Corrective Action Plans

FINDING 2024-003 Finding Subject: COVID 19 Coronavirus State and Local Fiscal Recovery - Subrecipient Monitoring Contact Person Responsible for Corrective Action: Gretchen Parker Contact Phone Number and Email Address: 765-648-6113 gparker@cityofanderson.com Views of Responsible Officials: "We concur with the finding." Description of Corrective Action Plan: The city has several individuals involved in the monitoring of activities related to the COVID 19 Coronavirus State and Local Fiscal Recovery federal award. The city has implemented procedures to ensure oversight and review of subrecipient reports is properly documented. Anticipated Completion Date: September 1, 2025

DMPSJ: While the Office of the Deputy Mayor for Public Safety and Justice (DMPSJ) doesn’t agree that it is out of compliance, DMPSJ will ensure documentation is maintained regarding its oversight of grant management. Nicole Peckumn, Chief of Staff, DMPSJ August 30, 2025 DMPSJ will ensure compliance with standard operation procedures to ensure monthly and performance reports are submitted, as well as ensure follow-up related to corrective action plans is documented. While DMPSJ doesn’t agree with the finding regarding the debarment check, DMPSJ will implement a practice of capturing a screenshot and maintaining a copy of the screenshot in the file for a grantee(s) receiving federal funding. ONSE: The Office of Neighborhood Safety and Engagement (ONSE) acknowledges and accepts the finding that the subrecipient failed to submit their monthly and performance reports. ONSE has created a monitoring team and plan to ensure that all subrecipients are in compliance with submissions of their financial and performance reports. Contact: Yasha Williams Robinson, Chief Operating Officer, ONSE Estimated Completion Date: September 30, 2025 See Corrective Action Plan for chart/table

Assistance Listings numbers and names: 17.258 WIOA Adult Program 17.259 WIOA Youth Activities 17.278 WIOA Dislocated Worker Formula Grants 21.027 Coronavirus State and Local Fiscal Recovery Funds 97.024 Emergency Food and Shelter National Board Program 97.141 Shelter and Services Program Name of contact person: Ken Walker, Director (Interim), Grants Management & Innovation Anticipated completion date: June 30, 2026 Response: Concur. The Pima County Department of Grants Management & Innovation (GMI) has re-organized its structure to include a division called Monitoring, Analysis, and Performance (MAP), which is now the lead on monitoring of all County sub-recipients and has begun the process of improving its sub-recipient monitoring processes and practices. The new process combines a more robust analysis of each subrecipient’s required core documents including the entity’s most recent financial audits as well as relevant policies and procedures with an updated fiscal and programmatic compliance review protocol that is aligned with specific award terms and with federal regulations. For example, 1. GMI has institutionalized the use of standardized written communication and timelines regarding monitoring all sub-recipients - e.g., entrance letters, corrective action requests, and exit letters. 2. GMI is currently piloting a new risk assessment methodology. Once it is finalized the County will communicate the new methodology to all subrecipient entities with an explanation of the revised system elements. The new methodology includes first-hand scoring of the degree to which the materials provided by each entity align with grantor and federal requirements. 3. GMI is developing a standardized method for initiating special terms and conditions with out-of-compliance sub-recipients. Corrective action steps will be incremental and may include increased meeting or reporting frequencies, technical assistance, and/or required training completion to help the entity attain regulatory compliance. Serious, on-going issues or refusal to correct may result in suspending payment until the items are corrected and contract termination as a last resort. 4. MAP will work with its Grants Data Management division colleagues to integrate monitoring scheduling and activities, results, and documents into Amplifund, the County’s new grants management plug-in to its new ERP, Workday. Additionally, to address the ongoing challenge of geometric growth in subrecipients over the last several fiscal years without added personnel capacity, GMI is working to achieve efficiency through the County’s new grants management database, AmpliFund, as the centralized data repository for all subrecipient related reporting. Since go-live of the County’s new ERP in July 2024, GMI has been providing training to all County subrecipients regarding how to interact with AmpliFund to be responsive to GMI monitoring and federal compliance. The County continues to work on the implementation of the full functionality of the new ERP software and its ancillary systems. Full functionality will allow real time updates to track subrecipient monitoring activities with visibility for both County departments and subrecipient entities.

The District is aware of the importance of maintaining documentation that demonstrates expenditures charged to a program are allocable and allowable. The District will review existing procedures related to the review of temporary workers to ensure that documentation is available to demonstrate charges to programs comply with federal guidelines and regulations. The District also recognizes the importance of timely approval of time and effort in compliance with federal regulations. While the District does perform regular reconciliations of expenses to ensure allowability, the District will review and update procedures, as necessary, to continue to improve and document timely supervisory approvals after each bi-weekly payroll is processed in relation to finding 2024-01 in the District’s Report on Internal Controls and Compliance.

1. Person responsible: Assistant Auditor-Controller, Department of Auditor-Controller 2. Corrective action plan: The County agrees with the finding and recommendation. The County hired independent Certified Public Accounting (CPA) firms to monitor CSLFRF subrecipients. The CSLFRF subrecipient monitoring reviews are currently in progress, with the objective of evaluating each subrecipient’s fiscal/administrative procedures, internal controls, records, and compliance with contractual service requirements. Based on an agreed-upon schedule with the Department of the Auditor-Controller, the CPA firms will document their reviews by issuing reports detailing the procedures performed and any findings. The County will be responsible for obtaining corrective action plans from subrecipients, monitoring findings, and ensuring that corrective actions are implemented. 3. Anticipated implementation date: June 30, 2026

Reference Number: 2024-011 Prior Year Finding: No Federal Agency: U.S. Department of Transportation State Agency: Agency of Transportation Federal Program: Highway Planning and Construction Assistance Listing Number: 20.205 Award Number and Year: FFY2023 – FFY2024 Compliance Requirement: Subrecipient Monitoring Type of Finding: Significant Deficiency in Internal Control over Compliance, Other Matters Recommendation: VTrans should review and enhance internal controls and procedures to ensure that all required federal award information is included in subawards and that on-site subrecipient monitoring is conducted timely per the terms of its subrecipient monitoring plan. Views of responsible officials: Management agrees with the finding. Corrective Action Plan: Missing Federal Award Date: The Contract Administration, Grants Unit addressed the deficiency of missing federal award dates during the FY23 State Single Audit (in effect as of 1/12/2024). As part of the updated award execution process, the Grants Unit now verifies that all awards include the federal award date and applicable FAIN number. Awards executed prior to the implementation of this process are being updated during amendments to ensure compliance. Subrecipient Monitoring: The root cause of the subrecipient monitoring deficiency was staffing shortages, which affected the Agency of Transportations (AOT) ability to meet monitoring requirements on time. The AOT monitoring requirements have been transitioned from the Audit Bureau to the Contract Administration, Grants Unit. The Grants Unit has already identified and will prioritize Subrecipients based on the last date monitored. Workflow modifications to include efficiencies are also in progress. These efficiencies will help with timeliness. The revisions to the monitoring activities will be in the VTrans Granting Plan effective July 1, 2025. Scheduled Completion Date of Corrective Action Plan: All corrective actions will be implemented as of July 1, 2025. Contacts for Corrective Action Plan: Tricia Scribner, Administrative Services Manager III tricia.scribner@vermont.gov

Trailhead is establishing a new Contract and Compliance Coordinator role to oversee contract compliance processes and to ensure that Trailhead’s policy on subrecipient monitoring is followed. This role will be responsible for ensuring that compliance requirements are integrated at the outset of each grant. This role will be responsible for internal monitoring and auditing. This role will ensure that all grant kick-off meetings follow a standard procedure and include: 1) A clear understanding of federal requirements for all involved fiscal, program, and compliance staff 2) Delegated assignments to program staff for implementing and documenting: a) Suspension and debarment prior to contracting with subrecipients b) Subrecipient vs contractor determinations c) Evaluation of each subrecipient’s risk of noncompliance i) Establish the appropriate subrecipient monitoring level based on risk. This compliance role will have the authority to ensure the procedures are completed by the assigned staff. Evidence of the completed procedure must be documented and saved in a newly created contracts database. This database will be a centralized storage that will be reviewed during internal compliance checks to ensure all required steps have been completed and documented. These documents and associated grant and contract documents will be part of an official repository.

Finding Number 2023-014 Subject Heading (Financial) or AL no. and program name (Federal) ALN: 21.027 Federal Program name: Coronavirus State And Local Fiscal Recovery Funds (CSLFRF) Planned Corrective Action Management Response The Oklahoma Office of Management and Enterprise Services – Grants Management Office (OMES-GMO) partially agrees with the finding. OMES-GMO acknowledges the importance of robust subrecipient monitoring in accordance with 2 CFR § 200.332(d) and (f), which includes ensuring that all subrecipients expending $750,000 or more in federal funds obtain a Single Audit, as required by 2 CFR § 200.501. OMES-GMO concurs with the identified inconsistency with agencies notifying subrecipients of the single audit threshold amount, despite having deficient tracking of the total of federal expenditures across all federal programs that an entity was engaged in. OMES-GMO holds a good faith belief that this deficiency on behalf of the agencies was the result of a lack of clarity; and ergo, a misinterpretation between individual program thresholds and aggregate thresholds across all programs in a fiscal year. Error may further be attributed to the limitations in tracking mechanisms, rather than a lack of awareness or intent to comply. OMES-GMO has followed up with each of the agencies named in the finding and has verified that, although subrecipient monitoring was in place, additional controls are needed to ensure accurate tracking of total federal expenditures and timely collection of required audits. Listed below are the corrective actions that have or will be implemented. Corrective Actions • Standardized Monitoring Procedures: OMES-GMO will issue updated subrecipient monitoring guidance to all state agencies administering federal funds. This guidance will include clear expectations for tracking total federal expenditures, identifying subrecipients approaching the Single Audit threshold, and documenting audit compliance. • Improved Tracking Mechanisms: OMES-GMO will work with agencies to assess their internal systems for tracking cumulative federal expenditures across funding sources, ensuring timely identification of entities requiring a Single Audit. • Ongoing Support and Oversight: OMES-GMO will incorporate further Single Audit compliance into established review processes. Agency-Specific Actions • Agency 619: Single Audits through 2022 have been obtained and archived. Requests for FY2023 audits have been issued, and responses are currently being collected. FY2024 audits will be requested no later than September 30, 2025, to allow sufficient time for completion and submission. • Agency 340: The Finance Division will begin tracking all subrecipient expenditures, including secondary recipients. Verification of Single Audit compliance will be incorporated into the agency’s annual site visits. • Agency 830: A process is already in place through the Office of Inspector General (OIG) to identify subrecipients exceeding the $750,000 threshold. All subrecipient contracts include language requiring submission of a Single Audit if the threshold is met. These audits are collected, reviewed, and stored accordingly. These corrective actions reflect OMES-GMO’s and the respective agencies’ commitment to strengthening internal controls, ensuring proper oversight of federal funds, and maintaining compliance with all applicable federal requirements. Anticipated Completion Date 6/30/2025 Responsible Contact Person OMES: Parker Wise 619: Sara Librandi, Kami Fullingim 340: Diane Brown, Danielle Smith, Tracey Douglas 830: Jaretta Murphy, Lindsey Kanaly, Danielle Durkee, Katey Campbell

VIEWS OF RESPONSIBLE OFFICIALS ADSEF will provide training to personnel on the requirements and regulations related to subrecipient monitoring. Recommendation to management will be implemented, internal controls and compliance measures that allow for the identification, reporting, and monitoring of subrecipient activities Prevention Activities/TANF. IMPLEMENTATION DATE During Fiscal Year 2025-2026. RESPONSIBLE PERSON Administration for Socioeconomic Development of the Family (ADSEF, by its Spanish Acronym)

The CDSS agrees with the finding. The Child Care and Development Division's Program Quality Improvement Branch (PQIB) recognized the need for tracking monitoring procedures starting from risk assessment identification to closing out of Continuous Improvement Plans (CIP) to ensure that contractors with the highest risk factors are prioritized and agencies requiring follow up received a CIP. • Tracking Use of the Risk Assessment: Annually, the PQIB identifies risk criteria for the upcoming Fiscal Year (FY) monitoring through the Contract Monitoring Protocols Agreement document. Using the Consultant Caseload Cohorts spreadsheet staff identify the agencies they will monitor using the FY Monitoring Priorities criteria (risk assessment criteria). The PQIB Travel Team and Administrators review the monitoring schedules for each consultant to ensure the risk assessment criteria has been followed. The risk assessment criteria are reviewed and updated annually based on trends and support needs of the field. In FY 2023-2024 PQIB implemented a cohort review cycle to apply the risk assessment criteria to all contracted programs subject to monitoring reviews. • Maintaining Monitoring Reports: Each Contract Monitoring Report includes a “Monitoring Summary Page” containing all items reviewed during a Contract Monitoring Review (CMR). Any item from the Program Integrity Monitoring Tool identified during a review as unmet and/or identified for a CIP is automatically tracked by the analysts for follow-up and resolution. A spreadsheet with all the reviews scheduled for any contract monitoring visit are maintained by FY and the findings are recorded for each item on the tool. The PQIB analysts track the review dates, reports, findings, and CIPs. The analysts meet with the administrators monthly to track missing reports. All reports are filed by individual agency. • Continuous Improvement Plan (CIP): The PQIB analysts use the Contract Monitoring Report to determine if a CIP is required. A standard CIP template was developed, and all staff are required to use the same document. Every CIP has a 45-day corrective action period; however, programs may be granted extensions if requested in writing. Programs can request up to an additional 180 days to complete corrective actions. To receive an extension, a plan must be submitted in writing detailing how the program will address the actions by the end of the extension period. The PQIB analyst conducts follow-up with the consultant until the CIP is received. The CIP is not closed until all items identified for corrective action are resolved. A completed CIP and Resolution Letter are sent to the contractor and filed in the Common Folder in the agency’s folder. All spreadsheets, agreements, forms, and records of completed monitoring reports referenced above are maintained in the Common Folder and on the PQIB SharePoint page. Furthermore, CDSS is actively working to fully adopt audit report monitoring responsibilities of Local Education Agencies (LEA) and certain non-LEAs receiving Child Care and Development Fund (CCDF) Cluster program funds by July 1, 2025. Estimated Implementation Date: July 1, 2025 Contact: Jeff Fowler, Staff Services Manager III Child Care and Development Program California Department of Social Services

Public Health agrees with the recommendation. Public Health will develop a process for conducting risk assessments of subrecipient funding, develop and implement procedures for obtaining single audit reports from subrecipients, as well as a system to monitor and track compliance with the single audit mandate among subrecipients. Public Health will ensure each subaward includes all requirements imposed on the subrecipient so that the federal award is used in accordance with Federal Statutes, regulations, and terms of conditions of the federal award. Estimated Implementation Date: May 2025 Contact: Melissa Relles, Assistant Deputy Director Division of Operations, Center for Preparedness and Response California Department of Public Health

Assistance listing numbers and program names: 84.010 Title I Grants to Local Educational Agencies 84.367 Supporting Effective Instruction State Grants (formerly Improving Teacher Quality State Grants) Agency: Arizona Department of Education (ADE) Name of contact person and title: Dr. Sarka White, ADE Deputy Associate Superintendent Anticipated completion date: December 15, 2024 Agency’s response: Concur The Arizona Department of Education (ADE) has already begun implementing a program to ensure accurate and quality programmatic monitoring for all ESEA programs which specifically requires LEAs to meet 100% of the requirements of all statutorily required items to be monitored regardless of CMO affiliation. This development of programmatic monitoring will design a system of integrity to allow each LEA to have unique monitoring findings and ensure they are treated as all other LEAs regardless of management status. The Arizona Department of Education (ADE) is finalizing all program policies and procedures along with field training and staff training on how this program is implemented. ADE began providing an assurance document to charters in May 2024 which asks the charters to assure that if they do business with a CMO, the CMO does not have fiscal or operational authority for the LEA. The charter is asked to submit to ADE a copy of their organizational chart, along with the assurances document. Grants Management has created a new user role in the Grants Management Enterprise (GME) system, called the LEA Contracted Update role. This role allows a CMO person the access to perform fiscal tasks for which they have been contracted but does not hold the final submit or approve capacity, that must be reserved for authorized employees of the LEA. Grants Management has provided the placeholder for the assurance and organizational chart in the LEA Document Library, along with the communication to eligible entities (charters in this case). Individual program areas within ADE who review and approve funding applications will be responsible for verifying the assurances have been signed and uploaded and only authorized people at the LEA are actioning funding applications in GME prior to the program area giving director approval to the application.

Assistance listing numbers and program names: 84.010 Title I Grants to Local Educational Agencies 84.367 Supporting Effective Instruction State Grants (formerly Improving Teacher Quality State Grants) Agency: Arizona Department of Education (ADE) Name of contact person and title: Nicole Von Prisk, ADE Deputy Associate Superintendent of Grants Management Matt McClary, ADE Compliance Officer Anticipated completion date: April 2025 Agency’s response: Concur • Tech team supervisor will have someone from that team put eyes on the initial generated report to compare results to prior year, looking at total number of LEAs, then greenlighting the initial report for the Tech Director and the Fiscal Director to review. • Once the Fiscal and Tech Directors receive the report, they will be responsible for sampling the data that populated into the report, by looking at overall numbers who Pass, Pass with Exception, or Fail and doing a comparison for analysis to prior year summary results. They will conduct a random sampling, comparing totals to latest AFR totals, to ensure amounts populated correctly. Once random sampling has been completed, it will be sent to Deputy Associate Superintendent for final checks. • Deputy Associate Superintendent will give final approval to move to public display of data, after confirmation of completeness and accuracy of data populated.

Assistance listing numbers and program names: 84.010 Title I Grants to Local Educational Agencies 84.367 Supporting Effective Instruction State Grants (formerly Improving Teacher Quality State Grants) Agency: Arizona Department of Education (ADE) Name of contact person and title: Dr. Sarka White, ADE Deputy Associate Superintendent Chris Brown, Business Officer of Education Programs Anticipated completion date: February 2025 Agency’s response: Concur • The Arizona Department of Education (ADE) has already begun to document and execute practices addressing the recommendations issued by the auditor's office. • ADE has already drafted a comprehensive policies and procedures document outlining eligibility, duties, and responsibilities with individuals who oversee and double-check the work. This document was created and refined by reviewing other states’ procedures, federal technical assistance groups, communications with the Title federal program office at the United States Department of Education, and internal procedures in other units. • The Title I unit has been restructured to have an operations team with multiple staff members overseeing data quality and internal controls for allocations. This updated structure ensures that multiple individuals are involved in the allocation process. Staffing for this should be completed by February 2025. • The updated processes include entity management to determine when charter LEAs open and operate each year. Now, other systems validate this information instead of copying the information from the prior year. As such, this item has already been completed. • Finally, the department will follow up with the United States Department of Education (USED) regarding recalculating the fiscal year 2023 and the six ineligible LEAs for Title II funds to determine feasible processes and resolutions to each audit recommendation.

Assistance listing numbers and program names: 21.027 COVID-19 - Coronavirus State and Local Fiscal Recovery Funds 84.425C COVID-19 Education Stabilization Fund –Governor’s Emergency Education Relief (GEER) Fund Agency: Arizona Governor’s Office of Strategic Planning and Budgeting (Office) Name of contact person and title: Sarah Brown, Director Anticipated completion date: July 31, 2025 Agency’s response: Concur During fiscal year 2024, the Office took significant corrective action to improve subrecipient monitoring by developing and implementing a comprehensive subrecipient monitoring plan. This plan includes the following: • Financial Report-Reimbursement Requests—The Office reviews the grantee's financial reports to ensure costs align with the approved budget, program objectives, and federal cost principles. • Performance Reports—The Office reviews the submission of programmatic reports. The timelines for submission and frequency of the programmatic activity reports are defined in the terms and conditions of each award. The program activity reports document that all program requirements are being satisfactorily fulfilled. Grantee outreach is conducted when performance activity is lagging. Grantee check-ins and/or additional milestones are set to ensure goals are met. The Office may amend or terminate the grant award if sufficient progress is lacking. • Single Audit Reports—The Office confirms any required Single Audits and reviews a copy of the most recent report. • A Single Audit Questionnaire is distributed to grantees annually to confirm if the entity is subject to this federal audit requirement. • The Office also reviews total payments issued to an entity by the Office in the prior year to confirm if disbursements met the audit threshold. • The Office requests grantees submit their Single Audit Reporting Package (SARP) with any findings and the required Corrective Action Plan. In addition, the Office collects SARPs from the federal clearinghouse. • The Office reviews SARPs for any findings and conducts follow-up monitoring of CAPs that impact any grant funding managed by the Office. Management decisions are issued to grantees as required for specific grant findings. • Risk Assessment (RA)—The Office conducts a Risk Assessment (RA) of grantees when applying for grants to inform the grant award decision and possible grantee oversight or restrictions. Additionally, the Office conducts an annual RA of any grantee currently awarded funding. • The RA contains a self-assessment for the grantee to complete and an internal review conducted by the Office. Scores from both are weighted and used to calculate the overall risk score for each grantee as high, medium, and low risk. • The Office utilizes the RA results to prioritize high-risk grantees, which are reviewed through a desk or on-site monitoring. Medium-risk grantees will receive additional support and be referred to our Compliance and Reporting team for further review if additional concerns arise. Office staff now attend ongoing internal and external training to improve their understanding of compliance requirements, identify noncompliance, and actively reduce the risks of waste, fraud, and abuse of federal dollars through our subrecipient monitoring process. The Office has developed and implemented processes for requirements such as single audit review and corrective action follow-up, risk assessment, and subrecipient monitoring to address the specific findings. During the time frame corresponding to this audit finding, the pace and volume of grants management administrative duties required to be executed exceeded staffing capacity, contributing to the findings noted. As of this date, the Office has achieved stability in both manager and staff positions. In addition, the Office has allocated sufficient resources to comply with the award terms and program requirements by establishing a Grants Compliance and Reporting Team dedicated to performing necessary subrecipient monitoring procedures. Furthermore, the Office has implemented all recommendations and would like to specifically highlight efforts to work with subrecipients to resolve the potential disallowed costs of $1,903,858 of program monies that may have been spent in violation of its federal award terms by conducting on-site monitoring visits, desk reviews, and facilitating subrecipient technical assistance. OSPB is committed to continuing these efforts.

Assistance listing numbers and program names: 21.023 COVID-19 - Emergency Rental Assistance Program 21.027 COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Agency: Arizona Department of Economic Security (DES) Name of contact person and title: Molly Bright, DES CCSD Assistant Director Anticipated completion date: June 30, 2026 Agency’s Response: Concur The Department of Economic Security will address the audit recommendations as follows: 1. Ensure benefit payments are for allowable costs paid to or on behalf of eligible program applicants. The Department will review and confirm that benefits payments paid to or on the behalf of eligible program applicants are allowable expenditures of the federal funding being disbursed. 2. Follow existing policies and procedures to obtain required documentation to support requirements related to where the applicant lives and their income to ensure program applicants are eligible to receive benefit payments. The Department will abide by the existing adjudication policies and procedures that require the submission of substantiating documentation supporting the claims made by applicants regarding where they live and their household income to confirm that applicants are eligible to receive benefit payments under the program and to verify the amount of benefits they shall receive. 3. Allocate sufficient staffing resources to perform a thorough evaluation of program benefits applications and provide training on eligibility requirements and allowable benefit payments. The Department will attempt to obtain or allocate additional resources to staffing to support the program benefits application evaluation process and will provide additional training to staff on eligibility requirements and allowable benefit payment regulations. 4. Update the checklist Division personnel use to perform a post-review of eligibility determinations to include detailed guidance for verifying the determinations aligned with the Division’s written policies and procedures and supported by adequate documentation. The Department will update the checklist being used by staff to perform post-review of eligibility determinations to include detailed guidance on verifying the applicant benefits determinations in alignment with the divisional policies and procedures and evidenced by adequate substantiating documentation.

Assistance listing number and program name: 14.267 Continuum of Care Program Agency: Arizona Department of Housing (DOH) Name of contact person and title: Keon Montgomery, DOH Assistant Deputy Director of Programs Anticipated completion date: January 30, 2025 Agency’s Response: Concur The Department is in the process of developing written policies and procedures to address matching, level of effort, and earmarking. The policies and procedures will address communication with subrecipients and maintaining records and documentation of the amounts used to fulfill matching requirements.

Assistance listing number and program name: 14.267 Continuum of Care Program Agency: Arizona Department of Housing (DOH) Name of contact person and title: Keon Montgomery, DOH Assistant Deputy Director of Programs Anticipated completion date: January 30, 2025 Agency’s Response: Concur The Department resumed monitoring duties and developed a monitoring schedule to ensure subrecipients maintain program compliance. The Department also established a risk assessment tool that assess risk associated with each subrecipient. Records of subrecipient monitoring will be kept for a period of time to demonstrate monitoring activities were performed.

Assistance listing number and program name: 14.267 Continuum of Care Program Agency: Arizona Department of Housing (DOH) Name of contact person and title: Keon Montgomery, DOH Assistant Deputy Director of Programs Anticipated completion date: January 30, 2025 Agency’s Response: Concur The Department is no longer reimbursing the subrecipient for unsupported or ineligible costs and is pursuing repayment of funds from the subrecipient. Written policies for reviewing and approving subrecipient reimbursements, as well as, risk assessment were reviewed, updated and amended to ensure ongoing compliance. Staff has been trained and new policies were implemented in FY 2024 subsequent to the period reviewed in this audit. Contract Specialists in the Special Needs Division have received additional training through HUD TA support on CoC standards to ensure all request for reimbursement from subrecipients are eligible, reasonable and appropriately documented, including any allocations and purchasing requirements.

Assistance listing numbers and program names: 14.231 Emergency Solutions Grant Program 14.231 COVID-19 - Emergency Solutions Grant Program 93.558 Temporary Assistance for Needy Families 93.558 COVID-19-Temporary Assistance for Needy Families Agency: Arizona Department of Economic Security (DES) Name of contact person and title: Molly Bright, DES CCSD Assistant Director Anticipated completion date: June 30, 2025 Agency’s Response: Concur The Department will stop the reimbursement of costs to all nonprofit and contracted subrecipients for items that are disallowed and/or restricted by the regulations of the federal Emergency Solutions Grant (ESG) program and Temporary Assistance for Needy Families (TANF) grant, including payments to personnel that violate the conflict-of-interest disclosure requirements. The Department will revise its expenditure review procedures to ensure compliance with these regulations prior to disbursing any ESG and/or TANF funding to any subrecipient for any purpose. These revisions will include review and approval by applicable management personnel prior to disbursement of federal funding. The Department is also in the process of establishing a divisional Monitoring and Compliance Policy and Procedure Manual which will establish procedures specific to subrecipient monitoring. The Department will continue to assess the risk of noncompliance violations for each subrecipient and establish a plan of action to address noncompliance. The plan of action will include an array of training and educational processes to ensure applicable personnel are knowledgeable of programmatic compliance requirements and Department contracts. The Department will also monitor subrecipients per its updated policies and procedures and will ensure proper oversight of federal expenditures as required by federal regulations. The Department has amended its contracts with the applicable subrecipients to more clearly outline the regulatory requirements and expectations for expenditures under the ESG and TANF grants. The Department will also continue to resolve the unallowable costs reimbursed to subrecipients as deemed appropriate by the applicable federal agencies.

2023- 007 - Material Weakness in Internal Control and Material Noncompliance – Sub-recipient Monitoring and Management WPHW understands this finding and recognizes that correction that were planned for FY23 were not able to be fully implemented. One of the significant challenges WPHW had over the past couple of year, in addition to IT system challenges, is staffing. WPHW has hired three individuals to develop our contracting process and had performance issues with all three individuals. In addition to the difficulties with the NetSuite implementation, we have had to re-evaluate our sub-recipient monitoring and management business process. The following process will address this finding: 1) Director of Accounting and the Accounting Manager will review CFR 200.332 and develop a revised business process for the WPHW contract system a. Accounting Team will hire 2 Accounting Specialists who will each have specific sub-recipient monitoring responsibilities 2) Director of Accounting and the Accounting Manager will review all current contract to ensure the following: a. Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes: i. Federal, State or other award identification. ii. Subrecipient name (which must match the name associated with its unique entity identifier); iii. Subrecipient's unique entity identifier; iv. Award Identification Number (FAIN/SAIN); v. Award Date of award to the recipient by the Federal agency; vi. Subaward Period of Performance Start and End Date; vii. Subaward Budget Period Start and End Date; viii. Amount of Federal Funds (if applicable) Obligated by this action by the pass-through entity to the subrecipient; ix. Total Amount of Federal Funds Obligated, if applicable, to the subrecipient by the pass-through entity including the current financial obligation; x. Total Amount of the Federal Award committed to the subrecipient by the pass-through entity; xi. Federal award project description, as required to be responsive to the Federal Funding Accountability and Transparency Act (FFATA); xii. Name of Federal awarding agency, pass-through entity, and contact information for awarding official of the Pass-through entity; xiii. Assistance Listings number and Title; the pass-through entity must identify the dollar amount made available under each Federal award and the Assistance Listings Number at time of disbursement; xiv. Identification of whether the award is R&D; and xv. Indirect cost rate for the Federal, State, or other award (including if the de minimis rate is charged) per § 200.414. b. All requirements imposed by the pass-through entity on the subrecipient are in accordance with Federal, State, Local statutes, regulations and the terms and conditions of the award; c. Determines and ensure completion of required financial and performance reports; d. Has an approved federally recognized indirect cost rate negotiated between the subrecipient and the Federal Government or utilizes the de minimus. e. States that subrecipient permit the pass-through entity and auditors to have access to the subrecipient's records and financial statements as necessary for the pass-through entity to meet the requirements of this part f. Details appropriate terms and conditions concerning closeout of the subaward. g. Subrecipient risk assessment that accesses: i. prior experience with the same or similar subawards; ii. previous audits iii. personnel or substantially changed systems iv. Prior monitoring results 1. Subaward conditions will be placed if issues arise 3) Implement sub-recipient monitoring process. a. Conduct invoice review monthly i. All invoices must include full back up and support for expenses ii. All invoices will be reviewed as they are received to ensure expenses are allowable iii. Any issues that arise will be addressed prior to invoice payment b. Conduct contract monitoring visit annually i. Hold a meeting with the sub-recipient to review the following: 1. Reviewing financial and performance reports 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the subaward. 3. Training and technical assistance on program-related matters 4. Determine corrective action for any deficiencies or findings and determine risk 5. Discussion of enforcement action against noncompliant subrecipient This process will be reviewed, and implementation will begin during Q4 FY24. All current FY24 contracts will be reviewed, and monitoring visits scheduled. For FY25, all contracts will be in compliance with requirements.

Condition and Context: ACT noted that it did not request and review audited financial statements for all subrecipients. Recommendation: ACT evaluates the policies and procedures to ensure appropriate monitoring is performed over all subrecipients and reviews audited financial statements for those subrecipients that are required to have an audit performed. Views of Responsible Officials and Planned Corrective Action: ACT accepts the auditors’ recommendation. We will review and update the monitoring policies and procedures to include requesting and reviewing the audited financial statements for those subrecipients that are required to have an audit performed.

EXECUTIVE OFFICE OF LABOR AND WORKFORCE DEVELOPMENT 2023-012 WIOA Cluster, Employment Service Cluster – Assistance Listing No. 17.258, 17.259, 17.278, 17.207, 17.801 Action taken in response to the finding: The corrective action plan (CAP) for this finding was implemented and completed in Fiscal Year 2023 with the addition of the FAIN numbers to the subawards and the completion of FY23 CommCorp monitoring. MDCS continues to include FAIN as part of the revised documented process and monitoring is current and timely performed. MDCS therefore considers this item to be completed and closed. Name of the contact person responsible for corrective action: Michael Williams, Director of Field management and Oversight Planned completion date for corrective action plan: December 31, 2022

Yamhill County Finance staff will prepare a recorded presentation about our responsibilities for subrecipient monitoring. The recording will be presented to all employees who manage fede ral grants and presented during a MS Teams meeting where a Q&A session will be held afterwards to solidify learning and appropriately applying the federal requirements. County staff will ensure these grant award recipients are registered with the County via the County's grant administrat ion program and monitoring activities will commence immediately, and in the same manner that the County has been monitoring other similar awards that did not involve a third-party administrator. Further, the County as a practice will now require that all future grant recipients, regard less of whether administered by a third-party or the County directly, be required to register their organization via the County's grant administration programming for ongoing monitoring and reporting.

Cluster name: TRIO Cluster Assistance Listing number and name: 84.042 TRIO – Student Support Services 84.047 TRIO – Upward Bound Award numbers and years: P047A171009, September 1, 2017 through August 31, 2022 P047A170820, September 1, 2017 through August 31, 2023 P042A200873, P042A201342, and P042A200859, September 1, 2020 through August 31, 2025 P047A221154 and P047A221160, September 1, 2022 through August 31, 2027 Federal Agency: U.S. Department of Education Compliance Requirements: Eligibility Questioned costs: $5,612 Name of contact persons: Kristina Winterstein, Associate Controller, District Business Services Anticipated completion date: June 30, 2024 The District is aware of the importance of maintaining effective internal control over federal awards and ensuring compliance with applicable federal regulations. The District will work with the TRIO project directors at each college to review and revise existing procedures to require an independent and knowledgeable employee review and approve student eligibility determinations prior to awarding program services to them. The District will enhance communication and training efforts to ensure that the TRIO project directors and all staff administering the TRIO programs understand all eligibility requirements and related district-wide policies and procedures. As of March 21, 2024, the questioned costs for the program have been resolved.