Corrective Action Plans

Recommendation We recommend that management enhance its internal control structure, including financial close and reporting, to ensure timely filing of future Single Audit reporting packages. Management Response Corrective Action FNCH recognizes the critical importance of establishing robust internal controls to guarantee the timely preparation and accurate submission of reports and records for audit purposes, particularly in alignment with the requirements outlined in 2 CFR 200.512. To effectively implement these internal controls, management will enforce procedures for the timely preparation of all necessary reports and records, including the Schedule of Expenditures of Federal Awards (SEFA). This will not only facilitate smoother audit processes but also ensure adherence to the 2 CFR 200.512. Management will train staff and establish timelines and responsibilities for report preparation and documentation to enhance compliance and streamline overall operations. Expected Outcome: • On‑time Single Audit filings in compliance with federal rules. • Clear visibility and accountability for deadlines. • Reduced risk of penalties and funding delays. • Greater confidence from agencies and stakeholders. Due Date of Completion: 3 days following issuance of the audit report Responsible Party(ies): CEO, CFO

Full text of the Corrective Action Plan includes a chart, table or footnotes.

Management will implement the following procedures to ensure timely submission to the Federal Audit Clearinghouse: 1) Incorporate Federal Audit Clearinghouse submission deadlines into the annual reporting calendar. 2) Assign responsibility for preparing and uploading the required reporting package immediately upon audit completion. 3) Establish a compliance checklist for Uniform Guidance requirements. 4) Require documented confirmation of submission and Board notification once filing is complete. 5) Monitor submission deadlines through Finance Committee oversight.

Finding 2024-004 | Untimely Submission of Single Audit Reporting Package Noncompliance | Repeat Finding | Third Consecutive Year (2022-001, 2023-006, 2024-004) | 2 CFR §200.512(a) Finding Number: 2024-004 Planned Completion Date: June 30, 2026 (FY2025 single audit submitted to FAC on or before this date) Responsible Official(s): Josafat Saldivar, Finance Director (primary); Juan E. Rodriguez, Executive Director (oversight and Board reporting) Agency Response: STDC acknowledges the finding and concurs that the Single Audit reporting package for the fiscal year ended September 30, 2024 was not submitted to the Federal Audit Clearinghouse (FAC) by the required deadline of June 30, 2025, under 2 CFR §200.512(a). STDC recognizes that this represents the third consecutive year in which the single audit has been submitted late, following Finding 2022-001 and Finding 2023-006, and takes seriously the compliance obligation and the operational risks associated with continued noncompliance with the submission deadline. The late submissions across FY2022, FY2023, and FY2024 are the direct result of a series of compounding operational disruptions originating with the Council's transition to a new accounting system in January 2022, further complicated by a ransomware attack in November 2023. Management provides the following chronological context to demonstrate the depth and duration of the disruptions that collectively prevented timely audit completion across three consecutive fiscal years: Accounting System Transition (2021-2022): In March 2021, following a six-month procurement process, STDC contracted with Lance, Soil & Lunghard, LLP (LSL, LLP), an authorized AccuFund reseller, to implement AccuFund as its new accounting platform. The go-live date was delayed from October 1, 2021 to January 1, 2022 to allow the Board of Directors to approve related payroll and operational changes. When the system launched on January 1, 2022, critical components — including the fringe benefit and indirect cost allocation pools, timesheet approvals, budget, requisitions, funding reports, and travel modules — had not been configured. Transaction history and beginning balances were imported incorrectly. Work with LSL, LLP concluded in September 2022 without resolution of these deficiencies. AccuFund Remediation (2022-2023): Beginning in October 2022, STDC engaged AccuFund directly to identify and correct the configuration deficiencies. In February 2023, AccuFund assigned a Senior Consultant to the engagement. Between March and October 2023, the Consultant worked with STDC to configure the fringe benefit and indirect cost pools, reconfigure payroll, and correct the transaction history and trial balances that had been incorrectly imported during the original implementation. This remediation work was still ongoing at the time of the ransomware attack. Ransomware Attack and Recovery (November 2023 – September 2024): On November 4, 2023, STDC suffered a ransomware attack that compromised the SQL database housing all AccuFund financial data. Following recovery efforts, STDC migrated to AccuFund Anywhere, a cloud-hosted version of the platform, and regained system access in late December 2023. Between January and March 2024, staff manually re-entered transaction data that had been processed offline during the system outage. Between April and September 2024, STDC continued working with the AccuFund Senior Consultant to finalize system configurations and correct remaining beginning balance and transaction history issues — many of which dated back to the original 2022 implementation errors. Sequential Audit Completion (2024-2026): The cumulative effect of these disruptions required STDC to complete three fiscal year audits in sequence rather than on schedule. The FY2022 audit was completed in December 2024 and submitted to the FAC, with a revised submission in January 2025 following an HHSC review that identified a misclassification of assistance listing number balances. The FY2023 audit was completed and submitted to the FAC in July 2025. Work on the FY2024 audit commenced in August 2025 and is being finalized for Board approval on March 26, 2026, with FAC submission to follow immediately. The FY2025 fiscal year ended September 30, 2025, and STDC is actively preparing for that audit with a target FAC submission date of June 30, 2026. Management acknowledges that the cumulative nature of these disruptions resulted in a multi-year audit backlog that could not be resolved within the annual submission deadlines. STDC is committed to breaking this cycle. With the AccuFund system now stable, the cloud migration complete, and three years of corrected financial records in place, STDC has the accounting infrastructure necessary to support timely audit completion going forward. The corrective actions below reflect the specific steps being taken to achieve the June 30, 2026 FY2025 submission target and to prevent recurrence in future years. Note: Because the FY2025 fiscal year ended September 30, 2025 and the FY2024 audit is being finalized concurrently, several of the steps below are already underway as of the date of this report (March 2026). Target dates reflect the current accelerated timeline required to achieve FAC submission by June 30, 2026. Corrective Actions to Be Implemented: Action 1 (Target: In progress — April 15, 2026): FY2025 Audit Preparation Timeline — A compressed audit preparation schedule has been established for the FY2025 audit (year ended September 30, 2025) with the following key milestones: final trial balance and year-end reconciliations delivered to the auditor by April 15, 2026; draft financial statements completed by the auditor by May 31, 2026; management review and final adjustments completed by June 10, 2026; final audit report issued by the auditor and reviewed and approved by the STDC Board of Directors by June 25, 2026; and submission of the complete reporting package to the Federal Audit Clearinghouse by June 30, 2026. Action 2 (Target: In progress — March 31, 2026): Auditor Engagement — FY2025 — De La Garza CPA Firm, P.C. has been engaged for the FY2025 audit. Fieldwork scheduling and document request lists are being coordinated to ensure the auditor can begin and complete work within the compressed timeline. STDC will provide all requested documentation on a priority basis to avoid delays in fieldwork. Action 3 (Targets: March 26, 2026; April 22, 2026; June 25, 2026): Board Reporting — The Executive Director will present audit status to the Board of Directors at the March 26, 2026 board meeting and at each subsequent board meeting. The June 30, 2026 FAC submission target will be tracked as a standing Board-level performance objective with final review and approval of the FY2025 audit report by the Board of Directors targeted for June 25, 2026. Action 4 (Target: July 31, 2026): FY2026 Audit Preparation Timeline — Upon submission of the FY2025 audit, STDC will immediately follow its formal written audit preparation timeline for the FY2026 audit (year ended September 30, 2026), with milestone dates beginning at fiscal year-end and targeting FAC submission by June 30, 2027. The timeline will be modeled on the Single Audit Submission Timeline Protocol adopted under Findings 2022-001 and 2023-006 and approved by the Executive Director. Monitoring and Evaluation: The Finance Director will maintain a running audit preparation status log updated weekly through June 30, 2026, and monthly thereafter. The Executive Director will report audit status to the Board of Directors at each meeting. The immediate target outcome is submission of the FY2025 single audit reporting package to the Federal Audit Clearinghouse on or before June 30, 2026. Achievement of this milestone will demonstrate STDC's return to timely compliance and is expected to support removal of the high-risk auditee designation in the FY2025 audit cycle.

We concur with the recommendation. The City of Angoon has diligently worked to meet the Uniform Guidance requirement of submitting the reporting package within the earlier of 30 days after the receipt of the audit report, or the nine (9) months after the end of the audit period. The Fiscal year ending 06/25/2025 will be submitted timely, as well as all future audits. An external accountant was hired to help train and oversee the city accounting staff which has allowed the accounting records to easily be prepared for future audits.

2024-002 – All Federal Programs – Compliance – Data Collection Form Finding: For the fiscal year ended September 30, 2023, the Village did not submit the data collection form to the Federal Clearinghouse by the required due date of June 30, 2024, in accordance with the federal requirements. In addition, due to the late issuance of the 2024 fiscal year audit, the submission deadline for FY 2024 of June 30, 2025 has passed and as such, the Village did not meet the submission deadline. Correction Action: The Village will ensure the data collection form for the fiscal year ending September 30, 2025 is submitted at the completion of the audit. Responsible Parties: Village Administrator, Community and Economic Development Coordinator and Accounting Supervisor. Anticipated Completion Date: June 2026

TOFMHS concurs with the finding. The agency retained new auditors for the June 30,2024 fiscal year, subsequent to the due date for submission of the data collection reports. Corrective Action to be Taken: The Agency will take all reasonable measures to work with the new auditors to complete the audit process and submit the data collection report within the required time period. Responsible Person: Fiscal Officer/Program Director Completion Date: January 1, 2025

Action Taken: We concur with the recommendation, and it was implemented effective March 17, 2026.

Corrective Action Plan for Finding 2024-002 Finding Title: Noncompliance with Single Audit Report Submission Requirements Federal Program(s): All programs included in the FY 2024 Single Audit Contact Person Responsible for Corrective Action: Dr. Veronica Morley, Superintendent Anticipated Completion Date: March 31, 2025 Corrective Action Plan: Management concurs with the finding. The delay in submitting the Single Audit reporting package to the Federal Audit Clearinghouse was due delayed completion of audited financial statements. The school is in the process of getting current with audited financials statements.

Partnership Homes, Inc. Greensboro, North Carolina CORRECTIVE ACTION PLAN February 11, 2026 Federal Audit Clearinghouse 1201 East 10th Street Jeffersonville, Indiana 47132 Partnership Homes, Inc. respectfully submits the following Corrective Action Plan for the year ended December 31, 2024. Bernard Robinson & Company, L.L.P. 1501 Highwoods Blvd., Suite 300 Post Office Box 19608 Greensboro, North Carolina 27419-9608 Audit period: Year ended December 31, 2024 The finding from the December 31, 2024 Schedule of Findings and Questioned Costs is discussed below. The finding is numbered consistently with the number assigned in the schedule. Findings - Federal Award Programs Audits Finding No. 2024-001: HOME Investment Partnerships Program , CFDA #14.239 Recommendation: We recommend management ensure that the data collection forms are submitted electronically to the FAC within the required due dates each fiscal year going forward. Management's Response: We agree with Finding 2024-001 and the recommendation described in the accompanying schedule of findings and questioned costs. Management will provide additional oversight to ensure the data collection forms are submitted electronically to the FAC each fiscal year going forward within required due dates. The data collection form for the year ending December 31, 2023 was submitted to the FAC on August 27, 2025. If you have questions regarding this plan, please call Mike Cooke at (336) 707-5289. Sincerely yours, Mike Cooke Executive Director Partnership Homes, Inc.

Finding 2024-001 Late Reporting and Noncompliance with Reporting Requirements Name of Contact: Charise Colsen, Finance Director Corrective Action Plan: A timeline will be established for year-end closing and preparation for the annual audits in a manner that accommodates meeting the nine-month audit submission requirement. Proposed Completion Date: Month XX, 2026

Mount Sinai Foundation, Incorporated 703 Blue Street Fayetteville, North Carolina 28301 CORRECTIVE ACTION PLAN February 10, 2026 U.S. Department of Housing and Urban Development Five Points Plaza Building 40 Marietta Street Atlanta, Georgia 30303 Mount Sinai Foundation, Incorporated respectfully submits the following Corrective Action Plan for the year ended December 31, 2024. Bernard Robinson & Company, L.L.P. 1501 Highwoods Blvd., Suite 300 Post Office Box 19608 Greensboro, North Carolina 27419-9608 The findings for the year ended December 31, 2024 Schedule of Findings and Questioned Costs are discussed below. The findings are numbered consistently with the numbers assigned in the schedule. FINDINGS - Financial Statement Audit and Federal Award Program Audits Finding 2024-004 - U.S. Department of Housing and Urban Development, Mortgage Insurance Rental and Cooperative Housing for Moderate Income Families and Elderly, Market Interest Rate (Sections 221d(3) and (4) Multifamily - Market Rate Housing), CFDA #14.135 Recommendation: That management ensure that the data collection forms are submitted electronically to the FAC each fiscal year going forward. Action Taken: We agree with Finding 2024-004 and the recommendation described in the accompanying schedule of findings and questioned costs. The project was unable to pay the prior audit fees timely due to limited available cash flow causing a delay in the audits. Management will work to improve cash flow for timely payment of the required annual audits. Sincerely yours, Shannon Pow President Remnant Management, Inc. Managing Agent effective October 1, 2024

The Corporation should file the June 30, 2024, financial statements as soon as possible and should ensure the annual financial report is filed within 30 days after the financial statements are available for issue and within nine months of fiscal year end.

The Corporation should file the June 30, 2024, financial statements as soon as possible and should ensure the annual financial report is filed within 30 days after the financial statements are available for issue and within nine months of fiscal year end.

As is touched upon in the Cause, the Organization was unaware of audit requirements which resulted in delays for both the audit of the period ending December 31, 2023 and the audit of the year ending December 31, 2024. The Organization has engaged our current auditors to perform the 2025 audit, and it is expected to be completed by the September 30, 2026 deadline. Implementation Date – January 2026

Finding 2024-006 - Late Submission of Data Collection Form Corrective Action Plan: Management will implement a formal compliance calendar to track Uniform Guidance reporting deadlines. Responsibility for submission will be assigned to a specific individual. Audit progress will be monitored regularly to ensure timely completion and submission of the reporting package and Data Collection Form. Additionally, management will address underlying financial reporting control weaknesses identified in this audit to improve overall audit readiness. Responsible Party: Executive Director, Board of Directors (oversight) Planned Completion Date: Compliance calendar implemented March 11, 2026; ongoing monitoring thereafter.

Finding Number: 2024-007 Finding Title: Regulatory Deadline for Submission of Schedule of Expenditures of Federal Awards Federal Program Information: • Federal Agency: Department of Housing and Urban Development; Department of the Treasury • Assistance Listing Numbers (ALN): 14.251 and 21.027 • Federal Program Names: Economic Development Initiatives—Special Project, Neighborhood Initiative and Neighborhood Stabilization Program; Coronavirus State and Local Fiscal Recovery Funds Compliance Requirement: Reporting - Audit Requirements and Single Audit Submission (2 CFR §200.512(a)) Questioned Costs: $0 Repeat Finding: No Management's Response: The Board of Directors of Restoration Christian Ministries agrees with the finding. The Organization engaged a firm to perform the audit with the intent of completing and submitting the audit within the requirement timeframe. Due to unforeseen issues, the completion of the audit was delayed. Corrective Action Plan: Corrective Action #1: Audit Planning Timeline • Action: Develop detailed audit preparation timeline working backwards from nine-month deadline. Engage auditors by March 31 following fiscal year end to allow adequate planning and completion time. Board Treasurer will schedule regular status meetings with auditors throughout audit process. Build contingency time into schedule for unforeseen delays. • Responsible Person/Title: Board Treasurer • Anticipated Completion Date: December 31, 2025 (for FY 2025 audit); Annually thereafter by October following fiscal year end Corrective Action #2: Enhanced Year-End Close Procedures • Action: Implement enhanced year-end closing procedures ensuring financial records are audit-ready within 60 days of fiscal year end. Contract Accountant will prepare preliminary SEFA and supporting schedules by January 31 following fiscal year end. Board Treasurer will conduct internal pre-audit review identifying and resolving issues before auditors begin fieldwork. • Responsible Person/Title: Contract Accountant and Board Treasurer • Anticipated Completion Date: February 28, 2026 (procedures development); January 31, 2026 (first implementation for FY 2025) Corrective Action #3: Audit Documentation Preparation • Action: Prepare all audit supporting schedules and documentation in advance of audit fieldwork. Organize federal grant files with all required documentation readily accessible. Board Treasurer will coordinate with Contract Accountant to ensure prompt responses to auditor requests. • Responsible Person/Title: Contract Accountant and Board Treasurer • Anticipated Completion Date: March 31, 2026 (for FY 2025 audit); Annually thereafter Corrective Action #4: Board Oversight and Accountability • Action: Assign Board Treasurer responsibility and accountability for ensuring timely audit completion and submission. Require monthly status updates from Board Treasurer to full Board on audit progress during audit period. Include audit status as standing agenda item at Board meetings from April through September. • Responsible Person/Title: Board President • Anticipated Completion Date: April 30, 2026 (initial); Ongoing monthly April-September annually Corrective Action #5: Board Engagement and Resource Authorization • Action: Board Treasurer will immediately notify full Board if any issues arise that could jeopardize meeting submission deadline. Board will authorize additional resources (e.g., consultant support for Contract Accountant) if needed to meet deadline. • Responsible Person/Title: Board Treasurer • Anticipated Completion Date: Ongoing, as needed Corrective Action #6: Compliance Calendar with Milestones • Action: Incorporate FAC submission deadline into Organization's compliance calendar with milestone checkpoints. Set internal deadline of eight months (rather than nine months) to provide buffer for unforeseen issues. Track key milestones: audit engagement (by March 31), fieldwork completion (by July 31), draft report (by August 15), final report (by August 31), FAC submission (by September 15). • Responsible Person/Title: Board Treasurer • Anticipated Completion Date: January 31, 2026 Corrective Action #7: Contingency Planning • Action: Develop contingency plan if audit delays occur, including escalation procedures and potential for additional temporary accounting support. Maintain regular communication with auditors to identify potential delays early. Board will evaluate whether additional contracted accounting support is needed during audit season. • Responsible Person/Title: Board Treasurer • Anticipated Completion Date: March 31, 2026 Corrective Action #8: Resource Capacity Assessment • Action: Board will assess whether current Contract Accountant arrangement provides adequate capacity to meet federal compliance requirements. Consider increasing Contract Accountant hours or engaging additional professional support for federal grants administration. Evaluate cost-benefit of engaging grants management consultant to support compliance activities. • Responsible Person/Title: Board of Directors • Anticipated Completion Date: March 31, 2026

The Organization has developed and implemented written procedures to ensure timely submission of the data collection form and reporting package to the FAC. These procedures: (1) assign primary responsibility for the FAC submission to the Director; (2) require preparation of the FAC submission checklist immediately upon receipt of the draft auditor’s reports; and (3) incorporate the FAC deadline into the Organization’s annual compliance calendar. Training on the new procedures was provided to key finance staff.

2024-003 Finding - In accordance with 2 CFR § 200.512(a), the audit must be completed and the reporting package, which includes the Data Collection Form (SF-SAC), must be submitted to the Federal Audit Clearinghouse (FAC) within the earlier of 30 calendar days after receipt of the auditor's report(s), or nine months after the end of the audit period. Recommendation - The Organization should review internal controls and implement necessary procedures to ensure that accounting processes are completed timely so the audit can be completed within the parameters of the due date. Action to be taken – Additional staffing has been added and long with ensuring that bank reconciliations are completed by the 10th day after the month ends in order to ensure audit field work is completed in a timely manner. Responsible person – Tony Postma, Interim Chief Financial Officer

Management will implement a formal compliance calendar to track audit milestones, including preparation, review, and submission of the Data Collection Form and reporting package. Management will engage auditors earlier in the audit cycle and assign responsibility for monitoring Federal Audit Clearinghouse deadlines. Grant administrators will be notified in advance if a program-specific audit is required to avoid delays.

Recommendation The College should continue to work with the accounting department and accounting systems to assist its auditor to catch up its financial reporting and records to allow for the completion of future audits. Corrective Action Unfortunately, due to the untimely completion and release of the June 30, 2023 audit report (released on August 8, 2025 - over two years after the end of the June 30, 2023 fiscal year audit), the College did not have the opportunity to review and begin a timely process of addressing a majority of the audit findings until well after the end of the audit period. While the College is committed to corrective action, the delayed delivery of the June 30, 2023 audit limited the ability to implement corrective measures earlier. The College is working proactively to ensure that these issues are resolved going forward. It is important to note that Southeast New Mexico College was a newly established independent community college, having formally separated from New Mexico State University (NMSU) as of April 2022. During this transition period, many administrative processes, including federal grant compliance procedures, were in the process of being developed, transitioned, and implemented independently from NMSU systems. As a result, certain policies, procedures, and documentation processes were not yet fully established or operational at the time of the audit. To ensure timely future submissions, the following corrective actions have been implemented. Revised Timeline and Calendar Controls: • A compliance calendar has been developed and integrated into the Business Office workflow to monitor federal reporting deadlines, including the DCF due date. This calendar includes reminder notifications at 90, 60 and 30 days before the March deadline. Internal Review Process: • A designated compliance officer or fiscal services staff member has been assigned responsibility for tracking the DCF submission process and coordinating with the external auditors to ensure timely receipt of the final audit. Audit Planning Coordination: • Annual audit planning meetings now include a discussion of reporting deadlines, and the contract with the external audit firm will include a clause requiring delivery of the final audit in a timeframe that supports compliance with federal submission timelines. Training and Awareness: • Relevant staff will have completed training in Uniform Guidance reporting requirements, including DCF submission procedures and deadlines to ensure full understanding of the importance of timely compliance. Due of Completion: August 31, 2025 Responsible Party(ies) Vice President for Business and Finance (or appropriate official), Dean of Business and Finance, Director of Finance, Accounts Receivable Coordinator, Business Office Manager

The School will ensure information is available for the audit to be completed timely in accordance with Uniform Guidance requirements.

Corrective Action Plan: A new policy or procedure will be created to ensure a better planning for the future signle audits timelines. Responsible Official: Vadim Gurvich, Executive Director, NIPTE Planned completion date for the CAP: JUNE 30, 2026

Finding #2024-002 Current Year Reporting Package and Data Collection Not Filed Timely: Recommendation: We recommend that management implement procedures to ensure that reporting packages and data collection forms are filed timely in the future. Action taken: Georgian Arms Apartments agrees with the auditor’s recommendations and will implement procedures to ensure timely filing in the future. For questions regarding this corrective action plan, please contact Dawn Olmstead, VP – Director of Asset Management, at (315) 337-1401.

Finding #2024-001 Prior Year Reporting Package and Data Collection Not Filed Timely: Recommendation: We recommend that management implement procedures to ensure that reporting packages and data collection forms are filed timely in the future. Action taken: Georgian Arms Apartments agrees with the auditor’s recommendations and will implement procedures to ensure timely filing in the future. For questions regarding this corrective action plan, please contact Dawn Olmstead, VP – Director of Asset Management, at (315) 337-1401.