Corrective Action Plans

TANF Youth Development Program (TANF YDP) operations transitioned from the Bureau of Workforce Development Administration (BWDA) to the Bureau of Workforce Partnerships and Operations (BWPO) in January 2023. Due to this transition, BWPO did not conduct onsite monitoring of the TANF YDP program in program year (PY) 2022. BWPO did begin onsite monitoring in program year 2023 on a limited basis as a pilot with 3 local areas in September of 2024. BWPO conducted expanded monitoring efforts for PY 2024 by aligning TANF YDP monitoring with the WIOA Common Measures Data Validation cycle (larger areas are monitored annually with smaller areas monitored on a 3-year rotating schedule). PYs are July 1st to June 30th. TANF YDP PY 2024 monitoring concluded by January 2026. BWPO provided written communication to local areas within 45 days post monitoring to issue results, concerns, recommendations, and corrective actions as needed. During PY 2025, July 1, 2025 to June 30, 2026, L&I will monitor all 22 subrecipients for both program and fiscal compliance to ensure that the goals and objectives of the subaward are achieved. This will be done in coordination between BWPO and BWDA. Monitoring will then be completed annually. Currently, BWDA does reconcile the TANF Youth Development Partnership Statement of Expenditures of Financial Awards for each of the subrecipients’ single audits, reviews all TANF findings related to the TANF YDP funds and ensures all single audits are received - issuing audit management determinations. The overall goal of monitoring activities is to ensure that TANF YDF funding is used for authorized purposes by subrecipients, in compliance with Federal statutes and regulations, and that the TANF YDP program is being implemented in accordance with current PA Dept. of Labor & Industry’s policies and procedures. BWPO in collaboration with BWDA plans to begin monitoring TANF YDP activities via enhanced desk review monitoring in the spring of 2026 for PY 2025. This effort will be ongoing and moving forward for every subsequent program year either onsite or by enhanced desk review monitoring. PY 2025 monitoring will be completed by 6/30/26 with results issued as a written communication within 45 days of the monitoring completion date. Anticipated Completion Date: 06/30/2026 Contact Name: Dorraine Rauch, Division Chief

PDA: PDA is creating mechanisms to fulfill the requirements for pass-through entities within 4 to 6 months after FAC acceptance date of the audit, which include: 1. Evaluation of single audit report submissions received from BAFM to determine program purpose acceptability by verifying, at a minimum, that all agency-funded programs are properly included on the applicable financial schedules; that findings affecting the agency contain sufficient information to facilitate a management decision; and that the subrecipient has submitted an adequate corrective action plan. 2. Issuance of management decisions relative to audit findings and crosscutting findings assigned to the agency for resolution, as required by 2 CFR §200.521. 3. To impose or coordinate the imposition of remedial action in accordance with 2 CFR Part 200.339 and Management Directive 325.08 Amended, Remedies for Recipient Noncompliance with Audit Requirements, when subrecipients fail to comply with the provisions of Subpart F. PDA has developed a SEFA reconciliation process that will ensure that the SEFA is accurate, allowing for major programs to be properly identified and subjected to audit. PDA is developing a procedure for all programs to follow for any entity that is in non-compliance with the audit requirements and is failing to comply with the provisions of Subpart F. Anticipated Completion Date: 06/30/2026 Contact Name: Nichole Nedinsky, Fiscal Management Specialist, PDA Audit Coordinator PDOA: 1. Strengthen written policies and procedures governing subrecipient monitoring and audit resolution. 2. Update the audit tracker to proactively ensure the six-month management decision due date is met. 3. Implement segregation of duties between reconciliation review and management decision issuance. 4. PDOA will develop and utilize a standardized SEFA Review Checklist. 5. Conduct annual Uniform Guidance training for fiscal staff. Anticipated Completion Date: 06/30/2026 Contact Names: Jason Kavulich, Secretary of Aging; Jennifer Beck, Fiscal Management Specialist & PDOA Audit Liaison PDE: Implemented 2/17/26: Audit Coordinator verifies finding status of all single audit packages uploaded to the PDE single audit SharePoint site. Implemented 7/1/25: PDE audit section has begun to enforce timely audit submission by using remedial action within its authority as granted by federal guidelines. Implemented 7/1/25: PDE has expanded the resources available through the use of the compliance office for audit finding review and resolution in an effort to resolve all audit findings timely. Anticipated Completion Date: Completed Contact Name: Clayton P. Carroll, II, Audit Coordinator PENNVEST: PENNVEST will maintain a comprehensive tracking list that contains all equivalency projects that have disbursed any funds during the audit period. All those projects will be reviewed and reconciled to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward, including the timely submission of the single audit to the FAC. Once received, PENNVEST will reconcile the SEFA to ensure the information is accurate. PENNVEST will complete the reconciliation within six months of the FAC’s acceptance of the audit report and respond to the subrecipient with any adverse findings. Anticipated Completion Date: Completed Contact Names: Steven Anspach, Dep. Exec. Dir.; Heather Brookmyer, Loan Service Officer; Robert Boos, Exec. Dir.

Program: AL 21.027 – COVID-19 – Coronavirus State and Local Fiscal Recovery Funds – Subrecipient Monitoring Corrective Action Plan: DNR will enhance subrecipient monitoring procedures to specifically include documented reviews of subrecipient procurement policies and procurement files to ensure compliance with applicable federal requirements and the subrecipient’s own written policies. DNR will revise subaward templates and procedures to ensure that all required federal award information and applicable terms and conditions, including closeout requirements, are consistently included in subaward agreements at the time of issuance. DNR will develop and implement formal written procedures for subrecipient Single Audit monitoring. DHHS will continue to improve subrecipient monitoring where necessary. NDCS will revise its policy to include a requirement for verifying subrecipient qualifications for federal funds. Additionally, NDCS will notify all subrecipients that proper payroll and benefit documentation must be submitted to ensure accurate cost allocation. NDCS will ensure that all required subaward documentation is provided to each subrecipient. This documentation will include: a. The subrecipient’s Unique Entity Identifier (UEI) b. Federal Award Identification Number (FAIN) c. Federal Award Date d. Federal award project description e. The name of the Federal agency, pass-through entity, and contact information for the awarding official of the pass-through entity f. Assistance Listings title and number g. A requirement that the subrecipient permit the pass-through entity and auditors to access the subrecipient’s records and financial statements h. Appropriate terms and conditions concerning closeout NDCS will incorporate these requirements into its subaward process to ensure compliance with federal regulations. Contact: Erv Portis, Shelby Mikulak, Heather Arnold, Jenise Trautman Anticipated Completion Date: June 30, 2026

Program: AL 93.575 – COVID-19 Child Care and Development Block Grant – Period of Performance Corrective Action Plan: N/A Contact: Heather Arnold Anticipated Completion Date: Complete

The Department will continue to follow the current Policy and Procedure related to the Single Audit reviews and has allocated an individual to review the Single Audits. This includes issuing a management decision letter if required, in accordance with the timeline established in federal guidance.

FINDING 2025-003 Finding Subject: Teacher and School Leader Incentive Grants – Subrecipient Monitoring Contact Person Responsible for Corrective Action: Chris Gearlds, Assistant Superintendent Contact Phone Number and Email Address: (317) 856-5265; cgearlds@decaturproud.org Views of Responsible Official: We concur with Audit Finding Description of Corrective Action Plan: The Teacher and School Leader Incentive Grant was completed during the audit period and the school district does not plan on receiving this award in the future. Therefore, further corrective action is not required and district officials will utilize this information to ensure compliance in other federal awards. Anticipated Completion Date: February 1, 2026

Audit Finding Number 2024-006 Audit Finding Title Subrecipient Monitoring Planned Corrective Action Effective September 2026, procedures were put in place for each subgrantee to complete an attestation and submit their internal or audited financials before we contract with them. Any findings or issues are documented along with the resulting resolution. BWHI has always maintained close contact with our subgrantees and monitored their performances with frequent meetings. This process will now be formally documented. Name(s) and title(s) of contact person(s) responsible for corrective action Kim Cockerham, Sr. Director of Finance and Accounting Zsanai Epps, Interim EVP Programs and Advocacy

Condition 1. On July 31, the newly developed pre-award risk assessment tool was rolled out to all subrecipients and ministries with oversight, effective FY2027. Conditions 2-3: On July 29, July 31 and August 5, 2026, training was conducted on Majuro and Ebeye to introduce new and enhanced tools to strengthen subrecipient monitoring. It covered the following topics: 1. Audit findings related to subrecipient arrangements. 2. Grants Management Manual with emphasis on its scope and the Management Decision Letter (MDL). 3. Unique Entity Identifier (UEI), which is mandatory. 4. Memorandum of Agreement and the significance of each section. 5. MOA circulation process. 6. Procurement Code 2023 7. Reporting and Required Supporting Documents: - Pre-award Risk Assessment - Site Visit Checklist - Enhanced SubGrant Forms and Review Checklist (SG1/Subgrant Objectives and Budget Proposal and SG2/Performance and Financial Evaluation) - SG Forms supporting documentation (salaries & wages, fuel purchase, food purchase, vehicle rental, housing allowance, travel, etc.) 8. Conflict of Interest In September 2026, officers from the Compliance and SOE Monitoring Unit will start going out to conduct the pre-award risk assessment. Results of the assessment will determine whether the entity can sign an MOA with the MOF or not as well as the entity's risk rating, which will determine the frequency of site visits to be conducted by Compliance beginning FY2027. Condition 4 Effective 3rd quarter of FY2025, all transactions charged to the Enewetak grant go through the national procurement and payment process.

1. Person Responsible: County Auditor-Controller 2. Corrective Action Plan: The County agrees with the finding and recommendation. The County has drafted policy and procedures for subrecipients. In addition, the County has drafted a subrecipient agreement template to identify subrecipients based on criteria in § 200.332. The County will provide a comprehensive training to program managers to implement the monitoring program and subrecipient agreement template. In addition, the County will include direction to project managers to review current awards to identify existing subrecipients that were not provided a subrecipient agreement with all of the required elements from CFR § 200.332. 3. Anticipated Implementation date: June 30, 2027

Finding Number 2024-018 Subject Heading (Financial) or AL no. and program name (Federal) 20.509 – Formula Grants for Rural Areas Planned Corrective Action Contract Template and Review Process Improvements: OMPT has updated and corrected the standard contract templates to ensure all required federal award information is accurate and consistently included. In addition, the contract agreement review process has been strengthened and formalized into a two-step review. Agreements are now reviewed by a supervisor and/or manager prior to submission to the division head for final signature. This enhanced review structure is designed to ensure the completeness and accuracy of grant information and to reduce the risk of errors in subrecipient agreements. For active subrecipient agreements identified as containing incorrect federal award information, OMPT will issue formal written notifications (via letter or email) to provide corrected grant details and ensure subrecipients have accurate information for compliance purposes. Subrecipient Monitoring and Single Audit Procedures: OMPT will continue implementation of enhanced subrecipient risk assessment procedures as part of its monitoring process. This includes formal documentation of risk assessments, as well as required inquiries with subrecipients to determine the appropriate audit type based on expected federal expenditures. Procedures related to Single Audit tracking and followup are being strengthened. The Single Audit Tracking Sheet will be updated monthly and reviewed for completeness and timeliness. Anticipated Completion Date 12/31/2026 Responsible Contact Person Eric Rose / Bobby Parkinson (OMPT)

Concur: · 8 instances where the Government was unable to obtain Quarterly Progress Reports. As a result of the audit finding and in accordance with grant requirement, a Governor's Authorized Representative (GAR) Memo is being implemented, requiring Subrecipients to submit Quarterly Progress Reports within 10 days of quarter end. All reports are reviewed and retained in a centralized location for documentation and audit compliance. · 8 instances where the Government was unable to obtain completion/inspection certificate. Project inspection/certification report(s) are now required for all payment request federal fund drawdowns. The reports must now be uploaded to the Enterprise Resource Planning System (ERP) and retained in centralized location for documentation and record keeping purposes. · 8 subrecipients with no supporting documentation that VITEMA verified that subrecipients expected to be audited as required by 2 CFR part 200, subpart F. The Program will annually notify subrecipients of their audit responsibilities, monitor compliance, obtain required audit reports, and maintain documentation in a centralized location for audit and recordkeeping purposes.

The Government concurs with the auditor’s findings and recommendations. Corrective action plan as follows: - Develop subrecipient monitoring policies (2 CFR 200.331–200.332) - Conduct risk assessments - Monitor financial and performance reports - Establish tracking system - Require follow-up on audit findings

To address this finding, OMB will strengthen its subrecipient monitoring controls and formalize procedures to ensure compliance with 2 CFR 200.303 and 2 CFR 200.332, including requirements related to identifying subawards, assessing subrecipient risk, documenting monitoring activities, following up on deficiencies, and maintaining evidence of supervisory review. OMB will also conduct periodic internal quality control reviews of subrecipient files to confirm that monitoring documentation is complete, timely, and consistent with federal requirements.

The Government concurs with the auditor’s findings and recommendations. DPNR’s subrecipient monitoring records and supporting documentation were maintained in multiple locations and were not consistently centralized in a manner that readily demonstrated compliance with Federal subrecipient monitoring requirements. In addition, DPNR did not maintain a comprehensive master listing of subrecipients that incorporated all information necessary to support risk assessments, monitoring activities, and audit requests. DPNR with the support of the federal agency’s consultant will implement a centralized electronic repository system to serve as the official recordkeeping location for all sub recipient supporting documentation. This repository will house all documents necessary to determine if a vendor is at high risk, if they are required to be audited and monitoring, including but not limited to: • A master listing of all subrecipients for each fiscal year; • Subaward agreements and any modifications; • Required subaward information pursuant to 2 CFR §200.331(a); • Subrecipient risk assessments and supporting documentation; • Financial and programmatic reports submitted by subrecipients; • Monitoring plans and monitoring reports; • Documentation of desk reviews and on-site monitoring, where applicable; • Audit reports, Single Audit reports, and management decisions; • Documentation of corrective actions and follow-up activities; and • Correspondence and any additional records necessary to demonstrate compliance with Federal requirements.

VIEWS OF RESPONSIBLE OFFICIALS ADSEF is committed to establishing a comprehensive subrecipient management framework. We are prioritizing the formalization of subaward agreement templates, the implementation of a rigorous risk-based monitoring program, and the institutionalization of standardized oversight procedures to ensure full compliance with all federal pass-through entity responsibilities. Action Steps: 1. Develop and implement a formal "Entity Classification Protocol" based on 2 CFR §200.331 to correctly identify subrecipients versus contractors for all existing and future TANF agreements. 2. Redesign all subaward templates to include the mandatory thirteen (13) elements required by 2 CFR §200.332(a), including FAIN, ALN, period of performance, and audit access clauses. 3. Implement a mandatory Subrecipient Risk Assessment tool to evaluate every subrecipient's fraud risk, financial management capacity, and history of audit findings before funding is disbursed. 4. Establish a monitoring protocol that includes mandatory reviews of financial and performance reports, verification of Single Audits (Subpart F), and scheduled on-site programmatic site visits. 5. Create a formal "Enforcement Policy" to manage subrecipient Non-Compliance, outlining the process for issuing management decisions on audit findings and implementing corrective action plans. 6. Launch an intensive training program for all program and procurement staff on the Uniform Guidance requirements for pass-through entities, focusing on proper identification, monitoring, and federal reporting accountability. IMPLEMENTATION DATE During Fiscal Year 2026-2027 RESPONSIBLE PERSON Blanca M. Medina Díaz Administrator Gerhil Medina Baez Auxiliary Administrator Operational ServicesVIEWS OF RESPONSIBLE OFFICIALS ADSEF is committed to establishing a comprehensive subrecipient management framework. We are prioritizing the formalization of subaward agreement templates, the implementation of a rigorous risk-based monitoring program, and the institutionalization of standardized oversight procedures to ensure full compliance with all federal pass-through entity responsibilities. Action Steps: 1. Develop and implement a formal "Entity Classification Protocol" based on 2 CFR §200.331 to correctly identify subrecipients versus contractors for all existing and future TANF agreements. 2. Redesign all subaward templates to include the mandatory thirteen (13) elements required by 2 CFR §200.332(a), including FAIN, ALN, period of performance, and audit access clauses. 3. Implement a mandatory Subrecipient Risk Assessment tool to evaluate every subrecipient's fraud risk, financial management capacity, and history of audit findings before funding is disbursed. 4. Establish a monitoring protocol that includes mandatory reviews of financial and performance reports, verification of Single Audits (Subpart F), and scheduled on-site programmatic site visits. 5. Create a formal "Enforcement Policy" to manage subrecipient Non-Compliance, outlining the process for issuing management decisions on audit findings and implementing corrective action plans. 6. Launch an intensive training program for all program and procurement staff on the Uniform Guidance requirements for pass-through entities, focusing on proper identification, monitoring, and federal reporting accountability. IMPLEMENTATION DATE During Fiscal Year 2026-2027 RESPONSIBLE PERSON Blanca M. Medina Díaz Administrator Gerhil Medina Baez Auxiliary Administrator Operational Services

Finding 2024-008 - Uniform Guidance Subrecipient Monitoring - Significant Deficiency/Noncompliance Condition/Context: As part of our follow-up on previous audit findings and based on our current year testing, it was noted that the County is not formally documenting its monitoring activities over its subrecipients in compliance with the Uniform Guidance. Corrective Action: The Office of Financial Management will implement a process to document all subrecipient activities in compliance with the Uniform Guidance. Responsible for Implementing Corrective Action: Office of Financial Management Anticipated Completion Date: We anticipate this to be completed in coordination with the 2026 audit.

Assistance listing numbers and program names 97.024 Emergency Management Performance Grants Agency: Department of Emergency and Military Affairs (DEMA) Name of contact person and title: Keith Tagaban, Audit Supervisor Anticipated completion date: September 18, 2026 Agency’s Response: Concur The Department of Emergency and Military Affairs (DEMA) will maintain complete, accurate, and auditable documentation to support all federal award expenditures, matching contributions, and financial reporting in accordance with 2 CFR Part 200 and applicable award terms and conditions, with records retained for a minimum of three years following submission of the final Federal Financial Report (FFR). DEMA will ensure all FFRs are reviewed for accuracy, completeness, and compliance prior to submission and will promptly correct any identified discrepancies in coordination with the federal awarding agency. The Department will implement and enforce written policies and procedures governing reimbursement requests, financial reporting, matching requirements, and record retention, including management review to ensure costs reported are allowable, allocable, reasonable, and adequately supported, and will maintain sufficient staffing and oversight to sustain ongoing compliance.

Assistance listing numbers and program names 97.024 Emergency Management Performance Grants Agency: Department of Emergency and Military Affairs (DEMA) Name of contact person and title: Keith Tagaban, Audit Supervisor Anticipated completion date: September 18, 2026 Agency’s Response: Concur The Department of Emergency and Military Affairs will maintain required documentation to support payroll costs charged to the federal program and ensure compliance with award requirements. Internal Audit will review FY2024 payroll charges for allowability and adequate support in coordination with the State Finance Office, the Emergency Management Grants Administration Office, and State Human Resources Office. Unallowable costs, if identified, will be resolved through reimbursement adjustments or repayment, as appropriate. Payroll documentation policies will be updated, and training will be provided to ensure required records are retained for the prescribed retention period.

Assistance listing numbers and program names 84.010 Title I Grants to Local Education Agencies 84.367 Supporting Effective Instruction state Grants, Title II (formerly Improving Teacher Quality State Grants) Agency: Arizona Department of Education (ADE) Name of contact person and title: Sarka J. White, Deputy Associate Superintendent Anticipated completion date: December 2027 Agency’s Response: Concur Monitoring of CMO We will update protocols and implement an annual monitoring process specifically for charter schools with CMO relationships by integrating defined procedures to evaluate additional conflicts of interest, related party transactions, and segregation of duties concerns, while assigning a programmatic risk label in addition to the one assessed by Grants Management. To ensure accurate identification and appropriate separation of responsibilities, Title I and Title II will incorporate procedures for detecting CMO associations within both the grant review process and programmatic monitoring functions, supported by coordinated information sharing across relevant departments. Updated policies will also include requirements for disclosure of organizational associations and embed these indicators into the LEA level risk framework that determines monitoring frequency and representation based on assessed risk. Checks and balances will include programmatic follow-up on these disclosures prior to review of funding applications and or any assistance provided. Title I and Title II will revise monitoring tools to include CMO specific review steps, provide targeted staff training on identifying CMO relationships and apply enhanced oversight procedures, and carry out funding and program approval activities and monitoring activities. These can be in the form of financial and performance report reviews, Grant approvals, Data submissions, technical assistance, and onsite or virtual visits, in alignment with the strengthened risk-based model. Completion will be demonstrated through finalized procedures, documented staff training, and the application of revised monitoring methods during the next annual grant and monitoring cycle. Monitoring – Programmatic – Grant Monitoring We have revised LEA monitoring policies and procedures to incorporate coordinated processes between departments for clear identification of charter schools with CMO relationships, require now disclosure of organizational associations, and strengthen oversight of conflicts of interest, related party transactions, and segregation of duties risks. Updated procedures also define a structured, risk-based monitoring framework that assigns LEA monitoring levels, representation, and monitoring frequency based on assessed risk, independent of CMO affiliation, while integrating new indicators into monitoring tools to support consistency through equal representation and ensuring each LEA is treated as an individual LEA without respect to associations. Staff have and will continue to receive targeted training on the revised requirements, and completion will be demonstrated through the approval and publication of updated procedures, documented staff training, and application of the enhanced risk-based monitoring approach during the next LEA monitoring cycle.

Assistance listing number and program name: 21.027 COVID-19 Coronavirus State and Local Fiscal Recovery Funds Agency: Governor’s Office of Strategic Planning and Budgeting (OSPB) Arizona Department of Housing (ADOH) Arizona Department of Water Resources (ADWR) Arizona Office of Tourism (AOT) Industrial Commission of Arizona (ICA) Name of contact persons and titles: Ben Henderson, Director Governor’s Office of Strategic Planning & Budgeting Keon Montgomery, ADOH Assistant Deputy Director of Programs Will Palmisano, ADWR Finance and Administration Assistant Director Mary-Ellen Kane, AOT Assistant Deputy Director Sylvia Simpson, ICA Chief Financial Officer Anticipated completion date: See below Agency’s response: Concur OSPB anticipated completion date: April 2027 As indicated by the auditors, OSPB has demonstrated compliance with subrecipient monitoring requirements in FY24. The audit report limits OSBP’s inclusion in this finding to the questioned costs ($1,623,846) identified by OSPB through its subrecipient monitoring. However, the identification of questioned costs is not evidence of a deficiency in OSPB’s subrecipient monitoring; rather, the opposite, it demonstrates that OSPB has sound internal controls and an effective subrecipient monitoring system in place. Accordingly, OSPB will continue with the existing comprehensive subrecipient monitoring framework as outlined below: ● On-going Grantee Support - The Office provides a variety of subrecipient support including technical assistance, Communities of Practice(COP), and regular status check meetings. ● Training - Office staff facilitate ongoing training and provide resources and guides to improve understanding of compliance requirements and provide tools to support proper grants management. ● Financial Report-Reimbursement Requests—The Office reviews the grantee's financial reports to ensure costs align with the approved budget, program objectives, and federal cost principles. ● Performance Reports—The Office reviews the submission of programmatic reports to track progress on grant goals. ● Single Audit Reports—The Office confirms any required subrecipient Single Audits, reviews a copy of the most recent Single Audit Reporting Package (SARP), issues any necessary management decisions, and conducts follow-up monitoring of Corrective Action Plans. ● Risk Assessment (RA)—The Office conducts a Risk Assessment (RA) of grantees when applying for grants to inform the grant award decision and possible grantee oversight or restrictions. Additionally, the Office conducts an annual RA of any grantee currently awarded funding. ● Monitoring Reviews - The Office utilizes the RA results to prioritize high risk grantees to be reviewed through a desk or on-site monitoring. Medium risk grantees will receive additional support and will be referred to our Compliance and Reporting team for further review if additional concerns arise. The Office has implemented all past recommendations and OSPB is committed to continuing these ongoing efforts to actively reduce the risks of waste, fraud, and abuse of federal dollars through our subrecipient monitoring process. OSPB will continue Coronavirus State and Local Fiscal Recovery Funds subrecipient monitoring and follow-up through the grant closeout in April 2027. ADOH anticipated completion date: March 2026 The ADOH has begun to develop and implement formal, documented subrecipient risk assessment procedures to ensure monitoring activities are aligned with assessed levels of risk. This will include establishing standardized criteria to evaluate subrecipient risk and documenting risk determinations. These enhancements are also consistent with recommendations identified in the State’s most recent Sunset Audit, and the Agency has already begun implementation of these procedures. The ADOH will update policies and procedures accordingly and provide staff training to ensure consistent application. These actions will strengthen internal controls and ensure compliance with applicable subrecipient monitoring requirements. The ADOH will implement procedures to strengthen subrecipient monitoring related to Single Audit requirements. This will include verifying submission to the Federal Audit Clearinghouse, obtaining and retaining copies of all applicable Single Audit reports, and maintaining a tracking mechanism to document receipt and review. The ADOH will also establish procedures to review audit findings and ensure appropriate follow-up, including verification of subrecipient corrective actions, and will support consistent implementation. ADWR anticipated completion date: December 31, 2026 Before approving an application from an eligible subrecipient for federal grant monies, ADWR as a passthrough entity, will conduct a risk assessment of the subrecipient as part of the initial award approval. ADWR will create a standardized checklist that will enable ADWR to make an informed decision regarding what monitoring tasks will be necessary consistent with 2 CFR 200.332. Once an eligible subrecipient applies for federal grant monies, ADWR will require the applicant subrecipient to fill out the checklist and establish a monitoring program consistent with the results. ADWR will develop staff training and a standard work to implement this program. If the award spans more than one year, the results of any applicable single audits will inform ADWR if changes to the monitoring program for a particular subrecipient are required. As part of a program standard work, ADWR will send a questionnaire to subrecipients regarding federal award expenditures and remind them of any single audit requirements as well as expected completion date of any applicable audits. Failure of any prescribed monitoring items will trigger award review and possible reclassification of risk, additional monitoring, and/or withholding of pending reimbursements until the subrecipient remedies an issue. AOT anticipated completion date: March 20, 2026 AOT has established a process to verify that subrecipients who receive a grant award greater than $750,000.00 are able to provide a current single audit. AOT will provide sub recipients additional written documentation identifying required completion dates and any additional instructions required. Processes and procedures have been developed and implemented. The program has concluded and no further action will be taken. AOT has established a process to ensure the required backup documentation provided by the subrecipient is acceptable for reimbursement. AOT will continue to communicate with OSPB on updates to policy to ensure the processes and procedures are being implemented within federal and state funding guidelines. The program has concluded and no further action will be taken. ICA anticipated completion date: December 31, 2025 The ICA concurs with the finding regarding subrecipient monitoring. The ICA’s involvement as a pass-through entity for the SLFRF program was a unique, one-time occurrence designed to facilitate the equitable distribution of funds to Arizona fire districts based on a methodology approved by the Office of Strategic Planning and Budgeting (OSPB). The ICA does not expect to serve as a pass-through entity for federal funds in the future. While the ICA implemented rigorous validation steps, including the thorough review of payroll records, receipts, and attestations prior to any reimbursement, the agency recognizes that formal risk assessments and subaward agreements were not executed at the onset of the program. The ICA became aware of these specific documentation deficiencies through the audit process after the program had already ended on December 31, 2025. The ICA will address the underlying control deficiency by updating its internal grant management procedures to ensure in the event the agency was to act as a pass-through entity again, formal risk assessments and standardized subaward agreements would be completed by the subrecipient as part of the requirements to receive federal monies. Additionally, the ICA has since obtained 100% of the required single audit reports from the applicable subrecipients and has verified that all necessary corrective actions for unrelated findings have been addressed.

Assistance listing numbers and program names: 21.023 COVID-19 Emergency Rental Assistance Program 21.027 COVID-19 Coronavirus State and Local Fiscal Recovery Funds Agency: Department of Economic Security (DES) Name of contact person and title: Molly Bright, Community Services Division Assistant Director Anticipated completion date: June 30, 2026 Agency’s Response: Concur The Department of Economic Security will address the audit recommendations as follows: 1. Ensure benefit payments are for allowable costs paid to or on behalf of eligible program applicants. The Division will review and confirm that benefits payments paid to or on behalf of eligible program applicants are allowable expenditures of the federal funding being disbursed. 2. Update existing policies and procedures to include a post-review of the benefits subsystem’s automated review of eligibility requirements, such as verifying the income thresholds and geographic location aligned with the Division’s written policies and procedures, and supported by required documentation. The Division should correct any inaccurate eligibility determinations identified during the post-review. Emergency Rental Assistance Program policies and procedures require validation of eligibility based upon substantiating applicant documentation, including household income and geographic location. The Division will update Division policy to include a post-review process to identify and correct any errors or discrepancies. 3. Allocate sufficient staffing resources to perform a thorough evaluation of program benefits applications and provide training on eligibility requirements and allowable benefit payments. The Division will allocate sufficient staffing resources to evaluate program benefits applications and provide training on eligibility requirements and allowable benefit payments. 4. Work with the federal agencies to resolve the $64,131 in program funds that were spent in violation of federal regulations, policies and procedures, and may need to be returned to the federal agencies. The Department of Economic Security will address the audit recommendations as follows: 1. Ensure benefit payments are for allowable costs paid to or on behalf of eligible program applicants. The Division will review and confirm that benefits payments paid to or on behalf of eligible program applicants are allowable expenditures of the federal funding being disbursed. 2. Update existing policies and procedures to include a post-review of the benefits subsystem’s automated review of eligibility requirements, such as verifying the income thresholds and geographic location aligned with the Division’s written policies and procedures, and supported by required documentation. The Division should correct any inaccurate eligibility determinations identified during the post-review. Emergency Rental Assistance Program policies and procedures require validation of eligibility based upon substantiating applicant documentation, including household income and geographic location. The Division will update Division policy to include a post-review process to identify and correct any errors or discrepancies. 3. Allocate sufficient staffing resources to perform a thorough evaluation of program benefits applications and provide training on eligibility requirements and allowable benefit payments. The Division will allocate sufficient staffing resources to evaluate program benefits applications and provide training on eligibility requirements and allowable benefit payments. 4. Work with the federal agencies to resolve the $64,131 in program funds that were spent in violation of federal regulations, policies and procedures, and may need to be returned to the federal agencies. The Division will coordinate with applicable federal agencies to resolve these unallowable costs.

Assistance listing number and program name: 17.258 WIOA Adult Program 17.259 WIOA Youth Activities 17.278 WIOA Dislocated Worker Formula Grants Agency: Department of Economic Security (DES) Office of Economic Opportunity (OEO) Name of contact persons and titles: David Almaraz, DES DERS Business Administrator Stephen Sifuentes, OEO Finance Administrator Senior Anticipated completion date: See below Agency’s Response: Concur DES Anticipated completion date: December 31, 2026 The Department will address the audit recommendations by amending its ISA subaward with the Arizona Office of Economic Opportunity. The Department will also adjust its subrecipient monitoring schedule, procedures and offer training and assistance on conference-related requirements to the Arizona Office of Economic Opportunity. OEO Anticipated completion date: June 30, 2027 The Office of Economic Opportunity (OEO) acknowledges the finding regarding the use of WIOA Dislocated Worker Formula Grant funds for conference meals and promotional items. To address these concerns, OEO has undertaken proactive measures to strengthen internal controls, enhance oversight, and improve compliance with federal cost principles. As such, OEO will utilize these findings to strengthen its existing system, address any identified deficiencies, and continue to enhance fiscal management. Through these corrective actions, the OEO is committed to full compliance and the effective stewardship of federal funds. 1. Ensure Summit costs charged to the WIOA federal program are appropriate, necessary, and managed to minimize charges to the federal award. The OEO acknowledges the auditors’ findings regarding the management of Summit costs charged to the Workforce Innovation and Opportunity Act (WIOA) federal program. OEO is committed to ensuring that all expenditures are appropriate, necessary, and managed with the highest level of fiscal responsibility to ensure charges are necessary and allowable to the federal award. To address this finding, OEO will collaborate closely with the Arizona Department of Economic Security (ADES) to develop and implement comprehensive formal policies and procedures governing the State Workforce Development Board and WIOA funded events including Summit expenditures. Our joint efforts will focus on implementing a documented review and approval process to ensure costs charged to the federal award are supported by documentation and evaluated in accordance with 2 CFR §§ 200.403. As part of this corrective action, the process will integrate cost-containment measures into the planning and approval of the events budget planning phase. This will include requiring staff to assess whether proposed costs are necessary, reasonable, allocable and limited to helping the workforce development system achieve the purpose of the Workforce Innovation and Opportunity Act (WIOA). OEO and ADES will conduct working sessions to develop, implement, and monitor these protocols, with the goal of finalizing a standardized procedure for all WIOA-funded event expenditures. This approach ensures consistency across agencies and establishes clear oversight to prevent recurrence. 2. Develop and implement written procedures, including a standardized review process, to ensure that costs charged to the WIOA federal program are allowable prior to requesting reimbursement from DES. The OEO recognizes the importance of verifying the allowability of expenditures prior to the reimbursement phase. We concur that a standardized documented review process is necessary to maintain fiscal integrity and compliance of WIOA federal program funding and federal regulations. OEO, in partnership with the ADES, will develop and formalize written internal control procedures designed to vet all costs before they are submitted to ADES for reimbursement. The proposed standardized review process will align with existing practices for monitoring and expending federal funds as described under WIOA for the State Workforce Development Board and will include: ● Pre-submission verification: Implementation of an internal review checklist based on 2 CFR 200 Subpart E Cost Principles and applicable State policy. This will ensure that every line item is: ○ Allowable under both WIOA statutory requirements and federal cost principles. ○ Allocable to the specific federal award in proportion to the benefits received. ○ Compliant with the State of Arizona Accounting Manual ○ Documented with sufficient supporting evidence (pictures, invoices, receipts, and justifications) to withstand audit scrutiny. ● Standardized approval workflow: Establishment of a clear designated approval framework. ● Policy Integration: These procedures will be codified into an OEO Fiscal Manual, providing staff with a clear roadmap for processing WIOA-related expenditures. OEO will coordinate with ADES technical assistance teams to ensure our internal review templates align with ADES’s appropriate reimbursement systems. This collaborative design phase will ensure that once a request reaches ADES, it has already undergone a vetting process, thereby reducing errors. 3. Work with federal grantor and/or DES to resolve the $90,015 of questioned costs associated with the 2024 Summit and any subsequently held Summits. OEO will collaborate with the ADES, the primary grant recipient, to establish the most appropriate course of action for resolving any unallowable expenditures. Initially, OEO will work with ADES to precisely define the actual allowable amount based on programmatic cost allowability, which may require consultation with the original federal grantor, for final clarification on disputed cost. Subsequent steps for resolution will be guided by ADES’s direction and the requirements of the federal grantor.

Finding Number: 2024-049 Finding Name: Inadequate Review of Subrecipient Single Audit Reports Finding Condition(s): The Illinois Department on Aging (IDOA) did not adequately document review of single audit reports received from its subrecipients for the Aging Cluster program on a timely basis. Name of Contact Person(s): • Teri McKeon, Deputy Chief Financial Officer / Bureau Chief Business Services - Illinois Department on Aging, Division of Financial Administration • Sarah Harris, Chief Financial Officer - Illinois Department on Aging, Division of Financial Administration Corrective Action(s): The IDOA does not currently issue management decision letters but is working with the Grants Accountability & Transparency Unit to retroactively complete management decision letters once staff is fully hired and trained. As the IDOA brings the management decision letters and reconciliations up to date, it will allow for a determination of whether additional staff for these functions is necessary to maintain compliance. Proposed Completion Date: October 31, 2026

Finding Number: 2024-043 Finding Name: Inadequate Review of Subrecipient Single Audit Reports Finding Condition(s): The Illinois Criminal Justice Information Authority (ICJIA) did not adequately review single audit reports received from its subrecipients for the Crime Victim Assistance Program (CVA) program on a timely basis. Name of Contact Person(s): • Hemant Modi, Chief Fiscal Officer – Illinois Criminal Justice Information Authority, Office of Fiscal Management • Karen Crawford, Chief Grantee Auditor – Illinois Criminal Justice Information Authority, Office of Fiscal Management Corrective Action(s): ICJIA is in the process of hiring a full-time staff person to focus on the State’s Grant Accountability and Transparency Act (GATA) requirements over ICJIA’s reviews of its subrecipients’ single audit reports. Proposed Completion Date: July 1, 2026

Finding Number: 2024-002 Finding Name: Inadequate Monitoring of Subrecipient Single Audit Reviews Finding Condition(s): The State of Illinois did not establish adequate controls to monitor the completion and documentation of the review of single audit reports for its subrecipients of the Special Supplemental Nutrition Program for Women, Infants, and Children (WIC), the Child and Adult Care Food Program (CACFP), the Crime Victims Assistance Program (CVA), the Workforce Innovation and Opportunity Act (WIOA) Cluster, the Highway and Planning Construction (Highway), the Coronavirus State and Local Fiscal Recovery Funds (SLFRF), the Title I Grants to Local Education Agencies (Title I), the Special Education Cluster (IDEA), the Twenty-First Century Community Learning Centers (Twenty-First Century), the Supporting Effective Instruction State Grants (SEISG), the Education Stabilization Funds (ESF), the Aging Cluster (Aging), the Epidemiology and Laboratory Capacity for Infectious Diseases (ELC), the Temporary Assistance for Needy Families (TANF), the Child Support Services (CSS), the Low-Income Home Energy Assistance Program (LIHEAP), the Child Care and Development Fund (CCDF) Cluster, the Social Services Block Grant (SSBG), the Block Grants for Prevention and Treatment of Substance Abuse (SAPT), and the Homeland Security Grant Program (Homeland Security) programs in the State's Grant Accountability and Transparency Act (GATA) Audit Report Review Management System (ARRMS). Name of Contact Person(s): Keyria Rodgers, Grant Accountability and Transparency Unit Director – Illinois Governor’s Office of Management and Budget Corrective Action(s): The Grant Accountability and Transparency Unit (GATU) provides a centralized, uniform process and a system to which State grant-making agencies are required to adhere throughout the lifecycle of the grant. Beginning November 2025, the Illinois Governor’s Office of Management and Budget (GOMB) sends a monthly analysis to agency Chief Accountability Officers (CAOs) detailing incomplete documentation of reviews within ARRMS. GOMB also provides monthly reminders of the importance of documenting the completeness of the reviews within our regular occurring CAO meetings and Subject Matter Expert (SME) meetings. Lastly, GOMB increased direct technical support by contacting CAOs to address questions, offered individualized live assistance, and provided a live demonstration during the February 2026 ARRMS meeting on how to generate and upload Management Decision Letters (MDLs) to ensure the system is updated by agencies and accurate as to the completeness of the agencies’ report reviews, letter issuances, and desk reviews. Proposed Completion Date: April 30, 2026