearsch, MDOT

Finance and the Office of Highway Safety will work together to create policies and procedures to ensure compliance with subrecipient monitoring. Anticipated Completion Date: September 30, 2023 Contact Person: Loren Doyle, Acting Chief Operating Officer / Chief Financial Officer Department of Transportation loren.doyle@dot.ri.gov

SUBRECIPIENT MONITORING ALN Number 93.568 Low Income Home Energy Assistance (LIHEAP) 2022-018 The Mississippi Department of Human Services Should Strengthen Controls Over Onsite Monitoring for the Low-Income Home Energy Assistance Program (LIHEAP). Response: MDHS Concurs that controls should be strengthened over On-Site monitoring for the LIHEAP Program. MDHS also concurs with the following specific recommendations of the OSA and incorporates those recommendations as the foundation for the MDHS Corrective Action Plan (CAP) related to this finding. Corrective Action Plan: 1. Strengthen controls over the subrecipient monitoring process: A. The Office of Compliance, Division of Monitoring has made significant strides in strengthening controls over the subrecipient monitoring process. The Division continues to review and update the processes and procedures as necessary to ensure processes are adequate and effective. Staff are constantly notified/trained on updates to policies, procedures, and regulations to ensure continued compliance with monitoring the agency's subgrant agreements. B. Responsible Party: Kameron Harris, Chief Compliance Officer, Director of Monitoring, Laketha Gilmore C. Completion Date: This corrective action has been implemented and is ongoing. 2. Ensure subgrants are monitored timely and the Report of Findings is issued in a timely manner: A. The Office of Compliance, Division of Monitoring continues to improve upon the monitoring review process. The Division has implemented timeliness requirements to ensure the Agency's compliance with the monitoring process. B. Responsible Parties: Kameron Harris, Chief Compliance Officer, Director of Monitoring, Laketha Gilmore C. Anticipated Completion Date: This corrective action has been implemented. 3. Maintain all supporting monitoring tools, reports, and correspondence in the monitoring file: A. The Division of Monitoring has implemented a quality control measures to ensure all required documentation is included in the monitoring file. B. Responsible Parties: Kameron Harris, Chief Compliance Officer, Director of Monitoring, Laketha Gilmore C. Anticipated Completion Date: This corrective action has been implemented.

ALN Number 17.258, 17.259, 17.278 ? Workforce Innovation and Opportunity Act 2022-023 ? Strengthen Controls to Ensure Compliance with Subrecipient Monitoring Requirements. Cat ? M, Finding Type, A, C1 (MW, MNC) MDES Response: The Mississippi Department of Employment Security concurs in principle with the three conditions noted in the finding. During and prior to this audit, MDES enacted new procedures to address the concerns noted in this finding. MDES renewed its commitment to ensuring that subrecipients are qualified to receive funds. MDES contracted with Booth Management Consultants and more recently Trace Advisory Group to ensure compliance with all DOL monitoring requirements, including on-site monitoring and through other modes. Also, we started implementing a risk-based assessment tool to ensure the performance of a thorough qualification assessment on all grantees. Corrective Action Plan: A. The Offices of Grant Management and Business Management will develop a plan to document our assessment of the subrecipients? awareness of audit requirements at 2 CFR 200.332(f). MDES will start implementing the plan detailed below on or before October 31, 2023. This plan involves the following: 1) Perform a pre-award risk assessment to determine risk for awarding grant and the level of monitoring required during program; 2) Issue a standardized audit requirement letter or agreed upon procedures to all subgrantees to remind them of grant requirements; 3) Receipt of required federal single audit from subgrantees expending more than $750,000 in federal funds from all sources OR receipt of a statement that the entity did not meet this threshold; 4) Document the review and assessment of the audits received for findings or questioned costs using tools, such as the templates found in the DOL Core Monitoring Guide; and 5) Document all required agency action necessary to mitigate the risks identified in the audits. B. COVID-19 caused extensive travel and in-person meeting restrictions nationwide. MDES did not restrict travel or virtual meetings. As contact guidelines fluctuated, the on-site monitoring team had discretion regarding the method to conduct this process. Also during this time, DOL staff observed similar contact restrictions, which limited federal monitoring of MDES. Such challenges and restrictions no longer exist. MDES will perform on-site and remote monitoring, as required. Where possible, MDES intends to conduct future monitoring on-site. MDES management will also hold regular meetings with the subrecipients to monitor progress and to ensure questions related to grant expenditures receive timely responses. C. Although the agency did not perform a risk-based assessment in the year reviewed by the auditors (PY21), MDES did incorporate the Risk Assessment Tool, Tool S from the U. S. Department of Labor?s Core Monitoring Guide, into its review of subgrantees for PY 2022. MDES will continue to ensure the performance of a thorough risk-based assessment on all grantees.

Finding 2022-001 Federal Agency: Various Program Name: Research and Development Cluster Assistance Listing Number: Various Federal Award Year: Programs active between July 1, 2021 ? June 30, 2022 Compliance requirement: Subrecipient Monitoring Finding Type: Significant Deficiency The Office of Research and Sponsored Programs lost both its primary and secondary resources responsible for subrecipient monitoring in July 2020 and June 2021. The University could not replace them immediately due to a hiring freeze during the Covid pandemic. A full time Subaward Coordinator was hired in December 2021. The Subaward Coordinator has operationalized all tasks associated with Subrecipient Monitoring as identified in the Uniform Guidance as well as in accordance with Lehigh policies, procedures and internal controls. The review of current active subawards has been completed, including all single audits for fiscal year 2022, with no findings for any of Lehigh?s subawards. The Subaward Coordinator continues to monitor for the posting of these remaining reports on a weekly basis in order to complete the review of subrecipient single audit reports on a timely basis. We are confident with the full-time focus of the Subaward Coordinator and the enhancements to our subrecipient monitoring processes and controls that this finding is fully remediated. Name of contact person: Cynthia Kane, Assistant Vice Provost, Office of Research and Sponsored Programs. Completion date: May 31, 2022

Finding: The Washington State Department of Transportation did not have adequate internal controls over and did not comply with requirements to issue management decisions for audit findings to subrecipients of the Highway Planning and Construction Cluster. Questioned Costs: Assistance Listing # 20.205 20.205 COVID-19 20.219 20.224 Status: Corrective action complete Corrective Action: The Department is committed to ensuring our programs comply with federal regulations related to subrecipient monitoring. The Department?s Local Programs Division typically issues Management Decision Letters (Decision Letters) to all subrecipients that receive single audit findings related to WSDOT federal grant awards. For the subrecipient in question, the subrecipient had contacted the Division upon realizing a discrepancy in their advertisement practices, which was prior to the auditors issuing the single audit finding. The Division reviewed the subrecipient?s advertisement practices, evaluated and approved the corrective action plan, and implemented a training plan with the subrecipient. Since these activities preceded the issuance of the subrecipient?s single audit finding and resolved the deficiency, the Department elected to forgo a formal Decision Letter. Based on the audit recommendations, the Department will continue to review all single audit findings issued for subrecipients and send Decision Letters. The conditions noted in this finding were previously reported in findings 2021-010, 2020-015 and 2019-017. Completion Date: December 2022 Agency Contact: Jesse Daniels External Audit Liaison PO Box 47320 Olympia, WA 98504-7320 (360) 705-7035 danielje@wsdot.wa.gov

Finding: The Health Care Authority did not have adequate internal controls over and did not comply with federal requirements to ensure subrecipients of the Block Grants for Community Mental Health Services program and the Block Grants for Prevention and Treatment of Substance Abuse program received required single audits, and that it appropriately followed up on findings and issued management decisions. Questioned Costs: Assistance Listing # 93.958 93.958 COVID-19 93.959 93.959 COVID-19 Amount $0 Status: Corrective action in progress Corrective Action: The Authority concurs with the finding. The Authority will: ? Follow established procedures related to the agency-wide monitoring of subrecipients? single audits. ? Issue management decision letters for findings subrecipients received related to programs that are funded by the Authority?s pass-through federal funding. ? Evaluate corrective actions to ensure subrecipients adequately address audit recommendations. Completion Date: Estimated July 2023 Agency Contact: William Sogge, CPA External Audit Liaison PO Box 45502 Olympia, WA 98504-5502 (360) 725-5110 william.sogge@hca.wa.gov

Finding: The Department of Commerce did not have adequate internal controls over and did not comply with requirements to issue management decisions for audit findings to subrecipients of the Low-Income Home Energy Assistance Program. Questioned Costs: Assistance Listing # 93.568 93.568 COVID-19 Status: Corrective action complete Corrective Action: The Department?s internal control officer is responsible for completing the monitoring of federal reporting and issuing management decisions for subrecipients who receive federal audit findings for programs funded with the Department?s federal pass-through funding. Beginning in December 2021, the internal control officer documented all findings, corrective action plans, and communication with subrecipients in a monitoring spreadsheet. This enabled the Department to ensure all efforts in monitoring subrecipients were taken. In May 2022, all management decisions were added to the monitoring spreadsheet which documented the Department?s management decisions. To ensure compliance with federal requirements for subrecipient monitoring, the Department has implemented the following process: ? Review all audit findings issued to Department subrecipients. ? Review each subrecipient?s corrective action plan. ? Review and discuss all findings and corrective action plans with subrecipients to identify and understand the basis for the deficiency and planned corrections. ? Create a management decision for each subrecipient finding, receive leadership approval, and formally communicate the decision to our subrecipient. ? All management decisions will be formally communicated to our pass-through subrecipients within the six-month federal deadline. Completion Date: September 2022 Agency Contact: Gena Allen Internal Control Officer PO Box 42525 Olympia, WA 98504-2525 (360) 480-5149 Gena.Allen@Commerce.wa.gov

Finding: The University of Washington did not have adequate internal controls over and did not comply with federal requirements to ensure subrecipients of the Global AIDS program received required single or program-specific audits, and that it followed up on findings and issued management decisions. Questioned Costs: Assistance Listing # 93.067 93.067 COVID-19 Amount $0 Status: Corrective action in progress Corrective Action: The University maintains that there are adequate internal controls to ensure the Global AIDS program complies with the requirements for pass-through entities as outlined in Uniform Guidance 2 CFR ? 200.332 and the university policy incorporated in Grants Information Memorandum 8. As noted in the finding, the University uses a certification process to obtain information and documentation needed, such as audited financial statements, from each subrecipient and perform a risk assessment using standard risk criteria. For the one exception identified by the auditors, the University misinterpreted the response provided by the subrecipient regarding whether it expended $750,000 or more in federal awards during the fiscal year. Although the single or program specific audit report was not obtained and reviewed, a risk assessment was performed on the subrecipient. With a medium risk rating, the subrecipient was subject to monitoring at the program level throughout the project during the period in question, in accordance with University policy. The University will: ? Update the certification process with all subrecipients to confirm if federal expenditures during a fiscal year exceed the $750,000 threshold to require a single or program-specific audit. ? Issue written management decisions for all applicable audit findings. ? Ensure subrecipients develop and perform acceptable corrective actions to address all audit recommendations, if applicable. Completion Date: Estimated September 2023 Agency Contact: Erick Winger Controller 4300 Roosevelt Way NE Seattle, WA 98195 (206) 543-5322 erickw@uw.edu

Condition: The District overstated expenditures on the ESSER I June 30, 2021 expenditure report. Plan: Grant expenditures should be reviewed and reconciled back to the accounting records prior to submitting final reports; ISBE grants division should be contacted regarding this discrepancy. Anticipated Date of Completion: 6/30/2023 Name of Contact Person: Thomas Akers, Superintendent Management's response: The District agrees that the expenditures claimed on the June 30, 2021 expenditure report was overstated by $10,678 and in the future will review and reconcile the expenditure reports to the accounting records before submitting to ISBE.