Corrective Action Plans

Browse how organizations respond to audit findings

Total CAPs
57,859
In database
Filtered Results
54,763
Matching current filters
Showing Page
164 of 2191
25 per page

Filters

Clear
Re: 2025-001 Filing and Accuracy of the SF-425 & 2025-002 Transaction Approvals The senior management team including the Executive Director Michele Craig, CFO Jill Hansen, and the Finance Committee of the Governing Board have reviewed and agree with the audit findings. Regarding the 2025-001 Filing ...
Re: 2025-001 Filing and Accuracy of the SF-425 & 2025-002 Transaction Approvals The senior management team including the Executive Director Michele Craig, CFO Jill Hansen, and the Finance Committee of the Governing Board have reviewed and agree with the audit findings. Regarding the 2025-001 Filing and Accuracy of the SF 425, in order to file the semi-annual SF 425 that was due on 1/30/25 for the period of 7/1/24-12/31/24 we needed to have closed accounting periods with accurate financial statements. When our CFO Jill Hansen began in early December 2024, the last month that had been closed was September 2024 due to the resignation of both the accounting tech and the CFO. It took several months to accurately close and update financial records. We now have a checklist of month-end tasks that ensures the generation of accurate and on time financial statements. These tasks and deadlines are incorporated in the fiscal calendar that will be reviewed with the Finance Committee each month. We successfully submitted the most recent semiannual SF 425 on time and will meet the next SF 425 deadline, October, 2026. The above corrective actions have been incorporated and this issue has been corrected.
The Authority will develop and implement a standardized fiscal year transition and grant charging process to ensure controls are in place for accurate and timely recording of grant eligible expenditures. As part of this process, the Authority will develop a verification checklist for all funding sou...
The Authority will develop and implement a standardized fiscal year transition and grant charging process to ensure controls are in place for accurate and timely recording of grant eligible expenditures. As part of this process, the Authority will develop a verification checklist for all funding source reclassification journal entries to ensure compliance prior to posting. This process will: - Identify all stakeholders responsible for year‑end grant reconciliation and reporting. - Establish a required review and approval process to be completed before any change in funding source or charging mode. - Update Accounting Policies and Procedures Manual to include guidelines to limit reclassification of expenditures incurred in prior fiscal years. - Set a formal annual cut-off date for Program Offices to request current year funding source reclassifications, allowing sufficient time for the Funds and Grants Management team to review and meet fiscal year‑end reporting deadlines. - Refine current monitoring mechanism for “yet‑to‑bill” transactions throughout the fiscal year for transferred transactions that originated in the general ledger to ensure all federal expenditures incurred within the period are reviewed and reported in accordance with the accrual basis of accounting. - Ensure the requirements for eligibility of expenses for Federal grants from 2 CFR 200.403 are enforced.
1. Finance Administration will revise P/I 9.6 to incorporate program office requirement to: - Complete SAM.gov training requirement. - Conduct a mandatory verification step requiring Confirmation in SAM.gov that all vendors and purchases are free of debarment or suspension prior to initiating any ag...
1. Finance Administration will revise P/I 9.6 to incorporate program office requirement to: - Complete SAM.gov training requirement. - Conduct a mandatory verification step requiring Confirmation in SAM.gov that all vendors and purchases are free of debarment or suspension prior to initiating any agreement - Perform quality assurance including review of contracts to verify entities are not debarred or suspended 2. Finance Administration will distribute the updated P/I to all Metro employees to ensure organization wide awareness and adherence. 3. Finance Administration will identify a tutorial video to serve as a required training.
2025-001: Late Return of Title IV Financial Aid - Student Financial Aid Cluster - Assistance Listing #s 84.007, 84.033, 84.063- Grant Period - Year Ended June 30, 2025 Condition Found During our Return of Title IV Fund testing, we noted that the College did not calculate or return Title IV Student F...
2025-001: Late Return of Title IV Financial Aid - Student Financial Aid Cluster - Assistance Listing #s 84.007, 84.033, 84.063- Grant Period - Year Ended June 30, 2025 Condition Found During our Return of Title IV Fund testing, we noted that the College did not calculate or return Title IV Student Financial Aid for two out of twenty-five students tested until after 45 days when the student ceased attendance. We consider the untimely calculation and Return of Title IV Student Financial Aid to be an instance of noncompliance relating to the Special Tests and Provisions Compliance Requirement. This is a repeat finding of prior year finding 2024-001. Corrective Action Plan In the first instance, the Return to Title IV (R2T4) calculation was completed timely; however, the associated disbursement was not processed within the required timeframe. Going forward, Title IV aid disbursements related to R2T4 calculations will be processed manually at the time the calculation is completed. The institution will no longer wait for regularly scheduled system disbursement dates in these circumstances. In the second instance, the student withdrew from the 8-week-1 courses but remained registered for the 8- week-2 courses; therefore, an R2T4 calculation was not initially completed. The student ultimately did not begin attendance in the 8-week-2 courses, and the 45-day timeframe elapsed. To prevent future occurrences, RLC will complete an R2T4 calculation at the time of withdrawal from the 8-week-1 courses and will reverse the calculation if the student subsequently attends the 8-week-2 courses. Responsible Person for Corrective Action Plan - ReAnne May, Director of Financial Aid Implementation Date of Corrective Action Plan - January 16, 2026
Finding: 2025-001 School Food Account - Net Cash Resources (ALN #10.553/10.555/10.559) Corrective Action Plan: The School District has begun taking action to address this issue, as follows: Equipment Improvement - School Food Service Director, Joe Kilmer, Food Service Manager, Ann Overhiser, and the...
Finding: 2025-001 School Food Account - Net Cash Resources (ALN #10.553/10.555/10.559) Corrective Action Plan: The School District has begun taking action to address this issue, as follows: Equipment Improvement - School Food Service Director, Joe Kilmer, Food Service Manager, Ann Overhiser, and the School Business Administrator have plans to improve and replace cafeteria equipment. The replacement plan will be completed in conjunction with the School District’s upcoming Capital Project. This work was originally expected to be included in a prior project but due to scheduling issues, is now included in the upcoming project which is expected to be completed byAugust 31, 2026. Retained Balance for Pending Settlements - Wages will increase into 2026 and beyond. The minimum wage in New York State is expected to continue to rise according to legislation. The rate will rise to $16.00 per hour by the end of 2025 and to $16.50 per hour by the end of 2026. Annual increases will be published by the Commissioner of Labor and based on a number of economic factors. Due to the critical labor shortage, the School District recently increased hourly wages for food service helpers and cooks in order to attract additional workers to maintain operations. Enhanced Meals - The Food Service Director and Food Service Manager continue to take steps to improve food options. They include making improvements to center of the plate options and improving local food options as well. In addition, the School District plans to spend a portion of the School Lunch excess cash on cafeteria equipment as a part of its upcoming Capital Project which is expected to be completed by August 31, 2026. Anticipated Correction Date: August 31, 2026 Contact Information: Kyle Bower Interim School Business Administrator Odessa - Montour Central School District 300 College Avenue Odessa, New York 14869
See PDF Page
See PDF Page
See PDF Page
See PDF Page
See PDF Page
See PDF Page
Responsible Person(s): Dale Batten, Deputy Commissioner Rehabilitative Services; Rob Perrine, Information Security Officer Corrective Action Planned: The DARS Information Security Office and the System/Data Owner will continue to remediate the audit findings noted in the IAD audit report on the case...
Responsible Person(s): Dale Batten, Deputy Commissioner Rehabilitative Services; Rob Perrine, Information Security Officer Corrective Action Planned: The DARS Information Security Office and the System/Data Owner will continue to remediate the audit findings noted in the IAD audit report on the case management system. In addition, the ISO and System/Data Owner will continue to meet quarterly with Internal Audit to review remediation progress, address implementation challenges, and ensure corrective actions are completed in a timely manner. Estimated Completion Date: 9/30/2026
Responsible Person(s): Chaye Neal-Jones, Director of Office of Enterprise Management Services; Eric Billings, Director of Grants Management Corrective Action Planned: Staff is working with DBHDS IT to ensure that ticketing workflow includes managerial approval. Additionally, system administrators ar...
Responsible Person(s): Chaye Neal-Jones, Director of Office of Enterprise Management Services; Eric Billings, Director of Grants Management Corrective Action Planned: Staff is working with DBHDS IT to ensure that ticketing workflow includes managerial approval. Additionally, system administrators are removing individuals from the system when they receive HR notification of their separation from the agency via email and the system automatically disables inactive accounts after 60 days. DBHDS is still working to develop a process for periodically reviewing the appropriateness of system users access and the activity of system administrators within the system. Estimated Completion Date: 7/1/2026
Responsible Person(s): Eric Billings, Director of Grants Management; Chaye Neal-Jones, Director of Office of Enterprise Management Services Corrective Action Planned: DBHDS identified that CSB subaward information was not being captured within the system's reports. Responsible staff are now entering...
Responsible Person(s): Eric Billings, Director of Grants Management; Chaye Neal-Jones, Director of Office of Enterprise Management Services Corrective Action Planned: DBHDS identified that CSB subaward information was not being captured within the system's reports. Responsible staff are now entering the executed date for CSB subawards which is being picked up by the report. Documents with an inception date of July 1, 2025, within the system have been updated to reflect the correct executed date. DBHDS staff are still working with the vendor to ensure that the report is working correctly. Estimated Completion Date: 4/1/2026
Responsible Person(s): Dan Lewis, Chief Technology Officer; Timothy Kelly, Innovation, Architecture and Governance Director Corrective Action Planned: This finding was marked as FOIA Exempt (FOIAE) and as a result, the State Comptroller has determined that the resulting corrective actions are FOIAE ...
Responsible Person(s): Dan Lewis, Chief Technology Officer; Timothy Kelly, Innovation, Architecture and Governance Director Corrective Action Planned: This finding was marked as FOIA Exempt (FOIAE) and as a result, the State Comptroller has determined that the resulting corrective actions are FOIAE under §2.2-3705.2 (9.) of the Code of Virginia. Federal awarding agencies and pass-through entities, please see the Appendix titled “Applicable Management Contacts for Findings and Questioned Costs” to request the corrective action planned from the applicable entity. Estimated Completion Date: 6/15/2026
Responsible Person(s): Kavansa Gardner, Business Program Manager Senior, Benefit Programs; David Carico, Business Operations Manager Corrective Action Planned: Below is the narrative for CR901 and CR902 Records Retention, including current production deployment timelines. CR901 establishes the datab...
Responsible Person(s): Kavansa Gardner, Business Program Manager Senior, Benefit Programs; David Carico, Business Operations Manager Corrective Action Planned: Below is the narrative for CR901 and CR902 Records Retention, including current production deployment timelines. CR901 establishes the database infrastructure required to support compliant records retention within case management system. This includes partition creation across 75 plus high volume tables to enable structured aging and controlled purge activity aligned to retention thresholds. Production Deployment Timeline; scheduled as part of the February 2026 technical release. This phase is foundational and will be completed before purge logic can safely execute. CR902 Retention Logic and controlled execution; CR902 operationalizes the records retention policy by implementing controlled purge jobs leveraging the partitioning framework established in CR901. This Change Request moves the solution from infrastructure readiness to active lifecycle management. Phase 1 Database partition creation (February 2026 production release schedule) Phase 2 Controlled purge implementation (March 2026 release schedule) Phase 3 Validation, audit confirmation, and reporting controls (April 2026 release schedule) Phase 4 Reoccurring operational retention cycles with documented runbooks (ongoing/living) Estimated Completion Date: 4/30/2026
Responsible Person(s): Kavansa Gardner, Business Program Manager Senior, Benefit Programs; Lunita Browder-Harris, Business Operation Specialist, Business Operations Corrective Action Planned: DSS has identified critical or conflicting roles in the management system. The roles in scope have the capab...
Responsible Person(s): Kavansa Gardner, Business Program Manager Senior, Benefit Programs; Lunita Browder-Harris, Business Operation Specialist, Business Operations Corrective Action Planned: DSS has identified critical or conflicting roles in the management system. The roles in scope have the capability to perform all actions within the system, including inputting applications, determining eligibility, and authorizing benefits. DSS is in the process of implementing a procedure for reviewing and revoking conflicting roles ands privileges for all localities. DSS will work with APA to ensure adequate separation of duties is implemented within the eligibility system. Estimated Completion Date: 6/30/2026
Responsible Person(s): Barry Davis, Information Security Officer; John Vosper, Assistant Director Information Security and Risk Management Corrective Action Planned: DSS has contracted with two vendors to perform external IT Audits over sensitive systems. DSS is able to completed between 25-35 IT au...
Responsible Person(s): Barry Davis, Information Security Officer; John Vosper, Assistant Director Information Security and Risk Management Corrective Action Planned: DSS has contracted with two vendors to perform external IT Audits over sensitive systems. DSS is able to completed between 25-35 IT audits out of their 89 sensitive systems per year. DSS expects all IT systems will be audited by the end of 2027. A set of 31 IT Audits will be completed March 30, 2026. Estimated Completion Date: 12/31/2027
Responsible Person(s): Dan Lewis, Chief Technology Officer; Timothy Kelly, Innovation, Architecture and Governance Director Corrective Action Planned: This finding was marked as FOIA Exempt (FOIAE) and as a result, the State Comptroller has determined that the resulting corrective actions are FOIAE ...
Responsible Person(s): Dan Lewis, Chief Technology Officer; Timothy Kelly, Innovation, Architecture and Governance Director Corrective Action Planned: This finding was marked as FOIA Exempt (FOIAE) and as a result, the State Comptroller has determined that the resulting corrective actions are FOIAE under §2.2-3705.2 (9.) of the Code of Virginia. Federal awarding agencies and pass-through entities, please see the Appendix titled “Applicable Management Contacts for Findings and Questioned Costs” to request the corrective action planned from the applicable entity. Estimated Completion Date: 5/29/2026
Responsible Person(s): Mike Jones, Chief Information Officer Corrective Action Planned: This finding was marked as FOIA Exempt (FOIAE) and as a result, the State Comptroller has determined that the resulting corrective actions are FOIAE under §2.2-3705.2 (9.) of the Code of Virginia. Federal awardin...
Responsible Person(s): Mike Jones, Chief Information Officer Corrective Action Planned: This finding was marked as FOIA Exempt (FOIAE) and as a result, the State Comptroller has determined that the resulting corrective actions are FOIAE under §2.2-3705.2 (9.) of the Code of Virginia. Federal awarding agencies and pass-through entities, please see the Appendix titled “Applicable Management Contacts for Findings and Questioned Costs” to request the corrective action planned from the applicable entity. Estimated Completion Date: 6/30/2026
Responsible Person(s): Barry Davis, Information Security Officer; Timothy Kelly, Innovation, Architecture and Governance Director; Steve McCauley, Assistant Director Information Security and Risk Management Corrective Action Planned: DSS Information Security and Risk Management team will ensure risk...
Responsible Person(s): Barry Davis, Information Security Officer; Timothy Kelly, Innovation, Architecture and Governance Director; Steve McCauley, Assistant Director Information Security and Risk Management Corrective Action Planned: DSS Information Security and Risk Management team will ensure risk and control assessments identify and evaluate IAM focused security controls. DSS will develop and define processes and practices to collect monitor and evaluate performance metrics to ensure IAM functions are following define agency service level agreements. DSS will identify different systems and classes for IAM functions. DSS will then create a process to ensure performance metrics are identified. DSS will then implement a procedure to monitor and evaluate the performance metrics. DSS has a documented separation and offboarding process published on its Fusion employee portal. This is a multi-step manual process. DSS is developing training for supervisors and managers to ensure that they know how to navigate through the process. In addition, DSS is developing manual and automated processes to ensure compliance with the process. Estimated Completion Date: 12/30/2026
Responsible Person(s): Dan Lewis, Chief Technology Officer; Timothy Kelly, Innovation, Architecture and Governance Director Corrective Action Planned: DSS is establishing the processes and supporting system resources to ensure that DSS has an effective and compliant change management process. These ...
Responsible Person(s): Dan Lewis, Chief Technology Officer; Timothy Kelly, Innovation, Architecture and Governance Director Corrective Action Planned: DSS is establishing the processes and supporting system resources to ensure that DSS has an effective and compliant change management process. These include: completion of migrating all application to a single repository which enables change tracking and version control in development projects; use of workflows in the system to enforce delivery of required artifacts prior to change submission; changes to the Change Advisory Board process, and post-change processes to validate meeting the acceptance criteria. Estimated Completion Date: 4/30/2026
Responsible Person(s): Dan Lewis, Chief Technology Officer; Timothy Kelly, Innovation, Architecture and Governance Director Corrective Action Planned: This finding was marked as FOIA Exempt (FOIAE) and as a result, the State Comptroller has determined that the resulting corrective actions are FOIAE ...
Responsible Person(s): Dan Lewis, Chief Technology Officer; Timothy Kelly, Innovation, Architecture and Governance Director Corrective Action Planned: This finding was marked as FOIA Exempt (FOIAE) and as a result, the State Comptroller has determined that the resulting corrective actions are FOIAE under §2.2-3705.2 (9.) of the Code of Virginia. Federal awarding agencies and pass-through entities, please see the Appendix titled “Applicable Management Contacts for Findings and Questioned Costs” to request the corrective action planned from the applicable entity. Estimated Completion Date: 3/9/2026
Responsible Person(s): Barry Davis, Information Security Officer; John Vosper, Assistant Director Information Security and Risk management Corrective Action Planned: This finding was marked as FOIA Exempt (FOIAE) and as a result, the State Comptroller has determined that the resulting corrective act...
Responsible Person(s): Barry Davis, Information Security Officer; John Vosper, Assistant Director Information Security and Risk management Corrective Action Planned: This finding was marked as FOIA Exempt (FOIAE) and as a result, the State Comptroller has determined that the resulting corrective actions are FOIAE under §2.2-3705.2 (9.) of the Code of Virginia. Federal awarding agencies and pass-through entities, please see the Appendix titled “Applicable Management Contacts for Findings and Questioned Costs” to request the corrective action planned from the applicable entity. Estimated Completion Date: 12/30/2028
Responsible Person(s): Barry Davis, Information Security Officer; John Vosper, Assistant Director Information Security and Risk Management; Steve McCauley, Assistant Director Information Security and Risk Management Corrective Action Planned: DSS Information Security and Risk Management is reconcili...
Responsible Person(s): Barry Davis, Information Security Officer; John Vosper, Assistant Director Information Security and Risk Management; Steve McCauley, Assistant Director Information Security and Risk Management Corrective Action Planned: DSS Information Security and Risk Management is reconciling the system to identify security roles for each sensitive system. Estimated Completion Date: 6/30/2026
Responsible Person(s): Dan Lewis, Chief Technology Officer; Timothy Kelly, Innovation, Architecture and Governance Director Corrective Action Planned: DSS will follow the direction of the IAG Team to improve compliance with the security standard. IAG has created a new roadmap for remediation of rela...
Responsible Person(s): Dan Lewis, Chief Technology Officer; Timothy Kelly, Innovation, Architecture and Governance Director Corrective Action Planned: DSS will follow the direction of the IAG Team to improve compliance with the security standard. IAG has created a new roadmap for remediation of related IT security and governance findings, and the IAG director is working with the CTO, CISO and TSD leadership on defining concrete plans for remediation of all related findings. The IAG director, the CTO and the TSD leadership continue to implement and refine the division-wide process to ensure sufficient resources are available and dedicated to prioritizing and implementing the planned IT governance structure changes. Roadmap review sessions are scheduled. Remediation working sessions are in process of being scheduled. Estimated Completion Date: 3/27/2026
Responsible Person(s): Steve Hanoka, Information Security Officer Corrective Action Planned: DMAS has started confirming the geographic location for sensitive data monthly and the vulnerability scans every 90 days for the one provider Medicaid management services IT Service provider. DMAS is taking ...
Responsible Person(s): Steve Hanoka, Information Security Officer Corrective Action Planned: DMAS has started confirming the geographic location for sensitive data monthly and the vulnerability scans every 90 days for the one provider Medicaid management services IT Service provider. DMAS is taking steps to ensure that this is completed for all of the service providers that are not under cloud oversight. Estimated Completion Date: 6/30/2026
Responsible Person(s): Kristy Cardwell, Program Analyst and Department of Benefit Programs Corrective Action Planned: Benefit Programs acknowledges the deficiencies identified in Findings 1–6 related to monitoring documentation, supervisory oversight, and quality assurance controls. While monitoring...
Responsible Person(s): Kristy Cardwell, Program Analyst and Department of Benefit Programs Corrective Action Planned: Benefit Programs acknowledges the deficiencies identified in Findings 1–6 related to monitoring documentation, supervisory oversight, and quality assurance controls. While monitoring activities were generally performed, documentation and verification controls were not consistently applied. The following corrective actions have been implemented or are in progress to strengthen compliance, oversight, and accountability. Finding 1 - Benefit Programs did not confirm that program consultants selected and documented sampling units appropriately. As a result, 3 out of 20 locality reviews (15%) lacked sufficient documentation of sampling units, and 1 out of 20 reviews (5%) did not include the required number of sampled cases. Response and Corrective Action: Benefit Programs have reinforced sampling requirements and documentation standards with all program consultants. A standardized sampling methodology guide and checklist have been implemented to ensure: -Proper selection of sample units in accordance with established policy; -Clear documentation of the sampling universe, methodology, documented circumstances where sample is less than expected in the final sample selection; and -Verification that the required number of cases is selected prior to initiating the review. Sub-Recipient Coordinator procedures have been strengthened to require documented confirmation of sampling adequacy before the monitoring review progresses to completion. Finding 2 - Benefit Programs did not confirm that program consultants uploaded all required monitoring records to the data repository. As a result, Benefit Programs could not provide complete documentation for 6 out of 20 locality reviews (30%). Response and Corrective Action: A standardized monitoring documentation checklist has been implemented to identify all required documents that must be uploaded to the designated data repository. Program consultants are now required to complete and certify the checklist at the conclusion of each review. Sub-Recipient Coordinator to confirm that all required documentation has been uploaded before the review is formally closed. Periodic quality assurance reviews will be conducted to ensure ongoing compliance. Finding 3 - Benefit Programs did not confirm that program consultants provided timely notification to localities for the monitoring review. As a result, Benefit Programs could not provide this documentation for 1 out of 20 locality reviews (5%). Response and Corrective Action: A standardized notification template and tracking log have been implemented to ensure consistent and timely communication with localities. Program consultants are required to retain notification correspondence in the monitoring file and upload documentation to the platform. Sub-Recipient Coordinator will verify that advance notification was issued in accordance with policy and properly documented prior to the commencement of the review. Finding 4 - Benefit Programs did not ensure that program consultants issued the final monitoring review report for 1 out of 20 locality reviews (5%) and did not confirm that 2 out of 20 locality review reports (10%) included all required elements. Response and Corrective Action: Benefit Programs has updated the final report template to clearly outline all required elements. The monitoring tracking spreadsheet will be updated to include the names of all reports to be uploaded to the platform. The spreadsheet tracks report completion and distribution timelines. Sub-Recipient Coordinator will review all final monitoring reports to ensure completeness, accuracy, and inclusion of all required components. The coordinator will work with monitoring staff to obtain all required documentation. Finding 5 - Benefit Programs could not provide reasonable assurance that subrecipients complied with award requirements for 5 out of 20 locality reviews (25%) because program consultants did not maintain complete sampling documentation and final locality review reports. Response and Corrective Action: To strengthen reasonable assurance over subrecipient compliance, Benefit Programs will reinforce the existing controls: -Mandatory use of standardized sampling and reporting templates; -Required Sub-Recipient Coordinator review confirming completeness of documentation; -Enhanced documentation retention procedures within the centralized repository; and -Periodic internal quality assurance reviews to validate that monitoring files are complete and support conclusions reached. These measures are designed to ensure sufficient, appropriate documentation exists to support compliance determinations. Finding 6 - Benefit Programs did not confirm that program consultants fully documented corrective actions. As a result, 5 out of 20 locality reviews (25%) did not have complete corrective action documentation. Response and Corrective Action: Benefit Programs will have a corrective action tracking tool to document: -Identified findings; -Required corrective actions; -Responsible parties; -Target completion dates; and -Evidence of remediation. Program consultants are required to upload supporting documentation demonstrating corrective action completion. Sub-Recipient Coordinator will verify the adequacy of corrective action documentation and work with monitoring staff to address needed information. Follow-up emails will be used to ensure timely resolution and documented verification. Estimated Completion Date: 7/1/2025
« 1 162 163 165 166 2191 »