Findings Citing § 200.1

FINDING 2023-001 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): CY 2023 Compliance Requirement: Reporting Audit Findings: Material Weakness, Other Matters INDIANA STATE BOARD OF ACCOUNTS 13 CITY OF BUTLER SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Condition and Context Recipients are required to submit quarterly or annually Project and Expenditure (P&E) reports to the U.S. Department of the Treasury (Treasury). The reporting periods, as well as the respective due dates, are based upon type of recipient and its population, as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. The City was classified as a metropolitan city with a population below 250,000 residents that received an allocation of less than $10 million in COVID-19 - Coronavirus State and Local Fiscal Recovery Funds (SLFRF) award funds. As such, the initial P&E report, covering the period from March 3, 2021 to March 31, 2022, was required to be submitted to the Treasury by April 30, 2022. The subsequent annual reports are to cover one calendar year and must be submitted to the Treasury by April 30 each year. The City submitted one P&E report during the audit period; however, the report was submitted without a review or oversight process in place to prevent, or detect and correct, errors. As a result, errors in reporting were identified. The cumulative obligations and current period obligations were understated by $104,988. The cumulative obligations and current period obligations reported was the total amount of grant funds expended through December 31, 2022, instead of the amount of funds expended through March 31, 2023. The lack of internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Coronavirus State and Local Fiscal Recovery Funds Compliance and Reporting Guidance, page 10, states in part: ". . . 10. Reporting. All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for com-piling and reporting accurate, compliant financial data, in accordance with appropriate accounting standards and principles. . . ." 31 CFR 35.4(c) states in part: "Reporting and requests for other information. During the period of performance, recipients shall provide to the Secretary periodic reports providing detailed accounting of the uses of funds, . . ." INDIANA STATE BOARD OF ACCOUNTS 14 CITY OF BUTLER SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Cause A proper system of internal controls over the P&E report was not implemented by the management of the City to ensure that complete and accurate information related to the SLFRF awards was provided to the Treasury. The City incorrectly reported the cumulative obligations and current period obligations due to abstracting and reporting data through the end of the year, instead of the end of March 2023 as required. Effect Without the proper implementation of an effectively designed system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As such, errors, as identified in the Condition and Context, occurred, and inaccurate information was provided to the Treasury. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the City. In addition, not meeting the SLFRF reporting requirements increases the likelihood that the public will not have access to transparent and accurate information regarding expenditures of federal awards. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the City design and implement a proper system of internal controls that would provide for segregation of duties to ensure appropriate reviews, approvals, and oversight are taking place. Additionally, management should develop policies and procedures to ensure that the City abstracts and reports on the correct time frame for each report submitted to provide the Treasury with complete and accurate information. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report. INDIANA STATE

FINDING 2023-005 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): 2023 Compliance Requirement: Reporting Audit Findings: Material Weakness, Other Matters Repeat Finding This is a repeat finding from the immediately prior audit report. The prior audit finding number was 2022-004. INDIANA STATE BOARD OF ACCOUNTS 23 JEFFERSON COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Condition and Context Recipients are required to submit quarterly or annually Project and Expenditure (P&E) reports to the U.S. Department of the Treasury (Treasury). The reporting periods, as well as the respective due dates, are based upon type of recipient and its population, as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. The County was classified as a metropolitan county with a population below 250,000 residents that received an allocation of less than $10 million in COVID-19 - Coronavirus State and Local Fiscal Recovery Funds (SLFRF). As such, the initial P&E report, covering the period from March 3, 2021 to March 31, 2022, was required to be submitted to the Treasury by April 30, 2022. The subsequent annual reports are to cover one calendar year and must be submitted to the Treasury by April 30 each year. The County submitted one P&E report during the audit period; however, the report was submitted without a review or oversight process in place to prevent, or detect and correct, errors. As a result, errors in reporting were identified. The cumulative obligations and expenditures and current period obligations and expenditures were incorrectly reported. The cumulative obligations and expenditures and current period obligations reported was the total amount of grant funds received to date instead of actual funds obligated and expended. The current period expenditures reported equaled the total expenditures for 2022, rather than expenditures that occurred during the reporting period of April through December of 2022, and January through March of 2023. The lack of internal controls and the failure to maintain adequate supporting documentation was isolated to the annual P&E report. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Coronavirus State and Local Fiscal Recovery Funds Compliance and Reporting Guidance, page 10, states in part: ". . . 10. Reporting. All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for compiling and reporting accurate, compliant financial data, in accordance with appropriate accounting standards and principles. . . ." 31 CFR 35.4(c) states in part: "Reporting and requests for other information. During the period of performance, recipients shall provide to the Secretary periodic reports providing detailed accounting of the uses of funds, . . ." INDIANA STATE BOARD OF ACCOUNTS 24 JEFFERSON COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Cause The County's oversight process for filing the P&E report for the period of April 1, 2022 to March 31, 2023, did not detect errors. Furthermore, due to the timing of the prior audit completion and the P&E report submission due dates, corrective actions as outlined in the County's corrective action plan for item 2022-004 could not be implemented in time to correct the noncompliance for this audit period. Effect Without the proper implementation of an effectively designed system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As such, the County did not report cumulative obligations and current period obligations properly when filing the P&E report for the period April 1, 2022 to March 31, 2023. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the County. In addition, not meeting the SLFRF reporting requirements increases the likelihood that the public will not have access to transparent and accurate information regarding expenditures of federal awards. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the County strengthen its system of internal controls to provide for a segregation of duties in the preparation and review of federal reports to ensure appropriate reviews, approvals, and oversight are taking place. We also recommended the development of policies and procedures to ensure the County provides the Treasury with complete and accurate information for the P&E report. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-003 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): FY 2023 Compliance Requirement: Reporting Audit Findings: Material Weakness, Other Matters Condition and Context Recipients are required to submit quarterly or annually Project and Expenditure (P&E) reports to the U.S. Department of the Treasury (Treasury). The reporting periods, as well as the respective due dates, are based upon type of recipient and its population, as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. The Town was classified as a Non-Entitlement Unit with a population below 250,000 residents that are allocated less than $10 million in Coronavirus State and Local Fiscal Recovery Funds (SLFRF). As such, the Town's P&E report, covering the period from April 1, 2022 to March 31, 2023, was required to be submitted to the Treasury by April 30, 2023. The Town timely submitted one P&E report during the audit period; however, the report was submitted without a review or oversight process in place to prevent, or detect and correct, errors. As a result, errors in reporting were identified. The Town reported current expenditures of $33,325, which did not agree with the accounting records. The lack of internal controls and noncompliance were isolated to the one annual P&E report. INDIANA STATE BOARD OF ACCOUNTS 18 TOWN OF PENDLETON SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Coronavirus State and Local Fiscal Recovery Funds Compliance and Reporting Guidance, page 10, states in part: ". . . 10. Reporting. All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for compiling and reporting accurate, compliant financial data, in accordance with appropriate accounting standards and principles. . . ." 31 CFR 35.4(c) states in part: "Reporting and requests for other information. During the period of performance, recipients shall provide to the Secretary periodic reports providing detailed accounting of the uses of funds, . . ." The Indiana State Board of Accounts (SBOA) is required under Indiana Code 5-11-1-27(e) to define the acceptable minimum level of internal control standards. To provide clarifying guidance, the State Examiner compiled the standards contained in the manual, Uniform Internal Control Standards for Indiana Political Subdivisions. All political subdivisions subject to audit by SBOA are expected to adhere to these standards. The standards include adequate control activities. According to this manual: "Control activities are the actions and tools established through policies and procedures that help to detect, prevent, or reduce the identified risks that interfere with the achievement of objectives. Detection activities are designed to identify unfavorable events in a timely manner whereas prevention activities are designed to deter the occurrence of an unfavorable event. Examples of these activities include reconciliations, authorizations, approval processes, performance reviews, and verification processes. An integral part of the control activity component is segregation of duties. . . . There is an expectation of segregation of duties. If compensating controls are necessary, documentation should exist to identify both the areas where segregation of duties are not feasible or practical and the compensating controls implemented to mitigate the risk. . . ." INDIANA STATE BOARD OF ACCOUNTS 19 TOWN OF PENDLETON SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Cause A proper system of internal controls over P&E reports was not implemented by the management of the Town to ensure that complete and accurate information related to the SLFRF awards was provided to the Treasury. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the Town's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. The Town incorrectly reported the current expenditures due to misunderstanding the line-item requirement. Effect Without the proper implementation of an effectively designed system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As such, errors, as identified in the Condition and Context, occurred and inaccurate information was provided to the Treasury. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the Town. In addition, not meeting the SLFRF reporting requirements increases the likelihood that the public will not have access to transparent and accurate information regarding expenditures of federal awards. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the Town design and implement a proper system of internal controls that would provide for segregation of duties to ensure appropriate reviews, approvals, and oversight are taking place. Additionally, management should develop policies and procedures to ensure that the Town provides the Treasury with complete and accurate information for the P&E report. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report. INDIANA STATE BOARD OF ACCOUNTS 20

FINDING 2023-003 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Procurement and Suspension and Debarment Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): FR-2023-ILBC-00004 Pass-Through Entity: Indiana Department of Homeland Security Compliance Requirement: Procurement and Suspension and Debarment Audit Findings: Material Weakness, Modified Opinion Condition and Context Procurement Policy The County did not have documented procurement procedures or policies reflecting applicable state or federal laws and regulations for procuring goods and services paid with federal funds. INDIANA STATE BOARD OF ACCOUNTS 17 DECATUR COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Small Purchases Federal regulations allow for informal procurement methods when the value of the procurement for property or services does not exceed the simplified acquisition threshold, which is customarily set at $250,000. However, Indiana Code 5-22-8 has a more restrictive threshold of $150,000 or less for when small purchase procedures may be used. This informal process allows for methods other than the formal bid process. The informal process is divided between two methods based on thresholds. Micro-purchases, typically for those purchases $10,000 or under, and small purchase procedures for those purchases above the micro-purchase threshold, but below the simplified acquisition threshold. Micro-purchases may be awarded without soliciting competitive price rate quotations. If small purchase procedures are used, then price or rate quotations must be obtained from an adequate number of qualified sources. One vendor was identified that fell within the small purchase threshold. Purchases for body cameras and associated equipment/accessories to the vendor totaled $117,144, of which $7,144 was paid from the COVID-19 - Coronavirus State and Local Fiscal Recovery Funds received from the Indiana Department of Homeland Security. As a portion of the purchases to the vendor were paid with federal funds subject to procurement requirements, the entirety of purchases with the vendor was required to follow applicable procurement requirements. As such, price or rate quotations from an adequate number of qualified sources should have been obtained. However, the County did not obtain price or rate quotations for the purchases, nor was full and open competition provided for the vendor. Additionally, there was no documentation available to support the rationale to limit competition. The lack of internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.320 states in part: "The non-Federal entity must have and use documented procurement procedures, consistent with the standards of this section and §§ 200.317, 200.318, and 200.319 for any of the following methods of procurement used for the acquisition of property or services required under a Federal award or sub-award. (a) Informal procurement methods. When the value of the procurement for property or services under a Federal award does not exceed the simplified acquisition threshold (SAT), as defined in § 200.1, or a lower threshold established by a non-Federal entity, formal procurement methods are not required. The non-Federal entity may use informal procurement methods to expedite the completion of its transactions and minimize the associated administrative burden and cost. The informal methods used for procurement of property or services at or below the SAT include: . . . INDIANA STATE BOARD OF ACCOUNTS 18 DECATUR COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (2) Small purchases – (i) Small purchase procedures. The acquisition of property or services, the aggregate dollar amount of which is higher than the micro-purchase threshold but does not exceed the simplified acquisition threshold. If small purchase procedures are used, price or rate quotations must be obtained from an adequate number of qualified sources as determined appropriate by the non-Federal entity. . . ." Cause A proper system of internal controls over procurement and suspension and debarment was not implemented by the management of the County to ensure that goods and services were properly procured. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the County's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, property and services were not properly procured. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the County. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the County establish a proper system of internal controls and develop procedures to ensure that property and services are properly procured. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-004 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Procurement and Suspension and Debarment Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): FY23 Compliance Requirement: Procurement and Suspension and Debarment Audit Findings: Material Weakness, Modified Opinion INDIANA STATE BOARD OF ACCOUNTS 19 DECATUR COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Condition and Context Procurement Policy The County did not have documented procurement procedures or policies reflecting applicable state or federal laws and regulations for procuring goods and services paid with federal funds. Small Purchases Federal regulations allow for informal procurement methods when the value of the procurement for property or services does not exceed the simplified acquisition threshold, which is customarily set at $250,000. However, Indiana Code 5-22-8 has a more restrictive threshold of $150,000 or less for when small purchase procedures may be used. This informal process allows for methods other than the formal bid process. The informal process is divided between two methods based on thresholds. Micro-purchases, typically for those purchases $10,000 or under, and small purchase procedures for those purchases above the micro-purchase threshold, but below the simplified acquisition threshold. Micro-purchases may be awarded without soliciting competitive price rate quotations. If small purchase procedures are used, then price or rate quotations must be obtained from an adequate number of qualified sources. One vendor was identified that fell within the small purchase threshold, with total purchases of $33,100. Price or rate quotations were not obtained, nor was full and open competition provided for the vendor. Additionally, there was no documentation available to support the rationale to limit competition. Simplified Acquisition Threshold When the value of the procurement for property or services exceeds the simplified acquisition threshold (SAT), or a lower threshold established by a nonfederal entity, formal procurement methods are required. The SAT is typically set at $250,000; however, Indiana Code 5-22-8 has a more restrictive threshold, and, therefore, the threshold the SAT is set at $150,000. Formal procurement methods require adherence to documented procedures and formal methods such as sealed bids or proposals. One vendor was identified that fell within the SAT, with total purchases of $213,734. Sealed bids or competitive proposals were not obtained, nor was a circumstance met that would have allowed for a noncompetitive procurement for the purchases. Suspension and Debarment Prior to entering into subawards and covered transactions with the COVID-19 - Coronavirus State and Local Fiscal Recovery Funds (SLFRF) award funds, recipients are required to verify that such contractors and subrecipients are not suspended, debarred, or otherwise excluded. "Covered transactions" include, but are not limited to, contracts for goods and services awarded under a nonprocurement transaction (i.e., grant agreement) that are expected to equal or exceed $25,000. The verification is to be done by checking the Excluded Parties List System (EPLS), collecting a certification from that person, or adding a clause or condition to the covered transaction with that person. INDIANA STATE BOARD OF ACCOUNTS 20 DECATUR COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) The County did not have any policies or procedures in place for verifying that an entity with which it plans to enter into a covered transaction is not suspended, debarred, or otherwise excluded. A population of six covered transactions, totaling $470,435, that equaled or exceeded $25,000 paid from SLFRF award funds was identified. Four of the six covered transactions, totaling $312,745, were selected for testing. For each of the four transactions, the County did not verify the vendors' suspension or debarment status prior to payment due to the County not having any policies or procedures in place to verify that contractors were neither suspended nor debarred, or otherwise excluded or disqualified, from participating in federal assistance programs or activities. The lack of internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.320 states in part: "The non-Federal entity must have and use documented procurement procedures, consistent with the standards of this section and §§ 200.317, 200.318, and 200.319 for any of the following methods of procurement used for the acquisition of property or services required under a Federal award or sub-award. (a) Informal procurement methods. When the value of the procurement for property or services under a Federal award does not exceed the simplified acquisition threshold (SAT), as defined in § 200.1, or a lower threshold established by a non-Federal entity, formal procurement methods are not required. The non-Federal entity may use informal procurement methods to expedite the completion of its transactions and minimize the associated administrative burden and cost. The informal methods used for procurement of property or services at or below the SAT include: . . . (2) Small purchases – (i) Small purchase procedures. The acquisition of property or services, the aggregate dollar amount of which is higher than the micro-purchase threshold but does not exceed the simplified acquisition threshold. If small purchase procedures are used, price or rate quotations must be obtained from an adequate number of qualified sources as determined appropriate by the non-Federal entity. . . . INDIANA STATE BOARD OF ACCOUNTS 21 DECATUR COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (b) Formal Procurement Methods. When the value of the procurement for property or services under a Federal financial assistance award exceeds the SAT, or a lower threshold established by a non-Federal entity, formal procurement methods are required. Formal procurement methods require following documented procedures. Formal procurement methods also require public advertising unless a non-competitive procurement can be used in accordance with § 200.319 or paragraph (c) of this section. The following formal methods of procurement are used for procurement of property or services above the simplified acquisition threshold or a value below the simplified acquisition threshold the non-Federal entity determines to be appropriate: . . . (1) Sealed bids. A procurement method in which bids are publicly solicited and a firm fixed-price contract (lump sum or unit price) is awarded to the responsible bidder whose bid, conforming with all the material terms and conditions of the invitation for bids, is the lowest in price. The sealed bids method is the preferred method for procuring construction, if the conditions. . . . (2) Proposals. A procurement method in which either a fixed price or costreimbursement type contract is awarded. Proposals are generally used when conditions are not appropriate for the use of sealed bids. . . ." 31 CFR 19.300 states: "When you enter into a covered transaction with another person at the next lower tier, you must verify that the person with whom you intend to do business is not excluded or disqualified. You do this by: (a) Checking the EPLS; or (b) Collecting a certification from that person if allowed by this rule; or (c) Adding a clause or condition to the covered transaction with that person." Cause A proper system of internal controls over procurement and suspension and debarment was not implemented by the management of the County to ensure that goods and services were properly procured and that vendors to whom payment equaled or exceeded $25,000 were not suspended or debarred. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the County's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, property and services were not properly procured and vendors to whom payments equal to or in excess of $25,000 were not verified to be not suspended, debarred, or otherwise excluded. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the County. INDIANA STATE BOARD OF ACCOUNTS 22 DECATUR COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the County establish a proper system of internal controls and develop procedures to ensure that property and services are properly procured and that contractors are not suspended, debarred, or otherwise excluded prior to entering into any contracts or subawards. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-005 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): FY23 Compliance Requirement: Reporting Audit Findings: Material Weakness, Other Matters Condition and Context Recipients are required to submit quarterly or annually Project and Expenditure (P&E) reports to the U.S. Department of the Treasury (Treasury). The reporting periods, as well as the respective due dates, are based upon type of recipient and its population, as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. The County was classified as a metropolitan county with a population below 250,000 residents that received an allocation of less than $10 million in COVID-19 - Coronavirus State and Local Fiscal Recovery Funds (SLFRF) award funds. As such, the initial P&E report, covering the period from March 3, 2021 to March 31, 2022, was required to be submitted to the Treasury by April 30, 2022. The subsequent annual reports are to cover one calendar year and must be submitted to the Treasury by April 30 each year. The County submitted one P&E report during the audit period; however, internal controls were not in place to prevent, or detect and correct, errors. As a result, the following errors were noted:  The current period expenditures for 8 of 16 projects were understated by $635,748. In addition, current period expenditures for 1 of 16 projects was overstated by $29,767.  The cumulative expenditures for 6 of 16 projects were understated by $285,748. In addition, cumulative expenditures for 1 of 16 projects was overstated by $29,767. The lack of internal controls and noncompliance were systemic issues throughout the audit period. INDIANA STATE BOARD OF ACCOUNTS 23 DECATUR COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework,' issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO) . . . ." Coronavirus State and Local Fiscal Recovery Funds Compliance and Reporting Guidance, page 10, states in part: ". . . 10. Reporting. All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for compiling and reporting accurate, compliant financial data, in accordance with appropriate accounting standards and principles. . . ." 31 CFR 35.4(c) states in part: "Reporting and requests for other information. During the period of performance, recipients shall provide to the Secretary periodic reports providing detailed accounting of the uses of funds. . . ." Cause A proper system of internal controls was not designed or implemented by management of the County to prevent and detect errors on the P&E report prior to submission. Effect Without the proper implementation of an effectively designed system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As such, the County did not report current period expenditures and cumulative expenditures properly when filing the P&E report for the period April 1, 2022 to March 31, 2023. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the County. In addition, not meeting the SLFRF reporting requirements increases the likelihood that the public will not have access to transparent and accurate information regarding expenditures of federal awards. Questioned Costs There were no questioned costs identified. INDIANA STATE BOARD OF ACCOUNTS 24 DECATUR COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Recommendation We recommended that management of the County strengthen its system of internal controls to provide for a segregation of duties in the preparation and review of federal reports to ensure appropriate reviews, approvals, and oversight are taking place. We also recommended the development of policies and procedures to ensure the County provides the Treasury with complete and accurate information for the P&E report. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report. INDIANA STATE BOARD OF ACCOUNTS 25

2023-001 OVERPAYMENTS TO SUBRECIPIENT Federal agency: U.S. Department of Department of Health and Human Services Federal Program Title & Assistance Listing Number: Substance Abuse and Mental Health Services Projects of Regional and National Significance -93.243 Award Period: 12/31/2022 - 12/30/2024 Type of Finding: Significant Deficiency Compliance Areas: Allowable Costs, Cash Management Questioned Costs: None Condition During our testing of subrecipient disbursements, we found that management does not require invoices from subrecipients before making disbursements. Instead, they allocate a predetermined monthly amount based on prorated subaward totals, making adjustments upon receipt of invoices and again at year-end. An error in a subrecipient's invoice led to an overpayment of $27,525 and remained uncorrected during the year. As a result, UVNR over recognized federal revenue by the same amount. An audit adjustment was made to correct both federal expenditures and revenues in 2023. Criteria An improper payment, as defined in 2 CFR §200.1, is any payment that should not have been made or that was made in an incorrect amount (including overpayments and underpayments) under statutory, contractual, administrative, or other legally applicable requirements. According to §200.303 Internal controls of 2 CFR Part 200, the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Specific to the Organization, federal reimbursement requests are completed monthly. Effect Overstatement of federal revenues and expenditures, respectively. The overpayment would also necessitate certain adjustments to the award amounts given to the subrecipient in the following year. Cause Management admittedly overlooked the error in the subrecipient’s submitted invoice during review.

Federal Agency: Department of Justice Federal Assistance Listing Number: 16.756 Program: Court Appointed Special Advocates Award Number: 15JDP-21-GK-02762-CASA Criteria: The Uniform Guidance in 2 CFR §200.332 details requirements for pass-through entities in regard to subrecipient monitoring and management. Per 2 CFR §200.332, Requirements for Pass-Through Entities: “All pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the following information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the federal award and subaward. Required information includes: (1) Federal award identification. i. Subrecipient name (which must match the name associated with its unique entity identifier); ii. Subrecipient’s unique entity identifier; iii. Federal Award Identification Number (FAIN); iv. Federal Award Date (see the definition of federal award date in §200.1 of this part) of award to the recipient by the federal agency; v. Subaward Period of Performance Start and End Date; vi. Subaward Budget Period Start and End Date; vii. Amount of Federal Funds Obligated by this action by the pass-through entity to the subrecipient; viii. Total Amount of Federal Funds Obligated to the subrecipient by the pass through entity, including the current financial obligation; ix. Total Amount of the Federal Award committed to the subrecipient by the pass-through entity; x. Federal award project description, as required to be responsive to the Federal Funding Accountability and Transparency Act (FFATA); xi. Name of federal awarding agency, pass-through entity, and contact information for awarding official of the Pass-through entity; xii. Assistance Listings Number and Title; the pass-through entity must identify the dollar amount made available under each federal award and the Assistance Listings Number at time of disbursement; xiii. Identification of whether the award is R&D; and xiv. Indirect cost rate for the federal award (including if the de minimis rate is charged) per § 200.414. (2) All requirements imposed by the pass-through entity on the subrecipient so that the federal award is used in accordance with federal statutes, regulations, and the terms and conditions of the federal award; (3) Any additional requirements that the pass-through entity imposes on the subrecipient in order for the pass-through entity to meet its own responsibility to the federal awarding agency, including identification of any required financial and performance reports; (4) i. An approved federally recognized indirect cost rate negotiated between the subrecipient and the Federal Government. If no approved rate exists, the pass-through entity must determine the appropriate rate in collaboration with the subrecipient, which is either: (A) The negotiated indirect cost rate between the pass-through entity and the subrecipient, which can be based on a prior negotiated rate between a different PTE and the same subrecipient. If basing the rate on a previously negotiated rate, the pass-through entity is not required to collect information justifying this rate, but may elect to do so; (B) The de minimis indirect cost rate. ii. The pass-through entity must not require use of a de minimis indirect cost rate if the subrecipient has a federally approved rate. Subrecipients can elect to use the cost allocation method to account for indirect costs in accordance with §200.405(d). (5) A requirement that the subrecipient permits the pass-through entity and auditors to have access to the subrecipient’s records and financial statements as necessary for the pass-through entity to meet the requirements of this part; and (6) Appropriate terms and conditions concerning closeout of the subaward.” Condition: National CASA/GAL’s subrecipient agreements do not contain a level of specificity to fully comply with federal subrecipient regulations. During our testing of subrecipient monitoring, we selected 16 subrecipient awards. For all awards tested, National CASA/GAL’s subaward agreements did not comply with 2 CFR §200.332, Requirements for Pass-Through Entities, as they do not contain a specific scope of work or project description. Cause: National CASA/GAL did not have the proper policies and procedures in place to ensure subaward agreements complied to relevant federal regulation, and that all required elements are located in subaward agreements, and not in the application or by reference to other documents. Effect or Potential Effect: Without adequate controls in place to ensure conformity with subaward requirements, grantees may not ensure compliance with any award special conditions or revised budgets agreed upon at contract implementation. Questioned Costs: None. Context: This is a condition identified per review of National CASA/GAL’s compliance with specified requirements using a non-statistically valid sample. The population consisted of 79 subawards made totaling to $2,428,200 provided to subrecipients in 2023. The sample consisted of 16 subawards totaling $515,618 provided to subrecipients in 2023. Identification as a Repeat Finding: 2022-005. Recommendation: We recommend establishing and maintaining written policies and procedures to ensure subaward agreements conform to the requirements outlined in 2 CFR §200.332. Views of Responsible Officials: Management agrees that subrecipient agreements in place in 2022 did not fully comply with 2 CFR §200.332. Updates were made to the policies and procedures as well to ensure subaward files contain the requisite components. Management has additionally implemented a Grant Master File Checklist to ensure compliance with terms and conditions required in subaward agreements.

Criteria: 2 CFR 200.332 notes, “All pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the following information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes: (1) Federal award identification. (i) Subrecipient name (which must match the name associated with its unique entity identifier); (ii) Subrecipient's unique entity identifier; (iii) Federal Award Identification Number (FAIN); (iv) Federal Award Date (see the definition of Federal award date in § 200.1 of this part) of award to the recipient by the Federal agency;(v) Subaward Period of Performance Start and End Date; (vi) Subaward Budget Period Start and End Date; (vii) Amount of Federal Funds Obligated by this action by the pass-through entity to the subrecipient; (viii) Total Amount of Federal Funds Obligated to the subrecipient by the pass-through entity including the current financial obligation; (ix) Total Amount of the Federal Award committed to the subrecipient by the pass-through entity; (x) Federal award project description, as required to be responsive to the Federal Funding Accountability and Transparency Act (FFATA); (xi) Name of Federal awarding agency, pass-through entity, and contact information for awarding official of the Pass-through entity; (xii) Assistance Listings number and Title; the pass-through entity must identify the dollar amount made available under each Federal award and the Assistance Listings Number at time of disbursement; (xiii) Identification of whether the award is R&D; and (xiv) Indirect cost rate for the Federal award (including if the de minimis rate is charged) per § 200.414. (2) All requirements imposed by the pass-through entity on the subrecipient so that the Federal award is used in accordance with Federal statutes, regulations and the terms and conditions of the Federal award; …” Condition: All three of the subawards selected for testing, the recipient’s UEI number was missing from the subaward. We consider this condition to be an instance of noncompliance relating to the Subrecipient Monitoring compliance requirement. Statistical sampling was not used in making sample selections. Questioned Costs :N/A Cause and effect: Without communication of the required information, subrecipients may overspend award amounts or incur unallowable expenses towards the grant. Recommendation: We recommend ACT evaluates policies and procedures to ensure all required information is communication with the subrecipient. Views of Responsible Officials and Planned Corrective Actions: Management agrees with this Single Audit Finding and response is included in the Corrective Action Plan.

Criteria: 2 CFR 200.332 notes, “All pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the following information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes: (1) Federal award identification. (i) Subrecipient name (which must match the name associated with its unique entity identifier); (ii) Subrecipient's unique entity identifier; (iii) Federal Award Identification Number (FAIN); (iv) Federal Award Date (see the definition of Federal award date in § 200.1 of this part) of award to the recipient by the Federal agency;(v) Subaward Period of Performance Start and End Date; (vi) Subaward Budget Period Start and End Date; (vii) Amount of Federal Funds Obligated by this action by the pass-through entity to the subrecipient; (viii) Total Amount of Federal Funds Obligated to the subrecipient by the pass-through entity including the current financial obligation; (ix) Total Amount of the Federal Award committed to the subrecipient by the pass-through entity; (x) Federal award project description, as required to be responsive to the Federal Funding Accountability and Transparency Act (FFATA); (xi) Name of Federal awarding agency, pass-through entity, and contact information for awarding official of the Pass-through entity; (xii) Assistance Listings number and Title; the pass-through entity must identify the dollar amount made available under each Federal award and the Assistance Listings Number at time of disbursement; (xiii) Identification of whether the award is R&D; and (xiv) Indirect cost rate for the Federal award (including if the de minimis rate is charged) per § 200.414. (2) All requirements imposed by the pass-through entity on the subrecipient so that the Federal award is used in accordance with Federal statutes, regulations and the terms and conditions of the Federal award; …” Condition: All three of the subawards selected for testing, the recipient’s UEI number was missing from the subaward. We consider this condition to be an instance of noncompliance relating to the Subrecipient Monitoring compliance requirement. Statistical sampling was not used in making sample selections. Questioned Costs :N/A Cause and effect: Without communication of the required information, subrecipients may overspend award amounts or incur unallowable expenses towards the grant. Recommendation: We recommend ACT evaluates policies and procedures to ensure all required information is communication with the subrecipient. Views of Responsible Officials and Planned Corrective Actions: Management agrees with this Single Audit Finding and response is included in the Corrective Action Plan.

FINDING 2023-004 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Procurement and Suspension and Debarment Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listing Number: 21.027 Federal Award Number and Year (or Other Identifying Number): FY 2023 Compliance Requirement: Procurement and Suspension and Debarment Audit Findings: Material Weakness, Modified Opinion Condition and Context The County received a total COVID-19 - Coronavirus State and Local Fiscal Recovery Funds (SLFRF) allocation of $73,674,384 and chose to calculate its own revenue loss allowance, which totaled $35,932,557, to use for government services. Some SLFRF program funds expended in 2023 were expended under the revenue loss eligible use category. Additional program funds expended in 2023 were expended under the other eligible use categories. Procurement Federal regulations allow for informal procurement methods when the value of the procurement for property or services does not exceed the simplified acquisition threshold, which is set at $250,000 unless a lower, more restrictive threshold is set by a non-federal entity. As Indiana Code has set a more restrictive threshold of $150,000, informal procurement methods are permitted when the value of the procurement does not exceed $150,000. This informal process allows for methods other than the formal bid process. The informal process is divided between two methods based on thresholds. Micro-purchases, typically for those purchases $10,000 or under, and small purchase procedures for those purchases above the micro-purchase threshold, but below the simplified acquisition threshold. Micro-purchases may be awarded without soliciting competitive price rate quotations. If small purchase procedures are used, then price or rate quotations must be obtained from an adequate number of qualified sources. For funds expended under the revenue loss eligible use category, the above listed procurement requirements do not apply. During the audit period, the County had four vendors with purchases over the $10,000 micropurchase threshold which were expended under an eligible use category other than revenue loss and, as such, were considered small purchase procurements. The County did not provide competitive price quotations for the small purchase procurements for three of the four vendors, which totaled $257,038. Suspension and Debarment Prior to entering into subawards and covered transactions with SLFRF award funds, recipients are required to verify that such contractors and subrecipients are not suspended, debarred, or otherwise excluded. "Covered transactions" include, but are not limited to, contracts for goods and services awarded under a nonprocurement transaction (i.e., grant agreement) that are expected to equal or exceed $25,000. The verification is to be done by checking the Excluded Parties List System, collecting a certification from that person, or adding a clause or condition to the covered transaction with that person. During the engagement, an employee of the Board of County Commissioners stated that verification was completed by checking the Excluded Parties List System when covered transactions were entered into by the County to verify that an entity with which it plans to enter into a covered transaction is not suspended, debarred, or otherwise excluded or disqualified from participating in federal assistance programs or activities. Six covered transactions, totaling $3,952,203, were paid from SLFRF funds to six different vendors for goods or services that equaled or exceeded $25,000 during the audit period. Three of the six covered transactions were selected for testing. For all three transactions tested, documentation was not provided that the vendor's suspension and debarment status was verified. The lack of internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 31 CFR 19.300 states: "When you enter into a covered transaction with another person at the next lower tier, you must verify that the person with whom you do business is not excluded or disqualified. You do this by: (a) Checking the EPLS; or (b) Collecting a certification from that person if allowed by this rule; or (c) Adding a clause or condition to the covered transaction with that person." 2 CFR 200.318 states in part: "(a) The non-Federal entity must have and use documented procurement procedures, consistent with State, local, and tribal laws and regulations and the standards of this section, for the acquisition of property or services required under a Federal award or subaward. The non-Federal entity's documented procurement procedures must conform to the procurement standards identified in §§ 200.317 through 200.327. . . . (i) The non-Federal entity must maintain records sufficient to detail the history of procurement. These records will include, but are not necessarily limited to, the following: Rationale for the method of procurement, selection of contract type, contractor selection or rejection, and the basis for the contract price. . . ." 2 CFR 200.320 states in part: "The non-Federal entity must have and use documented procurement procedures, consistent with the standards of this section and §§ 200.317, 200.318, and 200.319 for any of the following methods of procurement used for the acquisition of property or services required under a Federal award or sub-award. (a) Informal procurement methods. When the value of the procurement for property or services under a Federal award does not exceed the simplified acquisition threshold (SAT), as defined in § 200.1, or a lower threshold established by a non-Federal entity, formal procurement methods are not required. The non-Federal entity may use informal procurement methods to expedite the completion of its transactions and minimize the associated administrative burden and cost. The informal methods used for procurement of property or services at or below the SAT include: . . . (2) Small purchases — (i) Small purchase procedures. The acquisition of property or services, the aggregate dollar amount of which is higher than the micro-purchase threshold but does not exceed the simplified acquisition threshold. If small purchase procedures are used, price or rate quotations must be obtained from an adequate number of qualified sources as determined appropriate by the non-Federal entity. . . . Cause The County was unable to provide documentation to demonstrate it had properly procured services. In addition, the County was unable to provide documentation to demonstrate it had checked the Excluded Parties List System, per the County's procedures, to ensure vendors were not suspended or debarred prior to entering into covered transactions that exceeded $25,000. Effect Without the proper implementation of an effectively designed system of internal controls, the County cannot demonstrate it obtained an adequate number of price or rate quotations prior to selecting a vendor. Therefore, the County could have overpaid for the services obtained. Furthermore, without the proper implementation of an effectively designed system of internal controls, the County cannot ensure the vendors paid with federal funds are eligible to participate in federal programs. Any program funds the County used to pay vendors that have been suspended or debarred would be unallowable, and the funding agency could potentially recover them. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the Board of County Commissioners strengthen the County's system of internal controls to ensure that an adequate number of price or rate quotations are obtained for small purchase procurements. Additionally, we recommended policies and procedures be strengthened to ensure appropriate supporting documentation for federal programs is retained. Lastly, we recommended that the Board of County Commissioners strengthen the County's system of internal controls to ensure that all vendors that are paid $25,000 or more, all or in part with federal funds, are not suspended or debarred from participating in federal programs before entering into any covered transactions. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-003 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): 2023 Compliance Requirement: Reporting Audit Findings: Material Weakness, Other Matters INDIANA STATE BOARD OF ACCOUNTS 20 BARTHOLOMEW COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Repeat Finding This is a repeat finding from the immediately prior audit report. The prior audit finding number was 2022-003. Condition and Context Recipients are required to submit quarterly or annually Project and Expenditure (P&E) reports to the U.S. Department of the Treasury (Treasury). The reporting periods, as well as the respective due dates, are based upon type of recipient and its population, as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. The County was classified as a metropolitan county with a population below 250,000 residents that received an allocation of more than $10 million in COVID-19 - Coronavirus State and Local Fiscal Recovery Funds (SLFRF) award funds. As such, the initial P&E report, covering the period from March 3, 2021 to December 31, 2021, was required to be submitted to the Treasury by January 31, 2022. The subsequent quarterly reports were to cover one calendar quarter and must be submitted to the Treasury by the last day of the month following the end of the period covered. The County submitted all four P&E reports that were required during the audit period. Although a review process over the reports was in place, the internal controls were not effective and did not detect and allow corrections of errors in the reports. As a result, the following errors were noted:  The current period expenditures were incorrectly reported on two of four reports. The current period expenditures were underreported by $70,309 and $13,090 in the Q4 2022 and Q3 2023 reports, respectively.  The total cumulative expenditures were incorrectly reported on all four reports. The total cumulative expenditures were overreported by $174,750 in the Q4 2022 and Q1 2023 reports, and $19,204 in the Q3 2023 report. The total cumulative expenditures were underreported by $690,272 in the Q2 2023 report. The lack of effective internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." INDIANA STATE BOARD OF ACCOUNTS 21 BARTHOLOMEW COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Coronavirus State and Local Fiscal Recovery Funds Compliance and Reporting Guidance, page 10, states in part: ". . . 10. Reporting. All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for compiling and reporting accurate, compliant financial data, in accordance with appropriate accounting standards and principles. . . ." 31 CFR 35.4(c) states in part: "Reporting and requests for other information. During the period of performance, recipients shall provide to the Secretary periodic reports providing detailed accounting of the uses of funds, . . ." Cause A proper system of internal controls was not designed or implemented by management of the County to prevent and detect errors on the P&E report prior to submission. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As such, the County did not report current period expenditures and total cumulative expenditures properly when filing the P&E reports for the quarterly reporting periods from October 1, 2022 to September 30, 2023. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the County. In addition, not meeting the SLFRF reporting requirements increases the likelihood that the public and the Treasury will not have access to transparent and accurate information regarding expenditures of federal awards. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the County develop policies and procedures to ensure the County provides the Treasury with complete and accurate information for the P&E report. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-003 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): CY2022 Compliance Requirement: Reporting Audit Findings: Material Weakness, Modified Opinion Condition and Context Recipients are required to submit quarterly or annually Project and Expenditure (P&E) reports to the U.S. Department of the Treasury (Treasury). The reporting periods, as well as the respective due dates, are based on the type of recipient and the recipient's population, as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. The County was classified as a metropolitan county with a population below 250,000 residents that received an allocation of less than $10 million in COVID-19 - Coronavirus State and Local Fiscal Recovery Funds. As such, the initial P&E report, covering the period from March 3, 2021 to March 31, 2022, was required to be submitted to the Treasury by April 30, 2022. The subsequent annual reports are to cover one calendar year and must be submitted to the Treasury by April 30 each year. INDIANA STATE BOARD OF ACCOUNTS 18 CLINTON COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) The County submitted one P&E report during the audit period, which was obtained from the Treasury's website. Although one employee prepared the P&E report and another reviewed the entries, the system of internal controls was not effective in preventing, detecting, or correcting errors. The data submitted included amounts which should not have been included and amounts which were not supported by the County's records. Errors identified included the following:  Total Cumulative Obligations were overstated by $907,630.  Total Cumulative Expenditures were overstated by $4,332,524. The lack of effective internal controls and noncompliance were isolated to the P&E report submitted during the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Coronavirus State and Local Fiscal Recovery Funds Compliance and Reporting Guidance, page 10, states in part: ". . . 10. Reporting. All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for compiling and reporting accurate, compliant financial data, in accordance with appropriate accounting standards and principles. . . ." 31 CFR 35.4(c) states in part: "Reporting and requests for other information. During the period of performance, recipients shall provide to the Secretary periodic reports providing detailed accounting of the uses of funds, . . ." Cause Although a system of internal controls over the P&E report was designed by management, which included segregation of duties, it did not ensure that the County provided the Treasury with complete and accurate information related to the SLFRF awards. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the County's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. INDIANA STATE BOARD OF ACCOUNTS 19 CLINTON COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the County. In addition, not meeting the SLFRF reporting requirements, by reporting erroneous data, increases the likelihood that the public and the Treasury will not have access to transparent and accurate information regarding expenditures of federal awards. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the County design and implement a proper system of internal controls that would ensure appropriate reviews, approvals and oversight are taking place. Additionally, management should develop policies and procedures to ensure that the County provides the Treasury with complete and accurate information for the P&E report. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-002 Subject: Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: U.S. Department of Treasury Assistance Listing Number: 21.027 Federal Award Number: FY 2022 Pass-Through Entity: N/A Compliance Requirements: Reporting Audit Findings: Material Weakness, Modified Opinion Criteria: 2 CFR 200.303 states in part: "The Non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Coronavirus State and Local Fiscal Recovery Funds Compliance and Reporting Guidance, page 10, states in part: ". . . 10. Reporting. All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for compiling and reporting accurate, compliant financial data, in accordance with appropriate accounting standards and principles. . . ." 31 CFR 35.4(c) states in part: "Reporting and requests for other information. During the period of performance, recipients shall provide to the Secretary periodic reports providing detailed accounting of the uses of funds, . . ." Condition: The City had not properly designed or implemented a system of internal controls, which would include appropriate segregation of duties that would likely be effective in preventing, or detecting and correcting, noncompliance. Recipients are required to submit quarterly or annually Project and Expenditure (P&E) reports to the Department of Treasury (Treasury). The reporting periods, as well as the respective due dates, are based upon type of recipient and its population, as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. The City was classified as a metropolitan city with a population below 250,000 residents that received an allocation of less than $10 million in Coronavirus State and Local Fiscal Recovery Funds (CSLFRF). As, annual reports are to cover one calendar year and must be submitted to the Treasury by April 30 each year. Cause: A proper system of internal controls over the P&E report was not designed by management of the City, which would include segregation of key functions to ensure the City provided the Treasury with complete and accurate information related to the CSLFRF awards. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the City's management of what should be done to effect internal control, and procedures should consist of actions that would implement these policies. Context: The City submitted one P&E report during the audit period; however, a single employee prepared and submitted the P&E report without a review or oversight process in place to prevent, or detect and correct errors. In addition, the P&E report was not properly supported by the City’s records. All but $100,000 of the expenditures were reported under the Eligible Use Category of “Administrative Expenses.” However, the City’s expenditures during the audit period consisted of assistance to business and households, sewer infrastructure, and tourism support, none of which qualified as Administrative Expenses. Furthermore, the City reported that it was electing to take the Revenue Loss Standard Allowance, but the amount reported as Revenue Loss was $0. Effect: Without the proper implementation of an effectively designed system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the City. Identification as a repeat finding, if applicable: Yes. The finding appeared in the prior year report as Finding 2022-001. Recommendation: We recommended that management of the City design and implement a proper system of internal controls that would provide a segregation of duties for the preparation and review of federal reports to ensure appropriate reviews, approvals, and oversight are taking place. Additionally, management should develop policies and procedures to ensure that the City provides the Treasury with complete and accurate information for the P&E report. Views of Responsible Officials and Planned Corrective Actions: Management agrees with the finding and has prepared a corrective action plan.

FINDING 2023-002 Subject: Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: U.S. Department of Treasury Assistance Listing Number: 21.027 Federal Award Number: FY 2022 Pass-Through Entity: N/A Compliance Requirements: Reporting Audit Findings: Material Weakness, Modified Opinion Criteria: 2 CFR 200.303 states in part: "The Non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Coronavirus State and Local Fiscal Recovery Funds Compliance and Reporting Guidance, page 10, states in part: ". . . 10. Reporting. All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for compiling and reporting accurate, compliant financial data, in accordance with appropriate accounting standards and principles. . . ." 31 CFR 35.4(c) states in part: "Reporting and requests for other information. During the period of performance, recipients shall provide to the Secretary periodic reports providing detailed accounting of the uses of funds, . . ." Condition: The City had not properly designed or implemented a system of internal controls, which would include appropriate segregation of duties that would likely be effective in preventing, or detecting and correcting, noncompliance. Recipients are required to submit quarterly or annually Project and Expenditure (P&E) reports to the Department of Treasury (Treasury). The reporting periods, as well as the respective due dates, are based upon type of recipient and its population, as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. The City was classified as a metropolitan city with a population below 250,000 residents that received an allocation of less than $10 million in Coronavirus State and Local Fiscal Recovery Funds (CSLFRF). As, annual reports are to cover one calendar year and must be submitted to the Treasury by April 30 each year. Cause: A proper system of internal controls over the P&E report was not designed by management of the City, which would include segregation of key functions to ensure the City provided the Treasury with complete and accurate information related to the CSLFRF awards. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the City's management of what should be done to effect internal control, and procedures should consist of actions that would implement these policies. Context: The City submitted one P&E report during the audit period; however, a single employee prepared and submitted the P&E report without a review or oversight process in place to prevent, or detect and correct errors. In addition, the P&E report was not properly supported by the City’s records. All but $100,000 of the expenditures were reported under the Eligible Use Category of “Administrative Expenses.” However, the City’s expenditures during the audit period consisted of assistance to business and households, sewer infrastructure, and tourism support, none of which qualified as Administrative Expenses. Furthermore, the City reported that it was electing to take the Revenue Loss Standard Allowance, but the amount reported as Revenue Loss was $0. Effect: Without the proper implementation of an effectively designed system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the City. Identification as a repeat finding, if applicable: Yes. The finding appeared in the prior year report as Finding 2022-001. Recommendation: We recommended that management of the City design and implement a proper system of internal controls that would provide a segregation of duties for the preparation and review of federal reports to ensure appropriate reviews, approvals, and oversight are taking place. Additionally, management should develop policies and procedures to ensure that the City provides the Treasury with complete and accurate information for the P&E report. Views of Responsible Officials and Planned Corrective Actions: Management agrees with the finding and has prepared a corrective action plan.

FINDING 2023-004 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Fund - Reporting Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Fund Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): 20-1892-0-1-806 Compliance Requirement: Reporting Audit Findings: Material Weakness, Other Matters Condition and Context Recipients are required to quarterly or annually submit Project and Expenditure (P&E) reports to the U.S. Department of the Treasury (Treasury). The reporting periods, as well as the respective due dates, are based upon type of recipient and its population, as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. The County was classified as a metropolitan county with a population below 250,000 residents that received an allocation less than $10 million in COVID-19 - Coronavirus State and Local Fiscal Recovery Funds (SLFRF) award funds. As such, the initial P&E report, covering the period from March 3, 2021 to March 31, 2022, was required to be submitted to the Treasury by April 30, 2022. The subsequent annual reports are to cover one calendar year and must be submitted to the Treasury by April 30 each year. The County submitted one P&E report during the audit period. Although the Deputy County Auditor compiled the information for the report and the County Auditor reviewed and submitted the report, the internal controls were not effective in preventing, or detecting and correcting, errors. As a result, the P&E report contained the following errors:  The current period expenditures were overstated by $336,376.  The cumulative expenditures were understated by $18,624. The lack of effective internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." INDIANA STATE BOARD OF ACCOUNTS 20 PERRY COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Coronavirus State and Local Fiscal Recovery Funds Compliance and Reporting Guidance, page 10, states in part: ". . . 10. Reporting. All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for compiling and reporting accurate, compliant financial data, in accordance with appropriate accounting standards and principles. . . ." Cause The County's internal controls were not effective to prevent and detect errors on the P&E report prior to submission. The County did not insure that information reported was correct and applicable to the reporting period of the submission. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As such, the County did not accurately report current period expenditures and total cumulative expenditures properly when filing the P&E report for the period from April 1, 2022 to March 31, 2023. Not properly reporting the information to the Treasury provides the Treasury with an inaccurate picture of the County's activity for the reporting period. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the County. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the County develop policies and procedures to ensure the County accurately reports current period and cumulative expenditures on the P&E report to the Treasury. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-002 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): FY2022 Compliance Requirement: Reporting Audit Findings: Material Weakness, Modified Opinion Repeat Finding This is a repeat finding from the immediately prior audit report. The prior audit finding number was 2022-006. Condition and Context Recipients are required to quarterly or annually submit Project and Expenditure (P&E) reports to the U.S. Department of the Treasury (Treasury). The reporting periods as well as the respective due dates are based upon type of recipient and its population as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. INDIANA STATE BOARD OF ACCOUNTS 17 PUTNAM COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) The County was classified as a county with a population less than 250,000 residents that received an allocation of less than $10 million in COVID-19 - Coronavirus State and Local Fiscal Recovery Funds award funds. As such, the County was required to submit an annual P&E report covering the period April 1, 2022 to March 31, 2023, during the audit period. The P&E report due by April 30, 2023, was submitted timely but the report was not accurate and complete. The report did not include any project descriptions, expenditure amounts, or obligation amounts despite the County having made several awards to different entities in support of various activities within the County. Total current period expenditures for the reporting period per the County's ledger were $5,502,689. In addition, there were nine projects, contracts, or awards exceeding $50,000 awarded during the reporting period that were not disclosed in the report. The lack of internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Coronavirus State and Local Fiscal Recovery Funds Compliance and Reporting Guidance, page 10, states in part: ". . . 10. Reporting. All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for compiling and reporting accurate, compliant financial data, in accordance with appropriate accounting standards and principles. . . ." 31 CFR 35.4(c) states in part: "Reporting and requests for other information. During the period of performance, recipients shall provide to the Secretary periodic reports providing detailed accounting of the uses of funds, . . ." Cause The P&E report was not properly researched and reviewed by the County staff prior to submission. INDIANA STATE BOARD OF ACCOUNTS 18 PUTNAM COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Effect Without the proper implementation of an effectively designed system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As such, the County did not properly report project descriptions and amounts expended when filing the P&E report during the audit period. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the County strengthen its system of internal controls to ensure appropriate reviews, approvals, and oversight are taking place of the work completed by the consultant. We also recommended the development of policies and procedures to ensure the County provides the County Treasury with complete and accurate information for the P&E reports. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report. INDIANA STATE BOARD OF ACCOUNTS 19

FINDING 2023-004 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): OMB Approval #1505-0271 Compliance Requirement: Reporting Audit Findings: Material Weakness, Other Matters INDIANA STATE BOARD OF ACCOUNTS 19 FULTON COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Condition and Context Recipients are required to submit quarterly or annually Project and Expenditure (P&E) reports to the U.S. Department of the Treasury (Treasury). The reporting periods, as well as the respective due dates are based upon type of recipient and its population, as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. The County was classified as a county with a population below 250,000 residents that received an allocation of less than $10 million in State and Local Fiscal Recovery Funds. As such, the P&E report, covering the period from March 3, 2022 to March 31, 2023, was required to be submitted to the Treasury by April 30, 2023. Though the P&E report was prepared by one employee and reviewed by another, the internal control was not effective did not detect and allow corrections of errors prior to submission. The County submitted the P&E report on June 16, 2023, which was 47 days after the due date. Additionally, the report was not mathematically accurate and complete. The key line items of "Total Cumulative Expenditures" and "Current Period Expenditures," as reported on the P&E report, did not agree to the County's ledger. Errors were as follows:  The "Total Cumulative Expenditures" line item was understated by $16,071.  The "Current Period Expenditures" line item was understated by $21,071. The lack of effective internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 31 CFR 35.4(c) states in part: "Reporting and requests for other information. During the period of performance, recipients shall provide to the Secretary periodic reports providing detailed accounting of the uses of funds, . . ." Coronavirus State and Local Fiscal Recovery Funds Compliance and Reporting Guidance, page 10, states in part: INDIANA STATE BOARD OF ACCOUNTS 20 FULTON COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) ". . . 10. Reporting. All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for compiling and reporting accurate, compliant financial data, in accordance with appropriate accounting standards and principles. . . ." Cause The County did not timely submit the P&E report or verify that the information contained within the report accurately reflected the County's expenditures. The expenditures were understated in the report due to not including all activity for the reporting period. Effect Without the proper implementation of an effectively designed system of internal controls, the County cannot ensure that P&E reports are submitted timely and are materially accurate and correct. The reports contained the errors identified in the Condition and Context. In addition, not meeting the reporting requirements increases the likelihood that the public will not have access to transparent and accurate information regarding expenditures of federal awards. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the County strengthen its system of internal controls to ensure that the County provides the Treasury with complete and accurate information for the P&E report. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-005 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Procurement and Suspension and Debarment Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): OMB Approval #1505-0271 Compliance Requirement: Procurement and Suspension and Debarment Audit Findings: Material Weakness, Other Matters INDIANA STATE BOARD OF ACCOUNTS 21 FULTON COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Condition and Context Procurement - Policy The County had not established a purchasing policy that would reflect applicable state laws and regulations, including procedures to avoid the acquisition of unnecessary or duplicative items; procedures to ensure that all solicitations incorporate a clear and accurate description of the technical requirements for the material, product, or service to be procured; and did not maintain written standards of conduct covering conflicts of interest and governing actions of its employees engaged in the selection, award, and administration of contracts. Procurement - Small Purchases Federal regulations allow for informal procurement methods when the value of the procurement for property or services does not exceed the simplified acquisition threshold, which is set at $250,000 unless a lower, more restrictive threshold is set by a non-federal entity. As Indiana Code has set a more restrictive threshold of $150,000, informal procurement methods are permitted when the value of the procurement does not exceed $150,000. This informal process allows for methods other than the formal bid process. The informal process is divided between two methods based on thresholds. Micro-purchases, typically for those purchases $50,000 or under, and small purchase procedures for those purchases above the micro-purchase threshold but below the simplified acquisition threshold. Micro-purchases may be awarded without soliciting competitive price rate quotations. If small purchase procedures are used, then price or rate quotations must be obtained from an adequate number of qualified sources. The County had one vendor that was identified as being less than the simplified acquisition threshold of $150,000 but exceeding the $50,000 micro-purchase threshold. The one vendor was selected for testing. For the one vendor, the County did not obtain price or rate quotes nor was there documentation detailing the history of procurement, which must include the reason for the procurement method used. Suspension and Debarment Prior to entering into subawards and covered transactions with State and Local Fiscal Recovery Funds (SLFRF) award funds, recipients are required to verify that such contractors and subrecipients are not suspended, debarred, or otherwise excluded. "Covered transactions" include, but are not limited to, contracts for goods and services awarded under a nonprocurement transaction (i.e., grant agreement) that are expected to equal or exceed $25,000. The verification is to be done by checking the Excluded Parties List System (EPLS), collecting a certification from that person, or adding a clause or condition to the covered transaction with that person. Upon inquiring of the County to determine its policies and procedures related to suspension and debarment requirements, the County stated procedures were not in place to ensure vendors were not suspended or debarred prior to entering into covered transactions. One covered transaction paid with SLFRF grant funds was identified during the audit period. The covered transaction totaled $66,000 with $46,752 paid in the audit period. The identified transaction was examined to determine if the County verified the suspension and debarment status of the vendor prior to payment. Upon review, the County had not performed procedures to ensure the vendor was not suspended or debarred, or otherwise excluded or disqualified, from participation in federal assistance programs or activities at any time during the audit period. INDIANA STATE BOARD OF ACCOUNTS 22 FULTON COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) The lack of internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.318 states in part: "(a) The non-Federal entity must have and use documented procurement procedures, consistent with State, local, and tribal laws and regulations and the standards of this section, for the acquisition of property or services required under a Federal award or subaward. The non- Federal entity's documented procurement procedures must conform to the procurement standards identified in §§ 200.317 through 200.327 . . . (i) The non-Federal entity must maintain records sufficient to detail the history of procurement. These records will include, but are not necessarily limited to, the following: Rationale for the method of procurement, selection of contract type, contractor selection or rejection, and the basis for the contract price. . . ." 2 CFR 200.320 states in part: "The non-Federal entity must have and use documented procurement procedures, consistent with the standards of this section and §§ 200.317, 200.318, and 200.319 for any of the following methods of procurement used for the acquisition of property or services required under a Federal award or sub-award. (a) Informal procurement methods. When the value of the procurement for property or services under a Federal award does not exceed the simplified acquisition threshold (SAT), as defined in § 200.1, or a lower threshold established by a non-Federal entity, formal procurement methods are not required. The non-Federal entity may use informal procurement methods to expedite the completion of its transactions and minimize the associated administrative burden and cost. The informal methods used for procurement of property or services at or below the SAT include: . . . (2) Small purchases — (i) Small purchase procedures. The acquisition of property or services, the aggregate dollar amount of which is higher than the micro-purchase threshold but does not exceed the simplified acquisition threshold. If small purchase procedures are used, price or rate quotations must be obtained from an adequate number of qualified sources as determined appropriate by the non-Federal entity." INDIANA STATE BOARD OF ACCOUNTS 23 FULTON COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) 2 CFR 200.214 states: "Non-federal entities are subject to the non-procurement debarment and suspension regulations implementing Executive Orders 12549 and 12689, 2 CFR part 180. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are de-barred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities." 31 CFR 19.300 states: "When you enter into a covered transaction with another person at the next lower tier, you must verify that the person with whom you intend to do business is not excluded or disqualified. You do this by: (a) Checking the EPLS; or (b) Collecting a certification from that person if allowed by this rule; or (c) Adding a clause or condition to the covered transaction with that person." Part 4 of the Treasury's Compliance and Reporting Guidance states: ". . . recipients are expected to have procurement policies and procedures in place that comply with the procurement standards outlined in the Uniform Guidance . . ." Cause The County participated in a joint project with the City of Rochester (City) in which the City handled the procurement process. However, the County did not request copies of the quotes or bids obtained by the city, nor did the County document a sole source vendor situation. In addition, the County was unable to provide documentation to demonstrate they checked the vendor was not suspended or debarred prior to entering into the contract. Effect Without the proper implementation of an effectively designed system of internal controls, the County cannot ensure that services obtained provided full and open competition or the basis of the price. In addition, the County cannot ensure the vendors paid were eligible to participate in federal programs. Any program funds the County used to pay vendors that have been suspended or debarred would be unallowable, and the funding agency could potentially recover them. Noncompliance with the provisions of federal regulations and the terms and conditions of the federal award could result in the loss of future federal funding to the County. Questioned Costs There were no questioned costs identified. INDIANA STATE BOARD OF ACCOUNTS 24 FULTON COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Recommendation We recommended the County establish documented procurement procedures consistent with state and local laws for the acquisition of property or services required under a federal award or subaward as outlined in the code of federal regulations. In addition, we recommended the County adhere to the procurement policies and obtain required quotes and bids or adequately document a sole source situation. Finally, we recommended that the County strengthen its system of internal controls to ensure that all vendors that are paid $25,000 or more, all or in part with federal funds, are not suspended or debarred from participating in federal programs before entering into any covered transactions. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-004 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): FY2021 Pass-Through Entity: Indiana Department of Health Compliance Requirement: Reporting Audit Findings: Material Weakness, Other Matters Repeat Finding This is a repeat finding from the immediately prior audit report. The prior audit finding number was 2022-005. Condition and Context Recipients are required quarterly or annually to submit Project and Expenditure (P&E) reports to the U.S. Department of the Treasury (Treasury). The reporting periods, as well as the respective due dates, are based upon type of recipient and its population, as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. The County was classified as a county with a population below 250,000 residents that are allocated more than $10 million in COVID-19 - Coronavirus State and Local Fiscal Recovery Funds (SLFRF). As such, the P&E quarterly reports were to cover one calendar quarter and must be submitted to the Treasury by the last day of the month following the end of the period covered. The Couty's current policy and procedure for complying with reporting requirements is to have the Director of Operations prepare the P&E reports with assistance from his Administrative Assistant, and then the President of the Board of County Commissioners certifies the reports. The current internal control has been determined to be ineffective since the P&E reports do not agree with the County's financial records. The County submitted four P&E reports during the audit period; however, the errors, as identified below, were noted on all four reports.  Quarterly Report: October 1, 2022 to December 31, 2022 Current period expenditures reported 7 projects with errors totaling $77,234. Cumulative expenditures reported 22 projects with errors totaling $3,955,669.  Quarterly Report: January 1, 2023 to March 31, 2023 Current period expenditures reported 7 projects with errors totaling $173,169. Cumulative expenditures reported 25 projects with errors totaling $2,633,217.  Quarterly Report: April 1, 2023 to June 30, 2023 Current period expenditures reported 2 projects with errors totaling $0, since expenditures were posted to the incorrect project. Cumulative expenditures reported 24 projects with errors totaling $2,372,744.  Quarterly Report: July 1, 2023 to September 30, 2023 Current period expenditures reported 3 projects with errors totaling $13,412. Cumulative expenditures reported 26 projects with errors totaling $2,273,749. The lack of effective internal controls and noncompliance were systemic issues throughout the entire audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 31 CFR 35.4(c) states in part: "Reporting and requests for other information. During the period of performance, recipients shall provide to the Secretary periodic reports providing detailed accounting of the use of funds." Coronavirus State and Local Fiscal Recovery Funds Compliance and Reporting Guidance, page 10 states in part: ". . . 10. Reporting. All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for compiling and reporting accurate, compliance financial data, in accordance with appropriate accounting standards and principles. . . ." Cause The County's oversight process for filing the P&E reports did not detect errors. The errors were the result of including expenditures from the incorrect time periods. Effect Without the proper implementation of an effectively designed system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As such, the County did not report cumulative expenditures and current period expenditures properly when filing the P&E reports during the audit period. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the County. In addition, not meeting the SLFRF reporting requirements increases the likelihood that the public will not have access to transparent and accurate information regarding expenditures of federal awards. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the County strengthen its system of internal controls to provide for a segregation of duties in the preparation and review of federal reports to ensure appropriate reviews, approvals, and oversight are taking place. We also recommended the development of policies and procedures to ensure the County provides the Treasury with complete and accurate information for the P&E reports. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-003 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Procurement and Suspension and Debarment Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): FY 2023 Pass-Through Entity: Indiana State Department of Health Compliance Requirement: Procurement and Suspension and Debarment Audit Findings: Material Weakness, Modified Opinion Repeat Finding This is a repeat finding from the immediately prior audit report. The prior audit finding number was 2022-003. Condition and Context Procurement The Indiana State Department of Health created the Health Issues and Challenges Grant Program to provide funding to local and statewide service providers and planning organizations through the American Rescue Plan Act. The funds were to be used to prevent or reduce the prevalence of health issues or improve the health and behavioral health of Indiana residents. The City applied for and was awarded the Health Issues and Challenges grant in the amount of $447,112. INDIANA STATE BOARD OF ACCOUNTS 19 CITY OF NEW CASTLE SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Federal regulations allow for informal procurement methods when the value of the procurement for property or services does not exceed the simplified acquisition threshold, which is set at $250,000 unless a lower, more restrictive threshold is set by a nonfederal entity. As Indiana Code has set a more restrictive threshold of $150,000, informal procurement methods are permitted when the value of the procurement does not exceed $150,000. This informal process allows for methods other than the formal bid process. The informal process is divided between two methods based on thresholds. Micro-purchases, typically for those purchases $10,000 or under, and small purchase procedures for those purchases above the micro-purchase threshold, but below the simplified acquisition threshold. Micro-purchases may be awarded without soliciting competitive price rate quotations. If small purchase procedures are used, then price or rate quotations must be obtained from an adequate number of qualified sources. Four vendors fell within the small purchase threshold. Two of the four small purchases were selected for testing. For the two vendors tested, totaling $71,889, the City did not obtain price or rate quotes. The micro-purchase threshold may be increased, but the City did not provide documentation that the threshold had been increased. Documentation detailing the history of procurement, which must include the rationale for the procurement method used, was not available for audit. The lack of internal controls and noncompliance were systemic throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.318 states in part: "(a) The non-Federal entity must have and use documented procurement procedures, consistent with State, local, and tribal laws and regulations and the standards of this section, for the acquisition of property or services required under a Federal award or subaward. The non-Federal entity's documented procurement procedures must conform to the procurement standards identified in §§ 200.317 through 200.327. . . . (i) The non-Federal entity must maintain records sufficient to detail the history of procurement. These records will include, but are not necessarily limited to, the following: Rationale for the method of procurement, selection of contract type, contractor selection or rejection, and the basis for the contract price. . . ." INDIANA STATE BOARD OF ACCOUNTS 20 CITY OF NEW CASTLE SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) 2 CFR 200.320 states in part: "The non-Federal entity must have and use documented procurement procedures, consistent with the standards of this section and §§ 200.317, 200.318, and 200.319 for any of the following methods of procurement used for the acquisition of property or services required under a Federal award or sub-award. (a) Informal procurement methods. When the value of the procurement for property or services under a Federal award does not exceed the simplified acquisition threshold (SAT), as defined in § 200.1, or a lower threshold established by a non-Federal entity, formal procurement methods are not required. The non-Federal entity may use informal procurement methods to expedite the completion of its transactions and minimize the associated administrative burden and cost. The informal methods used for procurement of property or services at or below the SAT include: . . . (2) Small purchases — (i) Small purchase procedures. The acquisition of property or services, the aggregate dollar amount of which is higher than the micro-purchase threshold but does not exceed the simplified acquisition threshold. If small purchase procedures are used, price or rate quotations must be obtained from an adequate number of qualified sources as determined appropriate by the non-Federal entity. . . ." Part 4 of the Treasury's Compliance and Reporting Guidance states: ". . . recipients are expected to have procurement policies and procedures in place that comply with the procurement standards outlined in the Uniform Guidance . . ." Cause A proper system of internal controls was not designed by management of the City. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the City's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, proper procurement procedures were not adhered to for all vendors. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the City. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the City establish documented procedures consistent with state and local laws for the acquisition of property or services required under a federal award or subaward as outlined in the code of federal regulations. In additions, we recommended the City adhere to the procurement policies. INDIANA STATE BOARD OF ACCOUNTS 21 CITY OF NEW CASTLE SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-004 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): FY 21 Compliance Requirement: Reporting Audit Findings: Material Weakness, Modified Opinion Repeat Finding This is a repeat finding from the immediately prior audit report. The prior audit finding number was 2022-003. Condition and Context Recipients are required to submit quarterly or annually Project and Expenditure (P&E) reports to the U.S. Department of the Treasury (Treasury). The reporting periods, as well as the respective due dates, are based upon type of recipient and its population, as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. Recipients are required to submit quarterly or annually P&E reports to the Treasury. The reporting periods, as well as the respective due dates, are based upon type of recipient and its population, as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. INDIANA STATE BOARD OF ACCOUNTS 19 CITY OF LAWRENCE SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) The City was classified as a metropolitan City with a population below 250,000 residents that received an allocation of more than $10 million in State and Local Fiscal Recovery Funds. As such, the City was required to submit four quarterly P&E reports during the audit period. The reports to be submitted during 2023 were for quarters ending December 31, 2022, March 31, 2023, June 30, 2023, and August 31, 2023. The City did not provide audit evidence that the P&E report for the quarter ended December 31, 2022, was prepared and submitted. Additionally, a single employee prepared and submitted the remaining three P&E reports without evidence of oversight and review. The lack of internal controls was a systemic issue throughout the audit period. The noncompliance was related to the P&E report for the quarter ended December 31, 2022. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 31 CFR 35.4(c) states in part: "Reporting and requests for other information. During the period of performance, recipients shall provide to the Secretary periodic reports providing detailed accounting of the uses of funds, . . ." Coronavirus State and Local Fiscal Recovery Funds Compliance and Reporting Guidance, page 10, states in part: ". . . 10. Reporting. All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for compiling and reporting accurate, compliant financial data, in accordance with appropriate accounting standards and principles. . . ." Cause A proper system of internal controls was not designed by management of the City, which would include segregation of key functions. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the City's management of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. The City was not aware the P&E report for the quarter ending December 31, 2022, had not been filed. INDIANA STATE BOARD OF ACCOUNTS 20 CITY OF LAWRENCE SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Effect Without the proper design or implementation of the components of a system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, a quarterly report was not filed with the Treasury. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the City design and implement a proper system of internal controls, including policies and procedures that would provide segregation of duties to ensure appropriate reviews, approvals, and oversight of federal reports are taking place. We also recommended that all quarterly reports be filed timely with the awarding agency. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report. INDIANA STATE BOARD OF ACCOUNTS 21

FINDING 2023-005 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): FY 2023 Compliance Requirement: Reporting Audit Finding: Material Weakness INDIANA STATE BOARD OF ACCOUNTS 21 TOWN OF UPLAND SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Condition and Context Recipients are required to quarterly or annually submit Project and Expenditure (P&E) reports to the U.S. Department of the Treasury (Treasury). The reporting periods, as well as the respective due dates, are based upon type of recipient and its population, as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. The Town was classified as a town with a population below 250,000 residents that received an allocation of less than $10 million in COVID-19 - Coronavirus State and Local Fiscal Recovery Funds (SLFRF). As such, the initial P&E report, covering the period from March 3, 2022 to March 31, 2023, was required to be submitted to the Treasury by April 30, 2023. The subsequent annual reports are to cover one calendar year and must be submitted to the Treasury by April 30 each year. The Town submitted one P&E report during the audit period; however, the report was submitted without a review or oversight process in place to prevent, or detect and correct, errors. The lack of internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Coronavirus State and Local Fiscal Recovery Funds Compliance and Reporting Guidance, page 10, states in part: ". . . 10. Reporting. All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for com-piling and reporting accurate, compliant financial data, in accordance with appropriate accounting standards and principles. . . ." 31 CFR 35.4(c) states in part: "Reporting and requests for other information. During the period of performance, recipients shall provide to the Secretary periodic reports providing detailed accounting of the uses of funds, . . ." Cause A proper system of internal controls was not designed by management of the Town. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the Town's management of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. INDIANA STATE BOARD OF ACCOUNTS 22 TOWN OF UPLAND SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Effect Without the proper implementation of an effectively designed system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the Town strengthen its system of internal controls to provide for segregation of duties in the preparation and review of federal reports to ensure appropriate reviews, approvals, and oversight are taking place. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-003 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): ARP2021 Compliance Requirement: Reporting Audit Findings: Material Weakness, Other Matters Condition and Context Recipients are required to submit quarterly or annually Project and Expenditure (P&E) reports to the U.S. Department of the Treasury (Treasury). The reporting periods, as well as the respective due dates, are based upon type of recipient and its population, as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contract for the appropriate reporting period. The Town was classified as a metropolitan town with a population below 250,000 residents that received an allocation of less than $10 million in COVID-19 - Coronavirus State and Local Fiscal Recovery Funds (SLFRF) funding. As such, the initial P&E report, covering three calendar quarters from March 3, 2021 to December 31, 2021, was required to be submitted to the Treasury by January 31, 2022. The subsequent quarterly reports are to cover one calendar quarter and must be submitted to the Treasury by the last day of the month following the end of the period covered. The Town submitted one P&E report during the audit period timely; however, a single employee prepared and submitted the P&E report without a review or oversight process in place to prevent, or detect and correct, errors. Only one annual report was required to be submitted by the Town. For the report tested, all activity for the reporting period was not included, information submitted was not supported by the Town's records, and the reports were not fairly presented. Errors identified included the following: Annual Report (April 1, 2022 to March 31, 2023)  The Current Period Obligation and Total Cumulative Obligations were understated by $33,855.  The Current Period and Total Cumulative Expenditures were understated by $33,855. The lack of internal controls and noncompliance were systemic issues throughout the audit period. INDIANA STATE BOARD OF ACCOUNTS 18 TOWN OF WHITESTOWN SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Coronavirus State and Local Fiscal Recovery Funds Compliance and Reporting Guidance, page 10, states in part: ". . . 10. Reporting. All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for compiling and reporting accurate, compliant financial data, in accordance with appropriate accounting standards and principles. . . ." 31 CFR 35.4(c) states in part: "Reporting and requests for other information. During the period of performance, recipients shall provide to the Secretary periodic reports providing detailed accounting of the uses of funds, . . ." Cause A proper system of internal controls over the P&E report was not designed by management of the Town to ensure the Town provided the Treasury with complete and accurate information related to the SLFRF awards. The report that was submitted did not include all transactions from the beginning of 2023, causing a variance with the ledger and what was reported on the P&E report. Effect Without the proper implementation of an effectively designed system of internal controls, the P&E report submitted excluded transactions from the beginning of the reporting period which resulted in all key line items being understated. Not meeting the SLFRF reporting requirements increases the likelihood that the public will not have access to transparent and accurate information regarding expenditures of federal awards. Questioned Costs There were no questioned costs identified. INDIANA STATE BOARD OF ACCOUNTS 19 TOWN OF WHITESTOWN SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Recommendation We recommended that management of the Town design and implement a proper system of internal controls, which includes a segregation of key function, to ensure that the Town provides the Treasury with complete and accurate information for the P&E report. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-004 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Procurement and Suspension and Debarment Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listing Number: 21.027 Federal Award Number and Year (or Other Identifying Number): FY 2023 Compliance Requirement: Procurement and Suspension and Debarment Audit Findings: Material Weakness, Modified Opinion Condition and Context The County received a total COVID-19 - Coronavirus State and Local Fiscal Recovery Funds (SLFRF) allocation of $73,674,384 and chose to calculate its own revenue loss allowance, which totaled $35,932,557, to use for government services. Some SLFRF program funds expended in 2023 were expended under the revenue loss eligible use category. Additional program funds expended in 2023 were expended under the other eligible use categories. Procurement Federal regulations allow for informal procurement methods when the value of the procurement for property or services does not exceed the simplified acquisition threshold, which is set at $250,000 unless a lower, more restrictive threshold is set by a non-federal entity. As Indiana Code has set a more restrictive threshold of $150,000, informal procurement methods are permitted when the value of the procurement does not exceed $150,000. This informal process allows for methods other than the formal bid process. The informal process is divided between two methods based on thresholds. Micro-purchases, typically for those purchases $10,000 or under, and small purchase procedures for those purchases above the micro-purchase threshold, but below the simplified acquisition threshold. Micro-purchases may be awarded without soliciting competitive price rate quotations. If small purchase procedures are used, then price or rate quotations must be obtained from an adequate number of qualified sources. For funds expended under the revenue loss eligible use category, the above listed procurement requirements do not apply. During the audit period, the County had four vendors with purchases over the $10,000 micropurchase threshold which were expended under an eligible use category other than revenue loss and, as such, were considered small purchase procurements. The County did not provide competitive price quotations for the small purchase procurements for three of the four vendors, which totaled $257,038. Suspension and Debarment Prior to entering into subawards and covered transactions with SLFRF award funds, recipients are required to verify that such contractors and subrecipients are not suspended, debarred, or otherwise excluded. "Covered transactions" include, but are not limited to, contracts for goods and services awarded under a nonprocurement transaction (i.e., grant agreement) that are expected to equal or exceed $25,000. The verification is to be done by checking the Excluded Parties List System, collecting a certification from that person, or adding a clause or condition to the covered transaction with that person. During the engagement, an employee of the Board of County Commissioners stated that verification was completed by checking the Excluded Parties List System when covered transactions were entered into by the County to verify that an entity with which it plans to enter into a covered transaction is not suspended, debarred, or otherwise excluded or disqualified from participating in federal assistance programs or activities. Six covered transactions, totaling $3,952,203, were paid from SLFRF funds to six different vendors for goods or services that equaled or exceeded $25,000 during the audit period. Three of the six covered transactions were selected for testing. For all three transactions tested, documentation was not provided that the vendor's suspension and debarment status was verified. The lack of internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 31 CFR 19.300 states: "When you enter into a covered transaction with another person at the next lower tier, you must verify that the person with whom you do business is not excluded or disqualified. You do this by: (a) Checking the EPLS; or (b) Collecting a certification from that person if allowed by this rule; or (c) Adding a clause or condition to the covered transaction with that person." 2 CFR 200.318 states in part: "(a) The non-Federal entity must have and use documented procurement procedures, consistent with State, local, and tribal laws and regulations and the standards of this section, for the acquisition of property or services required under a Federal award or subaward. The non-Federal entity's documented procurement procedures must conform to the procurement standards identified in §§ 200.317 through 200.327. . . . (i) The non-Federal entity must maintain records sufficient to detail the history of procurement. These records will include, but are not necessarily limited to, the following: Rationale for the method of procurement, selection of contract type, contractor selection or rejection, and the basis for the contract price. . . ." 2 CFR 200.320 states in part: "The non-Federal entity must have and use documented procurement procedures, consistent with the standards of this section and §§ 200.317, 200.318, and 200.319 for any of the following methods of procurement used for the acquisition of property or services required under a Federal award or sub-award. (a) Informal procurement methods. When the value of the procurement for property or services under a Federal award does not exceed the simplified acquisition threshold (SAT), as defined in § 200.1, or a lower threshold established by a non-Federal entity, formal procurement methods are not required. The non-Federal entity may use informal procurement methods to expedite the completion of its transactions and minimize the associated administrative burden and cost. The informal methods used for procurement of property or services at or below the SAT include: . . . (2) Small purchases — (i) Small purchase procedures. The acquisition of property or services, the aggregate dollar amount of which is higher than the micro-purchase threshold but does not exceed the simplified acquisition threshold. If small purchase procedures are used, price or rate quotations must be obtained from an adequate number of qualified sources as determined appropriate by the non-Federal entity. . . . Cause The County was unable to provide documentation to demonstrate it had properly procured services. In addition, the County was unable to provide documentation to demonstrate it had checked the Excluded Parties List System, per the County's procedures, to ensure vendors were not suspended or debarred prior to entering into covered transactions that exceeded $25,000. Effect Without the proper implementation of an effectively designed system of internal controls, the County cannot demonstrate it obtained an adequate number of price or rate quotations prior to selecting a vendor. Therefore, the County could have overpaid for the services obtained. Furthermore, without the proper implementation of an effectively designed system of internal controls, the County cannot ensure the vendors paid with federal funds are eligible to participate in federal programs. Any program funds the County used to pay vendors that have been suspended or debarred would be unallowable, and the funding agency could potentially recover them. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the Board of County Commissioners strengthen the County's system of internal controls to ensure that an adequate number of price or rate quotations are obtained for small purchase procurements. Additionally, we recommended policies and procedures be strengthened to ensure appropriate supporting documentation for federal programs is retained. Lastly, we recommended that the Board of County Commissioners strengthen the County's system of internal controls to ensure that all vendors that are paid $25,000 or more, all or in part with federal funds, are not suspended or debarred from participating in federal programs before entering into any covered transactions. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

Assistance Listing Number, Federal Agency, and Program Name: Assistance Listing Number 93.600, Department of Health and Human Services, Head Start and Covid-19: Head Start ARP Federal Award Identification Number and Year: 05CH011937-03-03, 05HE000989-01-01 Pass-through Entity – N/A Finding Type – Significant deficiency in internal control over compliance Repeat Finding – No Criteria – Per 2 CFR 200.332 all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the following information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes: (1) Federal award identification. (i) Subrecipient name (which must match the name associated with its unique entity identifier); (ii) Subrecipient's unique entity identifier; (iii) Federal Award Identification Number (FAIN); (iv) Federal Award Date (see the definition of Federal award date in § 200.1 of this part) of award to the recipient by the Federal agency; (v) Subaward Period of Performance Start and End Date; (vi) Subaward Budget Period Start and End Date; (vii) Amount of Federal Funds Obligated by this action by the pass-through entity to the subrecipient; (viii) Total Amount of Federal Funds Obligated to the subrecipient by the pass-through entity including the current financial obligation; (ix) Total Amount of the Federal Award committed to the subrecipient by the pass-through entity; (x) Federal award project description, as required by the Federal Funding Accountability and Transparency Act (FFATA); (xi) Name of the Federal agency, pass-through entity, and contact information for awarding official of the pass-through entity; (xii) Assistance Listings title and number; the pass-through entity must identify the dollar amount made available under each Federal award and the Assistance Listings Number at the time of disbursement; (xiii) Identification of whether the Federal award is for research and development; and (xiv) Indirect cost rate for the Federal award (including if the de minimis rate is used in accordance with § 200.414) Condition – During our test work, we noted that 3 out of 3 subaward agreements tested did not include the information as noted in 2 CFR 200.332. The controls in place did not ensure that the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, were included in the grant agreement of its subrecipient. Identification of How Questioned Costs Were Computed – N/A Questioned Costs – None Cause/Effect – The controls in place did not ensure that the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, were included in the grant agreement of its subrecipient. As a result, required information was omitted. Recommendation – We recommend that management review its procedures and controls to ensure the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, is included in all subawards to subrecipients. View of Responsible Officials and Corrective Action Plan –The Agency agrees with the finding. When granting funds as a subaward to a pass-through entity, the Agency will update its master templates for subawards to include the required information. In addition, when the sub agreements are routed for signature and reviewed by the Chief Financial Officer, they will be double-checked to ensure compliance with this requirement.

Assistance Listing Number, Federal Agency, and Program Name: Assistance Listing Number 93.600, Department of Health and Human Services, Head Start and Covid-19: Head Start ARP Federal Award Identification Number and Year: 05CH011937-03-03, 05HE000989-01-01 Pass-through Entity – N/A Finding Type – Significant deficiency in internal control over compliance Repeat Finding – No Criteria – Per 2 CFR 200.332 all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the following information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes: (1) Federal award identification. (i) Subrecipient name (which must match the name associated with its unique entity identifier); (ii) Subrecipient's unique entity identifier; (iii) Federal Award Identification Number (FAIN); (iv) Federal Award Date (see the definition of Federal award date in § 200.1 of this part) of award to the recipient by the Federal agency; (v) Subaward Period of Performance Start and End Date; (vi) Subaward Budget Period Start and End Date; (vii) Amount of Federal Funds Obligated by this action by the pass-through entity to the subrecipient; (viii) Total Amount of Federal Funds Obligated to the subrecipient by the pass-through entity including the current financial obligation; (ix) Total Amount of the Federal Award committed to the subrecipient by the pass-through entity; (x) Federal award project description, as required by the Federal Funding Accountability and Transparency Act (FFATA); (xi) Name of the Federal agency, pass-through entity, and contact information for awarding official of the pass-through entity; (xii) Assistance Listings title and number; the pass-through entity must identify the dollar amount made available under each Federal award and the Assistance Listings Number at the time of disbursement; (xiii) Identification of whether the Federal award is for research and development; and (xiv) Indirect cost rate for the Federal award (including if the de minimis rate is used in accordance with § 200.414) Condition – During our test work, we noted that 3 out of 3 subaward agreements tested did not include the information as noted in 2 CFR 200.332. The controls in place did not ensure that the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, were included in the grant agreement of its subrecipient. Identification of How Questioned Costs Were Computed – N/A Questioned Costs – None Cause/Effect – The controls in place did not ensure that the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, were included in the grant agreement of its subrecipient. As a result, required information was omitted. Recommendation – We recommend that management review its procedures and controls to ensure the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, is included in all subawards to subrecipients. View of Responsible Officials and Corrective Action Plan –The Agency agrees with the finding. When granting funds as a subaward to a pass-through entity, the Agency will update its master templates for subawards to include the required information. In addition, when the sub agreements are routed for signature and reviewed by the Chief Financial Officer, they will be double-checked to ensure compliance with this requirement.

Assistance Listing Number, Federal Agency, and Program Name: Assistance Listing Number 64.033, Department of Veteran Affairs, VA Supportive Services for Veteran Families Program Federal Award Identification Number and Year: 21-MI-221, 22-MI-221, 20-MI-221-SS, 20-MI-221-LT, 20-MI-221 Pass-through Entity – N/A Finding Type – Significant deficiency in internal control over compliance Repeat Finding – No Criteria – Per 2 CFR 200.332 all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the following information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes: (1) Federal award identification. (i) Subrecipient name (which must match the name associated with its unique entity identifier); (ii) Subrecipient's unique entity identifier; (iii) Federal Award Identification Number (FAIN); (iv) Federal Award Date (see the definition of Federal award date in § 200.1 of this part) of award to the recipient by the Federal agency; (v) Subaward Period of Performance Start and End Date; (vi) Subaward Budget Period Start and End Date; (vii) Amount of Federal Funds Obligated by this action by the pass-through entity to the subrecipient; (viii) Total Amount of Federal Funds Obligated to the subrecipient by the pass-through entity including the current financial obligation; (ix) Total Amount of the Federal Award committed to the subrecipient by the pass-through entity;(x) Federal award project description, as required by the Federal Funding Accountability and Transparency Act (FFATA); (xi) Name of the Federal agency, pass-through entity, and contact information for awarding official of the pass-through entity; (xii) Assistance Listings title and number; the pass-through entity must identify the dollar amount made available under each Federal award and the Assistance Listings Number at the time of disbursement; (xiii) Identification of whether the Federal award is for research and development; and (xiv) Indirect cost rate for the Federal award (including if the de minimis rate is used in accordance with § 200.414) Condition – During our test work, we noted one instance where the subaward was not clearly identified to the subrecipient as a subaward and did not include the information as noted in 2 CFR 200.332. The controls in place did not ensure that the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, was included in the grant agreement of its subrecipient. Identification of How Questioned Costs Were Computed – N/A Questioned Costs – None Cause/Effect – The controls in place did not ensure that the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, were included in the grant agreement of its subrecipient. As a result, required information was omitted.Recommendation – We recommend that management review its procedures and controls to ensure the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, is included in all subawards to subrecipients. View of Responsible Officials and Corrective Action Plan –The Agency agrees with the finding. When granting funds as a subaward to a pass-through entity, the Agency will update its master templates for subawards to include the required information. In addition, when the sub agreements are routed for signature and reviewed by the Chief Financial Officer, they will be double-checked to ensure compliance with this requirement

Assistance Listing Number, Federal Agency, and Program Name: Assistance Listing Number 64.033, Department of Veteran Affairs, VA Supportive Services for Veteran Families Program Federal Award Identification Number and Year: 21-MI-221, 22-MI-221, 20-MI-221-SS, 20-MI-221-LT, 20-MI-221 Pass-through Entity – N/A Finding Type – Significant deficiency in internal control over compliance Repeat Finding – No Criteria – Per 2 CFR 200.332 all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the following information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes: (1) Federal award identification. (i) Subrecipient name (which must match the name associated with its unique entity identifier); (ii) Subrecipient's unique entity identifier; (iii) Federal Award Identification Number (FAIN); (iv) Federal Award Date (see the definition of Federal award date in § 200.1 of this part) of award to the recipient by the Federal agency; (v) Subaward Period of Performance Start and End Date; (vi) Subaward Budget Period Start and End Date; (vii) Amount of Federal Funds Obligated by this action by the pass-through entity to the subrecipient; (viii) Total Amount of Federal Funds Obligated to the subrecipient by the pass-through entity including the current financial obligation; (ix) Total Amount of the Federal Award committed to the subrecipient by the pass-through entity;(x) Federal award project description, as required by the Federal Funding Accountability and Transparency Act (FFATA); (xi) Name of the Federal agency, pass-through entity, and contact information for awarding official of the pass-through entity; (xii) Assistance Listings title and number; the pass-through entity must identify the dollar amount made available under each Federal award and the Assistance Listings Number at the time of disbursement; (xiii) Identification of whether the Federal award is for research and development; and (xiv) Indirect cost rate for the Federal award (including if the de minimis rate is used in accordance with § 200.414) Condition – During our test work, we noted one instance where the subaward was not clearly identified to the subrecipient as a subaward and did not include the information as noted in 2 CFR 200.332. The controls in place did not ensure that the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, was included in the grant agreement of its subrecipient. Identification of How Questioned Costs Were Computed – N/A Questioned Costs – None Cause/Effect – The controls in place did not ensure that the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, were included in the grant agreement of its subrecipient. As a result, required information was omitted.Recommendation – We recommend that management review its procedures and controls to ensure the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, is included in all subawards to subrecipients. View of Responsible Officials and Corrective Action Plan –The Agency agrees with the finding. When granting funds as a subaward to a pass-through entity, the Agency will update its master templates for subawards to include the required information. In addition, when the sub agreements are routed for signature and reviewed by the Chief Financial Officer, they will be double-checked to ensure compliance with this requirement

Assistance Listing Number, Federal Agency, and Program Name: Assistance Listing Number 64.033, Department of Veteran Affairs, VA Supportive Services for Veteran Families Program Federal Award Identification Number and Year: 21-MI-221, 22-MI-221, 20-MI-221-SS, 20-MI-221-LT, 20-MI-221 Pass-through Entity – N/A Finding Type – Significant deficiency in internal control over compliance Repeat Finding – No Criteria – Per 2 CFR 200.332 all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the following information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes: (1) Federal award identification. (i) Subrecipient name (which must match the name associated with its unique entity identifier); (ii) Subrecipient's unique entity identifier; (iii) Federal Award Identification Number (FAIN); (iv) Federal Award Date (see the definition of Federal award date in § 200.1 of this part) of award to the recipient by the Federal agency; (v) Subaward Period of Performance Start and End Date; (vi) Subaward Budget Period Start and End Date; (vii) Amount of Federal Funds Obligated by this action by the pass-through entity to the subrecipient; (viii) Total Amount of Federal Funds Obligated to the subrecipient by the pass-through entity including the current financial obligation; (ix) Total Amount of the Federal Award committed to the subrecipient by the pass-through entity;(x) Federal award project description, as required by the Federal Funding Accountability and Transparency Act (FFATA); (xi) Name of the Federal agency, pass-through entity, and contact information for awarding official of the pass-through entity; (xii) Assistance Listings title and number; the pass-through entity must identify the dollar amount made available under each Federal award and the Assistance Listings Number at the time of disbursement; (xiii) Identification of whether the Federal award is for research and development; and (xiv) Indirect cost rate for the Federal award (including if the de minimis rate is used in accordance with § 200.414) Condition – During our test work, we noted one instance where the subaward was not clearly identified to the subrecipient as a subaward and did not include the information as noted in 2 CFR 200.332. The controls in place did not ensure that the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, was included in the grant agreement of its subrecipient. Identification of How Questioned Costs Were Computed – N/A Questioned Costs – None Cause/Effect – The controls in place did not ensure that the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, were included in the grant agreement of its subrecipient. As a result, required information was omitted.Recommendation – We recommend that management review its procedures and controls to ensure the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, is included in all subawards to subrecipients. View of Responsible Officials and Corrective Action Plan –The Agency agrees with the finding. When granting funds as a subaward to a pass-through entity, the Agency will update its master templates for subawards to include the required information. In addition, when the sub agreements are routed for signature and reviewed by the Chief Financial Officer, they will be double-checked to ensure compliance with this requirement

Assistance Listing Number, Federal Agency, and Program Name: Assistance Listing Number 64.033, Department of Veteran Affairs, VA Supportive Services for Veteran Families Program Federal Award Identification Number and Year: 21-MI-221, 22-MI-221, 20-MI-221-SS, 20-MI-221-LT, 20-MI-221 Pass-through Entity – N/A Finding Type – Significant deficiency in internal control over compliance Repeat Finding – No Criteria – Per 2 CFR 200.332 all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the following information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes: (1) Federal award identification. (i) Subrecipient name (which must match the name associated with its unique entity identifier); (ii) Subrecipient's unique entity identifier; (iii) Federal Award Identification Number (FAIN); (iv) Federal Award Date (see the definition of Federal award date in § 200.1 of this part) of award to the recipient by the Federal agency; (v) Subaward Period of Performance Start and End Date; (vi) Subaward Budget Period Start and End Date; (vii) Amount of Federal Funds Obligated by this action by the pass-through entity to the subrecipient; (viii) Total Amount of Federal Funds Obligated to the subrecipient by the pass-through entity including the current financial obligation; (ix) Total Amount of the Federal Award committed to the subrecipient by the pass-through entity;(x) Federal award project description, as required by the Federal Funding Accountability and Transparency Act (FFATA); (xi) Name of the Federal agency, pass-through entity, and contact information for awarding official of the pass-through entity; (xii) Assistance Listings title and number; the pass-through entity must identify the dollar amount made available under each Federal award and the Assistance Listings Number at the time of disbursement; (xiii) Identification of whether the Federal award is for research and development; and (xiv) Indirect cost rate for the Federal award (including if the de minimis rate is used in accordance with § 200.414) Condition – During our test work, we noted one instance where the subaward was not clearly identified to the subrecipient as a subaward and did not include the information as noted in 2 CFR 200.332. The controls in place did not ensure that the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, was included in the grant agreement of its subrecipient. Identification of How Questioned Costs Were Computed – N/A Questioned Costs – None Cause/Effect – The controls in place did not ensure that the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, were included in the grant agreement of its subrecipient. As a result, required information was omitted.Recommendation – We recommend that management review its procedures and controls to ensure the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, is included in all subawards to subrecipients. View of Responsible Officials and Corrective Action Plan –The Agency agrees with the finding. When granting funds as a subaward to a pass-through entity, the Agency will update its master templates for subawards to include the required information. In addition, when the sub agreements are routed for signature and reviewed by the Chief Financial Officer, they will be double-checked to ensure compliance with this requirement

Assistance Listing Number, Federal Agency, and Program Name: Assistance Listing Number 64.033, Department of Veteran Affairs, VA Supportive Services for Veteran Families Program Federal Award Identification Number and Year: 21-MI-221, 22-MI-221, 20-MI-221-SS, 20-MI-221-LT, 20-MI-221 Pass-through Entity – N/A Finding Type – Significant deficiency in internal control over compliance Repeat Finding – No Criteria – Per 2 CFR 200.332 all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the following information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes: (1) Federal award identification. (i) Subrecipient name (which must match the name associated with its unique entity identifier); (ii) Subrecipient's unique entity identifier; (iii) Federal Award Identification Number (FAIN); (iv) Federal Award Date (see the definition of Federal award date in § 200.1 of this part) of award to the recipient by the Federal agency; (v) Subaward Period of Performance Start and End Date; (vi) Subaward Budget Period Start and End Date; (vii) Amount of Federal Funds Obligated by this action by the pass-through entity to the subrecipient; (viii) Total Amount of Federal Funds Obligated to the subrecipient by the pass-through entity including the current financial obligation; (ix) Total Amount of the Federal Award committed to the subrecipient by the pass-through entity;(x) Federal award project description, as required by the Federal Funding Accountability and Transparency Act (FFATA); (xi) Name of the Federal agency, pass-through entity, and contact information for awarding official of the pass-through entity; (xii) Assistance Listings title and number; the pass-through entity must identify the dollar amount made available under each Federal award and the Assistance Listings Number at the time of disbursement; (xiii) Identification of whether the Federal award is for research and development; and (xiv) Indirect cost rate for the Federal award (including if the de minimis rate is used in accordance with § 200.414) Condition – During our test work, we noted one instance where the subaward was not clearly identified to the subrecipient as a subaward and did not include the information as noted in 2 CFR 200.332. The controls in place did not ensure that the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, was included in the grant agreement of its subrecipient. Identification of How Questioned Costs Were Computed – N/A Questioned Costs – None Cause/Effect – The controls in place did not ensure that the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, were included in the grant agreement of its subrecipient. As a result, required information was omitted.Recommendation – We recommend that management review its procedures and controls to ensure the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, is included in all subawards to subrecipients. View of Responsible Officials and Corrective Action Plan –The Agency agrees with the finding. When granting funds as a subaward to a pass-through entity, the Agency will update its master templates for subawards to include the required information. In addition, when the sub agreements are routed for signature and reviewed by the Chief Financial Officer, they will be double-checked to ensure compliance with this requirement

Assistance Listing Number, Federal Agency, and Program Name: Assistance Listing Number 93.569, Department of Health and Human Services, Community Services Block Grant Federal Award Identification Number and Year: E20230009-001, E20230816-01/E20242466-10, E20234409-002, E20234742-00 Pass-through Entity – Michigan Department of Human Services Finding Type – Significant deficiency in internal control over compliance Repeat Finding – No Criteria – Per 2 CFR 200.332 all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the following information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes: (1) Federal award identification. (i) Subrecipient name (which must match the name associated with its unique entity identifier); (ii) Subrecipient's unique entity identifier; (iii) Federal Award Identification Number (FAIN); (iv) Federal Award Date (see the definition of Federal award date in § 200.1 of this part) of award to the recipient by the Federal agency; (v) Subaward Period of Performance Start and End Date; (vi) Subaward Budget Period Start and End Date; (vii) Amount of Federal Funds Obligated by this action by the pass-through entity to the subrecipient; (viii) Total Amount of Federal Funds Obligated to the subrecipient by the pass-through entity including the current financial obligation; (ix) Total Amount of the Federal Award committed to the subrecipient by the pass-through entity; (x) Federal award project description, as required by the Federal Funding Accountability and Transparency Act (FFATA); (xi) Name of the Federal agency, pass-through entity, and contact information for awarding official of the pass-through entity; (xii) Assistance Listings title and number; the pass-through entity must identify the dollar amount made available under each Federal award and the Assistance Listings Number at the time of disbursement; (xiii) Identification of whether the Federal award is for research and development; and (xiv) Indirect cost rate for the Federal award (including if the de minimis rate is used in accordance with § 200.414) Condition – During our test work, we noted one instance where the subaward was not clearly identified to the subrecipient as a subaward and did not include the information as noted in 2 CFR 200.332. The controls in place did not ensure that the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, was included in the grant agreement of its subrecipient. Identification of How Questioned Costs Were Computed – N/A Questioned Costs – None Cause/Effect – The controls in place did not ensure that the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, were included in the grant agreement of its subrecipient. As a result, required information was omitted. Recommendation – We recommend that management review its procedures and controls to ensure the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, is included in all subawards to subrecipients. View of Responsible Officials and Corrective Action Plan –The Agency agrees with the finding. When granting funds as a subaward to a pass-through entity, the Agency will update its master templates for subawards to include the required information. In addition, when the sub agreements are routed for signature and reviewed by the Chief Financial Officer, they will be double-checked to ensure compliance with this requirement.

Assistance Listing Number, Federal Agency, and Program Name: Assistance Listing Number 93.569, Department of Health and Human Services, Community Services Block Grant Federal Award Identification Number and Year: E20230009-001, E20230816-01/E20242466-10, E20234409-002, E20234742-00 Pass-through Entity – Michigan Department of Human Services Finding Type – Significant deficiency in internal control over compliance Repeat Finding – No Criteria – Per 2 CFR 200.332 all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the following information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes: (1) Federal award identification. (i) Subrecipient name (which must match the name associated with its unique entity identifier); (ii) Subrecipient's unique entity identifier; (iii) Federal Award Identification Number (FAIN); (iv) Federal Award Date (see the definition of Federal award date in § 200.1 of this part) of award to the recipient by the Federal agency; (v) Subaward Period of Performance Start and End Date; (vi) Subaward Budget Period Start and End Date; (vii) Amount of Federal Funds Obligated by this action by the pass-through entity to the subrecipient; (viii) Total Amount of Federal Funds Obligated to the subrecipient by the pass-through entity including the current financial obligation; (ix) Total Amount of the Federal Award committed to the subrecipient by the pass-through entity; (x) Federal award project description, as required by the Federal Funding Accountability and Transparency Act (FFATA); (xi) Name of the Federal agency, pass-through entity, and contact information for awarding official of the pass-through entity; (xii) Assistance Listings title and number; the pass-through entity must identify the dollar amount made available under each Federal award and the Assistance Listings Number at the time of disbursement; (xiii) Identification of whether the Federal award is for research and development; and (xiv) Indirect cost rate for the Federal award (including if the de minimis rate is used in accordance with § 200.414) Condition – During our test work, we noted one instance where the subaward was not clearly identified to the subrecipient as a subaward and did not include the information as noted in 2 CFR 200.332. The controls in place did not ensure that the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, was included in the grant agreement of its subrecipient. Identification of How Questioned Costs Were Computed – N/A Questioned Costs – None Cause/Effect – The controls in place did not ensure that the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, were included in the grant agreement of its subrecipient. As a result, required information was omitted. Recommendation – We recommend that management review its procedures and controls to ensure the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, is included in all subawards to subrecipients. View of Responsible Officials and Corrective Action Plan –The Agency agrees with the finding. When granting funds as a subaward to a pass-through entity, the Agency will update its master templates for subawards to include the required information. In addition, when the sub agreements are routed for signature and reviewed by the Chief Financial Officer, they will be double-checked to ensure compliance with this requirement.

Assistance Listing Number, Federal Agency, and Program Name: Assistance Listing Number 93.569, Department of Health and Human Services, Community Services Block Grant Federal Award Identification Number and Year: E20230009-001, E20230816-01/E20242466-10, E20234409-002, E20234742-00 Pass-through Entity – Michigan Department of Human Services Finding Type – Significant deficiency in internal control over compliance Repeat Finding – No Criteria – Per 2 CFR 200.332 all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the following information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes: (1) Federal award identification. (i) Subrecipient name (which must match the name associated with its unique entity identifier); (ii) Subrecipient's unique entity identifier; (iii) Federal Award Identification Number (FAIN); (iv) Federal Award Date (see the definition of Federal award date in § 200.1 of this part) of award to the recipient by the Federal agency; (v) Subaward Period of Performance Start and End Date; (vi) Subaward Budget Period Start and End Date; (vii) Amount of Federal Funds Obligated by this action by the pass-through entity to the subrecipient; (viii) Total Amount of Federal Funds Obligated to the subrecipient by the pass-through entity including the current financial obligation; (ix) Total Amount of the Federal Award committed to the subrecipient by the pass-through entity; (x) Federal award project description, as required by the Federal Funding Accountability and Transparency Act (FFATA); (xi) Name of the Federal agency, pass-through entity, and contact information for awarding official of the pass-through entity; (xii) Assistance Listings title and number; the pass-through entity must identify the dollar amount made available under each Federal award and the Assistance Listings Number at the time of disbursement; (xiii) Identification of whether the Federal award is for research and development; and (xiv) Indirect cost rate for the Federal award (including if the de minimis rate is used in accordance with § 200.414) Condition – During our test work, we noted one instance where the subaward was not clearly identified to the subrecipient as a subaward and did not include the information as noted in 2 CFR 200.332. The controls in place did not ensure that the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, was included in the grant agreement of its subrecipient. Identification of How Questioned Costs Were Computed – N/A Questioned Costs – None Cause/Effect – The controls in place did not ensure that the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, were included in the grant agreement of its subrecipient. As a result, required information was omitted. Recommendation – We recommend that management review its procedures and controls to ensure the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, is included in all subawards to subrecipients. View of Responsible Officials and Corrective Action Plan –The Agency agrees with the finding. When granting funds as a subaward to a pass-through entity, the Agency will update its master templates for subawards to include the required information. In addition, when the sub agreements are routed for signature and reviewed by the Chief Financial Officer, they will be double-checked to ensure compliance with this requirement.

Assistance Listing Number, Federal Agency, and Program Name: Assistance Listing Number 93.569, Department of Health and Human Services, Community Services Block Grant Federal Award Identification Number and Year: E20230009-001, E20230816-01/E20242466-10, E20234409-002, E20234742-00 Pass-through Entity – Michigan Department of Human Services Finding Type – Significant deficiency in internal control over compliance Repeat Finding – No Criteria – Per 2 CFR 200.332 all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the following information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes: (1) Federal award identification. (i) Subrecipient name (which must match the name associated with its unique entity identifier); (ii) Subrecipient's unique entity identifier; (iii) Federal Award Identification Number (FAIN); (iv) Federal Award Date (see the definition of Federal award date in § 200.1 of this part) of award to the recipient by the Federal agency; (v) Subaward Period of Performance Start and End Date; (vi) Subaward Budget Period Start and End Date; (vii) Amount of Federal Funds Obligated by this action by the pass-through entity to the subrecipient; (viii) Total Amount of Federal Funds Obligated to the subrecipient by the pass-through entity including the current financial obligation; (ix) Total Amount of the Federal Award committed to the subrecipient by the pass-through entity; (x) Federal award project description, as required by the Federal Funding Accountability and Transparency Act (FFATA); (xi) Name of the Federal agency, pass-through entity, and contact information for awarding official of the pass-through entity; (xii) Assistance Listings title and number; the pass-through entity must identify the dollar amount made available under each Federal award and the Assistance Listings Number at the time of disbursement; (xiii) Identification of whether the Federal award is for research and development; and (xiv) Indirect cost rate for the Federal award (including if the de minimis rate is used in accordance with § 200.414) Condition – During our test work, we noted one instance where the subaward was not clearly identified to the subrecipient as a subaward and did not include the information as noted in 2 CFR 200.332. The controls in place did not ensure that the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, was included in the grant agreement of its subrecipient. Identification of How Questioned Costs Were Computed – N/A Questioned Costs – None Cause/Effect – The controls in place did not ensure that the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, were included in the grant agreement of its subrecipient. As a result, required information was omitted. Recommendation – We recommend that management review its procedures and controls to ensure the required information as prescribed by 2 CFR 200.332, Requirements for Pass-through Entities, is included in all subawards to subrecipients. View of Responsible Officials and Corrective Action Plan –The Agency agrees with the finding. When granting funds as a subaward to a pass-through entity, the Agency will update its master templates for subawards to include the required information. In addition, when the sub agreements are routed for signature and reviewed by the Chief Financial Officer, they will be double-checked to ensure compliance with this requirement.

2023-014 Period of Performance Assistance Listing No.: 14.267 Continuum of Care Program Condition: The Organization was unable to demonstrate consistent controls over the period of performance requirement. Criteria: The requirements for the period of performance are contained in 2 CFR section 200.1 Definitions for “budget period,” “financial obligations,” “period of performance,” 2 CFR section 200.308 (revision of budget and program plans), 2 CFR section 200.309 (modifications to period of performance), 2 CFR section 200.344 (closeout), program legislation, federal awarding agency regulations; and the terms and conditions of the award. Questioned Costs There are no questioned costs. Cause: The Organization did not have good controls on ensuring the period of performance requirement was met due to staff turn over. Effect: The Organization could have grant expenditures outside the grant period. Perspective: Thirty-one of forty items selected for testing did not have documentation of the control over compliance with the period of performance requirement. Repeat Finding: This is a repeat finding. See finding 2022-017. Recommendation: In order to prevent future occurences of this deficiency, we recommend that management expand controls to ensure that they are able to demonstrate that all expenses meet their procurement policy. Auditee's Response: The Organization agrees with the finding. See attached corrective action plan.

2023-014 Period of Performance Assistance Listing No.: 14.267 Continuum of Care Program Condition: The Organization was unable to demonstrate consistent controls over the period of performance requirement. Criteria: The requirements for the period of performance are contained in 2 CFR section 200.1 Definitions for “budget period,” “financial obligations,” “period of performance,” 2 CFR section 200.308 (revision of budget and program plans), 2 CFR section 200.309 (modifications to period of performance), 2 CFR section 200.344 (closeout), program legislation, federal awarding agency regulations; and the terms and conditions of the award. Questioned Costs There are no questioned costs. Cause: The Organization did not have good controls on ensuring the period of performance requirement was met due to staff turn over. Effect: The Organization could have grant expenditures outside the grant period. Perspective: Thirty-one of forty items selected for testing did not have documentation of the control over compliance with the period of performance requirement. Repeat Finding: This is a repeat finding. See finding 2022-017. Recommendation: In order to prevent future occurences of this deficiency, we recommend that management expand controls to ensure that they are able to demonstrate that all expenses meet their procurement policy. Auditee's Response: The Organization agrees with the finding. See attached corrective action plan.

2023-014 Period of Performance Assistance Listing No.: 14.267 Continuum of Care Program Condition: The Organization was unable to demonstrate consistent controls over the period of performance requirement. Criteria: The requirements for the period of performance are contained in 2 CFR section 200.1 Definitions for “budget period,” “financial obligations,” “period of performance,” 2 CFR section 200.308 (revision of budget and program plans), 2 CFR section 200.309 (modifications to period of performance), 2 CFR section 200.344 (closeout), program legislation, federal awarding agency regulations; and the terms and conditions of the award. Questioned Costs There are no questioned costs. Cause: The Organization did not have good controls on ensuring the period of performance requirement was met due to staff turn over. Effect: The Organization could have grant expenditures outside the grant period. Perspective: Thirty-one of forty items selected for testing did not have documentation of the control over compliance with the period of performance requirement. Repeat Finding: This is a repeat finding. See finding 2022-017. Recommendation: In order to prevent future occurences of this deficiency, we recommend that management expand controls to ensure that they are able to demonstrate that all expenses meet their procurement policy. Auditee's Response: The Organization agrees with the finding. See attached corrective action plan.

FINDING 2023-004 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): 2023 Compliance Requirement: Reporting Audit Findings: Material Weakness, Other Matters Condition and Context Recipients are required to quarterly or annually submit Project and Expenditure (P&E) reports to the U.S. Department of the Treasury (Treasury). The reporting periods, as well as the respective due dates, are based upon type of recipient and its population, as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. The City was classified as a metropolitan city with a population below 250,000 residents that received an allocation of less than $10 million in COVID-19 - Coronavirus State and Local Fiscal Recovery Funds (SLFRF). As such, the initial P&E report, covering the period from March 3, 2021 to March 31, 2022, was required to be submitted to the Treasury by April 30, 2022. The subsequent annual reports are to cover one calendar year and must be submitted to the Treasury by April 30 each year. The City submitted one P&E report during the audit period; however, the internal controls in place were not effective and did not prevent, or detect and correct, errors. As a result, errors in reporting were identified. The total cumulative expenditures and current period expenditures were incorrectly reported and were overstated in the amounts of $780,740 and $308,766, respectively, based on the City's financial records. The lack of internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Coronavirus State and Local Fiscal Recovery Funds Compliance and Reporting Guidance, page 10, states in part: ". . . 10. Reporting. All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for compiling and reporting accurate, compliant financial data, in accordance with appropriate accounting standards and principles. . . ." 31 CFR 35.4(c) states in part: "Reporting and requests for other information. During the period of performance, recipients shall provide to the Secretary periodic reports providing detailed accounting of the uses of funds, . . ." Cause The City's management did not have properly designed internal controls in place to review reports prior to submission. Due to the lack of a proper oversight process for filing the P&E report for the period April 1, 2022 to March 31, 2023, the errors note in the Condition and Context were not detected. Effect Without the proper implementation of an effectively designed system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As such, the City did not report total cumulative expenditures and current period expenditures properly when filing the P&E report for the period April 1, 2022 to March 31, 2023. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the City. In addition, not meeting the SLFRF reporting requirements increases the likelihood that the public will not have access to transparent and accurate information regarding expenditures of federal awards. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the City strengthen its system of internal controls to provide for a segregation of duties in the preparation and review of federal reports to ensure appropriate reviews, approvals, and oversight are taking place. We also recommended the development of policies and procedures to ensure the City provides the Treasury with complete and accurate information for the P&E report. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

CONDITION: The City of McKeesport inadvertently charged as eligible expenditures two (2) purchases totaling $144,000 on the third quarter financial report required to be filed with the Department of Treasury that had already been claimed as eligible expenditures in the second quarter financial report. CRITERIA: Section 2 CFR 200.1 of the Uniform Guidance defines a disallowed cost as a charge to a Federal Award that is determined to be unallowable under the Award’s terms, which would include duplicate payments. Section 2 CFR 200.339 of the Uniform Guidance gives the federal agency the authority to disallow costs if the recipient fails to comply with the aforementioned Award terms and conditions. CAUSE: The City inadvertently claimed two vendor payments on both the second and third quarter financial reports required to be submitted to the Department of Treasury which were not detected as part of the oversight process. EFFECT: The City of McKeesport did not comply with the requirements of Sections 2 CFR 200.1 and 200.339 of the Uniform Guidance by inadvertently claiming two vendor payments twice as eligible program costs during calendar year 2023.QUESTIONED COST: Soundthinking, Inc. $99,000 and Butler Township Volunteer Fire Company $45,000. Total - $144,000. RECOMMENDATION: I am recommending that City management reallocate the duplicate payments for other allowable expenditures and update its financial reporting to the Department of Treasury to reflect this reallocation. VIEWS OF RESPONSIBLE OFFICIALS: The City concurs with the above noted finding and addresses this issue in the ‘Corrective Action Plan’ included within this report.

FINDING 2023-004 Subject: Drinking Water State Revolving Fund (DWSRF) Cluster - Procurement and Suspension and Debarment Federal Agency: Environmental Protection Agency Federal Program: Drinking Water State Revolving Fund Assistance Listings Number: 66.468 Federal Award Number and Year (or Other Identifying Number): DW23150901 Pass-Through Entity: Indiana Finance Authority Compliance Requirement: Procurement and Suspension and Debarment Audit Findings: Material Weakness, Modified Opinion Condition and Context An effective internal control system was not designed or implemented at the City to ensure compliance with requirements related to the grant agreement and the Procurement and Suspension and Debarment compliance requirement. Procurement - Policy The City had not established a purchasing policy that reflected applicable state laws and regulations, including procedures to avoid the acquisition of unnecessary or duplicative items and procedures to ensure that all solicitations incorporate a clear and accurate description of the technical requirements for the material, product, or service to be procured. Additionally, the City did not maintain a policy that prohibits the use of statutorily or administratively imposed state, local, or tribal geographical preferences in evaluation of bids or proposals. INDIANA STATE BOARD OF ACCOUNTS 22 CITY OF LOGANSPORT SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Procurement - Small Purchases The City expended federal funds to pay 12 separate vendors to provide goods and services for the duration of the City's Lead Service Line Replacement project. A population of 5 vendors had aggregated expenditures for the audit period that were less than the simplified acquisition threshold of $150,000 but exceeded the $10,000 micro-purchase threshold. All 5 vendors were tested; for 2 of the 5 vendors, the City was unable to provide any documentation that the procurement method used was appropriate or that the procurement provided full and open competition or rationale to support the determination to limit competition. The history of the procurement, including rationale for the method of procurement, selection of the vendor, and the basis for the price, was not adequately documented. Suspension and Debarment Prior to entering into subawards and covered transactions with award funds, recipients are required to verify that vendors are not suspended, debarred, or otherwise excluded. "Covered transactions" include, but are not limited to, contracts for goods and services awarded under a nonprocurement transaction (i.e., grant agreement) that are expected to equal or exceed $25,000. The verification is to be done by checking the Excluded Parties List System (EPLS), collecting a certification from that person, or adding a clause or condition to the covered transaction with that person. Due to the agreement with the Indiana Finance Authority (IFA), the City was not required to perform testing over suspension and debarment for a majority of the vendors used; however, several drawdowns from the State Revolving Funds (SRF) program were used to reimburse the City for payments made to specific vendors. The vendors paid directly by the City were not included in the IFA's procedures for checking suspension and debarment, therefore, the City was obligated to meet the requirement. The City did not maintain a set of procedures for checking suspension and debarment status of vendors for expenditures related to the SRF awards. A total of two vendors paid directly by the City exceeded the suspension and debarment threshold of $25,000 and were subject to testing. No documentation to show that suspension and debarment was verified prior to entering into the contract could be provided for either vendor. The lack of internal controls and noncompliance was a systemic issue throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." INDIANA STATE BOARD OF ACCOUNTS 23 CITY OF LOGANSPORT SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) 2 CFR 200.320 states in part: "The non-Federal entity must have and use documented procurement procedures, consistent with the standards of this section and §§ 200.317, 200.318, and 200.319 for any of the following methods of procurement used for the acquisition of property or services required under a Federal award or sub-award. (a) Informal procurement methods. When the value of the procurement for property or services under a Federal award does not exceed the simplified acquisition threshold (SAT), as defined in § 200.1, or a lower threshold established by a non-Federal entity, formal procurement methods are not required. The non-Federal entity may use informal procurement methods to expedite the completion of its transactions and minimize the associated administrative burden and cost. The informal methods used for procurement of property or services at or below the SAT include: . . . (2) Small purchases– (i) Small purchase procedures. The acquisition of property or services, the aggregate dollar amount of which is higher than the micro-purchase threshold but does not exceed the simplified acquisition threshold. If small purchase procedures are used, price or rate quotations must be obtained from an adequate number of qualified sources as determined appropriate by the non-Federal entity. . . ." 2 CFR 180.300 states: "When you enter into a covered transaction with another person at the next lower tier, you must verify that the person with whom you intend to do business is not excluded or disqualified. You do this by: (a) Checking the SAM.gov Exclusions; or (b) Collecting a certification from that person; or (c) Adding a clause or condition to the covered transaction with that person." 2 CFR 200.214 states: "Non-Federal entities are subject to the non-procurement debarment and suspension regulations implementing Executive Orders 12549 and 12689, 2 CFR part 180. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities." 2 CFR 200.318(a) states: "The non-Federal entity must have and use documented procurement procedures, consistent with State, local, and tribal laws and regulations and the standards of this section, for the acquisition of property or services required under a Federal award or subaward. The nonfederal entity's documented procurement procedures must conform to the procurement standards identified in §§ 200.317 through 200.327." INDIANA STATE BOARD OF ACCOUNTS 24 CITY OF LOGANSPORT SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) 2 CFR 200.318(d) states: "The non-Federal entity's procedures must avoid acquisition of unnecessary or duplicative items. Consideration should be given to consolidating or breaking out procurements to obtain a more economical purchase. Where appropriate, an analysis will be made of lease versus purchase alternatives, and any other appropriate analysis to determine the most economical approach." 2 CFR 200.319(c) states: "The non-Federal entity must conduct procurements in a manner that prohibits the use of statutorily or administratively imposed state, local, or tribal geographical preferences in the evaluation of bids or proposals, except in those cases where applicable Federal statutes expressly mandate or encourage geographic preference. Nothing in this section preempts state licensing laws. When contracting for architectural and engineering (A/E) services, geographic location may be a selection criterion provided its application leaves an appropriate number of qualified firms, given the nature and size of the project, to compete for the contract." 2 CFR 200.319(d) states: "The non-Federal entity must have written procedures for procurement transactions. These procedures must ensure that all solicitations: (1) Incorporate a clear and accurate description of the technical requirements for the material, product, or service to be procured. Such description must not, in competitive procurements, contain features which unduly restrict competition. The description may include a statement of the qualitative nature of the material, product or service to be procured and, when necessary, must set forth those minimum essential characteristics and standards to which it must conform if it is to satisfy its intended use. Detailed product specifications should be avoided if at all possible. When it is impractical or uneconomical to make a clear and accurate description of the technical requirements, a 'brand name or equivalent' description may be used as a means to define the performance or other salient requirements of procurement. The specific features of the named brand which must be met by offers must be clearly stated; and (2) Identify all requirements which the offerors must fulfill and all other factors to be used in evaluating bids or proposals." Cause The City did not maintain a procurement policy that would demonstrate the appropriate procedures to be followed when procuring with federal funding and were not aware of the need to follow federal guidelines for procurement or suspension and debarment for expenditures associated with the SRF awards. Effect Without a proper system of internal controls in place that operated effectively, noncompliance remained undetected. As a result, proper procurement procedures were not adhered to for all vendors. Without following the required methods for procurement, the City could be overpaying for services or providing federal funds to an entity that is suspended or debarred. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funds to the City. INDIANA STATE BOARD OF ACCOUNTS 25 CITY OF LOGANSPORT SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Questioned Costs There were no questioned costs identified. Recommendation We recommended that the City's management establish a proper system of internal controls to ensure expenditures made from federal awards use the appropriate procurement method and retain the documentation to support the procurement methods used in order to ensure compliance with the terms and conditions of the federal award and ensure that vendors paid from federal funds are neither suspended nor debarred. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-002 Subject: CDBG - Entitlement Grants Cluster - Program Income Federal Agency: Department of Housing and Urban Development Federal Program: Community Development Block Grants/Entitlement Grants Assistance Listings Number: 14.218 Federal Award Numbers and Years (or Other Identifying Numbers): B-11-UN-18-0002, B-19-UC-18-0016, B-20-UC-18-0016, B-21-UC-18-0016, B-22-UC-18-0016, B-23-UC-18-0016 Compliance Requirement: Program Income Audit Findings: Material Weakness, Modified Opinion This is a repeat finding from the immediately prior audit report. The prior audit finding number was 2022-003. Condition and Context The County received program income through various loan programs it offered to qualifying individuals. Once the County received a loan payment, the receipt was posted into the financial accounting system of the County and recorded in a grant fund. The amount received was also to be recorded in the Department of Housing and Urban Development's (HUD) Integrated Disbursement and Information System (IDIS) website. The recorded program income in the IDIS website would then appear on the Drawdown Report by Voucher Number report (PR07). One individual was responsible for notifying the County Auditor's office when program income money was received so it could be receipted in the County's financial accounting system. The same individual was also responsible for reporting the information on the IDIS site. No internal controls were established to ensure the program income that was recorded in the financial accounting system was also reported on the IDIS site and the PR07 report. There were 5 out of 38 receipts that were unable to be located on the PR07 report provided for audit. In addition, we were unable to verify the total amount recorded in the receipt ledger to the total reported on the PR07 report. The County's ledger amount was greater than the PR07 report by $54,727 and is primarily attributed to under reporting of program income in the IDIS as identified above. The lack of internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: INDIANA STATE BOARD OF ACCOUNTS 20 LAKE COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.1 states in part: ". . . Internal controls for non-Federal entities means: (1) Processes designed and implemented by non-Federal entities to provide reasonable assurance regarding the achievement of objectives in the following categories: (i) Effectiveness and efficiency of operations; (ii) Reliability of reporting for internal and external use; . . ." 2 CFR 200.302 states in part: "(a) Each state must expend and account for the Federal award in accordance with state laws and procedures for expending and accounting for the state's own funds. In addition, the state's and the other non-Federal entity's financial management systems, including records documenting compliance with Federal statutes, regulations, and the terms and conditions of the Federal award, must be sufficient to permit the preparation of reports required by general and program-specific terms and conditions; and the tracing of funds to a level of expenditures adequate to establish that such funds have been used according to the Federal statutes, regulations, and the terms and conditions of the Federal award. . . . (b) The financial management system of each non-Federal entity must provide for the following: . . . (3) Records that identify adequately the source and application of funds for federally funded activities. These records must contain information pertaining to Federal awards, authorizations, financial obligations, unobligated balances, assets, expenditures, income and interest and be supported by source documentation. . . ." 24 CFR 570.504 states in part: "(a) Recording program income. The receipt and expenditure of program income as defined in § 570.500(a) shall be recorded as part of the financial transactions of the grant program. (b) Disposition of program income received by recipients. (1) Program income received before grant closeout may be retained by the recipient if the income is treated as additional CDBG funds subject to all applicable requirements governing the use of CDBG funds. (2) If the recipient chooses to retain program income, that program income shall be disposed of as follows: INDIANA STATE BOARD OF ACCOUNTS 21 LAKE COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (i) Program income in the form of repayments to, or interest earned on, a revolving fund as defined in § 570.500(b) shall be substantially disbursed from the fund before additional cash withdrawals are made from the U.S. Treasury for the same activity. (This rule does not prevent a lump sum disbursement to finance the rehabilitation of privately owned properties as provided for in § 570.513.) (ii) Substantially all other program income shall be disbursed for eligible activities before additional cash withdrawals are made from the U.S. Treasury. . . ." Cause A turnover of staff in the County's Community Development office and management not ensuring that a system of internal controls that segregated key functions was designed, implemented, and operating effectively contributed to the program income issue identified above. Effect Without the proper implementation of an effectively designed system of internal controls, the County could not ensure that program income was properly reported and used before the drawdown of federal funds as required. The County could be at risk of losing federal funds by the federal awarding agency due to noncompliance with federal regulations. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the management of the County establish a system of internal controls to ensure that all program income received is properly reported in the IDIS system and expended prior to drawing down federal awards. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-004 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Procurement and Suspension and Debarment Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Numbers and Years (or Other Identifying Numbers): Contract #65873, SLT-3157 Pass-Through Entity: Indiana Department of Natural Resources Compliance Requirement: Procurement and Suspension and Debarment Audit Findings: Material Weakness, Modified Opinion Condition and Context Procurement The County did adopt an applicable federal purchasing policy. The Lake County Indiana Purchasing Manual for Supplies, Services and Public Works states on page 19 that "Federal funds more than $50,000 but less than $150,000 will invite 3 quotes at an open public meeting . . .", which is the federal requirement for small purchases. However, the County did not follow this policy. In 2023, the County had one vendor that was paid a total of $97,525 from COVID-19 - Coronavirus State and Local Fiscal Recovery Funds (SLFRF) under Contract #65873 from the Indiana Department of Natural Resources. However, the County did not obtain price or rate quotes for the one applicable vendor under the small purchase threshold as required. Suspension and Debarment Prior to entering into subawards and covered transactions with the SLFRF award funds, recipients are required to verify that such contractors and subrecipients are not suspended, debarred, or otherwise excluded. "Covered transactions" include, but are not limited to, contracts for goods and services awarded under a nonprocurement transaction (i.e., grant agreement) that are expected to equal or exceed $25,000 and all subawards. The verification is to be done by checking the Excluded Parties List System (EPLS), collecting a certification from that person or entity, or adding a clause or condition to the covered transaction with that person or entity. INDIANA STATE BOARD OF ACCOUNTS 24 LAKE COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) The County did not have policies or procedures in place related to the suspension and debarment requirements for the SLFRF funds. Two covered transactions totaling $1,990,616 paid from SLFRF funds were identified. Documentation to show that suspension and debarment was verified prior to entering into contracts with these two vendors could not be provided by the County. The amounts for which suspension and debarment were not verified for Contract #65873 from the Indiana Department of Natural Resources and the SLT-3157 directly from the Department of the Treasury were $176,711 and $1,813,905, respectively. The lack of internal controls and noncompliance were isolated to the transactions identified above. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.318(i) states: "The non-Federal entity must maintain records sufficient to detail the history of procurement. These records will include, but are not necessarily limited to the following: Rationale for the method of procurement, selection of contract type, contractor selection or rejection, and the basis for the contract price." 2 CFR 200.320 states in part: "The non-Federal entity must have and use documented procurement procedures, consistent with the standards of this section and §§ 200.317, 200.318, and 200.319 for any of the following methods of procurement used for the acquisition of property or services required under a Federal award or subaward. (a) Informal Procurement methods. When the value of the procurement for property or services under a Federal award does not exceed the simplified acquisition threshold (SAT), as defined in § 200.1, or a lower threshold established by a non-Federal entity, formal procurement methods are not required. The non-Federal entity may use informal procurement methods to expedite the completion of its transactions and minimize the associated administrative burden and cost. The informal methods used for procurement of property or services at or below the SAT include: . . . (2) Small purchases - (i) Small purchase procedures. The acquisition of property or services, the aggregate dollar amount of which is higher than the micro-purchase threshold but does not exceed the simplified acquisition threshold. If small purchase procedures are used, price or rate quotations must be obtained from an adequate number of qualified sources as determined appropriate by the non-Federal entity. . . ." INDIANA STATE BOARD OF ACCOUNTS 25 LAKE COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) 2 CFR 180.300 states: "When you enter into a covered transaction with another person at the next lower tier, you must verify that the person with whom you intend to do business is not excluded or disqualified. You do this by: (a) Checking SAM Exclusions; or (b) Collecting a certification from that person; or (c) Adding a clause or condition to the covered transaction with that person." Cause The County's purchasing policy does not provide procedures on how the County will ensure the appropriate number of quotes will be obtained for small purchases or how the County will ensure compliance with the suspension and debarment requirements. Effect Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the repayment or loss of future federal funding to the County. Questioned Costs There were no questioned costs identified. Recommendation Management of the County should develop procedures to ensure the appropriate procurement methods are used for items or services procured that are within the small purchase threshold and to ensure vendors are not suspended or debarred when expending federal funds. Appropriate documentation should be maintained to ensure compliance with procurement and suspension and debarment. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

Federal Agency: Department of Housing and Urban Development Federal Program Name: Continuum of Care Program Assistance Listing Number: 14.267 Federal Award Identification Numbers: MN0087L5K052114, MN0014L5K002114, MN0186L5K112110 Award Periods: 4/1/22-3/31/23; 7/1/22-6/30/23; 8/1/22-7/31/23 Type of Finding: • Material Weakness in Internal Control over Compliance • Other Matters Criteria or specific requirement: 2 CFR 200.1 defines period of performance as the total estimated time interval between the start of an initial Federal award and the planned end date. Costs recorded to a grant must not be incurred prior to the start of the period of performance unless authorized by the federal awarding agency. Costs recorded to a grant must also not be incurred after the period of performance. Condition: During our audit testing, we noted costs were charged outside of the period of performance for three different awards. Questioned costs: $5,645 Context: We tested 40 transactions from the beginning of the period of performance, noting 2 exceptions where grants were charged for costs incurred prior to the period of performance. We tested 40 transactions from the ending of the period of performance, noting 3 exceptions where grants were charged after the period of performance. Cause: Invoices were charged based on payment date instead of the incurred date. Effect: Grants were charged for costs outside the period of performance. Management repaid the questioned costs to the grantor during the audit. Repeat finding: Not a repeat finding Recommendation: We recommend the Organization put procedures in place to identify the performance period when charging invoices to grants, particularly during the start and end of the period of performance. Views of responsible officials: There is no disagreement with the audit finding.

Federal Agency: Department of Housing and Urban Development Federal Program Name: Continuum of Care Program Assistance Listing Number: 14.267 Federal Award Identification Numbers: MN0087L5K052114, MN0014L5K002114, MN0186L5K112110 Award Periods: 4/1/22-3/31/23; 7/1/22-6/30/23; 8/1/22-7/31/23 Type of Finding: • Material Weakness in Internal Control over Compliance • Other Matters Criteria or specific requirement: 2 CFR 200.1 defines period of performance as the total estimated time interval between the start of an initial Federal award and the planned end date. Costs recorded to a grant must not be incurred prior to the start of the period of performance unless authorized by the federal awarding agency. Costs recorded to a grant must also not be incurred after the period of performance. Condition: During our audit testing, we noted costs were charged outside of the period of performance for three different awards. Questioned costs: $5,645 Context: We tested 40 transactions from the beginning of the period of performance, noting 2 exceptions where grants were charged for costs incurred prior to the period of performance. We tested 40 transactions from the ending of the period of performance, noting 3 exceptions where grants were charged after the period of performance. Cause: Invoices were charged based on payment date instead of the incurred date. Effect: Grants were charged for costs outside the period of performance. Management repaid the questioned costs to the grantor during the audit. Repeat finding: Not a repeat finding Recommendation: We recommend the Organization put procedures in place to identify the performance period when charging invoices to grants, particularly during the start and end of the period of performance. Views of responsible officials: There is no disagreement with the audit finding.

Assistance Listing Number, Federal Agency, and Program Name - 21.027, U.S. Department of the Treasury, COVID-19 - Coronavirus State and Local Fiscal Recovery Fund (CSLFRF) Federal Award Identification Number and Year - N/A Pass-through Entity - N/A Finding Type - Material weakness and material noncompliance with laws and regulations Repeat Finding - No Criteria - 2 CFR 200.1 defines ‘‘financial obligation’’ when referencing a recipient’s or subrecipient’s use of funds under a federal award as orders placed for property and services, contracts and subawards made, and similar transactions that require payment. The Treasury Interim Final Rule on “Obligation” further clarifies - This definition aligns with a plain language understanding of ‘‘incur’’ as meaning to become liable or subject to something. Subrecipient monitoring Section under Part 3 of the 2023 Compliance Supplement notes that transfers of federal awards to another component of the same auditee under 2 CFR 200, Subpart F, do not constitute a subrecipient or contractor relationship, and, therefore, funds are not considered obligated at the time they are transferred to a component unit of an auditee. Condition - The County did not have adequate controls in place to ensure funds transferred to a component unit were not reported to the Treasury until the component unit met the criteria for obligated the funds. As a result, the County reported to the Treasury $10,000,000 as obligated based on an agreement between the County and a discreetly presented component unit of the County prior to those funds meeting the definition of obligated. Questioned Costs - None Identification of How Questioned Costs Were Computed - Not applicable, as there were no questioned costs identified Context - During the fiscal year ended September 30, 2023, the County awarded $10,000,000 of CSLFRF to a discreetly presented component unit and reported this as obligated to Treasury in its report for the quarter ended March 31, 2023. For the year ended September 30, 2023, the discreetly presented component unit incurred expenses of approximately $207,000. Cause and Effect - The County considered the executed agreement with its discreetly presented component unit to create an obligation. As such, the County reported the entire award, i.e., $10,000,000, as obligated for the year ended September 30, 2023. The County’s conclusion resulted in the SEFA being initially overstated by approximately $9.8 million, i.e., the difference between the award and the actual expenditures of approximately $207,000. The SEFA for the year ended September 30, 2023 was corrected for this error. Recommendation - We recommend the County correct its Treasury reporting and continue to evaluate the substance and form of its agreements to determine the impact on reporting to the Treasury. Views of Responsible Officials and Planned Corrective Actions - Management has updated the determination of the relationship with the Drains Commission, a separate legal entity, and subsequently adjusted the SEFA to report the current expenditures of the project. The Treasury report will be adjusted in the next reporting period.

Assistance Listing Number, Federal Agency, and Program Name - 21.027, U.S. Department of the Treasury, COVID-19 - Coronavirus State and Local Fiscal Recovery Fund (CSLFRF) Federal Award Identification Number and Year - N/A Pass-through Entity - N/A Finding Type - Material weakness and material noncompliance with laws and regulations Repeat Finding - No Criteria - 2 CFR 200.1 defines ‘‘financial obligation’’ when referencing a recipient’s or subrecipient’s use of funds under a federal award as orders placed for property and services, contracts and subawards made, and similar transactions that require payment. The Treasury Interim Final Rule on “Obligation” further clarifies - This definition aligns with a plain language understanding of ‘‘incur’’ as meaning to become liable or subject to something. Subrecipient monitoring Section under Part 3 of the 2023 Compliance Supplement notes that transfers of federal awards to another component of the same auditee under 2 CFR 200, Subpart F, do not constitute a subrecipient or contractor relationship, and, therefore, funds are not considered obligated at the time they are transferred to a component unit of an auditee. Condition - The County did not have adequate controls in place to ensure funds transferred to a component unit were not reported to the Treasury until the component unit met the criteria for obligated the funds. As a result, the County reported to the Treasury $10,000,000 as obligated based on an agreement between the County and a discreetly presented component unit of the County prior to those funds meeting the definition of obligated. Questioned Costs - None Identification of How Questioned Costs Were Computed - Not applicable, as there were no questioned costs identified Context - During the fiscal year ended September 30, 2023, the County awarded $10,000,000 of CSLFRF to a discreetly presented component unit and reported this as obligated to Treasury in its report for the quarter ended March 31, 2023. For the year ended September 30, 2023, the discreetly presented component unit incurred expenses of approximately $207,000. Cause and Effect - The County considered the executed agreement with its discreetly presented component unit to create an obligation. As such, the County reported the entire award, i.e., $10,000,000, as obligated for the year ended September 30, 2023. The County’s conclusion resulted in the SEFA being initially overstated by approximately $9.8 million, i.e., the difference between the award and the actual expenditures of approximately $207,000. The SEFA for the year ended September 30, 2023 was corrected for this error. Recommendation - We recommend the County correct its Treasury reporting and continue to evaluate the substance and form of its agreements to determine the impact on reporting to the Treasury. Views of Responsible Officials and Planned Corrective Actions - Management has updated the determination of the relationship with the Drains Commission, a separate legal entity, and subsequently adjusted the SEFA to report the current expenditures of the project. The Treasury report will be adjusted in the next reporting period.

Assistance Listing Number, Federal Agency, and Program Name - 21.027, U.S. Department of the Treasury, COVID-19 - Coronavirus State and Local Fiscal Recovery Fund (CSLFRF) Federal Award Identification Number and Year - N/A Pass-through Entity - N/A Finding Type - Material weakness and material noncompliance with laws and regulations Repeat Finding - No Criteria - 2 CFR 200.1 defines ‘‘financial obligation’’ when referencing a recipient’s or subrecipient’s use of funds under a federal award as orders placed for property and services, contracts and subawards made, and similar transactions that require payment. The Treasury Interim Final Rule on “Obligation” further clarifies - This definition aligns with a plain language understanding of ‘‘incur’’ as meaning to become liable or subject to something. Subrecipient monitoring Section under Part 3 of the 2023 Compliance Supplement notes that transfers of federal awards to another component of the same auditee under 2 CFR 200, Subpart F, do not constitute a subrecipient or contractor relationship, and, therefore, funds are not considered obligated at the time they are transferred to a component unit of an auditee. Condition - The County did not have adequate controls in place to ensure funds transferred to a component unit were not reported to the Treasury until the component unit met the criteria for obligated the funds. As a result, the County reported to the Treasury $10,000,000 as obligated based on an agreement between the County and a discreetly presented component unit of the County prior to those funds meeting the definition of obligated. Questioned Costs - None Identification of How Questioned Costs Were Computed - Not applicable, as there were no questioned costs identified Context - During the fiscal year ended September 30, 2023, the County awarded $10,000,000 of CSLFRF to a discreetly presented component unit and reported this as obligated to Treasury in its report for the quarter ended March 31, 2023. For the year ended September 30, 2023, the discreetly presented component unit incurred expenses of approximately $207,000. Cause and Effect - The County considered the executed agreement with its discreetly presented component unit to create an obligation. As such, the County reported the entire award, i.e., $10,000,000, as obligated for the year ended September 30, 2023. The County’s conclusion resulted in the SEFA being initially overstated by approximately $9.8 million, i.e., the difference between the award and the actual expenditures of approximately $207,000. The SEFA for the year ended September 30, 2023 was corrected for this error. Recommendation - We recommend the County correct its Treasury reporting and continue to evaluate the substance and form of its agreements to determine the impact on reporting to the Treasury. Views of Responsible Officials and Planned Corrective Actions - Management has updated the determination of the relationship with the Drains Commission, a separate legal entity, and subsequently adjusted the SEFA to report the current expenditures of the project. The Treasury report will be adjusted in the next reporting period.

Assistance Listing Number, Federal Agency, and Program Name - 21.027, U.S. Department of the Treasury, COVID-19 - Coronavirus State and Local Fiscal Recovery Fund (CSLFRF) Federal Award Identification Number and Year - N/A Pass-through Entity - N/A Finding Type - Material weakness and material noncompliance with laws and regulations Repeat Finding - No Criteria - 2 CFR 200.1 defines ‘‘financial obligation’’ when referencing a recipient’s or subrecipient’s use of funds under a federal award as orders placed for property and services, contracts and subawards made, and similar transactions that require payment. The Treasury Interim Final Rule on “Obligation” further clarifies - This definition aligns with a plain language understanding of ‘‘incur’’ as meaning to become liable or subject to something. Subrecipient monitoring Section under Part 3 of the 2023 Compliance Supplement notes that transfers of federal awards to another component of the same auditee under 2 CFR 200, Subpart F, do not constitute a subrecipient or contractor relationship, and, therefore, funds are not considered obligated at the time they are transferred to a component unit of an auditee. Condition - The County did not have adequate controls in place to ensure funds transferred to a component unit were not reported to the Treasury until the component unit met the criteria for obligated the funds. As a result, the County reported to the Treasury $10,000,000 as obligated based on an agreement between the County and a discreetly presented component unit of the County prior to those funds meeting the definition of obligated. Questioned Costs - None Identification of How Questioned Costs Were Computed - Not applicable, as there were no questioned costs identified Context - During the fiscal year ended September 30, 2023, the County awarded $10,000,000 of CSLFRF to a discreetly presented component unit and reported this as obligated to Treasury in its report for the quarter ended March 31, 2023. For the year ended September 30, 2023, the discreetly presented component unit incurred expenses of approximately $207,000. Cause and Effect - The County considered the executed agreement with its discreetly presented component unit to create an obligation. As such, the County reported the entire award, i.e., $10,000,000, as obligated for the year ended September 30, 2023. The County’s conclusion resulted in the SEFA being initially overstated by approximately $9.8 million, i.e., the difference between the award and the actual expenditures of approximately $207,000. The SEFA for the year ended September 30, 2023 was corrected for this error. Recommendation - We recommend the County correct its Treasury reporting and continue to evaluate the substance and form of its agreements to determine the impact on reporting to the Treasury. Views of Responsible Officials and Planned Corrective Actions - Management has updated the determination of the relationship with the Drains Commission, a separate legal entity, and subsequently adjusted the SEFA to report the current expenditures of the project. The Treasury report will be adjusted in the next reporting period.