Corrective Action Plans

Views of Responsible Officials: Management agrees and has drafted a corrective action plan following to address the issue. Corrective Action Plan: (unaudited) We have designated staff and established timelines to ensure timely completion of reporting to all stakeholders when we have to file with the Federal Audit Clearinghouse Data Collection Form.

Corrective Actions Taken or Planned: ▪ Taken: This finding was a result of staff turnover and Center on Halsted has put in place an established relationship with an external accounting firm (Sikich), that will help create stability and support in all financial processes including grant reconciliation. This updated contractual agreement & relationship occurred on March 1, 2024. ▪ Planned: Center on Halsted leadership will ensure proper documentation, internal controls, and processes that will support a timelier audit. This includes an organization-initiated internal audit for the Center on Halsted processes that will stress test our ability to produce accurate supporting documentation and allows us to build more effective and efficient processes prior to our annual audit. This will be led by the Senior Director of Finance, Reginald Walker, in partnership with Sikich. Anticipated completion date: December

The Alliance in partnership with the BGCA Fiscal Team will enhance the process to comply with the reporting requirements for timely completion of the audit.

Recommendation: Marshall Jones recommends that the Organization establish a process to close their year-end books in a timely manner and begin the audit well in advance of the filing deadline for the data collection form and reporting package. Views of Responsible Officials: Management of BGCCG acknowledges the finding and concurs with the recommendation. Response of Responsible Officials: To continuously improve BGCCG’s Accounting and Financial Reporting, workflow, and internal controls, BGCCG has begun the process to transition the back-office accounting providers from part-time status to full-time status to sufficiently accommodate the needs of the Organization. BGCCG will employ a full-time Chief Finance & Administrative Officer (CFAO), preferably with CPA/CGMA certification, and strong analytical and financial modeling and forecasting skills as well as deep knowledge of GAAP for nonprofits. This pivotal role will provide strategic direction to ensure the financial health of the Organization while driving innovative financial solutions. The CFAO will oversee all financial and accounting operations of the Organization, including the creation and execution of sound financial policies, procedures and internal controls, budgeting, accounting, cash and debt management, audits, investments, tax compliance, and weekly Accounting and Finance reporting to the CEO and Board Finance Chair. The CFAO will report directly to the CEO. This position will be employed on or before December 31, 2024. BGCCG will also employ a full-time Finance Manager (FM) with commensurate experience that demonstrates exemplary strategic and financial acumen. The FM will be responsible for intermediate-level finance and accounting functions such as general ledger/account maintenance, timely account reconciliation, accounts payable, accounts receivables, data processing, payroll processing, and reporting to the CFAO. The FM will report directly to the CFAO. This position will be employed on or before December 31, 2024. Upon the hiring and on-boarding of the CFAO and FM, BGCCG will immediately begin the process of updating its Financial Management & Accounting Control Policies & Procedures to further strengthen BGCCG’s internal controls. Corrective Action Plan: Upon the hiring and on-boarding of the new full-time CFAO and FM, management of BGCCG will work closely with the CFAO and FM to immediately implement a process to close out its 2024 fiscal year-end books in a timely manner. BGCCG will seek to close out its 2024 fiscal year-end books on or before March 30, 2025, and will seek to begin the 2024 auditing process on or before June1, 2025, well in advance of the filing deadline for the data collection form and reporting package. Acknowledged, Phillip Bryant President & CEO

GENESIS II APARTMENTS, INC. Mullins, South Carolina CORRECTIVE ACTION PLAN October 18, 2024 U. S. Department of Housing and Urban Development Charles Bennett Federal Building 400 West Bay Street, Suite 1015 Jacksonville, Florida 32202 Genesis II Apartments, Inc., HUD Project No. 054-EE081-WAH, respectfully submits the following Corrective Action Plan for the year ended June 30, 2023. Bernard Robinson & Company, L.L.P. Post Office Box 19608 Greensboro, North Carolina 27419-9608 Audit period: Year ended June 30, 2023 The findings from the Schedule of Findings and Questioned Costs for the year ended June 30, 2023 are discussed below. The findings are numbered consistently with the numbers assigned in the schedule. Finding 2023-001: U.S. Department of Housing and Urban Development, Supportive Housing for the Elderly (Section 202), Assistance Listing #14.157 Recommendation: We recommend the board of directors and management ensure that the annual financial reports to HUD are submitted by the required due date. Action Taken: We agree with Finding 2023-001 described in the accompanying schedule of findings and questioned costs. The new management company will ensure the annual financial statements are submitted once the audits are back on track with the scheduled due dates. Finding 2023-002: U.S. Department of Housing and Urban Development, Supportive Housing for the Elderly (Section 202), Assistance Listing #14.157 Recommendation: We recommend the board of directors and management ensure that the audit and data collection forms are completed timely and the data collection form and required reporting package are submitted electronically to the FAC each fiscal year going forward. Action Taken: We agree with Finding 2023-002 described in the accompanying schedule of findings and questioned costs. The new management company will ensure the data collection forms are submitted electronically to the FAC each fiscal year. If HUD has questions regarding this plan, please call (803) 808-3966. Sincerely yours, Reese Quick, President Southern Development Management Company, Inc.

End of 1st quarter: Close out the prior year financials by developing checklist and a streamlined process. Within the 2nd quarter: Establish a timeline with the audit firm to provide audit request listing and fieldwork start date. Work with all staff involved to submit all documents to the auditors by the due dates within the timeline. Within the 3rd quater: Engage with the audit firm to ensure timely audit report completion. Ongoing: Monitor monthly closing to ensure deadlines are met to ensure timely start of the audit fieldwork.

The Alliance will implement more stringent internal controls and administrative oversight with respect to reporting requirements and deadlines to audit is timely completed.

The Alliance will implement more administrative oversight with respect to reporting requirements and deadlines to make sure all audits are completed timely.

Due to no fault of Southern Workforce Board, Inc., and circumstances beyond the previous CAP's control, the audit report for the period ending 6/30/2023 was not completed as required. Upon notification of prior audit firm closing, Southern Workforce Board, Inc. performed an immediate procurement by soliciting a Request for Proposal to 13 audit firms. Upon completion of the procurement, Michael Green, CPA was selected to perform the 6/30/2023 audit as soon as their schedule would allow. Upon successful completions of 6/30/2023 audit report, the audit process for the period ending 6/30/2024 will proceed on time. Southern Workforce Board, Inc. will ensure in the future that the audit firm selected will be able to perform the planned audits in a timely manner in the future.

Significant Deficiency and Noncompliance over Reporting Repeat Finding: Yes Auditee’s Corrective Action Plan: The City has purchased Workday, an Enterprise Resource Planning (ERP) system, and implemented the software with the assistance of Accenture consultants. Although Workday is “live” as of August 2022, the City is currently working to refine the software and fully utilize functionality. The Workday grants modules requires the grant funding source be defined prior to grant approval and fields are available for the AL titles and numbers and sub-recipients’ information. The implementation of the Workday grants modules centralizes much of the grant management function by requiring the agencies to upload the grant documents into Workday. Prior to the completion of the SEFA, the City instituted training sessions with the agencies to ensure that the reporting is understood by the agencies, with special emphasis on subrecipient payments being reported properly. Additionally, the City will give access to the grant report upon which the SEFA is based. The City will keep a check list to ensure that all agencies respond to the grant certification to ensure that all agencies review the grant data. Based on FY 23 training and feedback the City is expanding that training schedule to begin with agency preparation in November 2024. Additionally, the corrective actions for grants have included citywide trainings in the fourth quarter FY24 led by the Grants Management Office and BAPS on key grant accounting functions in Workday; including for example, Billing, Creating an Award, Sub Recipients with each training having between 50-70 agency grant staff attending. Contact Person: Michael Moiseyev, Chief Financial Officer, Baltimore City Completion Date: December 2024

Finding 2: Delayed Single Audit Delivery Background: The delivery of our single audit has been delayed due to staffing challenges and the need for improved coordination. With our organization’s expansion post-pandemic, increased hiring has required administrative staff to adapt to complex compliance requirements. Corrective Actions: 1. Audit Timeline Adjustment o Action: Begin the audit process no later than April each year to allow sufficient time for completion and submission. o Responsibility: Executive Team and Audit Committee o Timeline: Adjust the audit schedule for the upcoming year immediately. 2. Training for Administrative Staff o Action: Provide targeted compliance and audit process training for administrative staff to improve their proficiency and efficiency. o Responsibility: Administration o Timeline: Start training sessions within 60 days. 3. Regular Check-ins with Auditors o Action: Schedule regular monthly check-ins with auditors to ensure alignment on timelines and address potential issues early. o Responsibility: Finance Department o Timeline: Implement monthly check-ins starting [insert date]. 4. Resource Allocation o Action: Assess and allocate additional resources to support the audit process, ensuring staff have the necessary tools and support. o Responsibility: Administration o Timeline: Complete resource assessment within 60 days. ________________________________________ Conclusion AYUDA, INC. is committed to addressing these findings with urgency and transparency. By implementing the corrective actions outlined above, we aim to strengthen our financial management and compliance processes, ensuring these issues do not recur. We appreciate the auditors' feedback and are eager to demonstrate our improvements in the upcoming audit cycle. Approval: ________________________________________ Miguel Chacon Co-Executive Director

Corrective Action Plan October 29, 2024 Person responsible: Fernando Soto, President / CEO Fiscal Year Ended December 31, 2023 Section III – Federal Awards Findings and Questioned Costs Item 2023 – 001 Federal Assistance Listing Number: 93.914 HIV Emergency Relief Project Grants – Public Health Solutions Condition The Organization’s Data Collection Form submission to the Federal Audit Clearinghouse was not filed on time within nine months of the end of its fiscal year. Views of Responsible Officials and Corrective Action Although a new audit firm was engaged to complete the December 31, 2022, financial statements audit, and the necessary staffing changes were made to ensure filing of the December 31, 2023, was completed within nine months of the end of the fiscal year, additional time was needed to complete accurate fiscal records for the year ended December 31, 2023. Monthly closings and fiscal records reconciliations for the year ending December 31, 2024, are timely being conducted. Timely filing of the Data Collection form for the year ended December 31, 2024 is anticipated.

Finding 2022-001—Reporting The administrative staffing turnover BAERI experienced was detrimental to our ability to meet the reporting deadline for the 2022 audit. Moving forward, BAERI will ensure that our audit report and SF-SAC form are submitted to the Federal Audit Clearinghouse within nine months after the end of the audit period. Corrective Action Plan for Finding 2022-001—Reporting BAERI has taken the following steps in order to meet the reporting and deadline requirements outlined in 2 CFR 200.512 moving forward: 1. Implement policies and procedures to ensure that the internal documentation needed for our annual audit is easily accessible by finance staff and not onerous for staff to compile for the auditor. 2. Hire and train additional finance staff in order to implement the above mentioned policies and procedures needed to allow for a smooth, timely audit.

Purpose of this document: This is a corrective action plan in response to the single audit report finding for the fiscal year ended September 30, 2023. Identifying Number: 2023-001 Finding: Late filing of the compliance report. Uniform Guidance 2 CFR 200.512(a) requires that an organization’s audit must be completed, and data collection form and reporting package should be submitted within the earlier of 30 days after receipt of the auditor’s report or nine months after the end of the audit period. Auditor Recommendation: It is recommended that the Agency file the reporting package timely to the Federal Audit Clearinghouse. Corrective Action: Meridian Institute will establish a detailed timeline to ensure all necessary documentation is collected in a timely manner so that the reporting package may be filed by the due date to the Federal Audit Clearinghouse. Person Responsible for Corrective Action: Kauthar Rahman, CFO-COO Anticipated Completion Date for Corrective Action: The corrective action will be immediately implemented in response to the auditor’s recommendations. Sincerely, Kauthar Rahman CFO-COO

Finding 2023-001 Reporting – Significant Deficiency in Internal Control Condition and Effect: The single audit of the Hunterdon Healthcare System’s (the System) federal awards for the year ended December 31, 2023 was not completed within the nine months following the period-end and as a result, the System did not submit its single audit reporting package within the required timeframe. As such, the System did not comply with the aforementioned regulatory requirements. View of Responsible Officials and Planned Corrective Action: The System will review the single audit compilation process to identify where automation can be better utilized to increase timing of information gathering. In addition, cross training will be instituted to enable knowledge sharing amongst various teams to mitigate delays due to staff turnover. Name of Contract Person: Mr. Herbert White Chief Financial Officer Hunterdon Healthcare System, Inc. (908) 788-6153 hwhite@hhsnj.org Completion Date: December 31, 2024 Herbert While,

The City has established policies and procedures related to grant administration and accounting guidelines for allowable costs. The City is aware of the deadline for the submission of the Single Audit. A personnel vacancy for the position that performs the tasks of supplying the amount of federal expenditures resulted in a delay in ensuring the deadline and the policies and procedures were adhered to. The positions have been filled and the City has taken steps to ensure the personnel have received guidance and training regarding grant accounting, including deadlines for the audit.

Views of Responsible Officials: Life Asset thought it had done what was required by submitting the annual audit on time directly to Federal Grantors (U.S. Department of the Treasury and the U.S. Small Business Administration). Once Life Asset became aware of the requirement to also file data collection forms for single audit to the Federal Audit Clearinghouse, Life Asset did so right away. Life Asset has established an internal control procedure to ensure that the data collection forms and reporting package will be filed timely moving forward.

Brightside Up, Inc will stay current with new standards that could delay filings in the future. A plan to research and review new GAAP auditing procedures at the onset of the calendar year to be implemented prior to the accounting firm arriving for the formal audit. Financial information will be ready and available in a timely manner for all filings to be submitted by the deadline, to ensure compliance with the Federal Audit Clearing House. Contact person Keely Weise, CFO, 518-426-7181, kweise@brightsideup.org. The anticipated date for resolving the audit finding is December 31, 2024. Brightside Up, Inc will monitor the corrective action plan during the year to remain on the timeline for meeting all filing deadlines.

There was significant turnover in the finance department, including the CFO and the finance director. These turnovers affected the ability of the organization to produce the information on time for the auditors. The Organization is working with external consultants to improve the timeliness of reconciliations and audit preparation and recruiting vacant positions. We completed accounting policy changes which will correct the issues noted. Management is confident that the issues that have been noted will be rectified in the fiscal year ending September 30, 2024.

Finding 2023-005 Deadline for Federal Single Audit - Noncompliance and Internal Control Over Compliance - Significant Deficiency Planned Corrective Action 1. To ensure the Association establishes controls to ensure the audit is completed timely and the reporting package is submitted to the FAC within the required timeframe. The Association has hired both a full-time on-site CFO and an Anchorage-based Comptroller to address key personnel turnover. Anticipated Completion date - Completed 2. The new financial leadership team of the CFO and Comptroller have developed a standardized monthly closing and reconciliation process. The monthly closing process includes supervisory review of the reconciliation details and activity throughout the fiscal year are performed at a sufficient level of precision and tracking to support the financial reporting. Anticipated Completion date – In process expected completion date December 31, 2024. 3. The CFO is evaluating reassignment of responsibilities to ensure that a single person in a position of authority can oversee accurate and comprehensive grant financial reporting and coordinates between various control owners. In addition, the CFO is evaluating reassignment of responsibilities to ensure that a single person in a position of authority can oversee accurate and comprehensive Association financial reporting and coordinates between various control owners. Anticipated Completion date – In process expected completion date December 31, 2024. 4. Complete the Audit and submit the reporting package early or on time to the FAC. Anticipated Completion date – In process expected completion date June 15, 2025.

Finding 2023-001: Internal Control over Compliance Type of finding: Internal Control (material weakness) and Compliance (noncompliance) Recommendation: The Organization should strengthen its internal controls over year-end financial close and reporting with adopted policies and procedures to ensure compliance with the Report submission portion of the Uniform Administrative Requirements, Cost Principles, and Audit Requirements section. Action Taken: The Organization plans to strengthen internal controls by adopting methods that allow for better tracking of restricted versus unrestricted funding, in addition to creating internal methods of tracking income, expense, and reporting of restricted funds throughout the year. The Organization took action with a change in management and a new external bookkeeper, which will allow the above processes to be completed with oversight from both internal and external sources. If there are questions regarding this plan, please call the responsible party listed below. Thank you, Laura Cusick Executive Director Rio Grande Headwaters Land Trust Laura@Rightslv.org (719)657-0800

SafeQuest Solano will implement stronger internal controls and procedures to ensure timely submission of the DCF. This will include designating a responsible party for tracking and submitting the DCF, creating a timeline and checklist for required submissions, and conducting periodic reviews to ensure compliance with deadlines. Additionally, SafeQuest Solano will provide training to relevant staff on the importance of meeting federal compliance requirements. SafeQuest Solano has already implemented a new database system.

Finding 2023-003: Name of Contact Person: Meagan O’Neal Management Response: The assessment of all finance staff duties has provided a clearer understanding of how the audit package can be timely moving forward. Processes have been put in place for reviewing accounts, budgets and reports more often to prevent a year end rush to collect data. Proposed Completion Date: Immediately.

Finding 2023-002 Single Audit Report Filed Late Condition as Noted in Auditor’s Finding: The Commission did not complete and submit their audit to the Federal Audit Clearinghouse by the due date of September 30, 2024. Responsible Individuals: Board of Commissioners and Management Corrective Action Plan: The Commission will implement procedures to begin audit preparation work earlier in the calendar year to ensure reports are filed within the nine-month reporting deadline set forth by Uniform Guidance. Anticipated Completion Date: Ongoing analysis

Identifying Number: 2023-004 Finding: The single audit package was not submitted to the Federal Clearinghouse within the time required. The Single Audit package for the Authority’s year ended December 31, 2023, should have been submitted to the Federal Clearinghouse by September 30, 2024. The delay was caused by the Cyber Incident in January 2024 which delayed the release of year end reporting to the external auditor to May 2024. Staffing shortages at the Authority contributed to the late filing. A further delay was the result of the availability of the audit staff. Corrective Actions Taken or Planned: On February 7,2024, the Authority completed all industry standard, minimum cybersecurity remediation and compliance requirements following the incident, as set forth by the National Institute of Standards and Technology (NIST) Cyber Security Framework and Dell Technologies. All hyper-converged infrastructure, network firewall, and networked components have been examined through a rigorous network remediation and data validation process, in order to significantly reduce the risk of further malicious exposure of its data and equipment to any/all entities separate from the organization. The Kansas City Area Transportation Authority has moreover, taken measures to secure and improve the overall security posture during the remediation period for all workstations, servers, and networked infrastructure, with the addition of continuous monitoring and next generation antivirus systems with endpoint detection response capabilities, firewalled intrusion detection and prevention measures, as well as the development and implementation of continuous identity access management and data loss prevention features and processes. In April 2024, the American Public Transit Association (APTA) performed a financial peer review on the Authority. Among the recommendations as best practice by the peer group was the replacement of the long-standing audit firm with a new firm. The Request for Purchase (RFP) was conducted, and a new audit firm has been selected. Approval of the new Audit firm contract is scheduled for approval by the Board of Commissions on October 22, 2024. KCATA will work with the new audit firm to develop a schedule to publish financial statements by April or May of each year which was the historical schedule in place. Contact person responsible for corrective action: Andrew Morse, Comptroller