Findings Citing § 200.1

Finding 2024-013 – Noncompliance with Reporting Requirements Over Federal Grant Coronavirus State and Local Fiscal Recovery Funds (Repeat Finding – 2022-013, 2023-013) PASS-THROUGH GRANTOR: Direct Grant FEDERAL AGENCY: U.S. Department of Treasury ASSISTANCE LISTING: 21.027 FEDERAL PROGRAM NAME: Coronavirus State and Local Fiscal Recovery Funds FEDERAL AWARD YEAR: 2021 CONTROL CATEGORY: Reporting QUESTIONED COSTS: $-0- Condition: The County has not established internal controls to ensure the correct expenditure category is used for reporting payments to the grant administrative contractor. The quarterly reports improperly classified payments totaling $29,578 to a contractor as a ‘Revenue Replacement’ expense instead of using the ‘Administrative’ expense category. Also, the quarterly reports improperly classified payments totaling $513,944 for the Resurrection House as a ‘Revenue Replacement’ expense instead of using the ‘Negative Economic Impact’ expense category as stated in the agreement with the Board of County Commissioners. This entity was also not reflected as a Beneficiary in the quarterly reports. Further, subrecipient agreements for the following pass-through entities were signed and approved by the Board of County Commissioners; however, the entities were not reported as subrecipients in the quarterly reports: • Town of Rush Springs • Grady County Rural Water #6 • Grady County Rural Water #7 • City of Chickasha • City of Minco Additionally, the expense category listed in the quarterly reports differs from the expense category listed in the subrecipient agreements for the following entities: • City of Chickasha • City of Minco Cause of Condition: Policies and procedures have not been designed and implemented to ensure federal expenditures are made in accordance with federal compliance requirements. Effect of Condition: This condition could result in noncompliance to grant requirements. Recommendation: OSAI recommends the County gain an understanding of the requirements for this program and implement internal controls to ensure compliance with these requirements. Management Response: Chairman of the Board of County Commissioners: The Board of County Commissioners will take measures to ensure future compliance with all requirements of federal grants. Criteria: Accountability and stewardship should be overall goals in management’s accounting of federal funds. Internal controls should be designed to monitor compliance with laws and regulations pertaining to grant contracts. Title 2 CFR § 200.303(a) Internal Controls reads (a) reads as follows: The non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Controls Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Compliance and Reporting Guidance, State and Local Fiscal Recovery Funds (10. Reporting.) reads as follows: All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for compiling and reporting accurate, compliant financial data, in accordance with appropriate accounting standards and principles. In addition, where appropriate, your organization needs to establish controls to ensure completion and timely submission of all mandatory performance and/or compliance reporting. Further, 2 CFR § 200.329 Monitoring and Reporting Program Performance (c)(1) reads as follows: The non-Federal entity must submit performance reports at the interval required by the Federal awarding agency or pass-through entity to best inform improvements in program outcomes and productivity. Intervals must be no less frequent than annually nor more frequent than quarterly except in unusual circumstances, for example where more frequent reporting is necessary for the effective monitoring of the Federal award or could significantly affect program outcomes. Reports submitted annually by the non-Federal entity and/or pass-through entity must be due no later than 90 calendar days after the reporting period. Reports submitted quarterly or semiannually must be due no later than 30 calendar days after the reporting period. Alternatively, the Federal awarding agency or pass-through entity may require annual reports before the anniversary dates of multiple year Federal awards. The final performance report submitted by the non-Federal entity and/or pass-through entity must be due no later than 120 calendar days after the period of performance end date. A subrecipient must submit to the pass-through entity, no later than 90 calendar days after the period of performance end date, all final performance reports as required by the terms and conditions of the Federal award. See also § 200.344. If a justified request is submitted by a non-Federal entity, the Federal agency may extend the due date for any performance report.

Criteria or specific requirement: Per 2 CFR section 200.303(a), the Department must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Title 2 – Grants and Agreements. Subtitle A – Office of Management and Budget Guidance for Grants and Agreements. Chapter II – Office of Management and Budget Guidance. Part 200 – Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards. Subpart D – Post Federal Award Requirements. §200.332 Requirements for pass-through entities (2 CFR 200.332): All pass-through entities must: (a) Verify that the subrecipient is not excluded or disqualified in accordance with §180.300. Verification methods are provided in §180.300, which include confirming in SAM.gov that a potential subrecipient is not suspended, debarred, or otherwise excluded from receiving Federal funds. (b) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the following information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. 1) Federal award identification. a) Subrecipient name (which must match the name associated with its unique entity identifier); b) Subrecipient’s unique entity identifier; c) Federal Award Identification Number (FAIN); d) Federal Award Date (see the definition of Federal award date in § 200.1 of this part) of award to the recipient by the Federal agency; e) Subaward Period of Performance Start and End Date; f) Subaward Budget Period Start and End Date; g) Amount of Federal Funds Obligated by this action by the pass-through entity to the subrecipient; h) Total Amount of Federal Funds Obligated to the subrecipient by the pass-through entity including the current financial obligation; i) Total Amount of the Federal Award committed to the subrecipient by the pass-through entity; j) Federal award project description, as required to be responsive to the Federal Funding Accountability and Transparency Act (FFATA); k) Name of Federal awarding agency, pass-through entity, and contact information for awarding official of the Pass-through entity; l) Assistance Listings number and Title; the pass-through entity must identify the dollar amount made available under each Federal award and the Assistance Listings Number at time of disbursement; m) Identification of whether the award is R&D; and n) Indirect cost rate for the Federal award (including if the de minimis rate is charged) per §200.414. (c) Evaluate each subrecipient’s fraud risk and risk of noncompliance with a subaward to determine the appropriate subrecipient monitoring described in paragraphs (f) of this section. When evaluating a subrecipient’s risk, a passthrough entity should consider the following: 1) The subrecipient’s prior experience with the same or similar subawards: 2) The results of previous audits. This includes considering whether or not the subrecipient receives a Single Audit in accordance with Subpart F and the extent to which the same or similar subawards have been audited as a major program; 3) Whether the subrecipient has new personnel or new or substantially changed systems; and 4) The extent and results of Federal agency monitoring (for example, if the subrecipient also receives Federal awards directly from the Federal agency). Condition: Public Health established a formal risk assessment process over its subrecipients of federal awards by which to determine the frequency and extent of subrecipient monitoring to be performed, however the process was established after the period under audit and applied prospectively. In addition, Public Health used a Department Allocation Letter (DAL) for the COVID-19 program instead of an agreement or contract for the subaward to subrecipients. Certain required information for the subaward federal award information such as Assistance Listings number and Title and Federal Award Identification Number (FAIN) were not clearly identified in the DAL. Questioned costs: None Context: See “Condition.” Cause: Procedures to ensure that all relevant information is included in the grant agreements and risk assessments are performed were not in place at the time of the agreements which resulted in the oversight. Effect: By not properly evaluating the risk of noncompliance, Public Health may inadvertently award grant funds to subrecipients who lack the necessary mechanisms or understanding to comply with federal statutes. This increases the likelihood of noncompliance arising during the performance of the grant-funded activities. Furthermore, failure to provide the necessary documentation to subrecipients may result in misuse or misreporting of funding. Repeat Finding: This was reported in the previous year as finding 2023-009. Recommendation: Public Health should ensure every subaward includes all requirements imposed on the subrecipient so that the federal award is used in accordance with Federal statutes, regulations and the terms and conditions of the federal award. Views of responsible officials: Management’s response is reported in “Management’s Response and Corrective Action Plan” included in a separate section at the end of this report.

Federal Agency: United States Department of Education Federal Program: Rehabilitation Services Vocational Rehabilitation Grants to States (84.126) Federal Award Number: H126A220047(SED) Federal Award Year: 2024 State Agency: State Education Department Reference: 2024-003 Criteria Period of Performance Under section 111(a)(1) of the Rehabilitation Act, the Department pays to each state each federal fiscal year an amount equal to the federal share of the cost of providing VR services and administering the VR program. Consistent with the definition of “period of performance” at 2 CFR section 200.1 and the requirements governing information that must be contained in a GAN at 2 CFR section 200.211, the VR GAN specifies the beginning and end dates for each VR grant award. Therefore, state VR agencies may incur obligations or make expenditures under a grant award if they are incurred during the period of performance for that award. Any obligations or expenditures incurred outside of that period of performance would need to be paid with funds available from a different VR grant award. Internal controls Lastly, 2 CFR 200.303(a) states the non-federal entity must establish and maintain effective internal control over the federal award that provides reasonable assurance that the non-federal entity is managing the federal award in compliance with federal statutes, regulations, and the terms and conditions of the federal award. These internal controls should be in compliance with guidance in "Standards for Internal Control in the Federal Government" issued by the Comptroller General of the United States or the "Internal Control Integrated Framework", issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition The New York State Education Department (SED) did not maintain complete data along with the supporting documentation to ensure compliance over the period of performance requirements for the VR program. A sample of 40 transactions was selected from SED records. For each case, an invoice, pay period, and/or manual journal entries were tested to verify the data reported in the NYGR0302 report. It was also checked to ensure that the disbursement was properly reviewed, approved, and that the selected amount met the requirement of an allowable activity incurred during the period of performance and liquidated within the required time period. During our review of fiscal year 2024 transactions, we identified that 5 out of the 40 sampled transactions occurred outside the designated period of performance. The grant award period ended on September 30, 2023, with a liquidation period extending 120 days beyond that date, until January 28, 2024. Specifically, for grant number H126A220047, these 5 transactions were incurred in either October or December 2023, which is after the designated period of performance. The review process performed by SED did not detect these transactions were outside the period of performance. Cause The condition related to a deficiency in the operation of the review process not occurring at a precision necessary to identify missing information during the review that is required to be in compliance with the grant’s period of performance. Possible Asserted Effect The identified issue of a transaction occurring outside the period of performance and being liquidated beyond the required liquidation period results in questioned costs of the VR program administered by SED, may result in financial penalties, reduced future federal funding, and potential repayment of misused federal funds. Questioned Costs $12,332 (representing the 5 transactions found to have occurred outside the specified period of performance. The population amounted to $4,448,032, of which forty, totaling $2,081,429, were selected for test work.) Statistical Sampling The sample was not intended to be, and was not, a statistically valid sample. Recommendation We recommend SED implement a new control mechanism for reviewing funds before distribution. This control should include a pre-distribution review process with a dedicated team or staff verifying the period of performance for each VR grant award, ensuring all obligations and expenditures fall within the specified dates. Additionally, an automated system or manual control is recommended to be developed or enhanced to flag any transactions outside the period of performance or liquidation period.

Federal Agency: United States Department of Education Federal Program: Rehabilitation Services Vocational Rehabilitation Grants to States (84.126) Federal Award Number: H126A220047(SED) Federal Award Year: 2024 State Agency: State Education Department Reference: 2024-003 Criteria Period of Performance Under section 111(a)(1) of the Rehabilitation Act, the Department pays to each state each federal fiscal year an amount equal to the federal share of the cost of providing VR services and administering the VR program. Consistent with the definition of “period of performance” at 2 CFR section 200.1 and the requirements governing information that must be contained in a GAN at 2 CFR section 200.211, the VR GAN specifies the beginning and end dates for each VR grant award. Therefore, state VR agencies may incur obligations or make expenditures under a grant award if they are incurred during the period of performance for that award. Any obligations or expenditures incurred outside of that period of performance would need to be paid with funds available from a different VR grant award. Internal controls Lastly, 2 CFR 200.303(a) states the non-federal entity must establish and maintain effective internal control over the federal award that provides reasonable assurance that the non-federal entity is managing the federal award in compliance with federal statutes, regulations, and the terms and conditions of the federal award. These internal controls should be in compliance with guidance in "Standards for Internal Control in the Federal Government" issued by the Comptroller General of the United States or the "Internal Control Integrated Framework", issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition The New York State Education Department (SED) did not maintain complete data along with the supporting documentation to ensure compliance over the period of performance requirements for the VR program. A sample of 40 transactions was selected from SED records. For each case, an invoice, pay period, and/or manual journal entries were tested to verify the data reported in the NYGR0302 report. It was also checked to ensure that the disbursement was properly reviewed, approved, and that the selected amount met the requirement of an allowable activity incurred during the period of performance and liquidated within the required time period. During our review of fiscal year 2024 transactions, we identified that 5 out of the 40 sampled transactions occurred outside the designated period of performance. The grant award period ended on September 30, 2023, with a liquidation period extending 120 days beyond that date, until January 28, 2024. Specifically, for grant number H126A220047, these 5 transactions were incurred in either October or December 2023, which is after the designated period of performance. The review process performed by SED did not detect these transactions were outside the period of performance. Cause The condition related to a deficiency in the operation of the review process not occurring at a precision necessary to identify missing information during the review that is required to be in compliance with the grant’s period of performance. Possible Asserted Effect The identified issue of a transaction occurring outside the period of performance and being liquidated beyond the required liquidation period results in questioned costs of the VR program administered by SED, may result in financial penalties, reduced future federal funding, and potential repayment of misused federal funds. Questioned Costs $12,332 (representing the 5 transactions found to have occurred outside the specified period of performance. The population amounted to $4,448,032, of which forty, totaling $2,081,429, were selected for test work.) Statistical Sampling The sample was not intended to be, and was not, a statistically valid sample. Recommendation We recommend SED implement a new control mechanism for reviewing funds before distribution. This control should include a pre-distribution review process with a dedicated team or staff verifying the period of performance for each VR grant award, ensuring all obligations and expenditures fall within the specified dates. Additionally, an automated system or manual control is recommended to be developed or enhanced to flag any transactions outside the period of performance or liquidation period.

FINDING 2023-002 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): SLFRP2971 Compliance Requirement: Reporting Audit Findings: Material Weakness, Other Matters Condition and Context Recipients are required to submit quarterly or annually Project and Expenditure (P&E) reports to the U.S. Department of the Treasury (Treasury). The reporting periods, as well as the respective due dates are based upon type of recipient and its population, as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. The County was classified as a county with a population below 250,000 residents that was allocated less than $10 million in State and Local Fiscal Recovery Funds funding. As such, the P&E report, covering the period April 1, 2022 to March 31, 2023, was required to be submitted to the Treasury by April 30, 2023. The subsequent annual reports are to cover one year from April 1 to March 31 and must be submitted to the Treasury by April 30 of each year. INDIANA STATE BOARD OF ACCOUNTS 15 RIPLEY COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) The County submitted the P&E report by April 30, 2023, as required; however, a single employee prepared and submitted the P&E report without a review or oversight process in place to prevent, or detect and correct, errors. As a result, the report included projects with current period obligations and cumulative obligations totaling $3,319,955 that had not yet been obligated by the end of the reporting period. The lack of internal controls and noncompliance was a systemic issue throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 31 CFR 35.4(c) states in part: "Reporting and requests for other information. During the period of performance, recipients shall provide to the Secretary periodic reports providing detailed accounting of the uses of funds. . . ." Coronavirus State and Local Fiscal Recovery Funds Compliance and Reporting Guidance, page 10 states in part: ". . . 10. Reporting. All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for compiling and reporting accurate, compliant financial data, in accordance with appropriate accounting standards and principles. . . ." Cause A proper system of internal controls, including policies and procedures, was not designed or implemented by management of the County to prevent and detect errors on the P&E report prior to submission. Effect Without the proper implementation of an effectively designed system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As such, the County did not accurately report current period obligations and cumulative obligations when filing the P&E report for the period April 1, 2022 to March 31, 2023. Noncompliance with the provisions of federal regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the County. INDIANA STATE BOARD OF ACCOUNTS 16 RIPLEY COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the County design and implement a proper system of internal controls, including policies and procedures that would provide segregation of duties to ensure appropriate reviews, approvals, and oversight of federal reports are taking place. We also recommended the development of policies and procedures to ensure the County provides the Treasury with complete and accurate information for the P&E report. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-003 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): FY2023 Compliance Requirement: Reporting Audit Finding: Significant Deficiency Condition and Context Recipients are required to submit quarterly or annually Project and Expenditure (P&E) reports to the U.S. Department of the Treasury (Treasury). The reporting periods, as well as the respective due dates, are based upon type of recipient and its population, as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. The Town was classified as a metropolitan town with a population below 250,000 residents that received an allocation of less than $10 million in COVID-19 - Coronavirus State and Local Fiscal Recovery Funds (SLFRF). As such, the initial P&E report, covering the period from March 3, 2021 to March 31, 2022, was required to be submitted to the Treasury by April 30, 2022. The subsequent annual reports are to cover one calendar year and must be submitted to the Treasury by April 30 each year. The Town submitted one P&E report during the audit period as required; however, there were no internal controls in place that would likely be effective in preventing, or detecting and correcting, noncompliance related to the P&E report. The Clerk-Treasurer prepared and submitted the report without an oversight or review process. The lack of internal controls and noncompliance were systematic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." INDIANA STATE BOARD OF ACCOUNTS 20 TOWN OF BROWNSBURG SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Coronavirus State and Local Fiscal Recovery Funds Compliance and Reporting Guidance, page 10, states in part: ". . . 10. Reporting. All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for compiling and reporting accurate, compliant financial data, in accordance with appropriate accounting standards and principles. . . ." 31 CFR 35.4(c) states in part: "Reporting and requests for other information. During the period of performance, recipients shall provide to the Secretary periodic reports providing detailed accounting of the uses of funds, . . ." Cause The Town did not implement an effectively designed system of internal controls over reporting. There was no indication of internal controls in place over Reporting. Effect Without the proper implementation of an effectively designed system of internal controls over Reporting, the Town cannot ensure that the reports submitted are materially accurate and correct. If there was a proper implementation of an effectively designed system of internal controls over Reporting, the Town would be able to detect any errors prior to submission. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the Town design and implement a proper system of internal controls, including policies and procedures to ensure that the Town provides the Treasury with complete and accurate information for the P&E report. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-002 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): FY 2023 Compliance Requirement: Reporting Audit Findings: Material Weakness, Modified Opinion Repeat Finding This is a repeat finding from the immediately prior audit report. The prior audit finding number was 2022-004. Condition and Context The County had not properly designated or implemented a system of internal controls, which would include appropriate segregation of duties that would likely be effective in preventing, or detecting and correcting, noncompliance. A single employee prepared and submitted reports without a documented review or oversight process in place to prevent, or detect and correct, errors. Recipients are required to submit quarterly or annual Project and Expenditure (P&E) reports to the U.S. Department of the Treasury (Treasury). The reporting periods, as well as the respective due dates, are based upon the type of recipient and its population as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. The County was classified as a metropolitan county with a population below 250,000 residents that received an allocation of more than $10 million in State and Local Fiscal Recovery Funds (SLFRF). As such, the initial P&E report covering three calendar quarters from March 3, 2021 to December 31, 2021, was required to be submitted to the Treasury by January 31, 2022. The subsequent quarterly reports are to cover one calendar quarter and must be submitted to the Treasury by the last day of the month following the end of the period covered. INDIANA STATE BOARD OF ACCOUNTS 18 BOONE COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) The County submitted three P&E reports during the audit period. No report was submitted for the period of October 1, 2022 to December 31, 2022, although there was activity during this time period. For the three reports submitted, all activity for the reporting period was not included, and the reports were not fairly presented. Errors identified included the following: Quarter 1 report (January 1, 2023 to March 31, 2023)  Total Cumulative Obligations and Total Cumulative Expenditures were understated by $399,741.  Current Period Obligations and Current Period Expenditures were understated by $58,730. Quarter 2 report (April 1, 2023 to June 30, 2023)  Total Cumulative Obligations and Current Period Expenditures were understated by $968,137.  Current Period Obligations and Current Period Expenditures were understated by $558,396. Quarter 3 report (July 1, 2023 to September 30, 2023)  Total Cumulative Obligations and Total Cumulative Expenditures were understated by $1,325,566.  Current Period Obligations and Current Period Expenditures were understated by $357,429. The lack of internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The Non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 31 CFR 35.4(c) states in part: "Reporting and requests for other information. During the period of performance, recipients shall provide to the Secretary periodic reports providing detailed accounting of the uses of funds, . . ." INDIANA STATE BOARD OF ACCOUNTS 19 BOONE COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Coronavirus State and Local Fiscal Recovery Funds Compliance and Reporting Guidance, page 10, states in part: ". . . 10. Reporting. All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for compiling and reporting accurate, compliant financial data, in accordance with appropriate accounting standards and principles. . . ." Cause A proper system of internal controls over the P&E reports was not designed by management of the County. The County was unable to provide documentation that a proper review of the P&E reports showing a reconciliation between amounts reported and amounts expended from federal funds was done prior to submission of the report. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the County's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the County cannot ensure reports are filed and that filed reports accurately report their SLFRF activity. As such, the County's SLFRF obligations and expenditures were not appropriately reported to the Treasury. In addition to not meeting the SLFRF reporting requirements, this increases the likelihood that the public will not have access to transparent and accurate information regarding expenditures of federal awards. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the County. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the County design and implement a proper system of internal controls to ensure that all reports are filed with the Treasury. Additionally, management should develop policies and procedures to ensure that information provided to the Treasury is complete and accurate. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-003 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Subrecipient Monitoring Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): FY 2023 Compliance Requirement: Subrecipient Monitoring Audit Findings: Material Weakness, Modified Opinion Repeat Finding This is a repeat finding from the immediately prior audit report. The prior audit finding number was 2022-005. Condition and Context The County received a total State and Local Fiscal Recovery Funds (SLFRF) allocation of $13,177,707. During the audit period, the County provided subawards of SLFRF funds to other entities. As a pass-through entity, the County must:  Identify the award and the applicable requirements to each subrecipient.  Evaluate each subrecipient's risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward.  Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for an authorized purpose, complies with the terms and conditions of the subaward, and achieves performance goals. Subawards, totaling $290,000, were provided to two different entities. Both subrecipient agreements associated with the subawards were selected for testing. For the two agreements tested, the following information was incomplete or missing:  The federal award identification number (FAIN).  The federal award date of award to the recipient by the federal agency.  The name of the federal awarding agency, pass-through entity (auditee), and contact information for awarding official of the pass-through entity (auditee).  The Assistance Listings Number and Title; the pass-through entity must identify the dollar amount made available under each federal award and the Assistance Listings Number at time of disbursement. Furthermore, the County did not have an evaluation of the subrecipients' risk of noncompliance or monitoring activities demonstrating compliance with the subrecipient monitoring requirement. The County did not request any financial or audit documentation from the subrecipients. The lack of internal controls and noncompliance were systemic issues throughout the audit period. INDIANA STATE BOARD OF ACCOUNTS 21 BOONE COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.331(a) states: "Subrecipients. A subaward is for the purpose of carrying out a portion of a Federal award and creates a Federal assistance relationship with the subrecipient. See definition for Subaward in § 200.1 of this part. Characteristics which support the classification of the non-Federal entity as a subrecipient include when the non-Federal entity: (1) Determines who is eligible to receive what Federal assistance; (2) Has its performance measured in relation to whether objectives of a Federal program were met; (3) Has responsibility for programmatic decision-making; (4) Is responsible for adherence to applicable Federal program requirements specified in the Federal award; and (5) In accordance with its agreement, uses the Federal funds to carry out a program for a public purpose specified in authorizing statute, as opposed to providing goods or services for the benefit of the pass-through entity." 2 CFR 200.332 states in part: "All pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the following information at the time of the subaward . . . (1) Federal award identification. (i) Subrecipient name (which must match the name associated with its unique entity identifier); (ii) Subrecipient's unique entity identifier; (iii) Federal Award Identification Number (FAIN); (iv) Federal Award Date (see the definition of Federal award date in § 200.1 of this part) of award to the recipient by the Federal agency; INDIANA STATE BOARD OF ACCOUNTS 22 BOONE COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (v) Subaward Period of Performance Start and End Date; (vi) Subaward Budget Period Start and End Date; (vii) Amount of Federal Funds Obligated by this action by the pass-through entity to the subrecipient; (viii) Total Amount of Federal Funds Obligated to the subrecipient by the passthrough entity including the current financial obligation; (ix) Total Amount of the Federal Award committed to the subrecipient by the passthrough entity; (x) Federal award project description, as required to be responsive to the Federal Funding Accountability and Transparency Act (FFATA); (xi) Name of Federal awarding agency, pass-through entity, and contact information for awarding official of the Pass-through entity; (xii) Assistance Listings number and Title; the pass-through entity must identify the dollar amount made available under each Federal award and the Assistance Listings Number at time of disbursement; (xiii) Identification of whether the award is R&D; and (xiv) Indirect cost rate for the Federal award (including if the de minimis rate is charged) per § 200.414. (2) All requirements imposed by the pass-through entity on the subrecipient so that the Federal award is used in accordance with Federal statutes, regulations and the terms and conditions of the Federal award; (3) Any additional requirements that the pass-through entity imposes on the subrecipient in order for the pass-through entity to meet its own responsibility to the Federal awarding agency including identification of any required financial and performance reports; (4) (i) An approved federally recognized indirect cost rate negotiated between the subrecipient and the Federal Government. If no approved rate exists, the passthrough entity must determine the appropriate rate in collaboration with the subrecipient, which is either: (A) The negotiated indirect cost rate between the pass-through entity and the subrecipient; which can be based on a prior negotiated rate between a different PTE and the same subrecipient. If basing the rate on a previously negotiated rate, the pass-through entity is not required to collect information justifying this rate, but may elect to do so; (B) The de minimis indirect cost rate. INDIANA STATE BOARD OF ACCOUNTS 23 BOONE COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (ii) The pass-through entity must not require use of a de minimis indirect cost rate if the subrecipient has a Federally approved rate. Subrecipients can elect to use the cost allocation method to account for indirect costs in accordance with § 200.405(d). (5) A requirement that the subrecipient permit the pass-through entity and auditors to have access to the subrecipient's records and financial statements as necessary for the pass-through entity to meet the requirements of this part; and (6) Appropriate terms and conditions concerning closeout of the subaward. (b) Evaluate each subrecipient's risk of noncompliance with Federal statues, regulations, and the terms and conditions of the subaward for purposes of determined the appropriate subrecipient monitoring . . . (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. (3) Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by § 200.521. (4) The pass-through entity is responsible for resolving audit findings specifically related to the subaward and not responsible for resolving crosscutting findings. . . ." Cause The system of internal controls as established by the management of the County was not properly designed nor implemented. The County was unable to provide documentation that monitoring procedures were in place over subrecipients. Effect Without the proper implementation of an effectively designed system of internal controls, the County cannot be sure subrecipients are provided an adequate subaward agreement, with all required elements and are adequately monitored. As such, subaward agreements entered into by the County did not include all the required elements. In addition, the County did not properly monitor the non-profit to ensure proper spending of the federal funds. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the County. INDIANA STATE BOARD OF ACCOUNTS 24 BOONE COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the County design and implement a proper system of internal controls and develop policies and procedures to ensure subrecipients are provided with an adequate subaward agreement and monitored as appropriate. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-004 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Procurement and Suspension and Debarment Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): FY2023 Compliance Requirement: Procurement and Suspension and Debarment Audit Findings: Material Weakness, Modified Opinion Repeat Finding This is a repeat finding from the immediately prior audit report for suspension and debarment. The prior audit finding number was 2022-003. Condition and Context Procurement - Policy The County did not have a County Council approved procurement policy that would reflect applicable state laws and regulations, including procedures to avoid acquisition of unnecessary or duplicative items and procedures to ensure that all solicitations incorporate a clear and accurate description of the technical requirements for the material, product, or service to be procured. Procurement - Small Purchases Federal regulations allow for informal procurement methods when the value of the procurement for property or services does not exceed the simplified acquisition threshold, which is set at $250,000 unless a lower, more restrictive threshold is set by a nonfederal entity. As Indiana Code has set a more restrictive threshold of $150,000, informal procurement methods are permitted when the value of the procurement does not exceed $150,000. This informal process allows for methods other than the formal bid process. The informal process is divided between two methods based on thresholds. Micro-purchases, typically for those purchases $50,000 or under, and small purchase procedures for those purchases above the micro-purchase threshold, but below the simplified acquisition threshold. Micro-purchases may be awarded without soliciting competitive price rate quotations. If small purchase procedures are used, then price or rate quotations must be obtained from an adequate number of qualified sources. INDIANA STATE BOARD OF ACCOUNTS 25 BOONE COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) The County had five vendors that qualified for testing under small purchase procurement requirements (vendors paid $10,000-$150,000). Of the two chosen for testing, one was awarded a contract without the County obtaining quotes. The contract awarded was $31,000 for engineering services related to drain construction. The lack of effective internal controls and noncompliance was isolated to the small purchase identified above. Suspension and Debarment Prior to entering into subawards and covered transactions with State and Local Fiscal Recovery Funds (SLFRF), recipients are required to verify that such contractors and subrecipients are not suspended, debarred, or otherwise excluded. "Covered transactions" include, but are not limited to, contracts for goods and services awarded under a nonprocurement transaction (i.e., grant agreement) that are expected to equal or exceed $25,000. The verification is to be done by checking the Excluded Parties List System (EPLS), collecting a certification from that person, or adding a clause or condition to the covered transaction with that person. Due to the U.S. Department of the Treasury's (Treasury) determination that the revenue loss eligible use category does not give rise to subawards, the County was only required to comply with suspension and debarment requirements related to covered transactions. Upon inquiry of the County, in order to review the procedures in place for verifying that an entity with which it plans to enter into a covered transaction is not suspended, debarred, or otherwise excluded, the County explained they were aware of the suspension and debarment requirements related to the SLFRF awards; however, the County did not retain documentation of SAMs.gov checks nor was a clause always included in a contract. A population of ten covered transactions for goods or services, totaling $2,371,047, that equaled or exceeded $25,000 paid from SLFRF funds during the audit period was identified. A sample of three transactions, totaling $1,473,295, was selected for testing. For each of the three transactions, the County did not verify the vendors' suspension and debarment status prior to payment. Due to the number and magnitude of exceptions identified, per auditor judgment, we concluded it would not be appropriate to expand the sample size or perform any additional audit procedures. The lack of internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." INDIANA STATE BOARD OF ACCOUNTS 26 BOONE COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) 2 CFR 200.318 states: "(a) The non-Federal entity must have and use documented procurement procedures, consistent with State, local, and tribal laws and regulations and the standards of this section, for the acquisition of property or services required under a Federal award or subaward. The non-Federal entity's documented procurement procedures must conform to the procurement standards identified in §§ 200.317 through 200.327. . . . (i) The non-Federal entity must maintain records sufficient to detail the history of procurement. These records will include, but are not necessarily limited to, the following: Rationale for the method of procurement, selection of contract type, contractor selection or rejection, and the basis for the contract price. . . ." 2 CFR 200.320 states in part: "The non-Federal entity must have and use documented procurement procedures, consistent with the standards of this section and §§ 200.317, 200.318, and 200.319 for any of the following methods of procurement used for the acquisition of property or services required under a Federal award or sub-award. (a) Informal procurement methods. When the value of the procurement for property or services under a Federal award does not exceed the simplified acquisition threshold (SAT), as defined in § 200.1, or a lower threshold established by a non-Federal entity, formal procurement methods are not required. The non-Federal entity may use informal procurement methods to expedite the completion of its transactions and minimize the associated administrative burden and cost. The informal methods used for procurement of property or services at or below the SAT include: . . . (2) Small purchases — (i) Small purchase procedures. The acquisition of property or services, the aggregate dollar amount of which is higher than the micro-purchase threshold but does not exceed the simplified acquisition threshold. If small purchase procedures are used, price or rate quotations must be obtained from an adequate number of qualified sources as determined appropriate by the non-Federal entity. . . ." 2 CFR 200.214 states: "Non-federal entities are subject to the non-procurement debarment and suspension regulations implementing Executive Orders 12549 and 12689, 2 CFR part 180. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are de-barred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities." 31 CFR 19.300 states: "When you enter into a covered transaction with another person at the next lower tier, you must verify that the person with whom you intend to do business is not excluded or disqualified. You do this by: (a) Checking the EPLS; or (b) Collecting a certification from that person if allowed by this rule; or INDIANA STATE BOARD OF ACCOUNTS 27 BOONE COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (c) Adding a clause or condition to the covered transaction with that person." Part 4 of the Treasury's Compliance and Reporting Guidance states in part: ". . . recipients are expected to have procurement policies and procedures in place that comply with the procurement standards outlined in the Uniform Guidance . . ." Cause A proper system of internal controls was not designed by the management of the County. The County was unable to provide documentation to demonstrate it checked SAM.gov to verify that contractors and vendors were not suspended or debarred. The County was also unable to provide documentation explaining the rationale behind decisions to offer contracts without obtaining an adequate number of bids or quotes. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the County's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, one small purchase did not have an adequate number of quotes. In addition, vendors to whom payments equal to or in excess of $25,000 were not verified to be not suspended, debarred, or otherwise excluded. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the County. Questioned Costs There were no questioned costs identified. Recommendation We recommended the County establish documented procurement procedures consistent with state and local laws for the acquisition of property or services required under a federal award or subaward as outlined in the code of federal regulations. In addition, we recommended the County adhere to the procurement policies and obtain required quotes and bids or adequately document a sole source situation. Finally, we recommended that the County strengthen its system of internal controls to ensure that all vendors that are paid $25,000 or more, all or in part with federal funds, are not suspended or debarred from participating in federal programs before entering into any covered transactions. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-002 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): IN0387 Compliance Requirement: Reporting Audit Findings: Material Weakness, Modified Opinion Condition and Context Recipients are required quarterly or annually to submit Project and Expenditure (P&E) reports to the U.S. Department of the Treasury (Treasury). The reporting periods, as well as the respective due dates, are based upon type of recipient and its population, as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. The City was classified as a city with a population below 250,000 residents that received an allocation of less than $10 million in State and Local Fiscal Recovery Funds. As such, the P&E report, covering the period from March 3, 2022 to March 31, 2023, was required to be submitted to the Treasury by April 30, 2023. The P&E report was prepared by one employee without an oversight or review process in place to ensure accuracy. The P&E report submitted was not mathematically accurate or complete. Per Resolution 2022-1028, approved on December 12, 2022, the City obligated funds for six separate projects, totaling $2,257,927. However, the P&E report submitted on April 18, 2023, only included one project, resulting in an understatement of total obligations of $1,807,927. Additionally, for the one project submitted, the key line items of "Current Period Expenditures," "Total Cumulative Expenditures," and "Current Period Obligations" as reported on the P&E report did not agree to the City's financial ledger. Errors were as follows:  The "Current Period Expenditures" and "Total Cumulative Expenditures" were overstated by $68,609.  "Current Period Obligations" were understated by $381,391. The lack of internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." INDIANA STATE BOARD OF ACCOUNTS 16 CITY OF PLYMOUTH SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Coronavirus State and Local Fiscal Recovery Funds Compliance and Reporting Guidance, page 10, states in part: ". . . 10. Reporting. All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for compiling and reporting accurate, compliant financial data, in accordance with appropriate accounting standards and principles. . . ." 31 CFR 35.4(c) states in part: "Reporting and requests for other information. During the period of performance, recipients shall provide to the Secretary periodic reports providing detailed accounting of the uses of funds." Cause The City did not have procedures in place to verify that the information contained within the P&E report accurately reflected the City's expenditures and obligations prior to, or in a timely manner following, submission. Effect Without the proper implementation of an effectively designed system of internal controls, the City cannot ensure that P&E reports are materially accurate and correct. The P&E reports contained the errors identified in the Condition and Context. In addition, not meeting the reporting requirements increases the likelihood that the public will not have access to transparent and accurate information regarding expenditures of federal awards. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the City's management establish a system of internal controls to ensure that the City provides the Clerk-Treasurer with complete and accurate information for the P&E report. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-001 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): CY2021 Compliance Requirement: Reporting Audit Findings: Material Weakness, Other Matters INDIANA STATE BOARD OF ACCOUNTS 13 CITY OF NEW ALBANY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Condition and Context Recipients are required quarterly or annually to submit Project and Expenditure (P&E) reports to the U.S. Department of the Treasury (Treasury). The reporting periods, as well as the respective due dates, are based upon type of recipient and its population, as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. The City was classified as a metropolitan city with a population below 250,000 residents that received an allocation of more than $10 million in Coronavirus State and Local Fiscal Recovery Funds (SLFRF). As such, the initial P&E report, covering the period from March 3, 2021 to March 31, 2022, was required to be submitted to the Treasury by April 30, 2022. The subsequent quarterly reports were to cover one calendar quarter and must be submitted to the Treasury by the last day of the month following the end of the period covered. The City submitted four P&E reports during the audit period; however, the internal controls in place were not effective to prevent, or detect and correct, errors. As a result, errors in reporting were identified. The current period and cumulative expenditures reported consisted of the amounts expended by the beneficiaries who were awarded funds from the City rather than total amounts expended to the beneficiaries, resulting in current period expenditures and cumulative expenditures being incorrectly reported on all four reports as follows:  Quarterly Report: October 1, 2022 to December 31, 2022 Current period expenditures were overstated by $40,350. Cumulative expenditures were understated by $262,057.  Quarterly Report: January 1, 2023 to March 31, 2023 Current period expenditures were understated by $2,338,864. Cumulative expenditures were understated by $2,499,656.  Quarterly Report: April 1, 2023 to June 30, 2023 Current period expenditures were understated by $1,200,000. Cumulative expenditures were understated by $3,699,656.  Quarterly Report: July 1, 2023 to September 30, 2023 Current period expenditures were overstated by $2,126,306. Cumulative expenditures were understated by $1,573,349. The lack of effective internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: INDIANA STATE BOARD OF ACCOUNTS 14 CITY OF NEW ALBANY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 31 CFR 35.4(c) states in part: "Reporting and requests for other information. During the period of performance, recipients shall provide to the Secretary periodic reports providing detailed accounting of the uses of funds, . . ." 2 CFR 200.1 states in part: ". . . Expenditures means charges made by a non-Federal entity to a project or program for which a Federal award was received. . . . (2) For reports prepared on a cash basis, expenditures are the sum of: (i) Cash disbursements for direct charges for property and services; (ii) The amount of indirect expense charged; (iii) The value of third-party in-kind contribution applied; and (iv) The amount of cash advance payments and payments made to subrecipients . . ." Coronavirus State and Local Fiscal Recovery Funds Compliance and Reporting Guidance, page 10, states in part: ". . . 10. Reporting. All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for compiling and reporting accurate, compliant financial data, in accordance with appropriate accounting standards and principles. . . ." Cause The City's oversight process for filing the P&E reports for the period of October 1, 2022 to September 30, 2023, did not detect errors in the P&E reports. The City's understanding was that the expenditures in its report should be based on when the beneficiaries expended the funds and not when the City disbursed the funds to the beneficiaries. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As such, the City did not report cumulative expenditures and current period expenditures properly when filing the P&E reports for periods from October 1, 2022 to September 30, 2023. INDIANA STATE BOARD OF ACCOUNTS 15 CITY OF NEW ALBANY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the City. In addition, not meeting the SLFRF reporting requirements increases the likelihood that the public will not have access to transparent and accurate information regarding expenditures of federal awards. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the City develop policies and procedures to ensure the City provides the Treasury with complete and accurate information as it relates to the City in its P&E reports. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-003 Subject: Drinking Water State Revolving Fund (DWSRF) Cluster - Procurement Federal Agency: Environmental Protection Agency Federal Program: Drinking Water State Revolving Fund Assistance Listings Number: 66.468 Federal Award Number (or Other Identifying Number): DW22168902 Pass-Through Entity: Indiana Finance Authority Compliance Requirement: Procurement and Suspension and Debarment Audit Findings: Material Weakness, Other Matters Condition and Context Federal regulations allow for informal procurement methods when the value of the procurement for property or services does not exceed the simplified acquisition threshold, which is set at $250,000 unless a lower, more restrictive threshold is set by a nonfederal entity. As Indiana Code has set a more restrictive threshold of $150,000, informal procurement methods are permitted when the value of the procurement does not exceed $150,000. This informal process allows for methods other than the formal bid process. The informal process is divided between two methods based on thresholds. Micro-purchases, typically for those purchases $10,000 or under, and small purchase procedures for those purchases above the micropurchase threshold but below the simplified acquisition threshold. Micro-purchases may be awarded without soliciting competitive price rate quotations. If small purchase procedures are used, then price or rate quotations must be obtained from an adequate number of qualified sources. The Town did not obtain price or rate quotes for the two vendors identified and tested that were less than the simplified acquisition threshold of $150,000 but exceeded the $10,000 micro-purchase threshold. The micro-purchase threshold may be increased, but the Town did not provide documentation that the threshold had been increased. Documentation detailing the history of procurement, which must include the reason for the procurement method used, was not available for audit. The lack of internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.320 states in part: "The non-Federal entity must have and use documented procurement procedures, consistent with the standards of this section and §§ 200.317, 200.318, and 200.319 for any of the following methods of procurement used for the acquisition of property or services required under a Federal award or sub-award. INDIANA STATE BOARD OF ACCOUNTS 18 TOWN OF CAMBRIDGE CITY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (a) Informal procurement methods. When the value of the procurement for property or services under a Federal award does not exceed the simplified acquisition threshold (SAT), as defined in § 200.1, or a lower threshold established by a non-Federal entity, formal procurement methods are not required. The non-Federal entity may use informal procurement methods to expedite the completion of its transactions and minimize the associated administrative burden and cost. The informal methods used for procurement of property or services at or below the SAT include: . . . (2) Small purchases – (i) Small purchase procedures. The acquisition of property or services, the aggregate dollar amount of which is higher than the micro-purchase threshold but does not exceed the simplified acquisition threshold. If small purchase procedures are used, price or rate quotations must be obtained from an adequate number of qualified sources as determined appropriate by the non-Federal entity. . . ." Cause The Town was unable to provide documentation to demonstrate it had properly procured services. The Town noted they were unaware professional services agreements for consultants were required to follow small purchase procurement guidelines. Effect Without the proper implementation of an effectively designed system of internal controls, the Town could not demonstrate it had obtained an adequate number of price or rate quotations prior to selecting a vendor. Therefore, the Town could have overpaid for the services obtained. Questioned Costs There were no questioned costs identified. Recommendation We recommend that management of the Town strengthen its system of internal controls to ensure that an adequate number of price or rate quotations are obtained for small purchases. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report. INDIANA STATE

FINDING 2023-005 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): FY 2023 Compliance Requirement: Reporting Audit Findings: Material Weakness, Other Matters Repeat Finding This is a repeat finding from the immediately prior audit report. The prior audit finding number was 2022-003. Condition and Context Recipients are required to submit quarterly or annually Project and Expenditure (P&E) reports to the U.S. Department of the Treasury (Treasury). The reporting periods, as well as the respective due dates, are based upon type of recipient and its population, as well as recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. The County was classified as a county with a population below 250,000 residents that received an allocation of less than $10 million in COVID-19 - Coronavirus State and Local Fiscal Recovery Funds (SLFRF). As such, the initial P&E report, covering the period from March 3, 2021 to March 31, 2022, was required to be submitted to the Treasury by April 30, 2022. The subsequent annual reports are to cover one calendar year and must be submitted to the Treasury by April 30 each year. The County submitted one annual P&E report during the audit period; however, the internal controls in place were not effective to prevent, or detect and correct, errors. As a result, errors in reporting were identified. The current period obligations and cumulative obligations were incorrectly reported. The County was unable to provide supporting documentation for current period and cumulative obligations as reported. The lack of effective internal controls and noncompliance were isolated to the one P&E report due during the audit period. INDIANA STATE BOARD OF ACCOUNTS 23 HARRISON COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Coronavirus State and Local Fiscal Recovery Funds Compliance and Reporting Guidance, page 10, states in part: ". . . 10. Reporting. All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for compiling and reporting accurate, compliant financial data, in accordance with appropriate accounting standards and principles. . . ." 31 CFR 35.4(c) states in part: "Reporting and requests for other information. During the period of performance, recipients shall provide to the Secretary periodic reports providing detailed accounting of the uses of funds, . . ." Cause The County's oversight process for filing the P&E report for the period of April 1, 2022 to March 31, 2023, did not detect errors. Due to the timing of the P&E report submission and prior audit completion, corrective actions from the previous year's finding, finding number 2022-003, could not be implemented to correct noncompliance. Effect Without the proper implementation of an effectively designed system of internal controls, including policies and procedures the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As such, the County did not report cumulative obligations and current period obligations properly when filing the P&E report for the period April 1, 2022 to March 31, 2023. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the County. In addition, not meeting the SLFRF reporting requirements increases the likelihood that the public and the Treasury will not have access to transparent and accurate information regarding expenditures of federal awards. Questioned Costs There were no questioned costs identified. INDIANA STATE BOARD OF ACCOUNTS 24 HARRISON COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Recommendation We recommended that management of the County design and implement a proper system of internal controls to provide for a segregation of duties in the preparation and review of federal reports to ensure appropriate reviews, approvals, and oversight are taking place. We also recommended the development of policies and procedures to ensure the County provides the Treasury with complete and accurate information for the P&E report. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-005 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): CY2021 Compliance Requirement: Reporting Audit Findings: Material Weakness, Other Matters Condition and Context Recipients of State and Local Fiscal Recovery Funds (SLFRF) grants are required to submit quarterly or annually Project and Expenditure (P&E) reports to the U.S. Department of the Treasury (Treasury). The reporting periods, as well as the respective due dates, are based upon type of recipient and its population, as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. The Town was classified as a Tier 5 auditee - a metropolitan city with a population below 250,000 residents which received less than $10 million in SLFRF funding. Tier 5 auditees are required to submit an annual P&E report due in April of each year. INDIANA STATE BOARD OF ACCOUNTS 22 TOWN OF DALEVILLE SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) The Town was required to file one annual P&E report on April 30, 2023. The report was to cover the period of April 1, 2022 to March 31, 2023. The Town submitted this report for audit. However, there was no documented internal control in place over the report to ensure it was complete and accurate. The lack of internal controls allowed the Town to submit incorrect amounts in the P&E report for March 2023:  For revenue replacement, cumulative expenditures/obligations were understated by $45,298.  For revenue replacement, current expenditures/obligations were overstated by $61,703.  For essential pay, cumulative expenditures/obligations were understated by $24,189.  For essential pay, current expenditures/obligations were understated by $1,885.  For the solar project, cumulative expenditures/obligations were overstated by $1,560.  For the solar project, current expenditures/obligations were overstated by $22,981. The lack of internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 31 CFR 35.4(c) states in part: "Reporting and requests for other information. During the period of performance, recipients shall provide to the Secretary periodic reports providing detailed accounting of the uses of funds . . ." Coronavirus State and Local Fiscal Recovery Funds Compliance and Reporting Guidance, Page 10, states in part: ". . . 10. Reporting. All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for compiling and reporting accurate, compliant financial data, in accordance with appropriate accounting standards and principles. . . ." INDIANA STATE BOARD OF ACCOUNTS 23 TOWN OF DALEVILLE SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Cause A proper system of internal controls was not designed or implemented by management of the Town to ensure that policies and procedures were in place related to reporting. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the Town's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, noncompliance. As such, the P&E report contained the errors, and accurate information was not provided to the Treasury. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the Town. In addition, not meeting the SLFRF reporting requirements increases the likelihood that the public will not have access to transparent and accurate information regarding expenditures of federal awards. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the Town's management establish a proper system of internal controls and develop policies and procedures over the preparation and review of federal reports. Additionally, management should develop policies and procedures to ensure that the Town provides the Treasury with complete and accurate information for the P&E report. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-004 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): FY 2022 Compliance Requirement: Reporting Audit Findings: Material Weakness, Other Matters Condition and Context Recipients are required to submit quarterly or annual Project and Expenditure (P&E) reports to the U.S. Department of the Treasury (Treasury). The reporting periods, as well as the respective due dates, are based upon type of recipient and its population, as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. The County was classified as a county with a population below 250,000 residents that received an allocation of less than $10 million in State and Local Fiscal Recovery Funds (SLFRF). As such, the initial P&E report, covering the period from March 3, 2021 to March 31, 2022, was required to be submitted to the Treasury by April 30, 2022. The subsequent annual reports are to cover one calendar year and must be submitted to the Treasury by April 30 each year. Upon inquiry of the County's policies and procedures related to the reporting requirements, the County stated that the County Auditor and a financial consultant prepared the P&E report based on reports from the County's financial system. The County Auditor then submitted the report. There was no evidence of an oversight or review process prior to submission. The County submitted the P&E report by April 30, 2023, as required; however, the report was not supported by the County's records. The annual report submitted in April 2023 did not include an expenditure of $64,999 as the County Auditor used the incorrect period of January 1, 2022 to December 31, 2022, to complete the report. The omitted expenditure was incurred on March 23, 2023. The lack of internal controls and noncompliance were systemic issues throughout the audit period for the FY 2022 grant. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." INDIANA STATE BOARD OF ACCOUNTS 19 SHELBY COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) 31 CFR 35.4(c) states in part: "Reporting and requests for other information. During the period of performance, recipients shall provide to the Secretary periodic reports providing detailed accounting of the uses of funds, . . ." Coronavirus State and Local Fiscal Recover Funds Compliance and Reporting Guidance, page 10, states in part: ". . . 10. Reporting. All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for com-piling and reporting accurate, compliant financial data, in accordance with appropriate accounting standards and principles. . . ." Cause A proper system of internal controls which would include segregation of key functions was not designed by management of the County. The lack of review or approval process by someone other than the preparers allowed the error in the P&E report to go undetected. The error was a result of expenditures from the incorrect reporting period being used to complete the report. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, noncompliance. As such, the P&E report submitted understated expenditures. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the County. In addition, not meeting the SLFRF reporting requirements increases the likelihood that the public will not have access to transparent and accurate information regarding expenditures of federal awards. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the County design and implement a proper system of internal controls, including policies and procedures to ensure that the County abstracts the correct reporting period, to provide the Treasury with complete and accurate information for the P&E reports. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-003 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Procurement and Suspension and Debarment Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): FY 2023 Compliance Requirement: Procurement and Suspension and Debarment Audit Findings: Material Weakness, Other Matters Repeat Finding This is a repeat finding from the immediately prior audit report. The prior audit finding number was 2022-005. Condition and Context Procurement - Policy The City had not established a purchasing policy that reflected applicable state laws and regulations, including procedures to avoid the acquisition of unnecessary or duplicative items and procedures to ensure that all solicitations incorporate a clear and accurate description of the technical requirements for the material, product, or service to be procured. Additionally, the City did not maintain written standards of conduct covering conflicts of interest and governing actions of its employees engaged in the selection, award, and administration of contracts. Procurement - Small Purchases Federal regulations allow for informal procurement methods when the value of the procurement for property or services does not exceed the simplified acquisition threshold, which is customarily set at $250,000. However, Indiana Code 5-22-8 has a more restrictive threshold of $150,000 or less for when small purchase procedures may be used. This informal process allows for methods other than the formal bid process. The informal process is divided between two methods based on thresholds. Micro-purchases, typically for those purchases $10,000 or under, and small purchase procedures for those purchases above the micro-purchase threshold, but below the simplified acquisition threshold. Micro-purchases may be awarded without soliciting competitive price rate quotations. If small purchase procedures are used, then price or rate quotations must be obtained from an adequate number of qualified sources. The City did not obtain price or rate quotes for the one vendor tested that was less than the simplified acquisition threshold of $150,000 but exceeded the $10,000 micro-purchase threshold. The micro-purchase threshold may be increased, but the City did not provide documentation that the threshold had been increased. Documentation detailing the history of procurement, which must include the reason for the procurement method used, was not available for audit. INDIANA STATE BOARD OF ACCOUNTS 19 CITY OF MUNCIE SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Suspension and Debarment Prior to entering into subawards and covered transactions with COVID-19 - Coronavirus State and Local Fiscal Recovery Funds (SLFRF), recipients are required to verify that such contracts and subrecipients are not suspended, debarred, or otherwise excluded. "Covered transactions" include, but are not limited to, contracts for goods and services awarded under a nonprocurement transaction (i.e., grant agreement) that are expected to equal or exceed $25,000. The verification is to be done by checking the Excluded Parties List System (EPLS), collecting a certification from that person, or adding a clause or condition to the covered transaction with that person. Due to the U.S. Department of the Treasury's determination that the revenue loss eligible use category does not give rise to subawards, the City was only required to comply with suspension and debarment requirements related to covered transactions. A population of nine covered transactions for goods or services were paid from SLFRF award funds during the audit period. A sample of three transactions were selected for testing. Of the three transactions tested, one vendor was not verified to not be suspended nor debarred or otherwise excluded or disqualified from participating in federal assistance programs or activities. The lack of effective internal controls and noncompliance were isolated to the small purchase noted above. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.318 states in part: "(a) The non-Federal entity must have and use documented procurement procedures, consistent with State, local, and tribal laws and regulations and the standards of this section, for the acquisition of property or services required under a Federal award or subaward. The non-Federal entity's documented procurement procedures must conform to the procurement standards identified in §§ 200.317 through 200.327. . . . INDIANA STATE BOARD OF ACCOUNTS 20 CITY OF MUNCIE SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (i) The non-Federal entity must maintain records sufficient to detail the history of procurement. These records will include, but are not necessarily limited to, the following: Rationale for the method of procurement, selection of contract type, contractor selection or rejection, and the basis for the contract price. . . ." 2 CFR 200.320 states in part: "The non-Federal entity must have and use documented procurement procedures, consistent with the standards of this section and §§ 200.317, 200.318, and 200.319 for any of the following methods of procurement used for the acquisition of property or services required under a Federal award or sub-award. (a) Informal procurement methods. When the value of the procurement for property or services under a Federal award does not exceed the simplified acquisition threshold (SAT), as defined in § 200.1, or a lower threshold established by a non-Federal entity, formal procurement methods are not required. The non-Federal entity may use informal procurement methods to expedite the completion of its transactions and minimize the associated administrative burden and cost. The informal methods used for procurement of property or services at or below the SAT include: . . . (2) Small purchases — (i) Small purchase procedures. The acquisition of property or services, the aggregate dollar amount of which is higher than the micro-purchase threshold but does not exceed the simplified acquisition threshold. If small purchase procedures are used, price or rate quotations must be obtained from an adequate number of qualified sources as determined appropriate by the non-Federal entity." Part 4 of the Treasury's Compliance and Reporting Guidance states: ". . . recipients are expected to have procurement policies and procedures in place that comply with the procurement standards outlined in the Uniform Guidance . . ." Cause The system of internal controls as established by management of the City was not effective at ensuring all required aspects of a procurement policy were included and that small purchases adhered to the procurement requirements. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the City's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the City cannot ensure their policy includes all the necessary elements and that the detailed history of procurement including the method utilized are retained for audit. INDIANA STATE BOARD OF ACCOUNTS 21 CITY OF MUNCIE SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Questioned Costs There were no questioned costs identified. Recommendation We recommended management of the City establish documented procurement procedures consistent with state and local laws for the acquisition of property or services required under a federal award or subaward as outlined in the code of federal regulations. In addition, we recommended the City adhere to the procurement policies and obtain required quotes and bids or adequately document a sole source situation. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-001 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): FY 2023 Compliance Requirement: Reporting Audit Findings: Material Weakness, Modified Opinion INDIANA STATE BOARD OF ACCOUNTS 13 HOWARD COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Repeat Finding This is a repeat finding from the immediately prior audit report. The prior audit finding number was 2022-001. Condition and Context Recipients are required to submit quarterly or annually Project and Expenditure (P&E) reports to the U.S. Department of the Treasury (Treasury). The reporting periods, as well as the respective due dates, are based upon type of recipient and its population, as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contract for the appropriate reporting period. The County was classified as a metropolitan county with a population below 250,000 residents that received an allocation of more than $10 million in the Coronavirus State and Local Fiscal Recovery Funds (SLFRF) funding. As such, the initial P&E report, covering three calendar quarters from March 3, 2021 to December 31, 2021, was required to be submitted to the Treasury by January 31, 2022. The subsequent quarterly reports are to cover one calendar quarter and must be submitted to the Treasury by the last day of the month following the end of the period covered. The Deputy County Auditor prepared the quarterly reports, and the County Auditor reviewed the reports; however, the internal control was not effective and did not detect and allow correction of material misstatements prior to submission. Two of the four quarterly reports submitted during the audit period were selected for testing. For the two reports tested, all activity for the reporting period was not included, information submitted was not supported by the County's records, and the reports were not fairly presented. Errors identified included the following: Quarter 1 report (January 1, 2023 to March 31, 2023)  The Total Cumulative Obligations were understated by $2,937.  The Current Period and Total Cumulative Expenditures were overstated by $62. Quarter 3 report (July 1, 2023 to September 30, 2023)  The Total Cumulative Obligations were understated by $118,025.  The Current Period Expenditures were understated by $56,781.  The Total Cumulative Expenditures were understated by $147,930. The lack of internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." INDIANA STATE BOARD OF ACCOUNTS 14 HOWARD COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) 31 CFR 35.4(c) states in part: "Reporting and requests for other information. During the period of performance, recipients shall provide to the Secretary periodic reports providing detailed accounting of the uses of funds. . . ." Coronavirus State and Local Fiscal Recovery Funds Compliance and Reporting Guidance, page 10, states in part: ". . . 10. Reporting. All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for compiling and reporting accurate, compliant financial data, in accordance with appropriate accounting standards and principles. . . ." Cause Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the County's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. These errors were due to not all expenditures being included in the P&E reports ran for the time frame. Effect Without the proper implementation of an effectively designed system of internal controls over reporting, the County could not ensure that the P&E reports submitted were accurate. In addition, not meeting the SLFRF reporting requirements increases the likelihood that the public will not have access to transparent and accurate information regarding expenditures of federal awards. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the County. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the County design and implement a proper system of internal controls, including policies and procedures, to ensure that the County provides the Treasury with complete and accurate information for the P&E report. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-003 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): CY 2023 Compliance Requirement: Reporting Audit Findings: Material Weakness, Other Matters Condition and Context Recipients are required quarterly or annually to submit Project and Expenditure (P&E) reports to the U.S. Department of the Treasury (Treasury). The reporting periods, as well as the respective due dates, are based upon type of recipient and its population, as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. The Town was classified as a Non-Entitlement Unit with a population below 250,000 residents that are allocated less than $10 million in COVID-19 - Coronavirus State and Local Fiscal Recovery Funds (SLFRF). As such, the Town's P&E report, covering the period from April 1, 2022 to March 31, 2023, was required to be submitted to the Treasury by April 30, 2023. The Town timely submitted one P&E report during the audit period; however, the report was submitted without a review or oversight process in place to prevent, or detect and correct, errors. As a result, errors in reporting were identified. The cumulative expenditures and current period expenditures reported were both incorrect. The Town did not have any expenditures prior to March 31, 2023; however, the Town reported the full amount received for the grant of $376,654 for both cumulative expenditures and current period expenditures. The lack of internal controls and noncompliance were isolated to the one annual P&E report. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 31 CFR 35.4(c) states in part: "Reporting and requests for other information. During the period of performance, recipients shall provide to the Secretary periodic reports providing detailed accounting of the uses of funds, . . ." Coronavirus State and Local Fiscal Recovery Funds Compliance and Reporting Guidance, page 10, states in part: ". . . 10. Reporting. All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for compiling and reporting accurate, compliant financial data, in accordance with appropriate accounting standards and principles. . . ." The Indiana State Board of Accounts (SBOA) is required under Indiana Code 5-11-1-27(e) to define the acceptable minimum level of internal control standards. To provide clarifying guidance, the State Examiner compiled the standards contained in the manual, Uniform Internal Control Standards for Indiana Political Subdivisions. All political subdivisions subject to audit by SBOA are expected to adhere to these standards. The standards include adequate control activities. According to this manual: "Control activities are the actions and tools established through policies and procedures that help to detect, prevent, or reduce the identified risks that interfere with the achievement of objectives. Detection activities are designed to identify unfavorable events in a timely manner whereas prevention activities are designed to deter the occurrence of an unfavorable event. Examples of these activities include reconciliations, authorizations, approval processes, performance reviews, and verification processes. An integral part of the control activity component is segregation of duties. . . . There is an expectation of segregation of duties. If compensating controls are necessary, documentation should exist to identify both the areas where segregation of duties are not feasible or practical and the compensating controls implemented to mitigate the risk. . . ." Cause A proper system of internal controls over P&E reports was not implemented by the management of the Town to ensure that complete and accurate information related to the SLFRF awards was provided to the Treasury. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the Town's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. The Town incorrectly reported the correct current and cumulative expenditures due to misunderstanding the line item requirement. Effect Without the proper implementation of an effectively designed system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As such, errors, as identified in the Condition and Context, occurred, and inaccurate information was provided to the Treasury. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the Town. In addition, not meeting the SLFRF reporting requirements increases the likelihood that the public will not have access to transparent and accurate information regarding expenditures of federal awards. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the Town design and implement a proper system of internal controls that would provide for segregation of duties to ensure appropriate reviews, approvals, and oversight are taking place. Additionally, management should develop policies and procedures to ensure that the Town provides the Treasury with complete and accurate information for the P&E report. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-001 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): CY 2023 Compliance Requirement: Reporting Audit Findings: Material Weakness, Other Matters INDIANA STATE BOARD OF ACCOUNTS 13 CITY OF BUTLER SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Condition and Context Recipients are required to submit quarterly or annually Project and Expenditure (P&E) reports to the U.S. Department of the Treasury (Treasury). The reporting periods, as well as the respective due dates, are based upon type of recipient and its population, as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. The City was classified as a metropolitan city with a population below 250,000 residents that received an allocation of less than $10 million in COVID-19 - Coronavirus State and Local Fiscal Recovery Funds (SLFRF) award funds. As such, the initial P&E report, covering the period from March 3, 2021 to March 31, 2022, was required to be submitted to the Treasury by April 30, 2022. The subsequent annual reports are to cover one calendar year and must be submitted to the Treasury by April 30 each year. The City submitted one P&E report during the audit period; however, the report was submitted without a review or oversight process in place to prevent, or detect and correct, errors. As a result, errors in reporting were identified. The cumulative obligations and current period obligations were understated by $104,988. The cumulative obligations and current period obligations reported was the total amount of grant funds expended through December 31, 2022, instead of the amount of funds expended through March 31, 2023. The lack of internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Coronavirus State and Local Fiscal Recovery Funds Compliance and Reporting Guidance, page 10, states in part: ". . . 10. Reporting. All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for com-piling and reporting accurate, compliant financial data, in accordance with appropriate accounting standards and principles. . . ." 31 CFR 35.4(c) states in part: "Reporting and requests for other information. During the period of performance, recipients shall provide to the Secretary periodic reports providing detailed accounting of the uses of funds, . . ." INDIANA STATE BOARD OF ACCOUNTS 14 CITY OF BUTLER SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Cause A proper system of internal controls over the P&E report was not implemented by the management of the City to ensure that complete and accurate information related to the SLFRF awards was provided to the Treasury. The City incorrectly reported the cumulative obligations and current period obligations due to abstracting and reporting data through the end of the year, instead of the end of March 2023 as required. Effect Without the proper implementation of an effectively designed system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As such, errors, as identified in the Condition and Context, occurred, and inaccurate information was provided to the Treasury. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the City. In addition, not meeting the SLFRF reporting requirements increases the likelihood that the public will not have access to transparent and accurate information regarding expenditures of federal awards. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the City design and implement a proper system of internal controls that would provide for segregation of duties to ensure appropriate reviews, approvals, and oversight are taking place. Additionally, management should develop policies and procedures to ensure that the City abstracts and reports on the correct time frame for each report submitted to provide the Treasury with complete and accurate information. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report. INDIANA STATE

FINDING 2023-005 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): 2023 Compliance Requirement: Reporting Audit Findings: Material Weakness, Other Matters Repeat Finding This is a repeat finding from the immediately prior audit report. The prior audit finding number was 2022-004. INDIANA STATE BOARD OF ACCOUNTS 23 JEFFERSON COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Condition and Context Recipients are required to submit quarterly or annually Project and Expenditure (P&E) reports to the U.S. Department of the Treasury (Treasury). The reporting periods, as well as the respective due dates, are based upon type of recipient and its population, as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. The County was classified as a metropolitan county with a population below 250,000 residents that received an allocation of less than $10 million in COVID-19 - Coronavirus State and Local Fiscal Recovery Funds (SLFRF). As such, the initial P&E report, covering the period from March 3, 2021 to March 31, 2022, was required to be submitted to the Treasury by April 30, 2022. The subsequent annual reports are to cover one calendar year and must be submitted to the Treasury by April 30 each year. The County submitted one P&E report during the audit period; however, the report was submitted without a review or oversight process in place to prevent, or detect and correct, errors. As a result, errors in reporting were identified. The cumulative obligations and expenditures and current period obligations and expenditures were incorrectly reported. The cumulative obligations and expenditures and current period obligations reported was the total amount of grant funds received to date instead of actual funds obligated and expended. The current period expenditures reported equaled the total expenditures for 2022, rather than expenditures that occurred during the reporting period of April through December of 2022, and January through March of 2023. The lack of internal controls and the failure to maintain adequate supporting documentation was isolated to the annual P&E report. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Coronavirus State and Local Fiscal Recovery Funds Compliance and Reporting Guidance, page 10, states in part: ". . . 10. Reporting. All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for compiling and reporting accurate, compliant financial data, in accordance with appropriate accounting standards and principles. . . ." 31 CFR 35.4(c) states in part: "Reporting and requests for other information. During the period of performance, recipients shall provide to the Secretary periodic reports providing detailed accounting of the uses of funds, . . ." INDIANA STATE BOARD OF ACCOUNTS 24 JEFFERSON COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Cause The County's oversight process for filing the P&E report for the period of April 1, 2022 to March 31, 2023, did not detect errors. Furthermore, due to the timing of the prior audit completion and the P&E report submission due dates, corrective actions as outlined in the County's corrective action plan for item 2022-004 could not be implemented in time to correct the noncompliance for this audit period. Effect Without the proper implementation of an effectively designed system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As such, the County did not report cumulative obligations and current period obligations properly when filing the P&E report for the period April 1, 2022 to March 31, 2023. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the County. In addition, not meeting the SLFRF reporting requirements increases the likelihood that the public will not have access to transparent and accurate information regarding expenditures of federal awards. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the County strengthen its system of internal controls to provide for a segregation of duties in the preparation and review of federal reports to ensure appropriate reviews, approvals, and oversight are taking place. We also recommended the development of policies and procedures to ensure the County provides the Treasury with complete and accurate information for the P&E report. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-003 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): FY 2023 Compliance Requirement: Reporting Audit Findings: Material Weakness, Other Matters Condition and Context Recipients are required to submit quarterly or annually Project and Expenditure (P&E) reports to the U.S. Department of the Treasury (Treasury). The reporting periods, as well as the respective due dates, are based upon type of recipient and its population, as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. The Town was classified as a Non-Entitlement Unit with a population below 250,000 residents that are allocated less than $10 million in Coronavirus State and Local Fiscal Recovery Funds (SLFRF). As such, the Town's P&E report, covering the period from April 1, 2022 to March 31, 2023, was required to be submitted to the Treasury by April 30, 2023. The Town timely submitted one P&E report during the audit period; however, the report was submitted without a review or oversight process in place to prevent, or detect and correct, errors. As a result, errors in reporting were identified. The Town reported current expenditures of $33,325, which did not agree with the accounting records. The lack of internal controls and noncompliance were isolated to the one annual P&E report. INDIANA STATE BOARD OF ACCOUNTS 18 TOWN OF PENDLETON SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Coronavirus State and Local Fiscal Recovery Funds Compliance and Reporting Guidance, page 10, states in part: ". . . 10. Reporting. All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for compiling and reporting accurate, compliant financial data, in accordance with appropriate accounting standards and principles. . . ." 31 CFR 35.4(c) states in part: "Reporting and requests for other information. During the period of performance, recipients shall provide to the Secretary periodic reports providing detailed accounting of the uses of funds, . . ." The Indiana State Board of Accounts (SBOA) is required under Indiana Code 5-11-1-27(e) to define the acceptable minimum level of internal control standards. To provide clarifying guidance, the State Examiner compiled the standards contained in the manual, Uniform Internal Control Standards for Indiana Political Subdivisions. All political subdivisions subject to audit by SBOA are expected to adhere to these standards. The standards include adequate control activities. According to this manual: "Control activities are the actions and tools established through policies and procedures that help to detect, prevent, or reduce the identified risks that interfere with the achievement of objectives. Detection activities are designed to identify unfavorable events in a timely manner whereas prevention activities are designed to deter the occurrence of an unfavorable event. Examples of these activities include reconciliations, authorizations, approval processes, performance reviews, and verification processes. An integral part of the control activity component is segregation of duties. . . . There is an expectation of segregation of duties. If compensating controls are necessary, documentation should exist to identify both the areas where segregation of duties are not feasible or practical and the compensating controls implemented to mitigate the risk. . . ." INDIANA STATE BOARD OF ACCOUNTS 19 TOWN OF PENDLETON SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Cause A proper system of internal controls over P&E reports was not implemented by the management of the Town to ensure that complete and accurate information related to the SLFRF awards was provided to the Treasury. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the Town's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. The Town incorrectly reported the current expenditures due to misunderstanding the line-item requirement. Effect Without the proper implementation of an effectively designed system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As such, errors, as identified in the Condition and Context, occurred and inaccurate information was provided to the Treasury. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the Town. In addition, not meeting the SLFRF reporting requirements increases the likelihood that the public will not have access to transparent and accurate information regarding expenditures of federal awards. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the Town design and implement a proper system of internal controls that would provide for segregation of duties to ensure appropriate reviews, approvals, and oversight are taking place. Additionally, management should develop policies and procedures to ensure that the Town provides the Treasury with complete and accurate information for the P&E report. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report. INDIANA STATE BOARD OF ACCOUNTS 20

FINDING 2023-003 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Procurement and Suspension and Debarment Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): FR-2023-ILBC-00004 Pass-Through Entity: Indiana Department of Homeland Security Compliance Requirement: Procurement and Suspension and Debarment Audit Findings: Material Weakness, Modified Opinion Condition and Context Procurement Policy The County did not have documented procurement procedures or policies reflecting applicable state or federal laws and regulations for procuring goods and services paid with federal funds. INDIANA STATE BOARD OF ACCOUNTS 17 DECATUR COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Small Purchases Federal regulations allow for informal procurement methods when the value of the procurement for property or services does not exceed the simplified acquisition threshold, which is customarily set at $250,000. However, Indiana Code 5-22-8 has a more restrictive threshold of $150,000 or less for when small purchase procedures may be used. This informal process allows for methods other than the formal bid process. The informal process is divided between two methods based on thresholds. Micro-purchases, typically for those purchases $10,000 or under, and small purchase procedures for those purchases above the micro-purchase threshold, but below the simplified acquisition threshold. Micro-purchases may be awarded without soliciting competitive price rate quotations. If small purchase procedures are used, then price or rate quotations must be obtained from an adequate number of qualified sources. One vendor was identified that fell within the small purchase threshold. Purchases for body cameras and associated equipment/accessories to the vendor totaled $117,144, of which $7,144 was paid from the COVID-19 - Coronavirus State and Local Fiscal Recovery Funds received from the Indiana Department of Homeland Security. As a portion of the purchases to the vendor were paid with federal funds subject to procurement requirements, the entirety of purchases with the vendor was required to follow applicable procurement requirements. As such, price or rate quotations from an adequate number of qualified sources should have been obtained. However, the County did not obtain price or rate quotations for the purchases, nor was full and open competition provided for the vendor. Additionally, there was no documentation available to support the rationale to limit competition. The lack of internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.320 states in part: "The non-Federal entity must have and use documented procurement procedures, consistent with the standards of this section and §§ 200.317, 200.318, and 200.319 for any of the following methods of procurement used for the acquisition of property or services required under a Federal award or sub-award. (a) Informal procurement methods. When the value of the procurement for property or services under a Federal award does not exceed the simplified acquisition threshold (SAT), as defined in § 200.1, or a lower threshold established by a non-Federal entity, formal procurement methods are not required. The non-Federal entity may use informal procurement methods to expedite the completion of its transactions and minimize the associated administrative burden and cost. The informal methods used for procurement of property or services at or below the SAT include: . . . INDIANA STATE BOARD OF ACCOUNTS 18 DECATUR COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (2) Small purchases – (i) Small purchase procedures. The acquisition of property or services, the aggregate dollar amount of which is higher than the micro-purchase threshold but does not exceed the simplified acquisition threshold. If small purchase procedures are used, price or rate quotations must be obtained from an adequate number of qualified sources as determined appropriate by the non-Federal entity. . . ." Cause A proper system of internal controls over procurement and suspension and debarment was not implemented by the management of the County to ensure that goods and services were properly procured. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the County's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, property and services were not properly procured. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the County. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the County establish a proper system of internal controls and develop procedures to ensure that property and services are properly procured. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-004 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Procurement and Suspension and Debarment Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): FY23 Compliance Requirement: Procurement and Suspension and Debarment Audit Findings: Material Weakness, Modified Opinion INDIANA STATE BOARD OF ACCOUNTS 19 DECATUR COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Condition and Context Procurement Policy The County did not have documented procurement procedures or policies reflecting applicable state or federal laws and regulations for procuring goods and services paid with federal funds. Small Purchases Federal regulations allow for informal procurement methods when the value of the procurement for property or services does not exceed the simplified acquisition threshold, which is customarily set at $250,000. However, Indiana Code 5-22-8 has a more restrictive threshold of $150,000 or less for when small purchase procedures may be used. This informal process allows for methods other than the formal bid process. The informal process is divided between two methods based on thresholds. Micro-purchases, typically for those purchases $10,000 or under, and small purchase procedures for those purchases above the micro-purchase threshold, but below the simplified acquisition threshold. Micro-purchases may be awarded without soliciting competitive price rate quotations. If small purchase procedures are used, then price or rate quotations must be obtained from an adequate number of qualified sources. One vendor was identified that fell within the small purchase threshold, with total purchases of $33,100. Price or rate quotations were not obtained, nor was full and open competition provided for the vendor. Additionally, there was no documentation available to support the rationale to limit competition. Simplified Acquisition Threshold When the value of the procurement for property or services exceeds the simplified acquisition threshold (SAT), or a lower threshold established by a nonfederal entity, formal procurement methods are required. The SAT is typically set at $250,000; however, Indiana Code 5-22-8 has a more restrictive threshold, and, therefore, the threshold the SAT is set at $150,000. Formal procurement methods require adherence to documented procedures and formal methods such as sealed bids or proposals. One vendor was identified that fell within the SAT, with total purchases of $213,734. Sealed bids or competitive proposals were not obtained, nor was a circumstance met that would have allowed for a noncompetitive procurement for the purchases. Suspension and Debarment Prior to entering into subawards and covered transactions with the COVID-19 - Coronavirus State and Local Fiscal Recovery Funds (SLFRF) award funds, recipients are required to verify that such contractors and subrecipients are not suspended, debarred, or otherwise excluded. "Covered transactions" include, but are not limited to, contracts for goods and services awarded under a nonprocurement transaction (i.e., grant agreement) that are expected to equal or exceed $25,000. The verification is to be done by checking the Excluded Parties List System (EPLS), collecting a certification from that person, or adding a clause or condition to the covered transaction with that person. INDIANA STATE BOARD OF ACCOUNTS 20 DECATUR COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) The County did not have any policies or procedures in place for verifying that an entity with which it plans to enter into a covered transaction is not suspended, debarred, or otherwise excluded. A population of six covered transactions, totaling $470,435, that equaled or exceeded $25,000 paid from SLFRF award funds was identified. Four of the six covered transactions, totaling $312,745, were selected for testing. For each of the four transactions, the County did not verify the vendors' suspension or debarment status prior to payment due to the County not having any policies or procedures in place to verify that contractors were neither suspended nor debarred, or otherwise excluded or disqualified, from participating in federal assistance programs or activities. The lack of internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.320 states in part: "The non-Federal entity must have and use documented procurement procedures, consistent with the standards of this section and §§ 200.317, 200.318, and 200.319 for any of the following methods of procurement used for the acquisition of property or services required under a Federal award or sub-award. (a) Informal procurement methods. When the value of the procurement for property or services under a Federal award does not exceed the simplified acquisition threshold (SAT), as defined in § 200.1, or a lower threshold established by a non-Federal entity, formal procurement methods are not required. The non-Federal entity may use informal procurement methods to expedite the completion of its transactions and minimize the associated administrative burden and cost. The informal methods used for procurement of property or services at or below the SAT include: . . . (2) Small purchases – (i) Small purchase procedures. The acquisition of property or services, the aggregate dollar amount of which is higher than the micro-purchase threshold but does not exceed the simplified acquisition threshold. If small purchase procedures are used, price or rate quotations must be obtained from an adequate number of qualified sources as determined appropriate by the non-Federal entity. . . . INDIANA STATE BOARD OF ACCOUNTS 21 DECATUR COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (b) Formal Procurement Methods. When the value of the procurement for property or services under a Federal financial assistance award exceeds the SAT, or a lower threshold established by a non-Federal entity, formal procurement methods are required. Formal procurement methods require following documented procedures. Formal procurement methods also require public advertising unless a non-competitive procurement can be used in accordance with § 200.319 or paragraph (c) of this section. The following formal methods of procurement are used for procurement of property or services above the simplified acquisition threshold or a value below the simplified acquisition threshold the non-Federal entity determines to be appropriate: . . . (1) Sealed bids. A procurement method in which bids are publicly solicited and a firm fixed-price contract (lump sum or unit price) is awarded to the responsible bidder whose bid, conforming with all the material terms and conditions of the invitation for bids, is the lowest in price. The sealed bids method is the preferred method for procuring construction, if the conditions. . . . (2) Proposals. A procurement method in which either a fixed price or costreimbursement type contract is awarded. Proposals are generally used when conditions are not appropriate for the use of sealed bids. . . ." 31 CFR 19.300 states: "When you enter into a covered transaction with another person at the next lower tier, you must verify that the person with whom you intend to do business is not excluded or disqualified. You do this by: (a) Checking the EPLS; or (b) Collecting a certification from that person if allowed by this rule; or (c) Adding a clause or condition to the covered transaction with that person." Cause A proper system of internal controls over procurement and suspension and debarment was not implemented by the management of the County to ensure that goods and services were properly procured and that vendors to whom payment equaled or exceeded $25,000 were not suspended or debarred. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the County's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, property and services were not properly procured and vendors to whom payments equal to or in excess of $25,000 were not verified to be not suspended, debarred, or otherwise excluded. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the County. INDIANA STATE BOARD OF ACCOUNTS 22 DECATUR COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the County establish a proper system of internal controls and develop procedures to ensure that property and services are properly procured and that contractors are not suspended, debarred, or otherwise excluded prior to entering into any contracts or subawards. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-005 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): FY23 Compliance Requirement: Reporting Audit Findings: Material Weakness, Other Matters Condition and Context Recipients are required to submit quarterly or annually Project and Expenditure (P&E) reports to the U.S. Department of the Treasury (Treasury). The reporting periods, as well as the respective due dates, are based upon type of recipient and its population, as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. The County was classified as a metropolitan county with a population below 250,000 residents that received an allocation of less than $10 million in COVID-19 - Coronavirus State and Local Fiscal Recovery Funds (SLFRF) award funds. As such, the initial P&E report, covering the period from March 3, 2021 to March 31, 2022, was required to be submitted to the Treasury by April 30, 2022. The subsequent annual reports are to cover one calendar year and must be submitted to the Treasury by April 30 each year. The County submitted one P&E report during the audit period; however, internal controls were not in place to prevent, or detect and correct, errors. As a result, the following errors were noted:  The current period expenditures for 8 of 16 projects were understated by $635,748. In addition, current period expenditures for 1 of 16 projects was overstated by $29,767.  The cumulative expenditures for 6 of 16 projects were understated by $285,748. In addition, cumulative expenditures for 1 of 16 projects was overstated by $29,767. The lack of internal controls and noncompliance were systemic issues throughout the audit period. INDIANA STATE BOARD OF ACCOUNTS 23 DECATUR COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework,' issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO) . . . ." Coronavirus State and Local Fiscal Recovery Funds Compliance and Reporting Guidance, page 10, states in part: ". . . 10. Reporting. All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for compiling and reporting accurate, compliant financial data, in accordance with appropriate accounting standards and principles. . . ." 31 CFR 35.4(c) states in part: "Reporting and requests for other information. During the period of performance, recipients shall provide to the Secretary periodic reports providing detailed accounting of the uses of funds. . . ." Cause A proper system of internal controls was not designed or implemented by management of the County to prevent and detect errors on the P&E report prior to submission. Effect Without the proper implementation of an effectively designed system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As such, the County did not report current period expenditures and cumulative expenditures properly when filing the P&E report for the period April 1, 2022 to March 31, 2023. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the County. In addition, not meeting the SLFRF reporting requirements increases the likelihood that the public will not have access to transparent and accurate information regarding expenditures of federal awards. Questioned Costs There were no questioned costs identified. INDIANA STATE BOARD OF ACCOUNTS 24 DECATUR COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Recommendation We recommended that management of the County strengthen its system of internal controls to provide for a segregation of duties in the preparation and review of federal reports to ensure appropriate reviews, approvals, and oversight are taking place. We also recommended the development of policies and procedures to ensure the County provides the Treasury with complete and accurate information for the P&E report. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report. INDIANA STATE BOARD OF ACCOUNTS 25

2023-001 OVERPAYMENTS TO SUBRECIPIENT Federal agency: U.S. Department of Department of Health and Human Services Federal Program Title & Assistance Listing Number: Substance Abuse and Mental Health Services Projects of Regional and National Significance -93.243 Award Period: 12/31/2022 - 12/30/2024 Type of Finding: Significant Deficiency Compliance Areas: Allowable Costs, Cash Management Questioned Costs: None Condition During our testing of subrecipient disbursements, we found that management does not require invoices from subrecipients before making disbursements. Instead, they allocate a predetermined monthly amount based on prorated subaward totals, making adjustments upon receipt of invoices and again at year-end. An error in a subrecipient's invoice led to an overpayment of $27,525 and remained uncorrected during the year. As a result, UVNR over recognized federal revenue by the same amount. An audit adjustment was made to correct both federal expenditures and revenues in 2023. Criteria An improper payment, as defined in 2 CFR §200.1, is any payment that should not have been made or that was made in an incorrect amount (including overpayments and underpayments) under statutory, contractual, administrative, or other legally applicable requirements. According to §200.303 Internal controls of 2 CFR Part 200, the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Specific to the Organization, federal reimbursement requests are completed monthly. Effect Overstatement of federal revenues and expenditures, respectively. The overpayment would also necessitate certain adjustments to the award amounts given to the subrecipient in the following year. Cause Management admittedly overlooked the error in the subrecipient’s submitted invoice during review.

Federal Agency: Department of Justice Federal Assistance Listing Number: 16.756 Program: Court Appointed Special Advocates Award Number: 15JDP-21-GK-02762-CASA Criteria: The Uniform Guidance in 2 CFR §200.332 details requirements for pass-through entities in regard to subrecipient monitoring and management. Per 2 CFR §200.332, Requirements for Pass-Through Entities: “All pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the following information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the federal award and subaward. Required information includes: (1) Federal award identification. i. Subrecipient name (which must match the name associated with its unique entity identifier); ii. Subrecipient’s unique entity identifier; iii. Federal Award Identification Number (FAIN); iv. Federal Award Date (see the definition of federal award date in §200.1 of this part) of award to the recipient by the federal agency; v. Subaward Period of Performance Start and End Date; vi. Subaward Budget Period Start and End Date; vii. Amount of Federal Funds Obligated by this action by the pass-through entity to the subrecipient; viii. Total Amount of Federal Funds Obligated to the subrecipient by the pass through entity, including the current financial obligation; ix. Total Amount of the Federal Award committed to the subrecipient by the pass-through entity; x. Federal award project description, as required to be responsive to the Federal Funding Accountability and Transparency Act (FFATA); xi. Name of federal awarding agency, pass-through entity, and contact information for awarding official of the Pass-through entity; xii. Assistance Listings Number and Title; the pass-through entity must identify the dollar amount made available under each federal award and the Assistance Listings Number at time of disbursement; xiii. Identification of whether the award is R&D; and xiv. Indirect cost rate for the federal award (including if the de minimis rate is charged) per § 200.414. (2) All requirements imposed by the pass-through entity on the subrecipient so that the federal award is used in accordance with federal statutes, regulations, and the terms and conditions of the federal award; (3) Any additional requirements that the pass-through entity imposes on the subrecipient in order for the pass-through entity to meet its own responsibility to the federal awarding agency, including identification of any required financial and performance reports; (4) i. An approved federally recognized indirect cost rate negotiated between the subrecipient and the Federal Government. If no approved rate exists, the pass-through entity must determine the appropriate rate in collaboration with the subrecipient, which is either: (A) The negotiated indirect cost rate between the pass-through entity and the subrecipient, which can be based on a prior negotiated rate between a different PTE and the same subrecipient. If basing the rate on a previously negotiated rate, the pass-through entity is not required to collect information justifying this rate, but may elect to do so; (B) The de minimis indirect cost rate. ii. The pass-through entity must not require use of a de minimis indirect cost rate if the subrecipient has a federally approved rate. Subrecipients can elect to use the cost allocation method to account for indirect costs in accordance with §200.405(d). (5) A requirement that the subrecipient permits the pass-through entity and auditors to have access to the subrecipient’s records and financial statements as necessary for the pass-through entity to meet the requirements of this part; and (6) Appropriate terms and conditions concerning closeout of the subaward.” Condition: National CASA/GAL’s subrecipient agreements do not contain a level of specificity to fully comply with federal subrecipient regulations. During our testing of subrecipient monitoring, we selected 16 subrecipient awards. For all awards tested, National CASA/GAL’s subaward agreements did not comply with 2 CFR §200.332, Requirements for Pass-Through Entities, as they do not contain a specific scope of work or project description. Cause: National CASA/GAL did not have the proper policies and procedures in place to ensure subaward agreements complied to relevant federal regulation, and that all required elements are located in subaward agreements, and not in the application or by reference to other documents. Effect or Potential Effect: Without adequate controls in place to ensure conformity with subaward requirements, grantees may not ensure compliance with any award special conditions or revised budgets agreed upon at contract implementation. Questioned Costs: None. Context: This is a condition identified per review of National CASA/GAL’s compliance with specified requirements using a non-statistically valid sample. The population consisted of 79 subawards made totaling to $2,428,200 provided to subrecipients in 2023. The sample consisted of 16 subawards totaling $515,618 provided to subrecipients in 2023. Identification as a Repeat Finding: 2022-005. Recommendation: We recommend establishing and maintaining written policies and procedures to ensure subaward agreements conform to the requirements outlined in 2 CFR §200.332. Views of Responsible Officials: Management agrees that subrecipient agreements in place in 2022 did not fully comply with 2 CFR §200.332. Updates were made to the policies and procedures as well to ensure subaward files contain the requisite components. Management has additionally implemented a Grant Master File Checklist to ensure compliance with terms and conditions required in subaward agreements.

Criteria: 2 CFR 200.332 notes, “All pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the following information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes: (1) Federal award identification. (i) Subrecipient name (which must match the name associated with its unique entity identifier); (ii) Subrecipient's unique entity identifier; (iii) Federal Award Identification Number (FAIN); (iv) Federal Award Date (see the definition of Federal award date in § 200.1 of this part) of award to the recipient by the Federal agency;(v) Subaward Period of Performance Start and End Date; (vi) Subaward Budget Period Start and End Date; (vii) Amount of Federal Funds Obligated by this action by the pass-through entity to the subrecipient; (viii) Total Amount of Federal Funds Obligated to the subrecipient by the pass-through entity including the current financial obligation; (ix) Total Amount of the Federal Award committed to the subrecipient by the pass-through entity; (x) Federal award project description, as required to be responsive to the Federal Funding Accountability and Transparency Act (FFATA); (xi) Name of Federal awarding agency, pass-through entity, and contact information for awarding official of the Pass-through entity; (xii) Assistance Listings number and Title; the pass-through entity must identify the dollar amount made available under each Federal award and the Assistance Listings Number at time of disbursement; (xiii) Identification of whether the award is R&D; and (xiv) Indirect cost rate for the Federal award (including if the de minimis rate is charged) per § 200.414. (2) All requirements imposed by the pass-through entity on the subrecipient so that the Federal award is used in accordance with Federal statutes, regulations and the terms and conditions of the Federal award; …” Condition: All three of the subawards selected for testing, the recipient’s UEI number was missing from the subaward. We consider this condition to be an instance of noncompliance relating to the Subrecipient Monitoring compliance requirement. Statistical sampling was not used in making sample selections. Questioned Costs :N/A Cause and effect: Without communication of the required information, subrecipients may overspend award amounts or incur unallowable expenses towards the grant. Recommendation: We recommend ACT evaluates policies and procedures to ensure all required information is communication with the subrecipient. Views of Responsible Officials and Planned Corrective Actions: Management agrees with this Single Audit Finding and response is included in the Corrective Action Plan.

Criteria: 2 CFR 200.332 notes, “All pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the following information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes: (1) Federal award identification. (i) Subrecipient name (which must match the name associated with its unique entity identifier); (ii) Subrecipient's unique entity identifier; (iii) Federal Award Identification Number (FAIN); (iv) Federal Award Date (see the definition of Federal award date in § 200.1 of this part) of award to the recipient by the Federal agency;(v) Subaward Period of Performance Start and End Date; (vi) Subaward Budget Period Start and End Date; (vii) Amount of Federal Funds Obligated by this action by the pass-through entity to the subrecipient; (viii) Total Amount of Federal Funds Obligated to the subrecipient by the pass-through entity including the current financial obligation; (ix) Total Amount of the Federal Award committed to the subrecipient by the pass-through entity; (x) Federal award project description, as required to be responsive to the Federal Funding Accountability and Transparency Act (FFATA); (xi) Name of Federal awarding agency, pass-through entity, and contact information for awarding official of the Pass-through entity; (xii) Assistance Listings number and Title; the pass-through entity must identify the dollar amount made available under each Federal award and the Assistance Listings Number at time of disbursement; (xiii) Identification of whether the award is R&D; and (xiv) Indirect cost rate for the Federal award (including if the de minimis rate is charged) per § 200.414. (2) All requirements imposed by the pass-through entity on the subrecipient so that the Federal award is used in accordance with Federal statutes, regulations and the terms and conditions of the Federal award; …” Condition: All three of the subawards selected for testing, the recipient’s UEI number was missing from the subaward. We consider this condition to be an instance of noncompliance relating to the Subrecipient Monitoring compliance requirement. Statistical sampling was not used in making sample selections. Questioned Costs :N/A Cause and effect: Without communication of the required information, subrecipients may overspend award amounts or incur unallowable expenses towards the grant. Recommendation: We recommend ACT evaluates policies and procedures to ensure all required information is communication with the subrecipient. Views of Responsible Officials and Planned Corrective Actions: Management agrees with this Single Audit Finding and response is included in the Corrective Action Plan.

FINDING 2023-004 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Procurement and Suspension and Debarment Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listing Number: 21.027 Federal Award Number and Year (or Other Identifying Number): FY 2023 Compliance Requirement: Procurement and Suspension and Debarment Audit Findings: Material Weakness, Modified Opinion Condition and Context The County received a total COVID-19 - Coronavirus State and Local Fiscal Recovery Funds (SLFRF) allocation of $73,674,384 and chose to calculate its own revenue loss allowance, which totaled $35,932,557, to use for government services. Some SLFRF program funds expended in 2023 were expended under the revenue loss eligible use category. Additional program funds expended in 2023 were expended under the other eligible use categories. Procurement Federal regulations allow for informal procurement methods when the value of the procurement for property or services does not exceed the simplified acquisition threshold, which is set at $250,000 unless a lower, more restrictive threshold is set by a non-federal entity. As Indiana Code has set a more restrictive threshold of $150,000, informal procurement methods are permitted when the value of the procurement does not exceed $150,000. This informal process allows for methods other than the formal bid process. The informal process is divided between two methods based on thresholds. Micro-purchases, typically for those purchases $10,000 or under, and small purchase procedures for those purchases above the micro-purchase threshold, but below the simplified acquisition threshold. Micro-purchases may be awarded without soliciting competitive price rate quotations. If small purchase procedures are used, then price or rate quotations must be obtained from an adequate number of qualified sources. For funds expended under the revenue loss eligible use category, the above listed procurement requirements do not apply. During the audit period, the County had four vendors with purchases over the $10,000 micropurchase threshold which were expended under an eligible use category other than revenue loss and, as such, were considered small purchase procurements. The County did not provide competitive price quotations for the small purchase procurements for three of the four vendors, which totaled $257,038. Suspension and Debarment Prior to entering into subawards and covered transactions with SLFRF award funds, recipients are required to verify that such contractors and subrecipients are not suspended, debarred, or otherwise excluded. "Covered transactions" include, but are not limited to, contracts for goods and services awarded under a nonprocurement transaction (i.e., grant agreement) that are expected to equal or exceed $25,000. The verification is to be done by checking the Excluded Parties List System, collecting a certification from that person, or adding a clause or condition to the covered transaction with that person. During the engagement, an employee of the Board of County Commissioners stated that verification was completed by checking the Excluded Parties List System when covered transactions were entered into by the County to verify that an entity with which it plans to enter into a covered transaction is not suspended, debarred, or otherwise excluded or disqualified from participating in federal assistance programs or activities. Six covered transactions, totaling $3,952,203, were paid from SLFRF funds to six different vendors for goods or services that equaled or exceeded $25,000 during the audit period. Three of the six covered transactions were selected for testing. For all three transactions tested, documentation was not provided that the vendor's suspension and debarment status was verified. The lack of internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 31 CFR 19.300 states: "When you enter into a covered transaction with another person at the next lower tier, you must verify that the person with whom you do business is not excluded or disqualified. You do this by: (a) Checking the EPLS; or (b) Collecting a certification from that person if allowed by this rule; or (c) Adding a clause or condition to the covered transaction with that person." 2 CFR 200.318 states in part: "(a) The non-Federal entity must have and use documented procurement procedures, consistent with State, local, and tribal laws and regulations and the standards of this section, for the acquisition of property or services required under a Federal award or subaward. The non-Federal entity's documented procurement procedures must conform to the procurement standards identified in §§ 200.317 through 200.327. . . . (i) The non-Federal entity must maintain records sufficient to detail the history of procurement. These records will include, but are not necessarily limited to, the following: Rationale for the method of procurement, selection of contract type, contractor selection or rejection, and the basis for the contract price. . . ." 2 CFR 200.320 states in part: "The non-Federal entity must have and use documented procurement procedures, consistent with the standards of this section and §§ 200.317, 200.318, and 200.319 for any of the following methods of procurement used for the acquisition of property or services required under a Federal award or sub-award. (a) Informal procurement methods. When the value of the procurement for property or services under a Federal award does not exceed the simplified acquisition threshold (SAT), as defined in § 200.1, or a lower threshold established by a non-Federal entity, formal procurement methods are not required. The non-Federal entity may use informal procurement methods to expedite the completion of its transactions and minimize the associated administrative burden and cost. The informal methods used for procurement of property or services at or below the SAT include: . . . (2) Small purchases — (i) Small purchase procedures. The acquisition of property or services, the aggregate dollar amount of which is higher than the micro-purchase threshold but does not exceed the simplified acquisition threshold. If small purchase procedures are used, price or rate quotations must be obtained from an adequate number of qualified sources as determined appropriate by the non-Federal entity. . . . Cause The County was unable to provide documentation to demonstrate it had properly procured services. In addition, the County was unable to provide documentation to demonstrate it had checked the Excluded Parties List System, per the County's procedures, to ensure vendors were not suspended or debarred prior to entering into covered transactions that exceeded $25,000. Effect Without the proper implementation of an effectively designed system of internal controls, the County cannot demonstrate it obtained an adequate number of price or rate quotations prior to selecting a vendor. Therefore, the County could have overpaid for the services obtained. Furthermore, without the proper implementation of an effectively designed system of internal controls, the County cannot ensure the vendors paid with federal funds are eligible to participate in federal programs. Any program funds the County used to pay vendors that have been suspended or debarred would be unallowable, and the funding agency could potentially recover them. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the Board of County Commissioners strengthen the County's system of internal controls to ensure that an adequate number of price or rate quotations are obtained for small purchase procurements. Additionally, we recommended policies and procedures be strengthened to ensure appropriate supporting documentation for federal programs is retained. Lastly, we recommended that the Board of County Commissioners strengthen the County's system of internal controls to ensure that all vendors that are paid $25,000 or more, all or in part with federal funds, are not suspended or debarred from participating in federal programs before entering into any covered transactions. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-003 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): 2023 Compliance Requirement: Reporting Audit Findings: Material Weakness, Other Matters INDIANA STATE BOARD OF ACCOUNTS 20 BARTHOLOMEW COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Repeat Finding This is a repeat finding from the immediately prior audit report. The prior audit finding number was 2022-003. Condition and Context Recipients are required to submit quarterly or annually Project and Expenditure (P&E) reports to the U.S. Department of the Treasury (Treasury). The reporting periods, as well as the respective due dates, are based upon type of recipient and its population, as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. The County was classified as a metropolitan county with a population below 250,000 residents that received an allocation of more than $10 million in COVID-19 - Coronavirus State and Local Fiscal Recovery Funds (SLFRF) award funds. As such, the initial P&E report, covering the period from March 3, 2021 to December 31, 2021, was required to be submitted to the Treasury by January 31, 2022. The subsequent quarterly reports were to cover one calendar quarter and must be submitted to the Treasury by the last day of the month following the end of the period covered. The County submitted all four P&E reports that were required during the audit period. Although a review process over the reports was in place, the internal controls were not effective and did not detect and allow corrections of errors in the reports. As a result, the following errors were noted:  The current period expenditures were incorrectly reported on two of four reports. The current period expenditures were underreported by $70,309 and $13,090 in the Q4 2022 and Q3 2023 reports, respectively.  The total cumulative expenditures were incorrectly reported on all four reports. The total cumulative expenditures were overreported by $174,750 in the Q4 2022 and Q1 2023 reports, and $19,204 in the Q3 2023 report. The total cumulative expenditures were underreported by $690,272 in the Q2 2023 report. The lack of effective internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." INDIANA STATE BOARD OF ACCOUNTS 21 BARTHOLOMEW COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Coronavirus State and Local Fiscal Recovery Funds Compliance and Reporting Guidance, page 10, states in part: ". . . 10. Reporting. All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for compiling and reporting accurate, compliant financial data, in accordance with appropriate accounting standards and principles. . . ." 31 CFR 35.4(c) states in part: "Reporting and requests for other information. During the period of performance, recipients shall provide to the Secretary periodic reports providing detailed accounting of the uses of funds, . . ." Cause A proper system of internal controls was not designed or implemented by management of the County to prevent and detect errors on the P&E report prior to submission. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As such, the County did not report current period expenditures and total cumulative expenditures properly when filing the P&E reports for the quarterly reporting periods from October 1, 2022 to September 30, 2023. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the County. In addition, not meeting the SLFRF reporting requirements increases the likelihood that the public and the Treasury will not have access to transparent and accurate information regarding expenditures of federal awards. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the County develop policies and procedures to ensure the County provides the Treasury with complete and accurate information for the P&E report. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-003 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): CY2022 Compliance Requirement: Reporting Audit Findings: Material Weakness, Modified Opinion Condition and Context Recipients are required to submit quarterly or annually Project and Expenditure (P&E) reports to the U.S. Department of the Treasury (Treasury). The reporting periods, as well as the respective due dates, are based on the type of recipient and the recipient's population, as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. The County was classified as a metropolitan county with a population below 250,000 residents that received an allocation of less than $10 million in COVID-19 - Coronavirus State and Local Fiscal Recovery Funds. As such, the initial P&E report, covering the period from March 3, 2021 to March 31, 2022, was required to be submitted to the Treasury by April 30, 2022. The subsequent annual reports are to cover one calendar year and must be submitted to the Treasury by April 30 each year. INDIANA STATE BOARD OF ACCOUNTS 18 CLINTON COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) The County submitted one P&E report during the audit period, which was obtained from the Treasury's website. Although one employee prepared the P&E report and another reviewed the entries, the system of internal controls was not effective in preventing, detecting, or correcting errors. The data submitted included amounts which should not have been included and amounts which were not supported by the County's records. Errors identified included the following:  Total Cumulative Obligations were overstated by $907,630.  Total Cumulative Expenditures were overstated by $4,332,524. The lack of effective internal controls and noncompliance were isolated to the P&E report submitted during the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Coronavirus State and Local Fiscal Recovery Funds Compliance and Reporting Guidance, page 10, states in part: ". . . 10. Reporting. All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for compiling and reporting accurate, compliant financial data, in accordance with appropriate accounting standards and principles. . . ." 31 CFR 35.4(c) states in part: "Reporting and requests for other information. During the period of performance, recipients shall provide to the Secretary periodic reports providing detailed accounting of the uses of funds, . . ." Cause Although a system of internal controls over the P&E report was designed by management, which included segregation of duties, it did not ensure that the County provided the Treasury with complete and accurate information related to the SLFRF awards. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the County's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. INDIANA STATE BOARD OF ACCOUNTS 19 CLINTON COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the County. In addition, not meeting the SLFRF reporting requirements, by reporting erroneous data, increases the likelihood that the public and the Treasury will not have access to transparent and accurate information regarding expenditures of federal awards. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the County design and implement a proper system of internal controls that would ensure appropriate reviews, approvals and oversight are taking place. Additionally, management should develop policies and procedures to ensure that the County provides the Treasury with complete and accurate information for the P&E report. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-002 Subject: Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: U.S. Department of Treasury Assistance Listing Number: 21.027 Federal Award Number: FY 2022 Pass-Through Entity: N/A Compliance Requirements: Reporting Audit Findings: Material Weakness, Modified Opinion Criteria: 2 CFR 200.303 states in part: "The Non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Coronavirus State and Local Fiscal Recovery Funds Compliance and Reporting Guidance, page 10, states in part: ". . . 10. Reporting. All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for compiling and reporting accurate, compliant financial data, in accordance with appropriate accounting standards and principles. . . ." 31 CFR 35.4(c) states in part: "Reporting and requests for other information. During the period of performance, recipients shall provide to the Secretary periodic reports providing detailed accounting of the uses of funds, . . ." Condition: The City had not properly designed or implemented a system of internal controls, which would include appropriate segregation of duties that would likely be effective in preventing, or detecting and correcting, noncompliance. Recipients are required to submit quarterly or annually Project and Expenditure (P&E) reports to the Department of Treasury (Treasury). The reporting periods, as well as the respective due dates, are based upon type of recipient and its population, as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. The City was classified as a metropolitan city with a population below 250,000 residents that received an allocation of less than $10 million in Coronavirus State and Local Fiscal Recovery Funds (CSLFRF). As, annual reports are to cover one calendar year and must be submitted to the Treasury by April 30 each year. Cause: A proper system of internal controls over the P&E report was not designed by management of the City, which would include segregation of key functions to ensure the City provided the Treasury with complete and accurate information related to the CSLFRF awards. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the City's management of what should be done to effect internal control, and procedures should consist of actions that would implement these policies. Context: The City submitted one P&E report during the audit period; however, a single employee prepared and submitted the P&E report without a review or oversight process in place to prevent, or detect and correct errors. In addition, the P&E report was not properly supported by the City’s records. All but $100,000 of the expenditures were reported under the Eligible Use Category of “Administrative Expenses.” However, the City’s expenditures during the audit period consisted of assistance to business and households, sewer infrastructure, and tourism support, none of which qualified as Administrative Expenses. Furthermore, the City reported that it was electing to take the Revenue Loss Standard Allowance, but the amount reported as Revenue Loss was $0. Effect: Without the proper implementation of an effectively designed system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the City. Identification as a repeat finding, if applicable: Yes. The finding appeared in the prior year report as Finding 2022-001. Recommendation: We recommended that management of the City design and implement a proper system of internal controls that would provide a segregation of duties for the preparation and review of federal reports to ensure appropriate reviews, approvals, and oversight are taking place. Additionally, management should develop policies and procedures to ensure that the City provides the Treasury with complete and accurate information for the P&E report. Views of Responsible Officials and Planned Corrective Actions: Management agrees with the finding and has prepared a corrective action plan.

FINDING 2023-002 Subject: Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: U.S. Department of Treasury Assistance Listing Number: 21.027 Federal Award Number: FY 2022 Pass-Through Entity: N/A Compliance Requirements: Reporting Audit Findings: Material Weakness, Modified Opinion Criteria: 2 CFR 200.303 states in part: "The Non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Coronavirus State and Local Fiscal Recovery Funds Compliance and Reporting Guidance, page 10, states in part: ". . . 10. Reporting. All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for compiling and reporting accurate, compliant financial data, in accordance with appropriate accounting standards and principles. . . ." 31 CFR 35.4(c) states in part: "Reporting and requests for other information. During the period of performance, recipients shall provide to the Secretary periodic reports providing detailed accounting of the uses of funds, . . ." Condition: The City had not properly designed or implemented a system of internal controls, which would include appropriate segregation of duties that would likely be effective in preventing, or detecting and correcting, noncompliance. Recipients are required to submit quarterly or annually Project and Expenditure (P&E) reports to the Department of Treasury (Treasury). The reporting periods, as well as the respective due dates, are based upon type of recipient and its population, as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. The City was classified as a metropolitan city with a population below 250,000 residents that received an allocation of less than $10 million in Coronavirus State and Local Fiscal Recovery Funds (CSLFRF). As, annual reports are to cover one calendar year and must be submitted to the Treasury by April 30 each year. Cause: A proper system of internal controls over the P&E report was not designed by management of the City, which would include segregation of key functions to ensure the City provided the Treasury with complete and accurate information related to the CSLFRF awards. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the City's management of what should be done to effect internal control, and procedures should consist of actions that would implement these policies. Context: The City submitted one P&E report during the audit period; however, a single employee prepared and submitted the P&E report without a review or oversight process in place to prevent, or detect and correct errors. In addition, the P&E report was not properly supported by the City’s records. All but $100,000 of the expenditures were reported under the Eligible Use Category of “Administrative Expenses.” However, the City’s expenditures during the audit period consisted of assistance to business and households, sewer infrastructure, and tourism support, none of which qualified as Administrative Expenses. Furthermore, the City reported that it was electing to take the Revenue Loss Standard Allowance, but the amount reported as Revenue Loss was $0. Effect: Without the proper implementation of an effectively designed system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the City. Identification as a repeat finding, if applicable: Yes. The finding appeared in the prior year report as Finding 2022-001. Recommendation: We recommended that management of the City design and implement a proper system of internal controls that would provide a segregation of duties for the preparation and review of federal reports to ensure appropriate reviews, approvals, and oversight are taking place. Additionally, management should develop policies and procedures to ensure that the City provides the Treasury with complete and accurate information for the P&E report. Views of Responsible Officials and Planned Corrective Actions: Management agrees with the finding and has prepared a corrective action plan.

FINDING 2023-004 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Fund - Reporting Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Fund Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): 20-1892-0-1-806 Compliance Requirement: Reporting Audit Findings: Material Weakness, Other Matters Condition and Context Recipients are required to quarterly or annually submit Project and Expenditure (P&E) reports to the U.S. Department of the Treasury (Treasury). The reporting periods, as well as the respective due dates, are based upon type of recipient and its population, as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. The County was classified as a metropolitan county with a population below 250,000 residents that received an allocation less than $10 million in COVID-19 - Coronavirus State and Local Fiscal Recovery Funds (SLFRF) award funds. As such, the initial P&E report, covering the period from March 3, 2021 to March 31, 2022, was required to be submitted to the Treasury by April 30, 2022. The subsequent annual reports are to cover one calendar year and must be submitted to the Treasury by April 30 each year. The County submitted one P&E report during the audit period. Although the Deputy County Auditor compiled the information for the report and the County Auditor reviewed and submitted the report, the internal controls were not effective in preventing, or detecting and correcting, errors. As a result, the P&E report contained the following errors:  The current period expenditures were overstated by $336,376.  The cumulative expenditures were understated by $18,624. The lack of effective internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." INDIANA STATE BOARD OF ACCOUNTS 20 PERRY COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Coronavirus State and Local Fiscal Recovery Funds Compliance and Reporting Guidance, page 10, states in part: ". . . 10. Reporting. All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for compiling and reporting accurate, compliant financial data, in accordance with appropriate accounting standards and principles. . . ." Cause The County's internal controls were not effective to prevent and detect errors on the P&E report prior to submission. The County did not insure that information reported was correct and applicable to the reporting period of the submission. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As such, the County did not accurately report current period expenditures and total cumulative expenditures properly when filing the P&E report for the period from April 1, 2022 to March 31, 2023. Not properly reporting the information to the Treasury provides the Treasury with an inaccurate picture of the County's activity for the reporting period. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the County. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the County develop policies and procedures to ensure the County accurately reports current period and cumulative expenditures on the P&E report to the Treasury. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-002 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): FY2022 Compliance Requirement: Reporting Audit Findings: Material Weakness, Modified Opinion Repeat Finding This is a repeat finding from the immediately prior audit report. The prior audit finding number was 2022-006. Condition and Context Recipients are required to quarterly or annually submit Project and Expenditure (P&E) reports to the U.S. Department of the Treasury (Treasury). The reporting periods as well as the respective due dates are based upon type of recipient and its population as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. INDIANA STATE BOARD OF ACCOUNTS 17 PUTNAM COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) The County was classified as a county with a population less than 250,000 residents that received an allocation of less than $10 million in COVID-19 - Coronavirus State and Local Fiscal Recovery Funds award funds. As such, the County was required to submit an annual P&E report covering the period April 1, 2022 to March 31, 2023, during the audit period. The P&E report due by April 30, 2023, was submitted timely but the report was not accurate and complete. The report did not include any project descriptions, expenditure amounts, or obligation amounts despite the County having made several awards to different entities in support of various activities within the County. Total current period expenditures for the reporting period per the County's ledger were $5,502,689. In addition, there were nine projects, contracts, or awards exceeding $50,000 awarded during the reporting period that were not disclosed in the report. The lack of internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Coronavirus State and Local Fiscal Recovery Funds Compliance and Reporting Guidance, page 10, states in part: ". . . 10. Reporting. All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for compiling and reporting accurate, compliant financial data, in accordance with appropriate accounting standards and principles. . . ." 31 CFR 35.4(c) states in part: "Reporting and requests for other information. During the period of performance, recipients shall provide to the Secretary periodic reports providing detailed accounting of the uses of funds, . . ." Cause The P&E report was not properly researched and reviewed by the County staff prior to submission. INDIANA STATE BOARD OF ACCOUNTS 18 PUTNAM COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Effect Without the proper implementation of an effectively designed system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As such, the County did not properly report project descriptions and amounts expended when filing the P&E report during the audit period. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the County strengthen its system of internal controls to ensure appropriate reviews, approvals, and oversight are taking place of the work completed by the consultant. We also recommended the development of policies and procedures to ensure the County provides the County Treasury with complete and accurate information for the P&E reports. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report. INDIANA STATE BOARD OF ACCOUNTS 19

FINDING 2023-004 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): OMB Approval #1505-0271 Compliance Requirement: Reporting Audit Findings: Material Weakness, Other Matters INDIANA STATE BOARD OF ACCOUNTS 19 FULTON COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Condition and Context Recipients are required to submit quarterly or annually Project and Expenditure (P&E) reports to the U.S. Department of the Treasury (Treasury). The reporting periods, as well as the respective due dates are based upon type of recipient and its population, as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. The County was classified as a county with a population below 250,000 residents that received an allocation of less than $10 million in State and Local Fiscal Recovery Funds. As such, the P&E report, covering the period from March 3, 2022 to March 31, 2023, was required to be submitted to the Treasury by April 30, 2023. Though the P&E report was prepared by one employee and reviewed by another, the internal control was not effective did not detect and allow corrections of errors prior to submission. The County submitted the P&E report on June 16, 2023, which was 47 days after the due date. Additionally, the report was not mathematically accurate and complete. The key line items of "Total Cumulative Expenditures" and "Current Period Expenditures," as reported on the P&E report, did not agree to the County's ledger. Errors were as follows:  The "Total Cumulative Expenditures" line item was understated by $16,071.  The "Current Period Expenditures" line item was understated by $21,071. The lack of effective internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 31 CFR 35.4(c) states in part: "Reporting and requests for other information. During the period of performance, recipients shall provide to the Secretary periodic reports providing detailed accounting of the uses of funds, . . ." Coronavirus State and Local Fiscal Recovery Funds Compliance and Reporting Guidance, page 10, states in part: INDIANA STATE BOARD OF ACCOUNTS 20 FULTON COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) ". . . 10. Reporting. All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for compiling and reporting accurate, compliant financial data, in accordance with appropriate accounting standards and principles. . . ." Cause The County did not timely submit the P&E report or verify that the information contained within the report accurately reflected the County's expenditures. The expenditures were understated in the report due to not including all activity for the reporting period. Effect Without the proper implementation of an effectively designed system of internal controls, the County cannot ensure that P&E reports are submitted timely and are materially accurate and correct. The reports contained the errors identified in the Condition and Context. In addition, not meeting the reporting requirements increases the likelihood that the public will not have access to transparent and accurate information regarding expenditures of federal awards. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the County strengthen its system of internal controls to ensure that the County provides the Treasury with complete and accurate information for the P&E report. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-005 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Procurement and Suspension and Debarment Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): OMB Approval #1505-0271 Compliance Requirement: Procurement and Suspension and Debarment Audit Findings: Material Weakness, Other Matters INDIANA STATE BOARD OF ACCOUNTS 21 FULTON COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Condition and Context Procurement - Policy The County had not established a purchasing policy that would reflect applicable state laws and regulations, including procedures to avoid the acquisition of unnecessary or duplicative items; procedures to ensure that all solicitations incorporate a clear and accurate description of the technical requirements for the material, product, or service to be procured; and did not maintain written standards of conduct covering conflicts of interest and governing actions of its employees engaged in the selection, award, and administration of contracts. Procurement - Small Purchases Federal regulations allow for informal procurement methods when the value of the procurement for property or services does not exceed the simplified acquisition threshold, which is set at $250,000 unless a lower, more restrictive threshold is set by a non-federal entity. As Indiana Code has set a more restrictive threshold of $150,000, informal procurement methods are permitted when the value of the procurement does not exceed $150,000. This informal process allows for methods other than the formal bid process. The informal process is divided between two methods based on thresholds. Micro-purchases, typically for those purchases $50,000 or under, and small purchase procedures for those purchases above the micro-purchase threshold but below the simplified acquisition threshold. Micro-purchases may be awarded without soliciting competitive price rate quotations. If small purchase procedures are used, then price or rate quotations must be obtained from an adequate number of qualified sources. The County had one vendor that was identified as being less than the simplified acquisition threshold of $150,000 but exceeding the $50,000 micro-purchase threshold. The one vendor was selected for testing. For the one vendor, the County did not obtain price or rate quotes nor was there documentation detailing the history of procurement, which must include the reason for the procurement method used. Suspension and Debarment Prior to entering into subawards and covered transactions with State and Local Fiscal Recovery Funds (SLFRF) award funds, recipients are required to verify that such contractors and subrecipients are not suspended, debarred, or otherwise excluded. "Covered transactions" include, but are not limited to, contracts for goods and services awarded under a nonprocurement transaction (i.e., grant agreement) that are expected to equal or exceed $25,000. The verification is to be done by checking the Excluded Parties List System (EPLS), collecting a certification from that person, or adding a clause or condition to the covered transaction with that person. Upon inquiring of the County to determine its policies and procedures related to suspension and debarment requirements, the County stated procedures were not in place to ensure vendors were not suspended or debarred prior to entering into covered transactions. One covered transaction paid with SLFRF grant funds was identified during the audit period. The covered transaction totaled $66,000 with $46,752 paid in the audit period. The identified transaction was examined to determine if the County verified the suspension and debarment status of the vendor prior to payment. Upon review, the County had not performed procedures to ensure the vendor was not suspended or debarred, or otherwise excluded or disqualified, from participation in federal assistance programs or activities at any time during the audit period. INDIANA STATE BOARD OF ACCOUNTS 22 FULTON COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) The lack of internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.318 states in part: "(a) The non-Federal entity must have and use documented procurement procedures, consistent with State, local, and tribal laws and regulations and the standards of this section, for the acquisition of property or services required under a Federal award or subaward. The non- Federal entity's documented procurement procedures must conform to the procurement standards identified in §§ 200.317 through 200.327 . . . (i) The non-Federal entity must maintain records sufficient to detail the history of procurement. These records will include, but are not necessarily limited to, the following: Rationale for the method of procurement, selection of contract type, contractor selection or rejection, and the basis for the contract price. . . ." 2 CFR 200.320 states in part: "The non-Federal entity must have and use documented procurement procedures, consistent with the standards of this section and §§ 200.317, 200.318, and 200.319 for any of the following methods of procurement used for the acquisition of property or services required under a Federal award or sub-award. (a) Informal procurement methods. When the value of the procurement for property or services under a Federal award does not exceed the simplified acquisition threshold (SAT), as defined in § 200.1, or a lower threshold established by a non-Federal entity, formal procurement methods are not required. The non-Federal entity may use informal procurement methods to expedite the completion of its transactions and minimize the associated administrative burden and cost. The informal methods used for procurement of property or services at or below the SAT include: . . . (2) Small purchases — (i) Small purchase procedures. The acquisition of property or services, the aggregate dollar amount of which is higher than the micro-purchase threshold but does not exceed the simplified acquisition threshold. If small purchase procedures are used, price or rate quotations must be obtained from an adequate number of qualified sources as determined appropriate by the non-Federal entity." INDIANA STATE BOARD OF ACCOUNTS 23 FULTON COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) 2 CFR 200.214 states: "Non-federal entities are subject to the non-procurement debarment and suspension regulations implementing Executive Orders 12549 and 12689, 2 CFR part 180. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are de-barred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities." 31 CFR 19.300 states: "When you enter into a covered transaction with another person at the next lower tier, you must verify that the person with whom you intend to do business is not excluded or disqualified. You do this by: (a) Checking the EPLS; or (b) Collecting a certification from that person if allowed by this rule; or (c) Adding a clause or condition to the covered transaction with that person." Part 4 of the Treasury's Compliance and Reporting Guidance states: ". . . recipients are expected to have procurement policies and procedures in place that comply with the procurement standards outlined in the Uniform Guidance . . ." Cause The County participated in a joint project with the City of Rochester (City) in which the City handled the procurement process. However, the County did not request copies of the quotes or bids obtained by the city, nor did the County document a sole source vendor situation. In addition, the County was unable to provide documentation to demonstrate they checked the vendor was not suspended or debarred prior to entering into the contract. Effect Without the proper implementation of an effectively designed system of internal controls, the County cannot ensure that services obtained provided full and open competition or the basis of the price. In addition, the County cannot ensure the vendors paid were eligible to participate in federal programs. Any program funds the County used to pay vendors that have been suspended or debarred would be unallowable, and the funding agency could potentially recover them. Noncompliance with the provisions of federal regulations and the terms and conditions of the federal award could result in the loss of future federal funding to the County. Questioned Costs There were no questioned costs identified. INDIANA STATE BOARD OF ACCOUNTS 24 FULTON COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Recommendation We recommended the County establish documented procurement procedures consistent with state and local laws for the acquisition of property or services required under a federal award or subaward as outlined in the code of federal regulations. In addition, we recommended the County adhere to the procurement policies and obtain required quotes and bids or adequately document a sole source situation. Finally, we recommended that the County strengthen its system of internal controls to ensure that all vendors that are paid $25,000 or more, all or in part with federal funds, are not suspended or debarred from participating in federal programs before entering into any covered transactions. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-004 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): FY2021 Pass-Through Entity: Indiana Department of Health Compliance Requirement: Reporting Audit Findings: Material Weakness, Other Matters Repeat Finding This is a repeat finding from the immediately prior audit report. The prior audit finding number was 2022-005. Condition and Context Recipients are required quarterly or annually to submit Project and Expenditure (P&E) reports to the U.S. Department of the Treasury (Treasury). The reporting periods, as well as the respective due dates, are based upon type of recipient and its population, as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. The County was classified as a county with a population below 250,000 residents that are allocated more than $10 million in COVID-19 - Coronavirus State and Local Fiscal Recovery Funds (SLFRF). As such, the P&E quarterly reports were to cover one calendar quarter and must be submitted to the Treasury by the last day of the month following the end of the period covered. The Couty's current policy and procedure for complying with reporting requirements is to have the Director of Operations prepare the P&E reports with assistance from his Administrative Assistant, and then the President of the Board of County Commissioners certifies the reports. The current internal control has been determined to be ineffective since the P&E reports do not agree with the County's financial records. The County submitted four P&E reports during the audit period; however, the errors, as identified below, were noted on all four reports.  Quarterly Report: October 1, 2022 to December 31, 2022 Current period expenditures reported 7 projects with errors totaling $77,234. Cumulative expenditures reported 22 projects with errors totaling $3,955,669.  Quarterly Report: January 1, 2023 to March 31, 2023 Current period expenditures reported 7 projects with errors totaling $173,169. Cumulative expenditures reported 25 projects with errors totaling $2,633,217.  Quarterly Report: April 1, 2023 to June 30, 2023 Current period expenditures reported 2 projects with errors totaling $0, since expenditures were posted to the incorrect project. Cumulative expenditures reported 24 projects with errors totaling $2,372,744.  Quarterly Report: July 1, 2023 to September 30, 2023 Current period expenditures reported 3 projects with errors totaling $13,412. Cumulative expenditures reported 26 projects with errors totaling $2,273,749. The lack of effective internal controls and noncompliance were systemic issues throughout the entire audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 31 CFR 35.4(c) states in part: "Reporting and requests for other information. During the period of performance, recipients shall provide to the Secretary periodic reports providing detailed accounting of the use of funds." Coronavirus State and Local Fiscal Recovery Funds Compliance and Reporting Guidance, page 10 states in part: ". . . 10. Reporting. All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for compiling and reporting accurate, compliance financial data, in accordance with appropriate accounting standards and principles. . . ." Cause The County's oversight process for filing the P&E reports did not detect errors. The errors were the result of including expenditures from the incorrect time periods. Effect Without the proper implementation of an effectively designed system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As such, the County did not report cumulative expenditures and current period expenditures properly when filing the P&E reports during the audit period. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the County. In addition, not meeting the SLFRF reporting requirements increases the likelihood that the public will not have access to transparent and accurate information regarding expenditures of federal awards. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the County strengthen its system of internal controls to provide for a segregation of duties in the preparation and review of federal reports to ensure appropriate reviews, approvals, and oversight are taking place. We also recommended the development of policies and procedures to ensure the County provides the Treasury with complete and accurate information for the P&E reports. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-003 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Procurement and Suspension and Debarment Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): FY 2023 Pass-Through Entity: Indiana State Department of Health Compliance Requirement: Procurement and Suspension and Debarment Audit Findings: Material Weakness, Modified Opinion Repeat Finding This is a repeat finding from the immediately prior audit report. The prior audit finding number was 2022-003. Condition and Context Procurement The Indiana State Department of Health created the Health Issues and Challenges Grant Program to provide funding to local and statewide service providers and planning organizations through the American Rescue Plan Act. The funds were to be used to prevent or reduce the prevalence of health issues or improve the health and behavioral health of Indiana residents. The City applied for and was awarded the Health Issues and Challenges grant in the amount of $447,112. INDIANA STATE BOARD OF ACCOUNTS 19 CITY OF NEW CASTLE SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Federal regulations allow for informal procurement methods when the value of the procurement for property or services does not exceed the simplified acquisition threshold, which is set at $250,000 unless a lower, more restrictive threshold is set by a nonfederal entity. As Indiana Code has set a more restrictive threshold of $150,000, informal procurement methods are permitted when the value of the procurement does not exceed $150,000. This informal process allows for methods other than the formal bid process. The informal process is divided between two methods based on thresholds. Micro-purchases, typically for those purchases $10,000 or under, and small purchase procedures for those purchases above the micro-purchase threshold, but below the simplified acquisition threshold. Micro-purchases may be awarded without soliciting competitive price rate quotations. If small purchase procedures are used, then price or rate quotations must be obtained from an adequate number of qualified sources. Four vendors fell within the small purchase threshold. Two of the four small purchases were selected for testing. For the two vendors tested, totaling $71,889, the City did not obtain price or rate quotes. The micro-purchase threshold may be increased, but the City did not provide documentation that the threshold had been increased. Documentation detailing the history of procurement, which must include the rationale for the procurement method used, was not available for audit. The lack of internal controls and noncompliance were systemic throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.318 states in part: "(a) The non-Federal entity must have and use documented procurement procedures, consistent with State, local, and tribal laws and regulations and the standards of this section, for the acquisition of property or services required under a Federal award or subaward. The non-Federal entity's documented procurement procedures must conform to the procurement standards identified in §§ 200.317 through 200.327. . . . (i) The non-Federal entity must maintain records sufficient to detail the history of procurement. These records will include, but are not necessarily limited to, the following: Rationale for the method of procurement, selection of contract type, contractor selection or rejection, and the basis for the contract price. . . ." INDIANA STATE BOARD OF ACCOUNTS 20 CITY OF NEW CASTLE SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) 2 CFR 200.320 states in part: "The non-Federal entity must have and use documented procurement procedures, consistent with the standards of this section and §§ 200.317, 200.318, and 200.319 for any of the following methods of procurement used for the acquisition of property or services required under a Federal award or sub-award. (a) Informal procurement methods. When the value of the procurement for property or services under a Federal award does not exceed the simplified acquisition threshold (SAT), as defined in § 200.1, or a lower threshold established by a non-Federal entity, formal procurement methods are not required. The non-Federal entity may use informal procurement methods to expedite the completion of its transactions and minimize the associated administrative burden and cost. The informal methods used for procurement of property or services at or below the SAT include: . . . (2) Small purchases — (i) Small purchase procedures. The acquisition of property or services, the aggregate dollar amount of which is higher than the micro-purchase threshold but does not exceed the simplified acquisition threshold. If small purchase procedures are used, price or rate quotations must be obtained from an adequate number of qualified sources as determined appropriate by the non-Federal entity. . . ." Part 4 of the Treasury's Compliance and Reporting Guidance states: ". . . recipients are expected to have procurement policies and procedures in place that comply with the procurement standards outlined in the Uniform Guidance . . ." Cause A proper system of internal controls was not designed by management of the City. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the City's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, proper procurement procedures were not adhered to for all vendors. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the City. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the City establish documented procedures consistent with state and local laws for the acquisition of property or services required under a federal award or subaward as outlined in the code of federal regulations. In additions, we recommended the City adhere to the procurement policies. INDIANA STATE BOARD OF ACCOUNTS 21 CITY OF NEW CASTLE SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-004 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): FY 21 Compliance Requirement: Reporting Audit Findings: Material Weakness, Modified Opinion Repeat Finding This is a repeat finding from the immediately prior audit report. The prior audit finding number was 2022-003. Condition and Context Recipients are required to submit quarterly or annually Project and Expenditure (P&E) reports to the U.S. Department of the Treasury (Treasury). The reporting periods, as well as the respective due dates, are based upon type of recipient and its population, as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. Recipients are required to submit quarterly or annually P&E reports to the Treasury. The reporting periods, as well as the respective due dates, are based upon type of recipient and its population, as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. INDIANA STATE BOARD OF ACCOUNTS 19 CITY OF LAWRENCE SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) The City was classified as a metropolitan City with a population below 250,000 residents that received an allocation of more than $10 million in State and Local Fiscal Recovery Funds. As such, the City was required to submit four quarterly P&E reports during the audit period. The reports to be submitted during 2023 were for quarters ending December 31, 2022, March 31, 2023, June 30, 2023, and August 31, 2023. The City did not provide audit evidence that the P&E report for the quarter ended December 31, 2022, was prepared and submitted. Additionally, a single employee prepared and submitted the remaining three P&E reports without evidence of oversight and review. The lack of internal controls was a systemic issue throughout the audit period. The noncompliance was related to the P&E report for the quarter ended December 31, 2022. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 31 CFR 35.4(c) states in part: "Reporting and requests for other information. During the period of performance, recipients shall provide to the Secretary periodic reports providing detailed accounting of the uses of funds, . . ." Coronavirus State and Local Fiscal Recovery Funds Compliance and Reporting Guidance, page 10, states in part: ". . . 10. Reporting. All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for compiling and reporting accurate, compliant financial data, in accordance with appropriate accounting standards and principles. . . ." Cause A proper system of internal controls was not designed by management of the City, which would include segregation of key functions. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the City's management of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. The City was not aware the P&E report for the quarter ending December 31, 2022, had not been filed. INDIANA STATE BOARD OF ACCOUNTS 20 CITY OF LAWRENCE SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Effect Without the proper design or implementation of the components of a system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, a quarterly report was not filed with the Treasury. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the City design and implement a proper system of internal controls, including policies and procedures that would provide segregation of duties to ensure appropriate reviews, approvals, and oversight of federal reports are taking place. We also recommended that all quarterly reports be filed timely with the awarding agency. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report. INDIANA STATE BOARD OF ACCOUNTS 21

FINDING 2023-005 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): FY 2023 Compliance Requirement: Reporting Audit Finding: Material Weakness INDIANA STATE BOARD OF ACCOUNTS 21 TOWN OF UPLAND SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Condition and Context Recipients are required to quarterly or annually submit Project and Expenditure (P&E) reports to the U.S. Department of the Treasury (Treasury). The reporting periods, as well as the respective due dates, are based upon type of recipient and its population, as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. The Town was classified as a town with a population below 250,000 residents that received an allocation of less than $10 million in COVID-19 - Coronavirus State and Local Fiscal Recovery Funds (SLFRF). As such, the initial P&E report, covering the period from March 3, 2022 to March 31, 2023, was required to be submitted to the Treasury by April 30, 2023. The subsequent annual reports are to cover one calendar year and must be submitted to the Treasury by April 30 each year. The Town submitted one P&E report during the audit period; however, the report was submitted without a review or oversight process in place to prevent, or detect and correct, errors. The lack of internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Coronavirus State and Local Fiscal Recovery Funds Compliance and Reporting Guidance, page 10, states in part: ". . . 10. Reporting. All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for com-piling and reporting accurate, compliant financial data, in accordance with appropriate accounting standards and principles. . . ." 31 CFR 35.4(c) states in part: "Reporting and requests for other information. During the period of performance, recipients shall provide to the Secretary periodic reports providing detailed accounting of the uses of funds, . . ." Cause A proper system of internal controls was not designed by management of the Town. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the Town's management of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. INDIANA STATE BOARD OF ACCOUNTS 22 TOWN OF UPLAND SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Effect Without the proper implementation of an effectively designed system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the Town strengthen its system of internal controls to provide for segregation of duties in the preparation and review of federal reports to ensure appropriate reviews, approvals, and oversight are taking place. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-003 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): ARP2021 Compliance Requirement: Reporting Audit Findings: Material Weakness, Other Matters Condition and Context Recipients are required to submit quarterly or annually Project and Expenditure (P&E) reports to the U.S. Department of the Treasury (Treasury). The reporting periods, as well as the respective due dates, are based upon type of recipient and its population, as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contract for the appropriate reporting period. The Town was classified as a metropolitan town with a population below 250,000 residents that received an allocation of less than $10 million in COVID-19 - Coronavirus State and Local Fiscal Recovery Funds (SLFRF) funding. As such, the initial P&E report, covering three calendar quarters from March 3, 2021 to December 31, 2021, was required to be submitted to the Treasury by January 31, 2022. The subsequent quarterly reports are to cover one calendar quarter and must be submitted to the Treasury by the last day of the month following the end of the period covered. The Town submitted one P&E report during the audit period timely; however, a single employee prepared and submitted the P&E report without a review or oversight process in place to prevent, or detect and correct, errors. Only one annual report was required to be submitted by the Town. For the report tested, all activity for the reporting period was not included, information submitted was not supported by the Town's records, and the reports were not fairly presented. Errors identified included the following: Annual Report (April 1, 2022 to March 31, 2023)  The Current Period Obligation and Total Cumulative Obligations were understated by $33,855.  The Current Period and Total Cumulative Expenditures were understated by $33,855. The lack of internal controls and noncompliance were systemic issues throughout the audit period. INDIANA STATE BOARD OF ACCOUNTS 18 TOWN OF WHITESTOWN SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Coronavirus State and Local Fiscal Recovery Funds Compliance and Reporting Guidance, page 10, states in part: ". . . 10. Reporting. All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for compiling and reporting accurate, compliant financial data, in accordance with appropriate accounting standards and principles. . . ." 31 CFR 35.4(c) states in part: "Reporting and requests for other information. During the period of performance, recipients shall provide to the Secretary periodic reports providing detailed accounting of the uses of funds, . . ." Cause A proper system of internal controls over the P&E report was not designed by management of the Town to ensure the Town provided the Treasury with complete and accurate information related to the SLFRF awards. The report that was submitted did not include all transactions from the beginning of 2023, causing a variance with the ledger and what was reported on the P&E report. Effect Without the proper implementation of an effectively designed system of internal controls, the P&E report submitted excluded transactions from the beginning of the reporting period which resulted in all key line items being understated. Not meeting the SLFRF reporting requirements increases the likelihood that the public will not have access to transparent and accurate information regarding expenditures of federal awards. Questioned Costs There were no questioned costs identified. INDIANA STATE BOARD OF ACCOUNTS 19 TOWN OF WHITESTOWN SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Recommendation We recommended that management of the Town design and implement a proper system of internal controls, which includes a segregation of key function, to ensure that the Town provides the Treasury with complete and accurate information for the P&E report. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-004 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Procurement and Suspension and Debarment Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listing Number: 21.027 Federal Award Number and Year (or Other Identifying Number): FY 2023 Compliance Requirement: Procurement and Suspension and Debarment Audit Findings: Material Weakness, Modified Opinion Condition and Context The County received a total COVID-19 - Coronavirus State and Local Fiscal Recovery Funds (SLFRF) allocation of $73,674,384 and chose to calculate its own revenue loss allowance, which totaled $35,932,557, to use for government services. Some SLFRF program funds expended in 2023 were expended under the revenue loss eligible use category. Additional program funds expended in 2023 were expended under the other eligible use categories. Procurement Federal regulations allow for informal procurement methods when the value of the procurement for property or services does not exceed the simplified acquisition threshold, which is set at $250,000 unless a lower, more restrictive threshold is set by a non-federal entity. As Indiana Code has set a more restrictive threshold of $150,000, informal procurement methods are permitted when the value of the procurement does not exceed $150,000. This informal process allows for methods other than the formal bid process. The informal process is divided between two methods based on thresholds. Micro-purchases, typically for those purchases $10,000 or under, and small purchase procedures for those purchases above the micro-purchase threshold, but below the simplified acquisition threshold. Micro-purchases may be awarded without soliciting competitive price rate quotations. If small purchase procedures are used, then price or rate quotations must be obtained from an adequate number of qualified sources. For funds expended under the revenue loss eligible use category, the above listed procurement requirements do not apply. During the audit period, the County had four vendors with purchases over the $10,000 micropurchase threshold which were expended under an eligible use category other than revenue loss and, as such, were considered small purchase procurements. The County did not provide competitive price quotations for the small purchase procurements for three of the four vendors, which totaled $257,038. Suspension and Debarment Prior to entering into subawards and covered transactions with SLFRF award funds, recipients are required to verify that such contractors and subrecipients are not suspended, debarred, or otherwise excluded. "Covered transactions" include, but are not limited to, contracts for goods and services awarded under a nonprocurement transaction (i.e., grant agreement) that are expected to equal or exceed $25,000. The verification is to be done by checking the Excluded Parties List System, collecting a certification from that person, or adding a clause or condition to the covered transaction with that person. During the engagement, an employee of the Board of County Commissioners stated that verification was completed by checking the Excluded Parties List System when covered transactions were entered into by the County to verify that an entity with which it plans to enter into a covered transaction is not suspended, debarred, or otherwise excluded or disqualified from participating in federal assistance programs or activities. Six covered transactions, totaling $3,952,203, were paid from SLFRF funds to six different vendors for goods or services that equaled or exceeded $25,000 during the audit period. Three of the six covered transactions were selected for testing. For all three transactions tested, documentation was not provided that the vendor's suspension and debarment status was verified. The lack of internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 31 CFR 19.300 states: "When you enter into a covered transaction with another person at the next lower tier, you must verify that the person with whom you do business is not excluded or disqualified. You do this by: (a) Checking the EPLS; or (b) Collecting a certification from that person if allowed by this rule; or (c) Adding a clause or condition to the covered transaction with that person." 2 CFR 200.318 states in part: "(a) The non-Federal entity must have and use documented procurement procedures, consistent with State, local, and tribal laws and regulations and the standards of this section, for the acquisition of property or services required under a Federal award or subaward. The non-Federal entity's documented procurement procedures must conform to the procurement standards identified in §§ 200.317 through 200.327. . . . (i) The non-Federal entity must maintain records sufficient to detail the history of procurement. These records will include, but are not necessarily limited to, the following: Rationale for the method of procurement, selection of contract type, contractor selection or rejection, and the basis for the contract price. . . ." 2 CFR 200.320 states in part: "The non-Federal entity must have and use documented procurement procedures, consistent with the standards of this section and §§ 200.317, 200.318, and 200.319 for any of the following methods of procurement used for the acquisition of property or services required under a Federal award or sub-award. (a) Informal procurement methods. When the value of the procurement for property or services under a Federal award does not exceed the simplified acquisition threshold (SAT), as defined in § 200.1, or a lower threshold established by a non-Federal entity, formal procurement methods are not required. The non-Federal entity may use informal procurement methods to expedite the completion of its transactions and minimize the associated administrative burden and cost. The informal methods used for procurement of property or services at or below the SAT include: . . . (2) Small purchases — (i) Small purchase procedures. The acquisition of property or services, the aggregate dollar amount of which is higher than the micro-purchase threshold but does not exceed the simplified acquisition threshold. If small purchase procedures are used, price or rate quotations must be obtained from an adequate number of qualified sources as determined appropriate by the non-Federal entity. . . . Cause The County was unable to provide documentation to demonstrate it had properly procured services. In addition, the County was unable to provide documentation to demonstrate it had checked the Excluded Parties List System, per the County's procedures, to ensure vendors were not suspended or debarred prior to entering into covered transactions that exceeded $25,000. Effect Without the proper implementation of an effectively designed system of internal controls, the County cannot demonstrate it obtained an adequate number of price or rate quotations prior to selecting a vendor. Therefore, the County could have overpaid for the services obtained. Furthermore, without the proper implementation of an effectively designed system of internal controls, the County cannot ensure the vendors paid with federal funds are eligible to participate in federal programs. Any program funds the County used to pay vendors that have been suspended or debarred would be unallowable, and the funding agency could potentially recover them. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the Board of County Commissioners strengthen the County's system of internal controls to ensure that an adequate number of price or rate quotations are obtained for small purchase procurements. Additionally, we recommended policies and procedures be strengthened to ensure appropriate supporting documentation for federal programs is retained. Lastly, we recommended that the Board of County Commissioners strengthen the County's system of internal controls to ensure that all vendors that are paid $25,000 or more, all or in part with federal funds, are not suspended or debarred from participating in federal programs before entering into any covered transactions. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

Assistance Listing Number, Federal Agency, and Program Name: Assistance Listing Number 93.600, Department of Health and Human Services, Head Start and Covid-19: Head Start ARP Federal Award Identification Number and Year: 05CH011937-03-03, 05HE000989-01-01 Pass-through Entity – N/A Finding Type – Significant deficiency in internal control over compliance Repeat Finding – No Criteria – Per 2 CFR 200.332 all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the following information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes: (1) Federal award identification. (i) Subrecipient name (which must match the name associated with its unique entity identifier); (ii) Subrecipient's unique entity identifier; (iii) Federal Award Identification Number (FAIN); (iv) Federal Award Date (see the definition of Federal award date in § 200.1 of this part) of award to the recipient by the Federal agency; (v) Subaward Period of Performance Start and End Date; (vi) Subaward Budget Period Start and End Date; (vii) Amount of Federal Funds Obligated by this action by the pass-through entity to the subrecipient; (viii) Total Amount of Federal Funds Obligated to the subrecipient by the pass-through entity including the current financial obligation; (ix) Total Amount of the Federal Award committed to the subrecipient by the pass-through entity; (x) Federal award project description, as required by the Federal Funding Accountability and Transparency Act (FFATA); (xi) Name of the Federal agency, pass-through entity, and contact information for awarding official of the pass-through entity; (xii) Assistance Listings title and number; the pass-through entity must identify the dollar amount made available under each Federal award and the Assistance Listings Number at the time of disbursement; (xiii) Identification of whether the Federal award is for research and development; and (xiv) Indirect cost rate for the Federal award (including if the de minimis rate is used in accordance with § 200.414) Condition – During our test work, we noted that 3 out of 3 subaward agreements tested did not include the information as noted in 2 CFR 200.332. The controls in place did not ensure that the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, were included in the grant agreement of its subrecipient. Identification of How Questioned Costs Were Computed – N/A Questioned Costs – None Cause/Effect – The controls in place did not ensure that the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, were included in the grant agreement of its subrecipient. As a result, required information was omitted. Recommendation – We recommend that management review its procedures and controls to ensure the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, is included in all subawards to subrecipients. View of Responsible Officials and Corrective Action Plan –The Agency agrees with the finding. When granting funds as a subaward to a pass-through entity, the Agency will update its master templates for subawards to include the required information. In addition, when the sub agreements are routed for signature and reviewed by the Chief Financial Officer, they will be double-checked to ensure compliance with this requirement.

Assistance Listing Number, Federal Agency, and Program Name: Assistance Listing Number 93.600, Department of Health and Human Services, Head Start and Covid-19: Head Start ARP Federal Award Identification Number and Year: 05CH011937-03-03, 05HE000989-01-01 Pass-through Entity – N/A Finding Type – Significant deficiency in internal control over compliance Repeat Finding – No Criteria – Per 2 CFR 200.332 all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the following information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes: (1) Federal award identification. (i) Subrecipient name (which must match the name associated with its unique entity identifier); (ii) Subrecipient's unique entity identifier; (iii) Federal Award Identification Number (FAIN); (iv) Federal Award Date (see the definition of Federal award date in § 200.1 of this part) of award to the recipient by the Federal agency; (v) Subaward Period of Performance Start and End Date; (vi) Subaward Budget Period Start and End Date; (vii) Amount of Federal Funds Obligated by this action by the pass-through entity to the subrecipient; (viii) Total Amount of Federal Funds Obligated to the subrecipient by the pass-through entity including the current financial obligation; (ix) Total Amount of the Federal Award committed to the subrecipient by the pass-through entity; (x) Federal award project description, as required by the Federal Funding Accountability and Transparency Act (FFATA); (xi) Name of the Federal agency, pass-through entity, and contact information for awarding official of the pass-through entity; (xii) Assistance Listings title and number; the pass-through entity must identify the dollar amount made available under each Federal award and the Assistance Listings Number at the time of disbursement; (xiii) Identification of whether the Federal award is for research and development; and (xiv) Indirect cost rate for the Federal award (including if the de minimis rate is used in accordance with § 200.414) Condition – During our test work, we noted that 3 out of 3 subaward agreements tested did not include the information as noted in 2 CFR 200.332. The controls in place did not ensure that the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, were included in the grant agreement of its subrecipient. Identification of How Questioned Costs Were Computed – N/A Questioned Costs – None Cause/Effect – The controls in place did not ensure that the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, were included in the grant agreement of its subrecipient. As a result, required information was omitted. Recommendation – We recommend that management review its procedures and controls to ensure the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, is included in all subawards to subrecipients. View of Responsible Officials and Corrective Action Plan –The Agency agrees with the finding. When granting funds as a subaward to a pass-through entity, the Agency will update its master templates for subawards to include the required information. In addition, when the sub agreements are routed for signature and reviewed by the Chief Financial Officer, they will be double-checked to ensure compliance with this requirement.

Assistance Listing Number, Federal Agency, and Program Name: Assistance Listing Number 64.033, Department of Veteran Affairs, VA Supportive Services for Veteran Families Program Federal Award Identification Number and Year: 21-MI-221, 22-MI-221, 20-MI-221-SS, 20-MI-221-LT, 20-MI-221 Pass-through Entity – N/A Finding Type – Significant deficiency in internal control over compliance Repeat Finding – No Criteria – Per 2 CFR 200.332 all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the following information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes: (1) Federal award identification. (i) Subrecipient name (which must match the name associated with its unique entity identifier); (ii) Subrecipient's unique entity identifier; (iii) Federal Award Identification Number (FAIN); (iv) Federal Award Date (see the definition of Federal award date in § 200.1 of this part) of award to the recipient by the Federal agency; (v) Subaward Period of Performance Start and End Date; (vi) Subaward Budget Period Start and End Date; (vii) Amount of Federal Funds Obligated by this action by the pass-through entity to the subrecipient; (viii) Total Amount of Federal Funds Obligated to the subrecipient by the pass-through entity including the current financial obligation; (ix) Total Amount of the Federal Award committed to the subrecipient by the pass-through entity;(x) Federal award project description, as required by the Federal Funding Accountability and Transparency Act (FFATA); (xi) Name of the Federal agency, pass-through entity, and contact information for awarding official of the pass-through entity; (xii) Assistance Listings title and number; the pass-through entity must identify the dollar amount made available under each Federal award and the Assistance Listings Number at the time of disbursement; (xiii) Identification of whether the Federal award is for research and development; and (xiv) Indirect cost rate for the Federal award (including if the de minimis rate is used in accordance with § 200.414) Condition – During our test work, we noted one instance where the subaward was not clearly identified to the subrecipient as a subaward and did not include the information as noted in 2 CFR 200.332. The controls in place did not ensure that the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, was included in the grant agreement of its subrecipient. Identification of How Questioned Costs Were Computed – N/A Questioned Costs – None Cause/Effect – The controls in place did not ensure that the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, were included in the grant agreement of its subrecipient. As a result, required information was omitted.Recommendation – We recommend that management review its procedures and controls to ensure the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, is included in all subawards to subrecipients. View of Responsible Officials and Corrective Action Plan –The Agency agrees with the finding. When granting funds as a subaward to a pass-through entity, the Agency will update its master templates for subawards to include the required information. In addition, when the sub agreements are routed for signature and reviewed by the Chief Financial Officer, they will be double-checked to ensure compliance with this requirement

Assistance Listing Number, Federal Agency, and Program Name: Assistance Listing Number 64.033, Department of Veteran Affairs, VA Supportive Services for Veteran Families Program Federal Award Identification Number and Year: 21-MI-221, 22-MI-221, 20-MI-221-SS, 20-MI-221-LT, 20-MI-221 Pass-through Entity – N/A Finding Type – Significant deficiency in internal control over compliance Repeat Finding – No Criteria – Per 2 CFR 200.332 all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the following information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes: (1) Federal award identification. (i) Subrecipient name (which must match the name associated with its unique entity identifier); (ii) Subrecipient's unique entity identifier; (iii) Federal Award Identification Number (FAIN); (iv) Federal Award Date (see the definition of Federal award date in § 200.1 of this part) of award to the recipient by the Federal agency; (v) Subaward Period of Performance Start and End Date; (vi) Subaward Budget Period Start and End Date; (vii) Amount of Federal Funds Obligated by this action by the pass-through entity to the subrecipient; (viii) Total Amount of Federal Funds Obligated to the subrecipient by the pass-through entity including the current financial obligation; (ix) Total Amount of the Federal Award committed to the subrecipient by the pass-through entity;(x) Federal award project description, as required by the Federal Funding Accountability and Transparency Act (FFATA); (xi) Name of the Federal agency, pass-through entity, and contact information for awarding official of the pass-through entity; (xii) Assistance Listings title and number; the pass-through entity must identify the dollar amount made available under each Federal award and the Assistance Listings Number at the time of disbursement; (xiii) Identification of whether the Federal award is for research and development; and (xiv) Indirect cost rate for the Federal award (including if the de minimis rate is used in accordance with § 200.414) Condition – During our test work, we noted one instance where the subaward was not clearly identified to the subrecipient as a subaward and did not include the information as noted in 2 CFR 200.332. The controls in place did not ensure that the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, was included in the grant agreement of its subrecipient. Identification of How Questioned Costs Were Computed – N/A Questioned Costs – None Cause/Effect – The controls in place did not ensure that the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, were included in the grant agreement of its subrecipient. As a result, required information was omitted.Recommendation – We recommend that management review its procedures and controls to ensure the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, is included in all subawards to subrecipients. View of Responsible Officials and Corrective Action Plan –The Agency agrees with the finding. When granting funds as a subaward to a pass-through entity, the Agency will update its master templates for subawards to include the required information. In addition, when the sub agreements are routed for signature and reviewed by the Chief Financial Officer, they will be double-checked to ensure compliance with this requirement

Assistance Listing Number, Federal Agency, and Program Name: Assistance Listing Number 64.033, Department of Veteran Affairs, VA Supportive Services for Veteran Families Program Federal Award Identification Number and Year: 21-MI-221, 22-MI-221, 20-MI-221-SS, 20-MI-221-LT, 20-MI-221 Pass-through Entity – N/A Finding Type – Significant deficiency in internal control over compliance Repeat Finding – No Criteria – Per 2 CFR 200.332 all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the following information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes: (1) Federal award identification. (i) Subrecipient name (which must match the name associated with its unique entity identifier); (ii) Subrecipient's unique entity identifier; (iii) Federal Award Identification Number (FAIN); (iv) Federal Award Date (see the definition of Federal award date in § 200.1 of this part) of award to the recipient by the Federal agency; (v) Subaward Period of Performance Start and End Date; (vi) Subaward Budget Period Start and End Date; (vii) Amount of Federal Funds Obligated by this action by the pass-through entity to the subrecipient; (viii) Total Amount of Federal Funds Obligated to the subrecipient by the pass-through entity including the current financial obligation; (ix) Total Amount of the Federal Award committed to the subrecipient by the pass-through entity;(x) Federal award project description, as required by the Federal Funding Accountability and Transparency Act (FFATA); (xi) Name of the Federal agency, pass-through entity, and contact information for awarding official of the pass-through entity; (xii) Assistance Listings title and number; the pass-through entity must identify the dollar amount made available under each Federal award and the Assistance Listings Number at the time of disbursement; (xiii) Identification of whether the Federal award is for research and development; and (xiv) Indirect cost rate for the Federal award (including if the de minimis rate is used in accordance with § 200.414) Condition – During our test work, we noted one instance where the subaward was not clearly identified to the subrecipient as a subaward and did not include the information as noted in 2 CFR 200.332. The controls in place did not ensure that the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, was included in the grant agreement of its subrecipient. Identification of How Questioned Costs Were Computed – N/A Questioned Costs – None Cause/Effect – The controls in place did not ensure that the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, were included in the grant agreement of its subrecipient. As a result, required information was omitted.Recommendation – We recommend that management review its procedures and controls to ensure the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, is included in all subawards to subrecipients. View of Responsible Officials and Corrective Action Plan –The Agency agrees with the finding. When granting funds as a subaward to a pass-through entity, the Agency will update its master templates for subawards to include the required information. In addition, when the sub agreements are routed for signature and reviewed by the Chief Financial Officer, they will be double-checked to ensure compliance with this requirement

Assistance Listing Number, Federal Agency, and Program Name: Assistance Listing Number 64.033, Department of Veteran Affairs, VA Supportive Services for Veteran Families Program Federal Award Identification Number and Year: 21-MI-221, 22-MI-221, 20-MI-221-SS, 20-MI-221-LT, 20-MI-221 Pass-through Entity – N/A Finding Type – Significant deficiency in internal control over compliance Repeat Finding – No Criteria – Per 2 CFR 200.332 all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the following information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes: (1) Federal award identification. (i) Subrecipient name (which must match the name associated with its unique entity identifier); (ii) Subrecipient's unique entity identifier; (iii) Federal Award Identification Number (FAIN); (iv) Federal Award Date (see the definition of Federal award date in § 200.1 of this part) of award to the recipient by the Federal agency; (v) Subaward Period of Performance Start and End Date; (vi) Subaward Budget Period Start and End Date; (vii) Amount of Federal Funds Obligated by this action by the pass-through entity to the subrecipient; (viii) Total Amount of Federal Funds Obligated to the subrecipient by the pass-through entity including the current financial obligation; (ix) Total Amount of the Federal Award committed to the subrecipient by the pass-through entity;(x) Federal award project description, as required by the Federal Funding Accountability and Transparency Act (FFATA); (xi) Name of the Federal agency, pass-through entity, and contact information for awarding official of the pass-through entity; (xii) Assistance Listings title and number; the pass-through entity must identify the dollar amount made available under each Federal award and the Assistance Listings Number at the time of disbursement; (xiii) Identification of whether the Federal award is for research and development; and (xiv) Indirect cost rate for the Federal award (including if the de minimis rate is used in accordance with § 200.414) Condition – During our test work, we noted one instance where the subaward was not clearly identified to the subrecipient as a subaward and did not include the information as noted in 2 CFR 200.332. The controls in place did not ensure that the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, was included in the grant agreement of its subrecipient. Identification of How Questioned Costs Were Computed – N/A Questioned Costs – None Cause/Effect – The controls in place did not ensure that the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, were included in the grant agreement of its subrecipient. As a result, required information was omitted.Recommendation – We recommend that management review its procedures and controls to ensure the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, is included in all subawards to subrecipients. View of Responsible Officials and Corrective Action Plan –The Agency agrees with the finding. When granting funds as a subaward to a pass-through entity, the Agency will update its master templates for subawards to include the required information. In addition, when the sub agreements are routed for signature and reviewed by the Chief Financial Officer, they will be double-checked to ensure compliance with this requirement

Assistance Listing Number, Federal Agency, and Program Name: Assistance Listing Number 64.033, Department of Veteran Affairs, VA Supportive Services for Veteran Families Program Federal Award Identification Number and Year: 21-MI-221, 22-MI-221, 20-MI-221-SS, 20-MI-221-LT, 20-MI-221 Pass-through Entity – N/A Finding Type – Significant deficiency in internal control over compliance Repeat Finding – No Criteria – Per 2 CFR 200.332 all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the following information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes: (1) Federal award identification. (i) Subrecipient name (which must match the name associated with its unique entity identifier); (ii) Subrecipient's unique entity identifier; (iii) Federal Award Identification Number (FAIN); (iv) Federal Award Date (see the definition of Federal award date in § 200.1 of this part) of award to the recipient by the Federal agency; (v) Subaward Period of Performance Start and End Date; (vi) Subaward Budget Period Start and End Date; (vii) Amount of Federal Funds Obligated by this action by the pass-through entity to the subrecipient; (viii) Total Amount of Federal Funds Obligated to the subrecipient by the pass-through entity including the current financial obligation; (ix) Total Amount of the Federal Award committed to the subrecipient by the pass-through entity;(x) Federal award project description, as required by the Federal Funding Accountability and Transparency Act (FFATA); (xi) Name of the Federal agency, pass-through entity, and contact information for awarding official of the pass-through entity; (xii) Assistance Listings title and number; the pass-through entity must identify the dollar amount made available under each Federal award and the Assistance Listings Number at the time of disbursement; (xiii) Identification of whether the Federal award is for research and development; and (xiv) Indirect cost rate for the Federal award (including if the de minimis rate is used in accordance with § 200.414) Condition – During our test work, we noted one instance where the subaward was not clearly identified to the subrecipient as a subaward and did not include the information as noted in 2 CFR 200.332. The controls in place did not ensure that the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, was included in the grant agreement of its subrecipient. Identification of How Questioned Costs Were Computed – N/A Questioned Costs – None Cause/Effect – The controls in place did not ensure that the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, were included in the grant agreement of its subrecipient. As a result, required information was omitted.Recommendation – We recommend that management review its procedures and controls to ensure the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, is included in all subawards to subrecipients. View of Responsible Officials and Corrective Action Plan –The Agency agrees with the finding. When granting funds as a subaward to a pass-through entity, the Agency will update its master templates for subawards to include the required information. In addition, when the sub agreements are routed for signature and reviewed by the Chief Financial Officer, they will be double-checked to ensure compliance with this requirement