Reference Number: 2024-016 Prior Year Finding: 2023-018 Federal Agency: U.S. Department of Education State Agency: Agency of Education Federal Program: COVID-19 – Governor’s Emergency Education Relief Fund COVID-19 – Elementary and Secondary School Emergency Relief Fund (ESSER) COVID-19 - Coronavirus Response and Relief Supplemental Appropriations Act, 2021 – Emergency Assistance to Non-Public Schools (CRRSA EANS) COVID-19 – American Rescue Plan – Elementary and Secondary School Emergency Relief (ARP ESSER) COVID-19 - American Rescue Plan – Elementary and Secondary School Emergency Relief –Homeless Children and Youth Assistance Listing Number: 84.425C, 84.425D, 84.425R, 84.425U, 84.425W Award Number and Year: S425C210009 (1/8/2021 – 9/30/2022) S425D210011 (1/5/2021 – 9/30/2022) S425R210033 (2/23/2021 – 9/30/2022) S425U210011 (3/24/2021 – 9/30/2023) S425W210047 (4/23/2021 – 9/30/2023) Compliance Requirement: Reporting – Federal Funding Accountability and Transparency Act (FFATA) Type of Finding: Significant Deficiency in Internal Control Over Compliance, Other Matters Criteria or specific requirement: Compliance: Per the Federal Funding Accountability and Transparency Act (FFATA), prime (direct) recipients of grants or cooperative agreements are required to report first-tier subawards of $30,000 or more to the Federal Funding Accountability and Transparency Act Subaward Reporting System (FSRS). Reports must be filed in FSRS by the end of the month following the month in which the prime recipient awards any sub-grant greater than or equal to $30,000. If the initial award is below $30,000 but subsequent grant modifications result in a total award equal to or over $30,000, the award will be subject to the reporting requirements as of the date the award exceeds $30,000. If the initial award equals or exceeds $30,000 but funding is subsequently de-obligated such that the total award amount falls below $30,000, the award continues to be subject to FFATA reporting requirements. The following key data elements must be reported: Subawardee Name and Data Universal Numbering System (DUNS) number; Amount of Subaward (inclusive of modifications); Subaward Obligation/Action Date; Date of Report Submission; Subaward Number; Project Description; and Names and Compensation of Highly Compensated Officers. (Names and Compensation of Highly Compensated Officers must only be reported when the entity in the preceding fiscal year received 80 percent or more of its annual gross revenues in Federal awards; and $25,000,000 or more in annual gross revenues from Federal awards; and the public does not have access to this information about the compensation of the senior executives of the entity through periodic reports filed under section 13(a) or 15(d) of the Securities Exchange Act of 1934 (15 U.S.C. §§ 78m(a), 78o(d)) or section 6104 of the Internal Revenue Code of 1986.) Section III – Findings and Questioned Costs – Major Federal Programs (Continued) Control: Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should comply with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: The Agency of Education (Agency) was not in compliance with FSRS reporting requirements. Subawards were not reported timely and accurately to FSRS. Context: Fifty-eight subawards were selected for testing which included twenty-three original subawards and thirty-four subaward amendments. Sixteen of fifty-eight transactions tested (28%) were not in compliance with FFATA reporting requirements. The following exceptions were noted: • 3 of 58 subawards were not reported accurately to FSRS. • 13 of 58 subawards were not reported timely to FSRS. The subawards were reported from 3 months to more than two years late. SEE SCHEDULE OF FINDINGS AND QUESTIONED COSTS FOR CHART/TABLE Cause: The Agency has not fully implemented its corrective action plan from the prior audit. Its procedures were not sufficient to ensure that all subawards and subaward amendments were reported timely and accurately to FSRS. Internal controls did not prevent or detect the errors. Effect: Subawards were not reported to FSRS in accordance with FFATA requirements. Questioned costs: None noted. Recommendation: We recommend the Agency complete implementation of its corrective action plan from the prior audit. It should review and enhance internal controls and procedures to ensure that all required subawards and subaward amendments are reported timely and accurately to FSRS no later than the end of the month following the month of issuance. Views of responsible officials: Management agrees with the finding.
Reference Number: 2024-016 Prior Year Finding: 2023-018 Federal Agency: U.S. Department of Education State Agency: Agency of Education Federal Program: COVID-19 – Governor’s Emergency Education Relief Fund COVID-19 – Elementary and Secondary School Emergency Relief Fund (ESSER) COVID-19 - Coronavirus Response and Relief Supplemental Appropriations Act, 2021 – Emergency Assistance to Non-Public Schools (CRRSA EANS) COVID-19 – American Rescue Plan – Elementary and Secondary School Emergency Relief (ARP ESSER) COVID-19 - American Rescue Plan – Elementary and Secondary School Emergency Relief –Homeless Children and Youth Assistance Listing Number: 84.425C, 84.425D, 84.425R, 84.425U, 84.425W Award Number and Year: S425C210009 (1/8/2021 – 9/30/2022) S425D210011 (1/5/2021 – 9/30/2022) S425R210033 (2/23/2021 – 9/30/2022) S425U210011 (3/24/2021 – 9/30/2023) S425W210047 (4/23/2021 – 9/30/2023) Compliance Requirement: Reporting – Federal Funding Accountability and Transparency Act (FFATA) Type of Finding: Significant Deficiency in Internal Control Over Compliance, Other Matters Criteria or specific requirement: Compliance: Per the Federal Funding Accountability and Transparency Act (FFATA), prime (direct) recipients of grants or cooperative agreements are required to report first-tier subawards of $30,000 or more to the Federal Funding Accountability and Transparency Act Subaward Reporting System (FSRS). Reports must be filed in FSRS by the end of the month following the month in which the prime recipient awards any sub-grant greater than or equal to $30,000. If the initial award is below $30,000 but subsequent grant modifications result in a total award equal to or over $30,000, the award will be subject to the reporting requirements as of the date the award exceeds $30,000. If the initial award equals or exceeds $30,000 but funding is subsequently de-obligated such that the total award amount falls below $30,000, the award continues to be subject to FFATA reporting requirements. The following key data elements must be reported: Subawardee Name and Data Universal Numbering System (DUNS) number; Amount of Subaward (inclusive of modifications); Subaward Obligation/Action Date; Date of Report Submission; Subaward Number; Project Description; and Names and Compensation of Highly Compensated Officers. (Names and Compensation of Highly Compensated Officers must only be reported when the entity in the preceding fiscal year received 80 percent or more of its annual gross revenues in Federal awards; and $25,000,000 or more in annual gross revenues from Federal awards; and the public does not have access to this information about the compensation of the senior executives of the entity through periodic reports filed under section 13(a) or 15(d) of the Securities Exchange Act of 1934 (15 U.S.C. §§ 78m(a), 78o(d)) or section 6104 of the Internal Revenue Code of 1986.) Section III – Findings and Questioned Costs – Major Federal Programs (Continued) Control: Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should comply with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: The Agency of Education (Agency) was not in compliance with FSRS reporting requirements. Subawards were not reported timely and accurately to FSRS. Context: Fifty-eight subawards were selected for testing which included twenty-three original subawards and thirty-four subaward amendments. Sixteen of fifty-eight transactions tested (28%) were not in compliance with FFATA reporting requirements. The following exceptions were noted: • 3 of 58 subawards were not reported accurately to FSRS. • 13 of 58 subawards were not reported timely to FSRS. The subawards were reported from 3 months to more than two years late. SEE SCHEDULE OF FINDINGS AND QUESTIONED COSTS FOR CHART/TABLE Cause: The Agency has not fully implemented its corrective action plan from the prior audit. Its procedures were not sufficient to ensure that all subawards and subaward amendments were reported timely and accurately to FSRS. Internal controls did not prevent or detect the errors. Effect: Subawards were not reported to FSRS in accordance with FFATA requirements. Questioned costs: None noted. Recommendation: We recommend the Agency complete implementation of its corrective action plan from the prior audit. It should review and enhance internal controls and procedures to ensure that all required subawards and subaward amendments are reported timely and accurately to FSRS no later than the end of the month following the month of issuance. Views of responsible officials: Management agrees with the finding.
Reference Number: 2024-017 Prior Year Finding: No Federal Agency: U.S. Department of Health and Human Services State Agency: Agency of Human Services Federal Program: COVID-19 - Activities to Support State, Tribal, Local and Territorial (STLT) Health Department Response to Public Health or Healthcare Crises Assistance Listing Number: 93.391 Award Number and Year: NH75OT000034 (6/1/2021 – 5/31/2026) Compliance Requirement: Reporting – Performance Reporting Type of Finding: Material Weakness in Internal Control Over Compliance, Material Noncompliance Criteria or specific requirement: Compliance: Recipients must submit quarterly and final performance/progress reports. Control: Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should comply with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: The Agency of Human Services (Agency) was unable to provide supporting documentation that agreed with the data included in the submitted reports. Context: For two of two quarterly performance reports selected for testing, supporting documentation provided by the Agency was insufficient to support the data reported. Cause: The Agency’s procedures and controls were not sufficient to ensure that performance reports were accurate and agreed with supporting documentation. Effect: Auditors were unable to verify the accuracy of performance reports submitted by the Agency. Questioned costs: Undetermined. Recommendation: We recommend the Agency review and enhance internal controls and procedures to ensure that performance reports are accurate, agree with supporting documentation, and that supporting documentation is maintained and available for audit. Views of responsible officials: Management agrees with the finding.
Reference Number: 2024-018 Prior Year Finding: 2023-024 Federal Agency: U.S. Department of Health and Human Services State Agency: Agency of Human Services Federal Program: COVID-19 - Activities to Support State, Tribal, Local and Territorial (STLT) Health Department Response to Public Health or Healthcare Crises Assistance Listing Number: 93.391 Award Number and Year: NH75OT000034 (6/1/2021 – 5/31/2026) Compliance Requirement: Reporting – Federal Funding Accountability and Transparency Act (FFATA) Type of Finding: Material Weakness in Internal Control Over Compliance, Material Noncompliance Criteria or specific requirement: Compliance: Per the Federal Funding Accountability and Transparency Act (FFATA), prime (direct) recipients of grants or cooperative agreements are required to report first-tier subawards of $30,000 or more to the Federal Funding Accountability and Transparency Act Subaward Reporting System (FSRS). Reports must be filed in FSRS by the end of the month following the month in which the prime recipient awards any sub-grant greater than or equal to $30,000. If the initial award is below $30,000 but subsequent grant modifications result in a total award equal to or over $30,000, the award will be subject to the reporting requirements as of the date the award exceeds $30,000. If the initial award equals or exceeds $30,000 but funding is subsequently de-obligated such that the total award amount falls below $30,000, the award continues to be subject to FFATA reporting requirements. The following key data elements must be reported: Subawardee Name and Data Universal Numbering System (DUNS) number; Amount of Subaward (inclusive of modifications); Subaward Obligation/Action Date; Date of Report Submission; Subaward Number; Project Description; and Names and Compensation of Highly Compensated Officers. (Names and Compensation of Highly Compensated Officers must only be reported when the entity in the preceding fiscal year received 80 percent or more of its annual gross revenues in Federal awards; and $30,000,000 or more in annual gross revenues from Federal awards; and the public does not have access to this information about the compensation of the senior executives of the entity through periodic reports filed under section 13(a) or 15(d) of the Securities Exchange Act of 1934 (15 U.S.C. §§ 78m(a), 78o(d)) or section 6104 of the Internal Revenue Code of 1986.) Control: Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should comply with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: Subawards were not reported to FSRS in accordance with FFATA requirements. Section III – Findings and Questioned Costs – Major Federal Programs (Continued) Context: Three of fourteen subawards selected for testing were not reported to FSRS in accordance with FFATA requirements. Specifically, we noted the following exceptions: • Three of fourteen subawards were not reported to FSRS until after auditors requested samples for testing. The subawards were issued between 9/16/2022 and 9/6/2023 but were not reported to FSRS until 10/18/2024. As part of a prior year Corrective Action Plan (CAP), the Agency implemented a process to report required subawards to FSRS timely and to review previously issued subawards to ensure that all subawards were reported. The subaward exceptions noted were issued prior to the full implementation of the CAP. SEE SCHEDULE OF FINDINGS AND QUESTIONED COSTS FOR CHART/TABLE Cause: The Agency’s procedures and controls were not sufficient to ensure that subawards were reported to FSRS in accordance with FFATA reporting requirements. Effect: Subawards were not reported to FSRS in accordance with FFATA requirements. Questioned costs: None noted. Recommendation: We recommend the Agency complete implementation of its prior year CAP to ensure that all required subawards and subaward modifications are reported timely to FSRS in accordance with FFATA requirements and that all previously issued subawards are reported. Views of responsible officials: Management agrees with the finding.
Reference Number: 2024-019 Prior Year Finding: No Federal Agency: U.S. Department of Health and Human Services State Agency: Agency of Human Services Federal Program: Temporary Assistance for Needy Families Assistance Listing Number: 93.558 Award Number and Year: 2301VTTANF (10/1/2022 – 9/30/2023) 2401VTTANF (10/1/2023 – 9/30/2024) Compliance Requirement: Reporting – ACF-199 Special Tests and Provisions – Penalty for Failure to Comply with Work Verification Plan Type of Finding: Significant Deficiency in Internal Control Over Compliance, Other Matters Criteria or specific requirement: Compliance: Work Participation Rates – State agencies must meet or exceed their minimum annual work participation rates. The minimum work participation rates are 50 percent for the overall rate and 90 percent for the two-parent rate. A state’s minimum work participation rate may be reduced by its caseload reduction credit. The Department of Health and Human Services (HHS) may penalize the state by an amount of up to 21 percent of the State Family Assistance Grant (SFAG) for violation of this provision. Penalty for Failure to Comply with Work Verification Plan – The state agency must maintain adequate documentation, verification, and internal control procedures to ensure the accuracy of the data used in calculating work participation rates. In so doing, it must have in place procedures to (a) determine whether its work activities may count for participation rate purposes; (b) determine how to count and verify reported hours of work; (c) identify who is a work-eligible individual; (d) control internal data transmission and accuracy. Each state agency must comply with its HHS-approved Work Verification Plan in effect for the period that is audited. HHS may penalize the state by an amount not less than 1 percent and not more than 5 percent of the SFAG for violation of this provision. Control: Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should comply with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: Exceptions were noted regarding the reporting of work participation rates in the ACF-199 report by the Agency of Human Services (Agency) and errors were also noted in the documentation supporting the ACF-199 reports. Context: Forty participants were selected for testing and auditors noted several instances where work participation rates reported on the ACF-199 report did not agree with supporting documentation and that supporting documentation contained errors or was incomplete. Specifically, we noted the following: • For two of forty participants selected for testing, the participants’ wages/hours reported did not match supporting documentation. The error was due to a data system programming error that automatically limits a participant’s actual hours worked to forty when their actual hours exceed forty hours. • One of forty participants selected for testing did not have proper documentation of a change in circumstance. This resulted in two months in which the participant was not documented as engaged in work but had documented hours reported in the ACF-199 report. • For one of forty participants selected for testing, their average hours of work participation were not rereviewed within the six-month window required under the state plan. • For one of forty participants selected for testing, the amount reported did not agree with supporting documentation. The discrepancy was due to rounding errors. • For one of forty participants selected for testing, the employment verification form was not signed by a supervisor. Cause: The Agency’s procedures were not sufficient to ensure that work participation rates reported in the ACF-199 report were accurate, tied to supporting documentation, and that supporting documentation was accurate. Internal controls did not detect or prevent the errors. Effect Work Participation rates reported on the ACF-199 contained errors and did not tie to supporting documentation. HHS may penalize the Agency for its failure to ensure the accuracy of the data used when calculating work participation rates. Questioned costs: Undetermined. Recommendation: We recommend that the Agency review and enhance procedures and controls to ensure that it maintains adequate documentation, verification, and internal control procedures to ensure the accuracy of work participation rates reported in the ACF-199 reports. Views of responsible officials: Management agrees with the finding.
Reference Number: 2024-026 Prior Year Finding: 2023-023 Federal Agency: U.S. Department of Agriculture U.S. Department of Health and Human Services State Agency: Department of Finance and Management Federal Program: SNAP Cluster Temporary Assistance for Needy Families CCDF Cluster Assistance Listing Number: 10.551, 10.561, 93.558, 93.575, 93.596 Award Number and Year: 4VT400406 (10/1/2022 – 9/30/2023) 4VT402513 (10/1/2023 – 9/30/2024) 2301VTTANF (10/1/2022 – 9/30/2023) 2401VTTANF (10/1/2023 – 9/30/2024) 2301VTCCDD (10/1/2022 – 9/30/2025) 2401VTCCDD (10/1/2023 – 9/30/2026) Compliance Requirement: Cash Management Type of Finding: Significant Deficiency in Internal Control Over Compliance, Other Matters Criteria or specific requirement: Compliance: US Department of the Treasury (Treasury) regulations at 31 CFR Part 205 implement the Cash Management Improvement Act of 1990 (CMIA), as amended (Pub. L. No. 101-453; 31 USC 6501 et seq.). Subpart A of those regulations requires state recipients to enter into Treasury-State Agreements that prescribe specific methods of drawing down federal funds (funding techniques) for federal programs listed in the Assistance Listing (Catalog of federal Domestic Assistance) that meet the funding threshold for a major federal assistance program under the CMIA. Treasury-State Agreements also specify the terms and conditions under which an interest liability would be incurred. Programs not covered by a Treasury-State Agreement are subject to procedures prescribed by Treasury in Subpart B of 31 CFR Part 205 (Subpart B), which at 31 CFR section 205.33(a) include the requirement for a state to minimize the time between the drawdown of federal funds and their disbursement for federal program purposes. Annual Reports are submitted electronically by December 31 of each year. The Annual Report includes Federal interest liabilities, State interest liabilities, and State direct cost claims. Control: Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should comply with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: The Department of Finance and Management (Finance) improperly calculated State interest liabilities for multiple programs on the FY2024 CMIA Annual Report. Context: Finance is the entity responsible for calculation of State and Federal interest liabilities and completion of the CMIA Annual Report. The annual interest rate is established by the U.S. Treasury and published on its CMIA website. This rate must be used when calculating State and Federal interest liabilities in the Annual Report. Finance receives drawdown detail support from other State agencies which it uses to compile the State’s Annual Report submission. When Finance prepared the FY2024 Annual Report, it failed to verify that the correct interest rate was applied to calculate interest liabilities, resulting in an underreporting of the State interest liability for several programs. Specifically, we noted that the State’s interest liability was underreported for the following programs: • SNAP Cluster: $579 • Temporary Assistance for Needy Families: $2,589 • CCDF Cluster: $500 Cause: Finance’s procedures were not sufficient to ensure that the FY2024 interest rate established by the U.S. Treasury was applied for all programs when interest liabilities were calculated. Internal controls did not prevent or detect the errors. Effect: The State’s interest liability was underreported to the U.S. Treasury, resulting in the State earning interest on Federal funds to which it was not entitled. Questioned costs: $3,668, the total State interest liability that was underreported on the FY2024 CMIA Annual Report. Recommendation: We recommend that Finance review and enhance its internal controls and procedures over the CMIA Annual Report to ensure that it verifies the correct interest rate is applied and that State and Federal interest liabilities are properly calculated in accordance with 2 CFR section 200.514. Views of responsible officials: Management agrees with the finding.
Reference Number: 2024-027 Prior Year Finding: No Federal Agency: U.S. Department of Agriculture U.S. Department of Health and Human Services State Agency: Department of Human Resources Agency of Human Services Federal Program: SNAP Cluster Temporary Assistance for Needy Families Child Support Services CCDF Cluster Medicaid Cluster Assistance Listing Number: 10.551, 10.561, 93.558, 93.563, 93.575, 93.596, 93.775, 93.777, 93.778 Award Number and Year: 4VT400406 (10/1/2022 – 9/30/2023) 4VT402513 (10/1/2023 – 9/30/2024) 2301VTTANF (10/1/2022 – 9/30/2023) 2401VTTANF (10/1/2023 – 9/30/2024) 2401VTSCSS (10/1/2023 – 9/30/2024) 2301VTCCDD (10/1/2022 – 9/30/2025) 2401VTCCDD (10/1/2023 – 9/30/2026) 2305VT5MAP (10/1/2022 – 9/30/2023) Compliance Requirement: Allowable Costs/Cost Principles – Time and Effort Reporting Type of Finding: Significant Deficiency in Internal Control Over Compliance Criteria or specific requirement: Compliance: Per 2 CFR section 200.403(c), to be allowable under Federal awards, except where otherwise authorized by statute, costs must be consistent with policies and procedures that apply uniformly to both federally financed and other activities of the recipient or subrecipient. Compensation for exempt attorneys in the State of Vermont are determined by the State of Vermont’s Attorney Pay Plan which governs the hiring level, compensation and promotion of exempt attorneys. Control: Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should comply with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: The hourly rate used to compensate an exempt attorney was higher than the maximum limit identified for the position in the State of Vermont’s Attorney Pay Plan. Context: The Department of Human Resources (Department) manages and updates the VTHR Human Resource information system which is the system used for managing employee data and processing payroll for all State employees. The Agency of Human Services (Agency) allocates payroll costs to federal programs using methodologies approved in its Cost Allocation Plan. After allocation, compensation for positions may be charged by the Agency to multiple federal programs. During cost allocation testing, auditors determined one employee’s rate of pay exceeded the limit identified for the position in the State of Vermont’s Attorney Pay Plan. The maximum hourly rate for the General Counsel I position is $59.61 or up to the Department Head’s Salary, whichever is lower. The employee selected for testing was compensated at the hourly rate of $62.06 which exceeds the maximum for the position. Cause: The Department of Human Resources used the department head’s salary as the maximum for the General Counsel I position in VTHR. It did not implement a control to ensure that the employee’s salary also did not exceed the maximum hourly rate identified for the position. Effect An employee was compensated at a rate higher than the maximum limit identified for the position in the State of Vermont’s Attorney Pay Plan. Internal controls did not detect or prevent the error. Questioned costs: Undetermined. Recommendation: We recommend that the Department review and enhance procedures and internal controls to ensure that VTHR uses rates of pay for attorneys that align with the maximum pay rates established by the Attorney Pay Plan. Views of responsible officials: Management agrees with the finding.
Reference Number: 2024-026 Prior Year Finding: 2023-023 Federal Agency: U.S. Department of Agriculture U.S. Department of Health and Human Services State Agency: Department of Finance and Management Federal Program: SNAP Cluster Temporary Assistance for Needy Families CCDF Cluster Assistance Listing Number: 10.551, 10.561, 93.558, 93.575, 93.596 Award Number and Year: 4VT400406 (10/1/2022 – 9/30/2023) 4VT402513 (10/1/2023 – 9/30/2024) 2301VTTANF (10/1/2022 – 9/30/2023) 2401VTTANF (10/1/2023 – 9/30/2024) 2301VTCCDD (10/1/2022 – 9/30/2025) 2401VTCCDD (10/1/2023 – 9/30/2026) Compliance Requirement: Cash Management Type of Finding: Significant Deficiency in Internal Control Over Compliance, Other Matters Criteria or specific requirement: Compliance: US Department of the Treasury (Treasury) regulations at 31 CFR Part 205 implement the Cash Management Improvement Act of 1990 (CMIA), as amended (Pub. L. No. 101-453; 31 USC 6501 et seq.). Subpart A of those regulations requires state recipients to enter into Treasury-State Agreements that prescribe specific methods of drawing down federal funds (funding techniques) for federal programs listed in the Assistance Listing (Catalog of federal Domestic Assistance) that meet the funding threshold for a major federal assistance program under the CMIA. Treasury-State Agreements also specify the terms and conditions under which an interest liability would be incurred. Programs not covered by a Treasury-State Agreement are subject to procedures prescribed by Treasury in Subpart B of 31 CFR Part 205 (Subpart B), which at 31 CFR section 205.33(a) include the requirement for a state to minimize the time between the drawdown of federal funds and their disbursement for federal program purposes. Annual Reports are submitted electronically by December 31 of each year. The Annual Report includes Federal interest liabilities, State interest liabilities, and State direct cost claims. Control: Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should comply with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: The Department of Finance and Management (Finance) improperly calculated State interest liabilities for multiple programs on the FY2024 CMIA Annual Report. Context: Finance is the entity responsible for calculation of State and Federal interest liabilities and completion of the CMIA Annual Report. The annual interest rate is established by the U.S. Treasury and published on its CMIA website. This rate must be used when calculating State and Federal interest liabilities in the Annual Report. Finance receives drawdown detail support from other State agencies which it uses to compile the State’s Annual Report submission. When Finance prepared the FY2024 Annual Report, it failed to verify that the correct interest rate was applied to calculate interest liabilities, resulting in an underreporting of the State interest liability for several programs. Specifically, we noted that the State’s interest liability was underreported for the following programs: • SNAP Cluster: $579 • Temporary Assistance for Needy Families: $2,589 • CCDF Cluster: $500 Cause: Finance’s procedures were not sufficient to ensure that the FY2024 interest rate established by the U.S. Treasury was applied for all programs when interest liabilities were calculated. Internal controls did not prevent or detect the errors. Effect: The State’s interest liability was underreported to the U.S. Treasury, resulting in the State earning interest on Federal funds to which it was not entitled. Questioned costs: $3,668, the total State interest liability that was underreported on the FY2024 CMIA Annual Report. Recommendation: We recommend that Finance review and enhance its internal controls and procedures over the CMIA Annual Report to ensure that it verifies the correct interest rate is applied and that State and Federal interest liabilities are properly calculated in accordance with 2 CFR section 200.514. Views of responsible officials: Management agrees with the finding.
Reference Number: 2024-027 Prior Year Finding: No Federal Agency: U.S. Department of Agriculture U.S. Department of Health and Human Services State Agency: Department of Human Resources Agency of Human Services Federal Program: SNAP Cluster Temporary Assistance for Needy Families Child Support Services CCDF Cluster Medicaid Cluster Assistance Listing Number: 10.551, 10.561, 93.558, 93.563, 93.575, 93.596, 93.775, 93.777, 93.778 Award Number and Year: 4VT400406 (10/1/2022 – 9/30/2023) 4VT402513 (10/1/2023 – 9/30/2024) 2301VTTANF (10/1/2022 – 9/30/2023) 2401VTTANF (10/1/2023 – 9/30/2024) 2401VTSCSS (10/1/2023 – 9/30/2024) 2301VTCCDD (10/1/2022 – 9/30/2025) 2401VTCCDD (10/1/2023 – 9/30/2026) 2305VT5MAP (10/1/2022 – 9/30/2023) Compliance Requirement: Allowable Costs/Cost Principles – Time and Effort Reporting Type of Finding: Significant Deficiency in Internal Control Over Compliance Criteria or specific requirement: Compliance: Per 2 CFR section 200.403(c), to be allowable under Federal awards, except where otherwise authorized by statute, costs must be consistent with policies and procedures that apply uniformly to both federally financed and other activities of the recipient or subrecipient. Compensation for exempt attorneys in the State of Vermont are determined by the State of Vermont’s Attorney Pay Plan which governs the hiring level, compensation and promotion of exempt attorneys. Control: Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should comply with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: The hourly rate used to compensate an exempt attorney was higher than the maximum limit identified for the position in the State of Vermont’s Attorney Pay Plan. Context: The Department of Human Resources (Department) manages and updates the VTHR Human Resource information system which is the system used for managing employee data and processing payroll for all State employees. The Agency of Human Services (Agency) allocates payroll costs to federal programs using methodologies approved in its Cost Allocation Plan. After allocation, compensation for positions may be charged by the Agency to multiple federal programs. During cost allocation testing, auditors determined one employee’s rate of pay exceeded the limit identified for the position in the State of Vermont’s Attorney Pay Plan. The maximum hourly rate for the General Counsel I position is $59.61 or up to the Department Head’s Salary, whichever is lower. The employee selected for testing was compensated at the hourly rate of $62.06 which exceeds the maximum for the position. Cause: The Department of Human Resources used the department head’s salary as the maximum for the General Counsel I position in VTHR. It did not implement a control to ensure that the employee’s salary also did not exceed the maximum hourly rate identified for the position. Effect An employee was compensated at a rate higher than the maximum limit identified for the position in the State of Vermont’s Attorney Pay Plan. Internal controls did not detect or prevent the error. Questioned costs: Undetermined. Recommendation: We recommend that the Department review and enhance procedures and internal controls to ensure that VTHR uses rates of pay for attorneys that align with the maximum pay rates established by the Attorney Pay Plan. Views of responsible officials: Management agrees with the finding.
Reference Number: 2024-019 Prior Year Finding: No Federal Agency: U.S. Department of Health and Human Services State Agency: Agency of Human Services Federal Program: Temporary Assistance for Needy Families Assistance Listing Number: 93.558 Award Number and Year: 2301VTTANF (10/1/2022 – 9/30/2023) 2401VTTANF (10/1/2023 – 9/30/2024) Compliance Requirement: Reporting – ACF-199 Special Tests and Provisions – Penalty for Failure to Comply with Work Verification Plan Type of Finding: Significant Deficiency in Internal Control Over Compliance, Other Matters Criteria or specific requirement: Compliance: Work Participation Rates – State agencies must meet or exceed their minimum annual work participation rates. The minimum work participation rates are 50 percent for the overall rate and 90 percent for the two-parent rate. A state’s minimum work participation rate may be reduced by its caseload reduction credit. The Department of Health and Human Services (HHS) may penalize the state by an amount of up to 21 percent of the State Family Assistance Grant (SFAG) for violation of this provision. Penalty for Failure to Comply with Work Verification Plan – The state agency must maintain adequate documentation, verification, and internal control procedures to ensure the accuracy of the data used in calculating work participation rates. In so doing, it must have in place procedures to (a) determine whether its work activities may count for participation rate purposes; (b) determine how to count and verify reported hours of work; (c) identify who is a work-eligible individual; (d) control internal data transmission and accuracy. Each state agency must comply with its HHS-approved Work Verification Plan in effect for the period that is audited. HHS may penalize the state by an amount not less than 1 percent and not more than 5 percent of the SFAG for violation of this provision. Control: Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should comply with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: Exceptions were noted regarding the reporting of work participation rates in the ACF-199 report by the Agency of Human Services (Agency) and errors were also noted in the documentation supporting the ACF-199 reports. Context: Forty participants were selected for testing and auditors noted several instances where work participation rates reported on the ACF-199 report did not agree with supporting documentation and that supporting documentation contained errors or was incomplete. Specifically, we noted the following: • For two of forty participants selected for testing, the participants’ wages/hours reported did not match supporting documentation. The error was due to a data system programming error that automatically limits a participant’s actual hours worked to forty when their actual hours exceed forty hours. • One of forty participants selected for testing did not have proper documentation of a change in circumstance. This resulted in two months in which the participant was not documented as engaged in work but had documented hours reported in the ACF-199 report. • For one of forty participants selected for testing, their average hours of work participation were not rereviewed within the six-month window required under the state plan. • For one of forty participants selected for testing, the amount reported did not agree with supporting documentation. The discrepancy was due to rounding errors. • For one of forty participants selected for testing, the employment verification form was not signed by a supervisor. Cause: The Agency’s procedures were not sufficient to ensure that work participation rates reported in the ACF-199 report were accurate, tied to supporting documentation, and that supporting documentation was accurate. Internal controls did not detect or prevent the errors. Effect Work Participation rates reported on the ACF-199 contained errors and did not tie to supporting documentation. HHS may penalize the Agency for its failure to ensure the accuracy of the data used when calculating work participation rates. Questioned costs: Undetermined. Recommendation: We recommend that the Agency review and enhance procedures and controls to ensure that it maintains adequate documentation, verification, and internal control procedures to ensure the accuracy of work participation rates reported in the ACF-199 reports. Views of responsible officials: Management agrees with the finding.
Reference Number: 2024-027 Prior Year Finding: No Federal Agency: U.S. Department of Agriculture U.S. Department of Health and Human Services State Agency: Department of Human Resources Agency of Human Services Federal Program: SNAP Cluster Temporary Assistance for Needy Families Child Support Services CCDF Cluster Medicaid Cluster Assistance Listing Number: 10.551, 10.561, 93.558, 93.563, 93.575, 93.596, 93.775, 93.777, 93.778 Award Number and Year: 4VT400406 (10/1/2022 – 9/30/2023) 4VT402513 (10/1/2023 – 9/30/2024) 2301VTTANF (10/1/2022 – 9/30/2023) 2401VTTANF (10/1/2023 – 9/30/2024) 2401VTSCSS (10/1/2023 – 9/30/2024) 2301VTCCDD (10/1/2022 – 9/30/2025) 2401VTCCDD (10/1/2023 – 9/30/2026) 2305VT5MAP (10/1/2022 – 9/30/2023) Compliance Requirement: Allowable Costs/Cost Principles – Time and Effort Reporting Type of Finding: Significant Deficiency in Internal Control Over Compliance Criteria or specific requirement: Compliance: Per 2 CFR section 200.403(c), to be allowable under Federal awards, except where otherwise authorized by statute, costs must be consistent with policies and procedures that apply uniformly to both federally financed and other activities of the recipient or subrecipient. Compensation for exempt attorneys in the State of Vermont are determined by the State of Vermont’s Attorney Pay Plan which governs the hiring level, compensation and promotion of exempt attorneys. Control: Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should comply with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: The hourly rate used to compensate an exempt attorney was higher than the maximum limit identified for the position in the State of Vermont’s Attorney Pay Plan. Context: The Department of Human Resources (Department) manages and updates the VTHR Human Resource information system which is the system used for managing employee data and processing payroll for all State employees. The Agency of Human Services (Agency) allocates payroll costs to federal programs using methodologies approved in its Cost Allocation Plan. After allocation, compensation for positions may be charged by the Agency to multiple federal programs. During cost allocation testing, auditors determined one employee’s rate of pay exceeded the limit identified for the position in the State of Vermont’s Attorney Pay Plan. The maximum hourly rate for the General Counsel I position is $59.61 or up to the Department Head’s Salary, whichever is lower. The employee selected for testing was compensated at the hourly rate of $62.06 which exceeds the maximum for the position. Cause: The Department of Human Resources used the department head’s salary as the maximum for the General Counsel I position in VTHR. It did not implement a control to ensure that the employee’s salary also did not exceed the maximum hourly rate identified for the position. Effect An employee was compensated at a rate higher than the maximum limit identified for the position in the State of Vermont’s Attorney Pay Plan. Internal controls did not detect or prevent the error. Questioned costs: Undetermined. Recommendation: We recommend that the Department review and enhance procedures and internal controls to ensure that VTHR uses rates of pay for attorneys that align with the maximum pay rates established by the Attorney Pay Plan. Views of responsible officials: Management agrees with the finding.
Reference Number: 2024-020 Prior Year Finding: No Federal Agency: U.S. Department of Health and Human Services State Agency: Agency of Human Services Federal Program: CCDF Cluster Assistance Listing Number: 93.575, 93.596 Award Number and Year: 2301VTCCDD (10/1/2022 – 9/30/2025) 2401VTCCDD (10/1/2023 – 9/30/2026) Compliance Requirement: Special Tests and Provisions – Health and Safety Requirements Type of Finding: Material Weakness in Internal Control Over Compliance, Material Noncompliance Criteria or specific requirement: Compliance: Lead Agencies must certify that procedures are in effect (e.g., monitoring and enforcement) to ensure that providers serving children who receive subsidies comply with all applicable health and safety requirements. This includes verifying and documenting that child care providers (unless they meet an exception, e.g., family members who are caregivers or individuals who object to immunization on certain grounds) serving children who receive subsidies meet requirements pertaining to health and safety. These requirements must address eleven specific areas—including first aid and CPR, safe sleeping practices, and administration of medication—and child care workers must be trained in these areas (42 USC 9858c(c)(2)(I); 45 CFR section 98.41). Per 45 CFR 98.44(b), a Lead Agency must describe in the State Plan its established requirements for pre-service or orientation (to be completed within three months) and ongoing professional development for caregivers, teachers, and directors of child care providers of services for which assistance is provided under the CCDF that, to the extent practicable, align with the State framework. Accessible pre-service or orientation training in health and safety standards appropriate to the setting and age of children served addresses: (i) Each of the requirements relating to matters described in §98.41(a)(1)(i) through (xi) and specifying critical health and safety training that must be completed before caregivers, teachers, and directors are allowed to care for children unsupervised; (ii) At the Lead Agency option, matters described in § 98.41(a)(1)(xii); and (iii) Child development, including the major domains (cognitive, social, emotional, physical development and approaches to learning); Control: Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should comply with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: The Agency of Human Services (Agency) did not ensure that all providers completed required annual training nor that training in health and safety standards addresses the required eleven elements per 45 CFR sections 98.41 and 98.44(b)(1). Context: Forty child care providers were selected for testing and the following exceptions were noted: • For 4 of 40 child care providers selected for testing, the Agency was unable to provide documentation that it ensured the providers completed the required 15 hours of annual training or that a supervisor had documented approval of the training hours. • For 40 of 40 child care providers selected for testing, the Agency’s provider training did not include all 11 of the required health and safety topics. During a monitoring site visit conducted in November 2023 by the HHS Administration for Children & Families, Office of Child Care (OCC), the monitoring team did not find evidence that the Agency’s provider training content included all 11 health and safety topics. Therefore, OCC’s monitoring report identified noncompliance with this training requirement. Cause: The Agency’s procedures were not sufficient to ensure that its monitoring documentation of child care provider training was complete. When developing provider health and safety training content, the Agency did not ensure that it included all 11 health and safety topics required by 45 CFR section 98.44(b)(1). Internal controls did not detect or prevent these errors. Effect Deficiencies in the content and monitoring of provider health and safety training could result in inadequately trained child care providers which may create a risk to the health and safety of children receiving subsidies under the program. Questioned costs: None noted. Recommendation: We recommend that the Agency review and enhance training monitoring procedures and controls to ensure that all child care providers complete required health and safety training. We further recommend that the Agency update its training content to ensure that it includes all required elements. Views of responsible officials: Management agrees with the finding.
Reference Number: 2024-021 Prior Year Finding: No Federal Agency: U.S. Department of Health and Human Services State Agency: Agency of Human Services Federal Program: CCDF Cluster Assistance Listing Number: 93.575, 93.596 Award Number and Year: 2301VTCCDD (10/1/2022 – 9/30/2025) 2401VTCCDD (10/1/2023 – 9/30/2026) Compliance Requirement: Eligibility Type of Finding: Significant Deficiency in Internal Control Over Compliance, Other Matters Criteria or specific requirement: Compliance: Lead Agencies must have procedures in place for documenting and verifying eligibility in accordance with federal requirements, as well as the specific eligibility requirements selected by each Lead Agency in its approved plan. A Lead Agency is the designated state, territorial, or tribal entity to which the CCDF grant is awarded and that is accountable for administering the CCDF program. Procedures for documenting and verifying eligibility may be performed directly by the lead agency or other agencies engaged in the administration of CCDF. Per 45 CFR Section 98.20(c) - A Child's Eligibility for Child Care Services, for purposes of implementing the citizenship eligibility verification requirements mandated by title IV of the Personal Responsibility and Work Opportunity Reconciliation Act, 8 U.S.C. 1601 et seq., only the citizenship and immigration status of the child, who is the primary beneficiary of the CCDF benefit, is relevant. Control: Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should comply with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: The Agency of Human Services (Agency) failed to perform verification of U.S. citizenship for participants who were otherwise eligible under the program because they were in need of or receiving protective services. Context: For three of forty participants selected for testing, U.S. citizenship was not verified. Auditors noted that the Agency pooled funding for multiple federal programs with CCDF, which made eligibility for the other funding sources subject to CCDF rules. The Administration for Children and Families (ACF) performed a monitoring visit in November 2023 which identified an exception for U.S. citizenship verification. Through the Agency’s corrective action plan resulting from ACF’s monitoring visit, citizenship was verified back to 10/1/2023 (for FFY2024), however the Agency did not verify citizenship for participants receiving benefits prior to this date. Cause: The Agency’s procedures and controls were not sufficient to ensure that U.S. citizenship was verified for participants who were otherwise eligible under the program because they were in need of or receiving protective services. When the exception was noted by ACF, the Agency verified citizenship for FFY2024, but did not verify citizenship for participants receiving benefits prior to this date. Effect Failure to verify U.S. citizenship for participants could result in ineligible participants receiving benefits under the program. Questioned costs: Undetermined. Recommendation: We recommend that the Agency review and enhance procedures and controls to ensure that it verifies U.S. citizenship for all participants and confirm that only eligible participants receive benefits under the program. Views of responsible officials: Management agrees with the finding.
Reference Number: 2024-026 Prior Year Finding: 2023-023 Federal Agency: U.S. Department of Agriculture U.S. Department of Health and Human Services State Agency: Department of Finance and Management Federal Program: SNAP Cluster Temporary Assistance for Needy Families CCDF Cluster Assistance Listing Number: 10.551, 10.561, 93.558, 93.575, 93.596 Award Number and Year: 4VT400406 (10/1/2022 – 9/30/2023) 4VT402513 (10/1/2023 – 9/30/2024) 2301VTTANF (10/1/2022 – 9/30/2023) 2401VTTANF (10/1/2023 – 9/30/2024) 2301VTCCDD (10/1/2022 – 9/30/2025) 2401VTCCDD (10/1/2023 – 9/30/2026) Compliance Requirement: Cash Management Type of Finding: Significant Deficiency in Internal Control Over Compliance, Other Matters Criteria or specific requirement: Compliance: US Department of the Treasury (Treasury) regulations at 31 CFR Part 205 implement the Cash Management Improvement Act of 1990 (CMIA), as amended (Pub. L. No. 101-453; 31 USC 6501 et seq.). Subpart A of those regulations requires state recipients to enter into Treasury-State Agreements that prescribe specific methods of drawing down federal funds (funding techniques) for federal programs listed in the Assistance Listing (Catalog of federal Domestic Assistance) that meet the funding threshold for a major federal assistance program under the CMIA. Treasury-State Agreements also specify the terms and conditions under which an interest liability would be incurred. Programs not covered by a Treasury-State Agreement are subject to procedures prescribed by Treasury in Subpart B of 31 CFR Part 205 (Subpart B), which at 31 CFR section 205.33(a) include the requirement for a state to minimize the time between the drawdown of federal funds and their disbursement for federal program purposes. Annual Reports are submitted electronically by December 31 of each year. The Annual Report includes Federal interest liabilities, State interest liabilities, and State direct cost claims. Control: Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should comply with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: The Department of Finance and Management (Finance) improperly calculated State interest liabilities for multiple programs on the FY2024 CMIA Annual Report. Context: Finance is the entity responsible for calculation of State and Federal interest liabilities and completion of the CMIA Annual Report. The annual interest rate is established by the U.S. Treasury and published on its CMIA website. This rate must be used when calculating State and Federal interest liabilities in the Annual Report. Finance receives drawdown detail support from other State agencies which it uses to compile the State’s Annual Report submission. When Finance prepared the FY2024 Annual Report, it failed to verify that the correct interest rate was applied to calculate interest liabilities, resulting in an underreporting of the State interest liability for several programs. Specifically, we noted that the State’s interest liability was underreported for the following programs: • SNAP Cluster: $579 • Temporary Assistance for Needy Families: $2,589 • CCDF Cluster: $500 Cause: Finance’s procedures were not sufficient to ensure that the FY2024 interest rate established by the U.S. Treasury was applied for all programs when interest liabilities were calculated. Internal controls did not prevent or detect the errors. Effect: The State’s interest liability was underreported to the U.S. Treasury, resulting in the State earning interest on Federal funds to which it was not entitled. Questioned costs: $3,668, the total State interest liability that was underreported on the FY2024 CMIA Annual Report. Recommendation: We recommend that Finance review and enhance its internal controls and procedures over the CMIA Annual Report to ensure that it verifies the correct interest rate is applied and that State and Federal interest liabilities are properly calculated in accordance with 2 CFR section 200.514. Views of responsible officials: Management agrees with the finding.
Reference Number: 2024-027 Prior Year Finding: No Federal Agency: U.S. Department of Agriculture U.S. Department of Health and Human Services State Agency: Department of Human Resources Agency of Human Services Federal Program: SNAP Cluster Temporary Assistance for Needy Families Child Support Services CCDF Cluster Medicaid Cluster Assistance Listing Number: 10.551, 10.561, 93.558, 93.563, 93.575, 93.596, 93.775, 93.777, 93.778 Award Number and Year: 4VT400406 (10/1/2022 – 9/30/2023) 4VT402513 (10/1/2023 – 9/30/2024) 2301VTTANF (10/1/2022 – 9/30/2023) 2401VTTANF (10/1/2023 – 9/30/2024) 2401VTSCSS (10/1/2023 – 9/30/2024) 2301VTCCDD (10/1/2022 – 9/30/2025) 2401VTCCDD (10/1/2023 – 9/30/2026) 2305VT5MAP (10/1/2022 – 9/30/2023) Compliance Requirement: Allowable Costs/Cost Principles – Time and Effort Reporting Type of Finding: Significant Deficiency in Internal Control Over Compliance Criteria or specific requirement: Compliance: Per 2 CFR section 200.403(c), to be allowable under Federal awards, except where otherwise authorized by statute, costs must be consistent with policies and procedures that apply uniformly to both federally financed and other activities of the recipient or subrecipient. Compensation for exempt attorneys in the State of Vermont are determined by the State of Vermont’s Attorney Pay Plan which governs the hiring level, compensation and promotion of exempt attorneys. Control: Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should comply with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: The hourly rate used to compensate an exempt attorney was higher than the maximum limit identified for the position in the State of Vermont’s Attorney Pay Plan. Context: The Department of Human Resources (Department) manages and updates the VTHR Human Resource information system which is the system used for managing employee data and processing payroll for all State employees. The Agency of Human Services (Agency) allocates payroll costs to federal programs using methodologies approved in its Cost Allocation Plan. After allocation, compensation for positions may be charged by the Agency to multiple federal programs. During cost allocation testing, auditors determined one employee’s rate of pay exceeded the limit identified for the position in the State of Vermont’s Attorney Pay Plan. The maximum hourly rate for the General Counsel I position is $59.61 or up to the Department Head’s Salary, whichever is lower. The employee selected for testing was compensated at the hourly rate of $62.06 which exceeds the maximum for the position. Cause: The Department of Human Resources used the department head’s salary as the maximum for the General Counsel I position in VTHR. It did not implement a control to ensure that the employee’s salary also did not exceed the maximum hourly rate identified for the position. Effect An employee was compensated at a rate higher than the maximum limit identified for the position in the State of Vermont’s Attorney Pay Plan. Internal controls did not detect or prevent the error. Questioned costs: Undetermined. Recommendation: We recommend that the Department review and enhance procedures and internal controls to ensure that VTHR uses rates of pay for attorneys that align with the maximum pay rates established by the Attorney Pay Plan. Views of responsible officials: Management agrees with the finding.
Reference Number: 2024-026 Prior Year Finding: 2023-023 Federal Agency: U.S. Department of Agriculture U.S. Department of Health and Human Services State Agency: Department of Finance and Management Federal Program: SNAP Cluster Temporary Assistance for Needy Families CCDF Cluster Assistance Listing Number: 10.551, 10.561, 93.558, 93.575, 93.596 Award Number and Year: 4VT400406 (10/1/2022 – 9/30/2023) 4VT402513 (10/1/2023 – 9/30/2024) 2301VTTANF (10/1/2022 – 9/30/2023) 2401VTTANF (10/1/2023 – 9/30/2024) 2301VTCCDD (10/1/2022 – 9/30/2025) 2401VTCCDD (10/1/2023 – 9/30/2026) Compliance Requirement: Cash Management Type of Finding: Significant Deficiency in Internal Control Over Compliance, Other Matters Criteria or specific requirement: Compliance: US Department of the Treasury (Treasury) regulations at 31 CFR Part 205 implement the Cash Management Improvement Act of 1990 (CMIA), as amended (Pub. L. No. 101-453; 31 USC 6501 et seq.). Subpart A of those regulations requires state recipients to enter into Treasury-State Agreements that prescribe specific methods of drawing down federal funds (funding techniques) for federal programs listed in the Assistance Listing (Catalog of federal Domestic Assistance) that meet the funding threshold for a major federal assistance program under the CMIA. Treasury-State Agreements also specify the terms and conditions under which an interest liability would be incurred. Programs not covered by a Treasury-State Agreement are subject to procedures prescribed by Treasury in Subpart B of 31 CFR Part 205 (Subpart B), which at 31 CFR section 205.33(a) include the requirement for a state to minimize the time between the drawdown of federal funds and their disbursement for federal program purposes. Annual Reports are submitted electronically by December 31 of each year. The Annual Report includes Federal interest liabilities, State interest liabilities, and State direct cost claims. Control: Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should comply with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: The Department of Finance and Management (Finance) improperly calculated State interest liabilities for multiple programs on the FY2024 CMIA Annual Report. Context: Finance is the entity responsible for calculation of State and Federal interest liabilities and completion of the CMIA Annual Report. The annual interest rate is established by the U.S. Treasury and published on its CMIA website. This rate must be used when calculating State and Federal interest liabilities in the Annual Report. Finance receives drawdown detail support from other State agencies which it uses to compile the State’s Annual Report submission. When Finance prepared the FY2024 Annual Report, it failed to verify that the correct interest rate was applied to calculate interest liabilities, resulting in an underreporting of the State interest liability for several programs. Specifically, we noted that the State’s interest liability was underreported for the following programs: • SNAP Cluster: $579 • Temporary Assistance for Needy Families: $2,589 • CCDF Cluster: $500 Cause: Finance’s procedures were not sufficient to ensure that the FY2024 interest rate established by the U.S. Treasury was applied for all programs when interest liabilities were calculated. Internal controls did not prevent or detect the errors. Effect: The State’s interest liability was underreported to the U.S. Treasury, resulting in the State earning interest on Federal funds to which it was not entitled. Questioned costs: $3,668, the total State interest liability that was underreported on the FY2024 CMIA Annual Report. Recommendation: We recommend that Finance review and enhance its internal controls and procedures over the CMIA Annual Report to ensure that it verifies the correct interest rate is applied and that State and Federal interest liabilities are properly calculated in accordance with 2 CFR section 200.514. Views of responsible officials: Management agrees with the finding.
Reference Number: 2024-027 Prior Year Finding: No Federal Agency: U.S. Department of Agriculture U.S. Department of Health and Human Services State Agency: Department of Human Resources Agency of Human Services Federal Program: SNAP Cluster Temporary Assistance for Needy Families Child Support Services CCDF Cluster Medicaid Cluster Assistance Listing Number: 10.551, 10.561, 93.558, 93.563, 93.575, 93.596, 93.775, 93.777, 93.778 Award Number and Year: 4VT400406 (10/1/2022 – 9/30/2023) 4VT402513 (10/1/2023 – 9/30/2024) 2301VTTANF (10/1/2022 – 9/30/2023) 2401VTTANF (10/1/2023 – 9/30/2024) 2401VTSCSS (10/1/2023 – 9/30/2024) 2301VTCCDD (10/1/2022 – 9/30/2025) 2401VTCCDD (10/1/2023 – 9/30/2026) 2305VT5MAP (10/1/2022 – 9/30/2023) Compliance Requirement: Allowable Costs/Cost Principles – Time and Effort Reporting Type of Finding: Significant Deficiency in Internal Control Over Compliance Criteria or specific requirement: Compliance: Per 2 CFR section 200.403(c), to be allowable under Federal awards, except where otherwise authorized by statute, costs must be consistent with policies and procedures that apply uniformly to both federally financed and other activities of the recipient or subrecipient. Compensation for exempt attorneys in the State of Vermont are determined by the State of Vermont’s Attorney Pay Plan which governs the hiring level, compensation and promotion of exempt attorneys. Control: Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should comply with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: The hourly rate used to compensate an exempt attorney was higher than the maximum limit identified for the position in the State of Vermont’s Attorney Pay Plan. Context: The Department of Human Resources (Department) manages and updates the VTHR Human Resource information system which is the system used for managing employee data and processing payroll for all State employees. The Agency of Human Services (Agency) allocates payroll costs to federal programs using methodologies approved in its Cost Allocation Plan. After allocation, compensation for positions may be charged by the Agency to multiple federal programs. During cost allocation testing, auditors determined one employee’s rate of pay exceeded the limit identified for the position in the State of Vermont’s Attorney Pay Plan. The maximum hourly rate for the General Counsel I position is $59.61 or up to the Department Head’s Salary, whichever is lower. The employee selected for testing was compensated at the hourly rate of $62.06 which exceeds the maximum for the position. Cause: The Department of Human Resources used the department head’s salary as the maximum for the General Counsel I position in VTHR. It did not implement a control to ensure that the employee’s salary also did not exceed the maximum hourly rate identified for the position. Effect An employee was compensated at a rate higher than the maximum limit identified for the position in the State of Vermont’s Attorney Pay Plan. Internal controls did not detect or prevent the error. Questioned costs: Undetermined. Recommendation: We recommend that the Department review and enhance procedures and internal controls to ensure that VTHR uses rates of pay for attorneys that align with the maximum pay rates established by the Attorney Pay Plan. Views of responsible officials: Management agrees with the finding.
Reference Number: 2024-020 Prior Year Finding: No Federal Agency: U.S. Department of Health and Human Services State Agency: Agency of Human Services Federal Program: CCDF Cluster Assistance Listing Number: 93.575, 93.596 Award Number and Year: 2301VTCCDD (10/1/2022 – 9/30/2025) 2401VTCCDD (10/1/2023 – 9/30/2026) Compliance Requirement: Special Tests and Provisions – Health and Safety Requirements Type of Finding: Material Weakness in Internal Control Over Compliance, Material Noncompliance Criteria or specific requirement: Compliance: Lead Agencies must certify that procedures are in effect (e.g., monitoring and enforcement) to ensure that providers serving children who receive subsidies comply with all applicable health and safety requirements. This includes verifying and documenting that child care providers (unless they meet an exception, e.g., family members who are caregivers or individuals who object to immunization on certain grounds) serving children who receive subsidies meet requirements pertaining to health and safety. These requirements must address eleven specific areas—including first aid and CPR, safe sleeping practices, and administration of medication—and child care workers must be trained in these areas (42 USC 9858c(c)(2)(I); 45 CFR section 98.41). Per 45 CFR 98.44(b), a Lead Agency must describe in the State Plan its established requirements for pre-service or orientation (to be completed within three months) and ongoing professional development for caregivers, teachers, and directors of child care providers of services for which assistance is provided under the CCDF that, to the extent practicable, align with the State framework. Accessible pre-service or orientation training in health and safety standards appropriate to the setting and age of children served addresses: (i) Each of the requirements relating to matters described in §98.41(a)(1)(i) through (xi) and specifying critical health and safety training that must be completed before caregivers, teachers, and directors are allowed to care for children unsupervised; (ii) At the Lead Agency option, matters described in § 98.41(a)(1)(xii); and (iii) Child development, including the major domains (cognitive, social, emotional, physical development and approaches to learning); Control: Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should comply with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: The Agency of Human Services (Agency) did not ensure that all providers completed required annual training nor that training in health and safety standards addresses the required eleven elements per 45 CFR sections 98.41 and 98.44(b)(1). Context: Forty child care providers were selected for testing and the following exceptions were noted: • For 4 of 40 child care providers selected for testing, the Agency was unable to provide documentation that it ensured the providers completed the required 15 hours of annual training or that a supervisor had documented approval of the training hours. • For 40 of 40 child care providers selected for testing, the Agency’s provider training did not include all 11 of the required health and safety topics. During a monitoring site visit conducted in November 2023 by the HHS Administration for Children & Families, Office of Child Care (OCC), the monitoring team did not find evidence that the Agency’s provider training content included all 11 health and safety topics. Therefore, OCC’s monitoring report identified noncompliance with this training requirement. Cause: The Agency’s procedures were not sufficient to ensure that its monitoring documentation of child care provider training was complete. When developing provider health and safety training content, the Agency did not ensure that it included all 11 health and safety topics required by 45 CFR section 98.44(b)(1). Internal controls did not detect or prevent these errors. Effect Deficiencies in the content and monitoring of provider health and safety training could result in inadequately trained child care providers which may create a risk to the health and safety of children receiving subsidies under the program. Questioned costs: None noted. Recommendation: We recommend that the Agency review and enhance training monitoring procedures and controls to ensure that all child care providers complete required health and safety training. We further recommend that the Agency update its training content to ensure that it includes all required elements. Views of responsible officials: Management agrees with the finding.
Reference Number: 2024-021 Prior Year Finding: No Federal Agency: U.S. Department of Health and Human Services State Agency: Agency of Human Services Federal Program: CCDF Cluster Assistance Listing Number: 93.575, 93.596 Award Number and Year: 2301VTCCDD (10/1/2022 – 9/30/2025) 2401VTCCDD (10/1/2023 – 9/30/2026) Compliance Requirement: Eligibility Type of Finding: Significant Deficiency in Internal Control Over Compliance, Other Matters Criteria or specific requirement: Compliance: Lead Agencies must have procedures in place for documenting and verifying eligibility in accordance with federal requirements, as well as the specific eligibility requirements selected by each Lead Agency in its approved plan. A Lead Agency is the designated state, territorial, or tribal entity to which the CCDF grant is awarded and that is accountable for administering the CCDF program. Procedures for documenting and verifying eligibility may be performed directly by the lead agency or other agencies engaged in the administration of CCDF. Per 45 CFR Section 98.20(c) - A Child's Eligibility for Child Care Services, for purposes of implementing the citizenship eligibility verification requirements mandated by title IV of the Personal Responsibility and Work Opportunity Reconciliation Act, 8 U.S.C. 1601 et seq., only the citizenship and immigration status of the child, who is the primary beneficiary of the CCDF benefit, is relevant. Control: Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should comply with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: The Agency of Human Services (Agency) failed to perform verification of U.S. citizenship for participants who were otherwise eligible under the program because they were in need of or receiving protective services. Context: For three of forty participants selected for testing, U.S. citizenship was not verified. Auditors noted that the Agency pooled funding for multiple federal programs with CCDF, which made eligibility for the other funding sources subject to CCDF rules. The Administration for Children and Families (ACF) performed a monitoring visit in November 2023 which identified an exception for U.S. citizenship verification. Through the Agency’s corrective action plan resulting from ACF’s monitoring visit, citizenship was verified back to 10/1/2023 (for FFY2024), however the Agency did not verify citizenship for participants receiving benefits prior to this date. Cause: The Agency’s procedures and controls were not sufficient to ensure that U.S. citizenship was verified for participants who were otherwise eligible under the program because they were in need of or receiving protective services. When the exception was noted by ACF, the Agency verified citizenship for FFY2024, but did not verify citizenship for participants receiving benefits prior to this date. Effect Failure to verify U.S. citizenship for participants could result in ineligible participants receiving benefits under the program. Questioned costs: Undetermined. Recommendation: We recommend that the Agency review and enhance procedures and controls to ensure that it verifies U.S. citizenship for all participants and confirm that only eligible participants receive benefits under the program. Views of responsible officials: Management agrees with the finding.
Reference Number: 2024-020 Prior Year Finding: No Federal Agency: U.S. Department of Health and Human Services State Agency: Agency of Human Services Federal Program: CCDF Cluster Assistance Listing Number: 93.575, 93.596 Award Number and Year: 2301VTCCDD (10/1/2022 – 9/30/2025) 2401VTCCDD (10/1/2023 – 9/30/2026) Compliance Requirement: Special Tests and Provisions – Health and Safety Requirements Type of Finding: Material Weakness in Internal Control Over Compliance, Material Noncompliance Criteria or specific requirement: Compliance: Lead Agencies must certify that procedures are in effect (e.g., monitoring and enforcement) to ensure that providers serving children who receive subsidies comply with all applicable health and safety requirements. This includes verifying and documenting that child care providers (unless they meet an exception, e.g., family members who are caregivers or individuals who object to immunization on certain grounds) serving children who receive subsidies meet requirements pertaining to health and safety. These requirements must address eleven specific areas—including first aid and CPR, safe sleeping practices, and administration of medication—and child care workers must be trained in these areas (42 USC 9858c(c)(2)(I); 45 CFR section 98.41). Per 45 CFR 98.44(b), a Lead Agency must describe in the State Plan its established requirements for pre-service or orientation (to be completed within three months) and ongoing professional development for caregivers, teachers, and directors of child care providers of services for which assistance is provided under the CCDF that, to the extent practicable, align with the State framework. Accessible pre-service or orientation training in health and safety standards appropriate to the setting and age of children served addresses: (i) Each of the requirements relating to matters described in §98.41(a)(1)(i) through (xi) and specifying critical health and safety training that must be completed before caregivers, teachers, and directors are allowed to care for children unsupervised; (ii) At the Lead Agency option, matters described in § 98.41(a)(1)(xii); and (iii) Child development, including the major domains (cognitive, social, emotional, physical development and approaches to learning); Control: Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should comply with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: The Agency of Human Services (Agency) did not ensure that all providers completed required annual training nor that training in health and safety standards addresses the required eleven elements per 45 CFR sections 98.41 and 98.44(b)(1). Context: Forty child care providers were selected for testing and the following exceptions were noted: • For 4 of 40 child care providers selected for testing, the Agency was unable to provide documentation that it ensured the providers completed the required 15 hours of annual training or that a supervisor had documented approval of the training hours. • For 40 of 40 child care providers selected for testing, the Agency’s provider training did not include all 11 of the required health and safety topics. During a monitoring site visit conducted in November 2023 by the HHS Administration for Children & Families, Office of Child Care (OCC), the monitoring team did not find evidence that the Agency’s provider training content included all 11 health and safety topics. Therefore, OCC’s monitoring report identified noncompliance with this training requirement. Cause: The Agency’s procedures were not sufficient to ensure that its monitoring documentation of child care provider training was complete. When developing provider health and safety training content, the Agency did not ensure that it included all 11 health and safety topics required by 45 CFR section 98.44(b)(1). Internal controls did not detect or prevent these errors. Effect Deficiencies in the content and monitoring of provider health and safety training could result in inadequately trained child care providers which may create a risk to the health and safety of children receiving subsidies under the program. Questioned costs: None noted. Recommendation: We recommend that the Agency review and enhance training monitoring procedures and controls to ensure that all child care providers complete required health and safety training. We further recommend that the Agency update its training content to ensure that it includes all required elements. Views of responsible officials: Management agrees with the finding.
Reference Number: 2024-021 Prior Year Finding: No Federal Agency: U.S. Department of Health and Human Services State Agency: Agency of Human Services Federal Program: CCDF Cluster Assistance Listing Number: 93.575, 93.596 Award Number and Year: 2301VTCCDD (10/1/2022 – 9/30/2025) 2401VTCCDD (10/1/2023 – 9/30/2026) Compliance Requirement: Eligibility Type of Finding: Significant Deficiency in Internal Control Over Compliance, Other Matters Criteria or specific requirement: Compliance: Lead Agencies must have procedures in place for documenting and verifying eligibility in accordance with federal requirements, as well as the specific eligibility requirements selected by each Lead Agency in its approved plan. A Lead Agency is the designated state, territorial, or tribal entity to which the CCDF grant is awarded and that is accountable for administering the CCDF program. Procedures for documenting and verifying eligibility may be performed directly by the lead agency or other agencies engaged in the administration of CCDF. Per 45 CFR Section 98.20(c) - A Child's Eligibility for Child Care Services, for purposes of implementing the citizenship eligibility verification requirements mandated by title IV of the Personal Responsibility and Work Opportunity Reconciliation Act, 8 U.S.C. 1601 et seq., only the citizenship and immigration status of the child, who is the primary beneficiary of the CCDF benefit, is relevant. Control: Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should comply with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: The Agency of Human Services (Agency) failed to perform verification of U.S. citizenship for participants who were otherwise eligible under the program because they were in need of or receiving protective services. Context: For three of forty participants selected for testing, U.S. citizenship was not verified. Auditors noted that the Agency pooled funding for multiple federal programs with CCDF, which made eligibility for the other funding sources subject to CCDF rules. The Administration for Children and Families (ACF) performed a monitoring visit in November 2023 which identified an exception for U.S. citizenship verification. Through the Agency’s corrective action plan resulting from ACF’s monitoring visit, citizenship was verified back to 10/1/2023 (for FFY2024), however the Agency did not verify citizenship for participants receiving benefits prior to this date. Cause: The Agency’s procedures and controls were not sufficient to ensure that U.S. citizenship was verified for participants who were otherwise eligible under the program because they were in need of or receiving protective services. When the exception was noted by ACF, the Agency verified citizenship for FFY2024, but did not verify citizenship for participants receiving benefits prior to this date. Effect Failure to verify U.S. citizenship for participants could result in ineligible participants receiving benefits under the program. Questioned costs: Undetermined. Recommendation: We recommend that the Agency review and enhance procedures and controls to ensure that it verifies U.S. citizenship for all participants and confirm that only eligible participants receive benefits under the program. Views of responsible officials: Management agrees with the finding.
Reference Number: 2024-026 Prior Year Finding: 2023-023 Federal Agency: U.S. Department of Agriculture U.S. Department of Health and Human Services State Agency: Department of Finance and Management Federal Program: SNAP Cluster Temporary Assistance for Needy Families CCDF Cluster Assistance Listing Number: 10.551, 10.561, 93.558, 93.575, 93.596 Award Number and Year: 4VT400406 (10/1/2022 – 9/30/2023) 4VT402513 (10/1/2023 – 9/30/2024) 2301VTTANF (10/1/2022 – 9/30/2023) 2401VTTANF (10/1/2023 – 9/30/2024) 2301VTCCDD (10/1/2022 – 9/30/2025) 2401VTCCDD (10/1/2023 – 9/30/2026) Compliance Requirement: Cash Management Type of Finding: Significant Deficiency in Internal Control Over Compliance, Other Matters Criteria or specific requirement: Compliance: US Department of the Treasury (Treasury) regulations at 31 CFR Part 205 implement the Cash Management Improvement Act of 1990 (CMIA), as amended (Pub. L. No. 101-453; 31 USC 6501 et seq.). Subpart A of those regulations requires state recipients to enter into Treasury-State Agreements that prescribe specific methods of drawing down federal funds (funding techniques) for federal programs listed in the Assistance Listing (Catalog of federal Domestic Assistance) that meet the funding threshold for a major federal assistance program under the CMIA. Treasury-State Agreements also specify the terms and conditions under which an interest liability would be incurred. Programs not covered by a Treasury-State Agreement are subject to procedures prescribed by Treasury in Subpart B of 31 CFR Part 205 (Subpart B), which at 31 CFR section 205.33(a) include the requirement for a state to minimize the time between the drawdown of federal funds and their disbursement for federal program purposes. Annual Reports are submitted electronically by December 31 of each year. The Annual Report includes Federal interest liabilities, State interest liabilities, and State direct cost claims. Control: Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should comply with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: The Department of Finance and Management (Finance) improperly calculated State interest liabilities for multiple programs on the FY2024 CMIA Annual Report. Context: Finance is the entity responsible for calculation of State and Federal interest liabilities and completion of the CMIA Annual Report. The annual interest rate is established by the U.S. Treasury and published on its CMIA website. This rate must be used when calculating State and Federal interest liabilities in the Annual Report. Finance receives drawdown detail support from other State agencies which it uses to compile the State’s Annual Report submission. When Finance prepared the FY2024 Annual Report, it failed to verify that the correct interest rate was applied to calculate interest liabilities, resulting in an underreporting of the State interest liability for several programs. Specifically, we noted that the State’s interest liability was underreported for the following programs: • SNAP Cluster: $579 • Temporary Assistance for Needy Families: $2,589 • CCDF Cluster: $500 Cause: Finance’s procedures were not sufficient to ensure that the FY2024 interest rate established by the U.S. Treasury was applied for all programs when interest liabilities were calculated. Internal controls did not prevent or detect the errors. Effect: The State’s interest liability was underreported to the U.S. Treasury, resulting in the State earning interest on Federal funds to which it was not entitled. Questioned costs: $3,668, the total State interest liability that was underreported on the FY2024 CMIA Annual Report. Recommendation: We recommend that Finance review and enhance its internal controls and procedures over the CMIA Annual Report to ensure that it verifies the correct interest rate is applied and that State and Federal interest liabilities are properly calculated in accordance with 2 CFR section 200.514. Views of responsible officials: Management agrees with the finding.
Reference Number: 2024-027 Prior Year Finding: No Federal Agency: U.S. Department of Agriculture U.S. Department of Health and Human Services State Agency: Department of Human Resources Agency of Human Services Federal Program: SNAP Cluster Temporary Assistance for Needy Families Child Support Services CCDF Cluster Medicaid Cluster Assistance Listing Number: 10.551, 10.561, 93.558, 93.563, 93.575, 93.596, 93.775, 93.777, 93.778 Award Number and Year: 4VT400406 (10/1/2022 – 9/30/2023) 4VT402513 (10/1/2023 – 9/30/2024) 2301VTTANF (10/1/2022 – 9/30/2023) 2401VTTANF (10/1/2023 – 9/30/2024) 2401VTSCSS (10/1/2023 – 9/30/2024) 2301VTCCDD (10/1/2022 – 9/30/2025) 2401VTCCDD (10/1/2023 – 9/30/2026) 2305VT5MAP (10/1/2022 – 9/30/2023) Compliance Requirement: Allowable Costs/Cost Principles – Time and Effort Reporting Type of Finding: Significant Deficiency in Internal Control Over Compliance Criteria or specific requirement: Compliance: Per 2 CFR section 200.403(c), to be allowable under Federal awards, except where otherwise authorized by statute, costs must be consistent with policies and procedures that apply uniformly to both federally financed and other activities of the recipient or subrecipient. Compensation for exempt attorneys in the State of Vermont are determined by the State of Vermont’s Attorney Pay Plan which governs the hiring level, compensation and promotion of exempt attorneys. Control: Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should comply with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: The hourly rate used to compensate an exempt attorney was higher than the maximum limit identified for the position in the State of Vermont’s Attorney Pay Plan. Context: The Department of Human Resources (Department) manages and updates the VTHR Human Resource information system which is the system used for managing employee data and processing payroll for all State employees. The Agency of Human Services (Agency) allocates payroll costs to federal programs using methodologies approved in its Cost Allocation Plan. After allocation, compensation for positions may be charged by the Agency to multiple federal programs. During cost allocation testing, auditors determined one employee’s rate of pay exceeded the limit identified for the position in the State of Vermont’s Attorney Pay Plan. The maximum hourly rate for the General Counsel I position is $59.61 or up to the Department Head’s Salary, whichever is lower. The employee selected for testing was compensated at the hourly rate of $62.06 which exceeds the maximum for the position. Cause: The Department of Human Resources used the department head’s salary as the maximum for the General Counsel I position in VTHR. It did not implement a control to ensure that the employee’s salary also did not exceed the maximum hourly rate identified for the position. Effect An employee was compensated at a rate higher than the maximum limit identified for the position in the State of Vermont’s Attorney Pay Plan. Internal controls did not detect or prevent the error. Questioned costs: Undetermined. Recommendation: We recommend that the Department review and enhance procedures and internal controls to ensure that VTHR uses rates of pay for attorneys that align with the maximum pay rates established by the Attorney Pay Plan. Views of responsible officials: Management agrees with the finding.
Reference Number: 2024-027 Prior Year Finding: No Federal Agency: U.S. Department of Agriculture U.S. Department of Health and Human Services State Agency: Department of Human Resources Agency of Human Services Federal Program: SNAP Cluster Temporary Assistance for Needy Families Child Support Services CCDF Cluster Medicaid Cluster Assistance Listing Number: 10.551, 10.561, 93.558, 93.563, 93.575, 93.596, 93.775, 93.777, 93.778 Award Number and Year: 4VT400406 (10/1/2022 – 9/30/2023) 4VT402513 (10/1/2023 – 9/30/2024) 2301VTTANF (10/1/2022 – 9/30/2023) 2401VTTANF (10/1/2023 – 9/30/2024) 2401VTSCSS (10/1/2023 – 9/30/2024) 2301VTCCDD (10/1/2022 – 9/30/2025) 2401VTCCDD (10/1/2023 – 9/30/2026) 2305VT5MAP (10/1/2022 – 9/30/2023) Compliance Requirement: Allowable Costs/Cost Principles – Time and Effort Reporting Type of Finding: Significant Deficiency in Internal Control Over Compliance Criteria or specific requirement: Compliance: Per 2 CFR section 200.403(c), to be allowable under Federal awards, except where otherwise authorized by statute, costs must be consistent with policies and procedures that apply uniformly to both federally financed and other activities of the recipient or subrecipient. Compensation for exempt attorneys in the State of Vermont are determined by the State of Vermont’s Attorney Pay Plan which governs the hiring level, compensation and promotion of exempt attorneys. Control: Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should comply with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: The hourly rate used to compensate an exempt attorney was higher than the maximum limit identified for the position in the State of Vermont’s Attorney Pay Plan. Context: The Department of Human Resources (Department) manages and updates the VTHR Human Resource information system which is the system used for managing employee data and processing payroll for all State employees. The Agency of Human Services (Agency) allocates payroll costs to federal programs using methodologies approved in its Cost Allocation Plan. After allocation, compensation for positions may be charged by the Agency to multiple federal programs. During cost allocation testing, auditors determined one employee’s rate of pay exceeded the limit identified for the position in the State of Vermont’s Attorney Pay Plan. The maximum hourly rate for the General Counsel I position is $59.61 or up to the Department Head’s Salary, whichever is lower. The employee selected for testing was compensated at the hourly rate of $62.06 which exceeds the maximum for the position. Cause: The Department of Human Resources used the department head’s salary as the maximum for the General Counsel I position in VTHR. It did not implement a control to ensure that the employee’s salary also did not exceed the maximum hourly rate identified for the position. Effect An employee was compensated at a rate higher than the maximum limit identified for the position in the State of Vermont’s Attorney Pay Plan. Internal controls did not detect or prevent the error. Questioned costs: Undetermined. Recommendation: We recommend that the Department review and enhance procedures and internal controls to ensure that VTHR uses rates of pay for attorneys that align with the maximum pay rates established by the Attorney Pay Plan. Views of responsible officials: Management agrees with the finding.
Reference Number: 2024-022 Prior Year Finding: No Federal Agency: U.S. Department of Health and Human Services State Agency: Agency of Human Services (Agency) Federal Program: Medicaid Cluster Assistance Listing Number: 93.775, 93.777, 93.778 Award Number and Year: 2305VT5MAP (10/1/2022 – 9/30/2023) Compliance Requirement: Eligibility Type of Finding: Significant Deficiency in Internal Control Over Compliance, Other Matters Criteria or specific requirement: Compliance: States verify the financial and nonfinancial factors of eligibility by checking electronic data sources in accordance with federal requirements at 42 CFR 435.948 through 435.956 and state requirements (as documented in the state plan, verification plan, and eligibility manual). Per 42 CFR §435.915(b) and the Vermont State Plan, eligibility for Medicaid is effective on the first day of a month if an individual was eligible at any time during that month. Control: Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should comply with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: The Agency of Human Services (Agency) incorrectly discontinued benefits for a Medicaid participant during the month in which eligibility was renewed. Context: For one of sixty participants selected for testing, the Agency performed a renewal of Medicaid benefits during the month of October and discontinued benefits for that month instead of backdating the claim to the beginning of the month. Cause: The Agency did not adequately follow procedures regarding eligibility renewals in accordance with federal program requirements and its state plan. Internal controls did not detect or prevent the error. Effect A participant’s benefits were improperly discontinued for one month. Questioned costs: None noted. Recommendation: We recommend that the Agency review and enhance procedures and controls for Medicaid eligibility renewals to ensure that benefits for eligible participants are not discontinued. Views of responsible officials: Management agrees with the finding.
Reference Number: 2024-023 Prior Year Finding: 2023-030 Federal Agency: U.S. Department of Health and Human Services State Agency: Agency of Human Services Federal Program: Medicaid Cluster Assistance Listing Number: 93.775, 93.777, 93.778 Award Number and Year: 2305VT5MAP (10/1/2022 – 9/30/2023) 2405VT5MAP (10/1/2023 – 9/30/2024) Compliance Requirement: Reporting – Federal Funding Accountability and Transparency Act (FFATA) Type of Finding: Significant Deficiency in Internal Control Over Compliance, Other Matters Criteria or specific requirement: Compliance: Per the Federal Funding Accountability and Transparency Act (FFATA), prime (direct) recipients of grants or cooperative agreements are required to report first-tier subawards of $30,000 or more to the Federal Funding Accountability and Transparency Act Subaward Reporting System (FSRS). Reports must be filed in FSRS by the end of the month following the month in which the prime recipient awards any sub-grant greater than or equal to $30,000. If the initial award is below $30,000 but subsequent grant modifications result in a total award equal to or over $30,000, the award will be subject to the reporting requirements as of the date the award exceeds $30,000. If the initial award equals or exceeds $30,000 but funding is subsequently de-obligated such that the total award amount falls below $30,000, the award continues to be subject to FFATA reporting requirements. The following key data elements must be reported: Subawardee Name and Data Universal Numbering System (DUNS) number; Amount of Subaward (inclusive of modifications); Subaward Obligation/Action Date; Date of Report Submission; Subaward Number; Project Description; and Names and Compensation of Highly Compensated Officers. (Names and Compensation of Highly Compensated Officers must only be reported when the entity in the preceding fiscal year received 80 percent or more of its annual gross revenues in Federal awards; and $30,000,000 or more in annual gross revenues from Federal awards; and the public does not have access to this information about the compensation of the senior executives of the entity through periodic reports filed under section 13(a) or 15(d) of the Securities Exchange Act of 1934 (15 U.S.C. §§ 78m(a), 78o(d)) or section 6104 of the Internal Revenue Code of 1986.) Control: Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should comply with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: A subaward was not reported to FSRS in accordance with FFATA requirements. Section III – Findings and Questioned Costs – Major Federal Programs (Continued) Context: The Agency of Human Services (Agency) Internal Audit Group (IAG) reports subaward information in FSRS for its various departments using subaward information provided by the departments. Thirty subawards totaling $6,709,156 were selected for testing, including twenty-eight initial subawards and two subaward amendments. We noted the following exception: • One of thirty subawards was not reported. The subaward was issued 9/26/2023 but it was not reported to FSRS. SEE SCHEDULE OF FINDINGS AND QUESTIONED COSTS FOR CHART/TABLE As part of a prior year Corrective Action Plan (CAP), the Agency implemented a process to report required subawards to FSRS timely. The exception noted occurred prior to the full implementation of the CAP. Cause: The individual departments did not provide the IAG with complete subaward information on a timely basis which caused errors and omissions in subaward reporting to FSRS. Effect: Subawards were not reported to FSRS in accordance with FFATA requirements. Questioned costs: None noted. Recommendation: We recommend that the Agency complete implementation of its prior year CAP to ensure that all required subawards and subaward modifications are reported timely to FSRS in accordance with FFATA requirements. Views of responsible officials: Management agrees with the finding.
Reference Number: 2024-024 Prior Year Finding: 2023-031 Federal Agency: U.S. Department of Health and Human Services State Agency: Agency of Human Services Federal Program: Medicaid Cluster Assistance Listing Number: 93.775, 93.777, 93.778 Award Number and Year: 2305VT5MAP (10/1/2022 – 9/30/2023) 2405VT5MAP (10/1/2023 – 9/30/2025) Compliance Requirement: Special Tests and Provisions - Provider Health and Safety Standards Type of Finding: Significant Deficiency in Internal Control Over Compliance, Other Matters Criteria or specific requirement: Compliance: Providers must meet the prescribed health and safety standards for hospital, nursing facilities, and ICF/IID (42 CFR part 442). The standards may be modified in the State Plan. The Medicaid Provider Enrollment Compendium (MPEC) requires that State Medicaid Agencies perform screening of providers based upon their risk level. Screening includes verifications of licenses and compliance with all federal and state regulations of the program. Control: Per 2 CFR section 200.303(a), the non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: The Agency of Human Services (Agency) did not maintain documentation to support a provider’s compliance with the prescribed health and safety standards. The provider health and safety requirements are administered by a 3rd-party that determines and documents providers’ eligibility with the Agency’s requirements in the provider management module (PMM). Context: For one of sixty providers selected for testing, documentation was incomplete to support that the provider was in good tax standing. The provider’s tax standing was verified by the Agency, but the letter was not signed by the Vermont Tax Department Commissioner and uploaded to the PMM as required. As part of a prior year Corrective Action Plan (CAP), a process was developed to require letters of good standing be uploaded to the provider file in the PMM but when this provider’s tax standing was verified, the CAP had not been fully implemented. Cause: The Agency’s 3rd-Party provider did not consistently maintain verification of tax standing documentation in the PMM. Although the Agency had begun implementation of its corrective action plan from a prior year audit, the plan has not been fully implemented. Effect: Failure to verify and document compliance with health and safety standards could allow ineligible providers to perform services under the Medicaid program. Questioned costs: Undetermined. Recommendation: We recommend the Agency fully implement its CAP to ensure that documentation is maintained in accordance with program requirements and that all providers are compliant with required health and safety standards. Views of responsible officials: Management agrees with the finding.
Reference Number: 2024-025 Prior Year Finding: No Federal Agency: U.S. Department of Health and Human Services State Agency: Agency of Human Services (Agency) Federal Program: Medicaid Cluster Assistance Listing Number: 93.775, 93.777, 93.778 Award Number and Year: 2305VT5MAP (10/1/2022 – 9/30/2023) 2405VT5MAP (10/1/2023 – 9/30/2024) Compliance Requirement: Special Tests and Provisions – Utilization Control Type of Finding: Significant Deficiency in Internal Control Over Compliance, Other Matters Criteria or specific requirement: Compliance: The state plan must provide methods and procedures to safeguard against unnecessary utilization of care and services (42 CFR Part 456). The State Medicaid Agency (SMA) must implement a statewide surveillance and utilization control program that (1) safeguards against unnecessary or inappropriate use of Medicaid services against excess payments, (2) assesses the quality of those services, and (3) provides for the control of the utilization of all services provided under the state plan per 42 CFR 456 Subparts B-I. The SMA must establish and use written criteria for evaluating the appropriateness and quality of Medicaid services. The agency must have procedures for the ongoing post-payment review, on a sample basis, of the need for, and the quality and timeliness of, Medicaid services. The SMA may conduct this review directly or may contract with an independent entity. Control: Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should comply with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: The Agency of Human Services (Agency) failed to properly document closure of a case referred to the Medicaid Fraud and Residential Abuse Unit (MFRAU) by the Special Investigations Unit (SIU). Context: For one of twenty-eight cases selected for testing, the SIU opened the case in FY2016, marked it as a high priority, and referred it to the MFRAU. The MFRAU closed the case in FY2018, however, the closure was not properly documented nor communicated. In FY2024 the case was classified by the SIU as administratively closed due to its age, but the results of the review and closure were not documented. Cause: The Agency did not adequately follow procedures regarding utilization control case review and closure in accordance with federal program requirements and its state plan. Internal controls did not detect or prevent the error. Effect Failure to properly document and promptly close cases could allow unnecessary utilization of care and services to continue undetected and result in unnecessary or inappropriate use of Medicaid services. Questioned costs: Undetermined. Recommendation: We recommend that the Agency review and enhance procedures and controls for Medicaid utilization control to ensure that cases are closed timely and that documentation of the results of reviews are maintained and communicated. Views of responsible officials: Management agrees with the finding.
Reference Number: 2024-027 Prior Year Finding: No Federal Agency: U.S. Department of Agriculture U.S. Department of Health and Human Services State Agency: Department of Human Resources Agency of Human Services Federal Program: SNAP Cluster Temporary Assistance for Needy Families Child Support Services CCDF Cluster Medicaid Cluster Assistance Listing Number: 10.551, 10.561, 93.558, 93.563, 93.575, 93.596, 93.775, 93.777, 93.778 Award Number and Year: 4VT400406 (10/1/2022 – 9/30/2023) 4VT402513 (10/1/2023 – 9/30/2024) 2301VTTANF (10/1/2022 – 9/30/2023) 2401VTTANF (10/1/2023 – 9/30/2024) 2401VTSCSS (10/1/2023 – 9/30/2024) 2301VTCCDD (10/1/2022 – 9/30/2025) 2401VTCCDD (10/1/2023 – 9/30/2026) 2305VT5MAP (10/1/2022 – 9/30/2023) Compliance Requirement: Allowable Costs/Cost Principles – Time and Effort Reporting Type of Finding: Significant Deficiency in Internal Control Over Compliance Criteria or specific requirement: Compliance: Per 2 CFR section 200.403(c), to be allowable under Federal awards, except where otherwise authorized by statute, costs must be consistent with policies and procedures that apply uniformly to both federally financed and other activities of the recipient or subrecipient. Compensation for exempt attorneys in the State of Vermont are determined by the State of Vermont’s Attorney Pay Plan which governs the hiring level, compensation and promotion of exempt attorneys. Control: Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should comply with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: The hourly rate used to compensate an exempt attorney was higher than the maximum limit identified for the position in the State of Vermont’s Attorney Pay Plan. Context: The Department of Human Resources (Department) manages and updates the VTHR Human Resource information system which is the system used for managing employee data and processing payroll for all State employees. The Agency of Human Services (Agency) allocates payroll costs to federal programs using methodologies approved in its Cost Allocation Plan. After allocation, compensation for positions may be charged by the Agency to multiple federal programs. During cost allocation testing, auditors determined one employee’s rate of pay exceeded the limit identified for the position in the State of Vermont’s Attorney Pay Plan. The maximum hourly rate for the General Counsel I position is $59.61 or up to the Department Head’s Salary, whichever is lower. The employee selected for testing was compensated at the hourly rate of $62.06 which exceeds the maximum for the position. Cause: The Department of Human Resources used the department head’s salary as the maximum for the General Counsel I position in VTHR. It did not implement a control to ensure that the employee’s salary also did not exceed the maximum hourly rate identified for the position. Effect An employee was compensated at a rate higher than the maximum limit identified for the position in the State of Vermont’s Attorney Pay Plan. Internal controls did not detect or prevent the error. Questioned costs: Undetermined. Recommendation: We recommend that the Department review and enhance procedures and internal controls to ensure that VTHR uses rates of pay for attorneys that align with the maximum pay rates established by the Attorney Pay Plan. Views of responsible officials: Management agrees with the finding.
Reference Number: 2024-022 Prior Year Finding: No Federal Agency: U.S. Department of Health and Human Services State Agency: Agency of Human Services (Agency) Federal Program: Medicaid Cluster Assistance Listing Number: 93.775, 93.777, 93.778 Award Number and Year: 2305VT5MAP (10/1/2022 – 9/30/2023) Compliance Requirement: Eligibility Type of Finding: Significant Deficiency in Internal Control Over Compliance, Other Matters Criteria or specific requirement: Compliance: States verify the financial and nonfinancial factors of eligibility by checking electronic data sources in accordance with federal requirements at 42 CFR 435.948 through 435.956 and state requirements (as documented in the state plan, verification plan, and eligibility manual). Per 42 CFR §435.915(b) and the Vermont State Plan, eligibility for Medicaid is effective on the first day of a month if an individual was eligible at any time during that month. Control: Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should comply with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: The Agency of Human Services (Agency) incorrectly discontinued benefits for a Medicaid participant during the month in which eligibility was renewed. Context: For one of sixty participants selected for testing, the Agency performed a renewal of Medicaid benefits during the month of October and discontinued benefits for that month instead of backdating the claim to the beginning of the month. Cause: The Agency did not adequately follow procedures regarding eligibility renewals in accordance with federal program requirements and its state plan. Internal controls did not detect or prevent the error. Effect A participant’s benefits were improperly discontinued for one month. Questioned costs: None noted. Recommendation: We recommend that the Agency review and enhance procedures and controls for Medicaid eligibility renewals to ensure that benefits for eligible participants are not discontinued. Views of responsible officials: Management agrees with the finding.
Reference Number: 2024-023 Prior Year Finding: 2023-030 Federal Agency: U.S. Department of Health and Human Services State Agency: Agency of Human Services Federal Program: Medicaid Cluster Assistance Listing Number: 93.775, 93.777, 93.778 Award Number and Year: 2305VT5MAP (10/1/2022 – 9/30/2023) 2405VT5MAP (10/1/2023 – 9/30/2024) Compliance Requirement: Reporting – Federal Funding Accountability and Transparency Act (FFATA) Type of Finding: Significant Deficiency in Internal Control Over Compliance, Other Matters Criteria or specific requirement: Compliance: Per the Federal Funding Accountability and Transparency Act (FFATA), prime (direct) recipients of grants or cooperative agreements are required to report first-tier subawards of $30,000 or more to the Federal Funding Accountability and Transparency Act Subaward Reporting System (FSRS). Reports must be filed in FSRS by the end of the month following the month in which the prime recipient awards any sub-grant greater than or equal to $30,000. If the initial award is below $30,000 but subsequent grant modifications result in a total award equal to or over $30,000, the award will be subject to the reporting requirements as of the date the award exceeds $30,000. If the initial award equals or exceeds $30,000 but funding is subsequently de-obligated such that the total award amount falls below $30,000, the award continues to be subject to FFATA reporting requirements. The following key data elements must be reported: Subawardee Name and Data Universal Numbering System (DUNS) number; Amount of Subaward (inclusive of modifications); Subaward Obligation/Action Date; Date of Report Submission; Subaward Number; Project Description; and Names and Compensation of Highly Compensated Officers. (Names and Compensation of Highly Compensated Officers must only be reported when the entity in the preceding fiscal year received 80 percent or more of its annual gross revenues in Federal awards; and $30,000,000 or more in annual gross revenues from Federal awards; and the public does not have access to this information about the compensation of the senior executives of the entity through periodic reports filed under section 13(a) or 15(d) of the Securities Exchange Act of 1934 (15 U.S.C. §§ 78m(a), 78o(d)) or section 6104 of the Internal Revenue Code of 1986.) Control: Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should comply with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: A subaward was not reported to FSRS in accordance with FFATA requirements. Section III – Findings and Questioned Costs – Major Federal Programs (Continued) Context: The Agency of Human Services (Agency) Internal Audit Group (IAG) reports subaward information in FSRS for its various departments using subaward information provided by the departments. Thirty subawards totaling $6,709,156 were selected for testing, including twenty-eight initial subawards and two subaward amendments. We noted the following exception: • One of thirty subawards was not reported. The subaward was issued 9/26/2023 but it was not reported to FSRS. SEE SCHEDULE OF FINDINGS AND QUESTIONED COSTS FOR CHART/TABLE As part of a prior year Corrective Action Plan (CAP), the Agency implemented a process to report required subawards to FSRS timely. The exception noted occurred prior to the full implementation of the CAP. Cause: The individual departments did not provide the IAG with complete subaward information on a timely basis which caused errors and omissions in subaward reporting to FSRS. Effect: Subawards were not reported to FSRS in accordance with FFATA requirements. Questioned costs: None noted. Recommendation: We recommend that the Agency complete implementation of its prior year CAP to ensure that all required subawards and subaward modifications are reported timely to FSRS in accordance with FFATA requirements. Views of responsible officials: Management agrees with the finding.
Reference Number: 2024-024 Prior Year Finding: 2023-031 Federal Agency: U.S. Department of Health and Human Services State Agency: Agency of Human Services Federal Program: Medicaid Cluster Assistance Listing Number: 93.775, 93.777, 93.778 Award Number and Year: 2305VT5MAP (10/1/2022 – 9/30/2023) 2405VT5MAP (10/1/2023 – 9/30/2025) Compliance Requirement: Special Tests and Provisions - Provider Health and Safety Standards Type of Finding: Significant Deficiency in Internal Control Over Compliance, Other Matters Criteria or specific requirement: Compliance: Providers must meet the prescribed health and safety standards for hospital, nursing facilities, and ICF/IID (42 CFR part 442). The standards may be modified in the State Plan. The Medicaid Provider Enrollment Compendium (MPEC) requires that State Medicaid Agencies perform screening of providers based upon their risk level. Screening includes verifications of licenses and compliance with all federal and state regulations of the program. Control: Per 2 CFR section 200.303(a), the non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: The Agency of Human Services (Agency) did not maintain documentation to support a provider’s compliance with the prescribed health and safety standards. The provider health and safety requirements are administered by a 3rd-party that determines and documents providers’ eligibility with the Agency’s requirements in the provider management module (PMM). Context: For one of sixty providers selected for testing, documentation was incomplete to support that the provider was in good tax standing. The provider’s tax standing was verified by the Agency, but the letter was not signed by the Vermont Tax Department Commissioner and uploaded to the PMM as required. As part of a prior year Corrective Action Plan (CAP), a process was developed to require letters of good standing be uploaded to the provider file in the PMM but when this provider’s tax standing was verified, the CAP had not been fully implemented. Cause: The Agency’s 3rd-Party provider did not consistently maintain verification of tax standing documentation in the PMM. Although the Agency had begun implementation of its corrective action plan from a prior year audit, the plan has not been fully implemented. Effect: Failure to verify and document compliance with health and safety standards could allow ineligible providers to perform services under the Medicaid program. Questioned costs: Undetermined. Recommendation: We recommend the Agency fully implement its CAP to ensure that documentation is maintained in accordance with program requirements and that all providers are compliant with required health and safety standards. Views of responsible officials: Management agrees with the finding.
Reference Number: 2024-025 Prior Year Finding: No Federal Agency: U.S. Department of Health and Human Services State Agency: Agency of Human Services (Agency) Federal Program: Medicaid Cluster Assistance Listing Number: 93.775, 93.777, 93.778 Award Number and Year: 2305VT5MAP (10/1/2022 – 9/30/2023) 2405VT5MAP (10/1/2023 – 9/30/2024) Compliance Requirement: Special Tests and Provisions – Utilization Control Type of Finding: Significant Deficiency in Internal Control Over Compliance, Other Matters Criteria or specific requirement: Compliance: The state plan must provide methods and procedures to safeguard against unnecessary utilization of care and services (42 CFR Part 456). The State Medicaid Agency (SMA) must implement a statewide surveillance and utilization control program that (1) safeguards against unnecessary or inappropriate use of Medicaid services against excess payments, (2) assesses the quality of those services, and (3) provides for the control of the utilization of all services provided under the state plan per 42 CFR 456 Subparts B-I. The SMA must establish and use written criteria for evaluating the appropriateness and quality of Medicaid services. The agency must have procedures for the ongoing post-payment review, on a sample basis, of the need for, and the quality and timeliness of, Medicaid services. The SMA may conduct this review directly or may contract with an independent entity. Control: Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should comply with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: The Agency of Human Services (Agency) failed to properly document closure of a case referred to the Medicaid Fraud and Residential Abuse Unit (MFRAU) by the Special Investigations Unit (SIU). Context: For one of twenty-eight cases selected for testing, the SIU opened the case in FY2016, marked it as a high priority, and referred it to the MFRAU. The MFRAU closed the case in FY2018, however, the closure was not properly documented nor communicated. In FY2024 the case was classified by the SIU as administratively closed due to its age, but the results of the review and closure were not documented. Cause: The Agency did not adequately follow procedures regarding utilization control case review and closure in accordance with federal program requirements and its state plan. Internal controls did not detect or prevent the error. Effect Failure to properly document and promptly close cases could allow unnecessary utilization of care and services to continue undetected and result in unnecessary or inappropriate use of Medicaid services. Questioned costs: Undetermined. Recommendation: We recommend that the Agency review and enhance procedures and controls for Medicaid utilization control to ensure that cases are closed timely and that documentation of the results of reviews are maintained and communicated. Views of responsible officials: Management agrees with the finding.
Reference Number: 2024-027 Prior Year Finding: No Federal Agency: U.S. Department of Agriculture U.S. Department of Health and Human Services State Agency: Department of Human Resources Agency of Human Services Federal Program: SNAP Cluster Temporary Assistance for Needy Families Child Support Services CCDF Cluster Medicaid Cluster Assistance Listing Number: 10.551, 10.561, 93.558, 93.563, 93.575, 93.596, 93.775, 93.777, 93.778 Award Number and Year: 4VT400406 (10/1/2022 – 9/30/2023) 4VT402513 (10/1/2023 – 9/30/2024) 2301VTTANF (10/1/2022 – 9/30/2023) 2401VTTANF (10/1/2023 – 9/30/2024) 2401VTSCSS (10/1/2023 – 9/30/2024) 2301VTCCDD (10/1/2022 – 9/30/2025) 2401VTCCDD (10/1/2023 – 9/30/2026) 2305VT5MAP (10/1/2022 – 9/30/2023) Compliance Requirement: Allowable Costs/Cost Principles – Time and Effort Reporting Type of Finding: Significant Deficiency in Internal Control Over Compliance Criteria or specific requirement: Compliance: Per 2 CFR section 200.403(c), to be allowable under Federal awards, except where otherwise authorized by statute, costs must be consistent with policies and procedures that apply uniformly to both federally financed and other activities of the recipient or subrecipient. Compensation for exempt attorneys in the State of Vermont are determined by the State of Vermont’s Attorney Pay Plan which governs the hiring level, compensation and promotion of exempt attorneys. Control: Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should comply with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: The hourly rate used to compensate an exempt attorney was higher than the maximum limit identified for the position in the State of Vermont’s Attorney Pay Plan. Context: The Department of Human Resources (Department) manages and updates the VTHR Human Resource information system which is the system used for managing employee data and processing payroll for all State employees. The Agency of Human Services (Agency) allocates payroll costs to federal programs using methodologies approved in its Cost Allocation Plan. After allocation, compensation for positions may be charged by the Agency to multiple federal programs. During cost allocation testing, auditors determined one employee’s rate of pay exceeded the limit identified for the position in the State of Vermont’s Attorney Pay Plan. The maximum hourly rate for the General Counsel I position is $59.61 or up to the Department Head’s Salary, whichever is lower. The employee selected for testing was compensated at the hourly rate of $62.06 which exceeds the maximum for the position. Cause: The Department of Human Resources used the department head’s salary as the maximum for the General Counsel I position in VTHR. It did not implement a control to ensure that the employee’s salary also did not exceed the maximum hourly rate identified for the position. Effect An employee was compensated at a rate higher than the maximum limit identified for the position in the State of Vermont’s Attorney Pay Plan. Internal controls did not detect or prevent the error. Questioned costs: Undetermined. Recommendation: We recommend that the Department review and enhance procedures and internal controls to ensure that VTHR uses rates of pay for attorneys that align with the maximum pay rates established by the Attorney Pay Plan. Views of responsible officials: Management agrees with the finding.
Reference Number: 2024-022 Prior Year Finding: No Federal Agency: U.S. Department of Health and Human Services State Agency: Agency of Human Services (Agency) Federal Program: Medicaid Cluster Assistance Listing Number: 93.775, 93.777, 93.778 Award Number and Year: 2305VT5MAP (10/1/2022 – 9/30/2023) Compliance Requirement: Eligibility Type of Finding: Significant Deficiency in Internal Control Over Compliance, Other Matters Criteria or specific requirement: Compliance: States verify the financial and nonfinancial factors of eligibility by checking electronic data sources in accordance with federal requirements at 42 CFR 435.948 through 435.956 and state requirements (as documented in the state plan, verification plan, and eligibility manual). Per 42 CFR §435.915(b) and the Vermont State Plan, eligibility for Medicaid is effective on the first day of a month if an individual was eligible at any time during that month. Control: Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should comply with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: The Agency of Human Services (Agency) incorrectly discontinued benefits for a Medicaid participant during the month in which eligibility was renewed. Context: For one of sixty participants selected for testing, the Agency performed a renewal of Medicaid benefits during the month of October and discontinued benefits for that month instead of backdating the claim to the beginning of the month. Cause: The Agency did not adequately follow procedures regarding eligibility renewals in accordance with federal program requirements and its state plan. Internal controls did not detect or prevent the error. Effect A participant’s benefits were improperly discontinued for one month. Questioned costs: None noted. Recommendation: We recommend that the Agency review and enhance procedures and controls for Medicaid eligibility renewals to ensure that benefits for eligible participants are not discontinued. Views of responsible officials: Management agrees with the finding.
Reference Number: 2024-023 Prior Year Finding: 2023-030 Federal Agency: U.S. Department of Health and Human Services State Agency: Agency of Human Services Federal Program: Medicaid Cluster Assistance Listing Number: 93.775, 93.777, 93.778 Award Number and Year: 2305VT5MAP (10/1/2022 – 9/30/2023) 2405VT5MAP (10/1/2023 – 9/30/2024) Compliance Requirement: Reporting – Federal Funding Accountability and Transparency Act (FFATA) Type of Finding: Significant Deficiency in Internal Control Over Compliance, Other Matters Criteria or specific requirement: Compliance: Per the Federal Funding Accountability and Transparency Act (FFATA), prime (direct) recipients of grants or cooperative agreements are required to report first-tier subawards of $30,000 or more to the Federal Funding Accountability and Transparency Act Subaward Reporting System (FSRS). Reports must be filed in FSRS by the end of the month following the month in which the prime recipient awards any sub-grant greater than or equal to $30,000. If the initial award is below $30,000 but subsequent grant modifications result in a total award equal to or over $30,000, the award will be subject to the reporting requirements as of the date the award exceeds $30,000. If the initial award equals or exceeds $30,000 but funding is subsequently de-obligated such that the total award amount falls below $30,000, the award continues to be subject to FFATA reporting requirements. The following key data elements must be reported: Subawardee Name and Data Universal Numbering System (DUNS) number; Amount of Subaward (inclusive of modifications); Subaward Obligation/Action Date; Date of Report Submission; Subaward Number; Project Description; and Names and Compensation of Highly Compensated Officers. (Names and Compensation of Highly Compensated Officers must only be reported when the entity in the preceding fiscal year received 80 percent or more of its annual gross revenues in Federal awards; and $30,000,000 or more in annual gross revenues from Federal awards; and the public does not have access to this information about the compensation of the senior executives of the entity through periodic reports filed under section 13(a) or 15(d) of the Securities Exchange Act of 1934 (15 U.S.C. §§ 78m(a), 78o(d)) or section 6104 of the Internal Revenue Code of 1986.) Control: Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should comply with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: A subaward was not reported to FSRS in accordance with FFATA requirements. Section III – Findings and Questioned Costs – Major Federal Programs (Continued) Context: The Agency of Human Services (Agency) Internal Audit Group (IAG) reports subaward information in FSRS for its various departments using subaward information provided by the departments. Thirty subawards totaling $6,709,156 were selected for testing, including twenty-eight initial subawards and two subaward amendments. We noted the following exception: • One of thirty subawards was not reported. The subaward was issued 9/26/2023 but it was not reported to FSRS. SEE SCHEDULE OF FINDINGS AND QUESTIONED COSTS FOR CHART/TABLE As part of a prior year Corrective Action Plan (CAP), the Agency implemented a process to report required subawards to FSRS timely. The exception noted occurred prior to the full implementation of the CAP. Cause: The individual departments did not provide the IAG with complete subaward information on a timely basis which caused errors and omissions in subaward reporting to FSRS. Effect: Subawards were not reported to FSRS in accordance with FFATA requirements. Questioned costs: None noted. Recommendation: We recommend that the Agency complete implementation of its prior year CAP to ensure that all required subawards and subaward modifications are reported timely to FSRS in accordance with FFATA requirements. Views of responsible officials: Management agrees with the finding.
Reference Number: 2024-024 Prior Year Finding: 2023-031 Federal Agency: U.S. Department of Health and Human Services State Agency: Agency of Human Services Federal Program: Medicaid Cluster Assistance Listing Number: 93.775, 93.777, 93.778 Award Number and Year: 2305VT5MAP (10/1/2022 – 9/30/2023) 2405VT5MAP (10/1/2023 – 9/30/2025) Compliance Requirement: Special Tests and Provisions - Provider Health and Safety Standards Type of Finding: Significant Deficiency in Internal Control Over Compliance, Other Matters Criteria or specific requirement: Compliance: Providers must meet the prescribed health and safety standards for hospital, nursing facilities, and ICF/IID (42 CFR part 442). The standards may be modified in the State Plan. The Medicaid Provider Enrollment Compendium (MPEC) requires that State Medicaid Agencies perform screening of providers based upon their risk level. Screening includes verifications of licenses and compliance with all federal and state regulations of the program. Control: Per 2 CFR section 200.303(a), the non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: The Agency of Human Services (Agency) did not maintain documentation to support a provider’s compliance with the prescribed health and safety standards. The provider health and safety requirements are administered by a 3rd-party that determines and documents providers’ eligibility with the Agency’s requirements in the provider management module (PMM). Context: For one of sixty providers selected for testing, documentation was incomplete to support that the provider was in good tax standing. The provider’s tax standing was verified by the Agency, but the letter was not signed by the Vermont Tax Department Commissioner and uploaded to the PMM as required. As part of a prior year Corrective Action Plan (CAP), a process was developed to require letters of good standing be uploaded to the provider file in the PMM but when this provider’s tax standing was verified, the CAP had not been fully implemented. Cause: The Agency’s 3rd-Party provider did not consistently maintain verification of tax standing documentation in the PMM. Although the Agency had begun implementation of its corrective action plan from a prior year audit, the plan has not been fully implemented. Effect: Failure to verify and document compliance with health and safety standards could allow ineligible providers to perform services under the Medicaid program. Questioned costs: Undetermined. Recommendation: We recommend the Agency fully implement its CAP to ensure that documentation is maintained in accordance with program requirements and that all providers are compliant with required health and safety standards. Views of responsible officials: Management agrees with the finding.
Reference Number: 2024-025 Prior Year Finding: No Federal Agency: U.S. Department of Health and Human Services State Agency: Agency of Human Services (Agency) Federal Program: Medicaid Cluster Assistance Listing Number: 93.775, 93.777, 93.778 Award Number and Year: 2305VT5MAP (10/1/2022 – 9/30/2023) 2405VT5MAP (10/1/2023 – 9/30/2024) Compliance Requirement: Special Tests and Provisions – Utilization Control Type of Finding: Significant Deficiency in Internal Control Over Compliance, Other Matters Criteria or specific requirement: Compliance: The state plan must provide methods and procedures to safeguard against unnecessary utilization of care and services (42 CFR Part 456). The State Medicaid Agency (SMA) must implement a statewide surveillance and utilization control program that (1) safeguards against unnecessary or inappropriate use of Medicaid services against excess payments, (2) assesses the quality of those services, and (3) provides for the control of the utilization of all services provided under the state plan per 42 CFR 456 Subparts B-I. The SMA must establish and use written criteria for evaluating the appropriateness and quality of Medicaid services. The agency must have procedures for the ongoing post-payment review, on a sample basis, of the need for, and the quality and timeliness of, Medicaid services. The SMA may conduct this review directly or may contract with an independent entity. Control: Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should comply with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: The Agency of Human Services (Agency) failed to properly document closure of a case referred to the Medicaid Fraud and Residential Abuse Unit (MFRAU) by the Special Investigations Unit (SIU). Context: For one of twenty-eight cases selected for testing, the SIU opened the case in FY2016, marked it as a high priority, and referred it to the MFRAU. The MFRAU closed the case in FY2018, however, the closure was not properly documented nor communicated. In FY2024 the case was classified by the SIU as administratively closed due to its age, but the results of the review and closure were not documented. Cause: The Agency did not adequately follow procedures regarding utilization control case review and closure in accordance with federal program requirements and its state plan. Internal controls did not detect or prevent the error. Effect Failure to properly document and promptly close cases could allow unnecessary utilization of care and services to continue undetected and result in unnecessary or inappropriate use of Medicaid services. Questioned costs: Undetermined. Recommendation: We recommend that the Agency review and enhance procedures and controls for Medicaid utilization control to ensure that cases are closed timely and that documentation of the results of reviews are maintained and communicated. Views of responsible officials: Management agrees with the finding.
Reference Number: 2024-028 Prior Year Finding: 2023-034 Federal Agency: U.S. Department of Homeland Security State Agency: Department of Public Safety Federal Program: Disaster Grants - Public Assistance (Presidentially Declared Disasters) Assistance Listing Number: 97.036 Award Number and Year: FEMA-4474-DR-VT (2020), FEMA-4532-DR-VT (2020), FEMA-4621-DR-VT (2021), FEMA-4695-DR-VT (2023), FEMA-4720-DR-VT (2023) Compliance Requirement: Reporting – Federal Funding Accountability and Transparency Act (FFATA) Type of Finding: Significant Deficiency in Internal Control Over Compliance, Other Matters Criteria or specific requirement: Compliance: Per the Federal Funding Accountability and Transparency Act (FFATA), prime (direct) recipients of grants or cooperative agreements are required to report first-tier subawards of $30,000 or more to the Federal Funding Accountability and Transparency Act Subaward Reporting System (FSRS). Reports must be filed in FSRS by the end of the month following the month in which the prime recipient awards any sub-grant greater than or equal to $30,000. If the initial award is below $30,000 but subsequent grant modifications result in a total award equal to or over $30,000, the award will be subject to the reporting requirements as of the date the award exceeds $30,000. If the initial award equals or exceeds $30,000 but funding is subsequently de-obligated such that the total award amount falls below $30,000, the award continues to be subject to FFATA reporting requirements. The following key data elements must be reported: Subawardee Name and Data Universal Numbering System (DUNS) number; Amount of Subaward (inclusive of modifications); Subaward Obligation/Action Date; Date of Report Submission; Subaward Number; Project Description; and Names and Compensation of Highly Compensated Officers. (Names and Compensation of Highly Compensated Officers must only be reported when the entity in the preceding fiscal year received 80 percent or more of its annual gross revenues in Federal awards; and $25,000,000 or more in annual gross revenues from Federal awards; and the public does not have access to this information about the compensation of the senior executives of the entity through periodic reports filed under section 13(a) or 15(d) of the Securities Exchange Act of 1934 (15 U.S.C. §§ 78m(a), 78o(d)) or section 6104 of the Internal Revenue Code of 1986.) Control: Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should comply with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: The Department of Public Safety (Department) was not in compliance with FSRS reporting requirements. Subawards and subaward modifications were not reported timely or accurately to FSRS. Section III – Findings and Questioned Costs – Major Federal Programs (Continued) Context: This is a repeat finding from the prior year and auditors note that progress has been made, though the corrective action plan from the prior year has not been fully implemented. Ninety-six subawards were selected for testing, including thirty-two which were issued in a prior year and sixty-four which were issued during FY2024. The following exceptions were noted: • 24 of 96 subawards were not reported to FSRS, totaling $17,306,440. o Of the exceptions noted, FY2024 subawards not reported were 13 of 64 and totaling $7,627,387 of $17,741,626. • 5 of 96 subawards were not reported timely to FSRS, totaling $10,937,684. o Of the exceptions noted, FY2024 subawards reported late were 4 of 64 and totaling $9,609,432 of $17,741,626. SEE SCHEDULE OF FINDINGS AND QUESTIONED COSTS FOR CHART/TABLE Cause: The Department’s procedures were not sufficient to ensure that subawards were reported timely or accurately to FSRS. Internal controls did not prevent or detect the errors. The corrective action plan from the prior year has not been fully implemented. Effect: The Department’s subaward reporting to FSRS was incomplete and inaccurate. Questioned costs: None noted. Recommendation: We recommend the Department complete implementation of its corrective action plan from the prior year. The Department should continue to improve its procedures and internal controls to ensure that all required subawards and subaward modifications are reported accurately and timely to FSRS no later than the end of the month following the month of issuance in accordance with FFATA reporting requirements. Views of responsible officials: Management agrees with the finding.
FINDING 2024-003 Subject: Child Nutrition Cluster - Allowable Costs/Cost Principles Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Number and Year (or Other Identifying Number): FY23 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Allowable Costs/Cost Principles Audit Findings: Material Weakness, Other Matters Repeat Finding This is a repeat finding from the immediately prior audit report. The prior audit finding number was 2022-003. Condition and Context An effective internal control system was not in place at the School Corporation to ensure compliance with requirements related to the grant agreement and the Allowable Costs/Cost Principles compliance requirement; however, it was not effective. The School Corporation was approved for an indirect cost rate for fiscal year 2021-2022 in order to allocate indirect costs to the School Corporation's Cafeteria fund. However, the School Corporation did not charge these indirect costs within the appropriate time frame. Indirect costs for 2021-2022 in the amount of $26,793 was not charged to the Cafeteria fund until September 2022. Per USDA guidance, it is unallowable to bill the National School Food Service Account (NSFSA) for indirect costs that were paid from the general fund in prior years unless an agreement exists to show that the district had been "loaning" the NSFSA funds to cover the indirect costs in one or more prior years. The School Corporation did not have an interfund loan agreement in place. Therefore, the amounts were considered questioned costs. The lack of effective internal controls and noncompliance were isolated to the indirect costs noted above. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." USDA Indirect Costs, Guidance for State Agencies & School Food Authorities states in part: ". . . It is unallowable to bill the NSFSA for indirect costs that were paid from the general fund in prior years unless an agreement exists to sow that the district had been 'loaning' the NSFSA funds to cover the indirect costs in one or more prior years. . . . There is no Federal requirement that prohibits an SFA from charging its internal fiscal policy regarding the recovery of indirect costs by those organizational units within the SFA that actually incur costs. Absent a documented 'inter-fund loan' as outlined above, however, an SFA may only change its policy to charge the NSFSA for indirect costs prospectively (that is going forward for the next school year.) It is unallowable to bill the NSFSA for indirect costs that were previously paid from the general fund unless an agreement exists to show that the district had been 'loaning' the NSFSA funds to cover the indirect costs in one or more prior years. . . ." 2 CFR 200.403 states in part: "Except where otherwise authorized by statute, costs must meet the following general criteria in order to be allowable under Federal awards: (a) Be necessary and reasonable for the performance of the Federal award and be allocable thereto under these principles. (b) Conform to any limitations or exclusions set forth in these principles or in the Federal award as to types or amount of cost items. . . . (g) Be adequately documented. . . ." Cause Management was not aware of the requirements before the transfer was made in September 2022. Effect The failure to establish an effective system of internal controls enabled noncompliance to go undetected and resulted in the School Corporation charging indirect costs that were not allowable. Questioned Costs Known questioned costs of $26,793 were identified as noted in the Condition and Context. Recommendation Management of the School Corporation should develop written policies and procedures to ensure that indirect costs are properly determined and paid in the appropriate fiscal year. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.
FINDING 2024-004 Subject: Child Nutrition Cluster - Procurement and Suspension and Debarment Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY23, FY24 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Procurement and Suspension and Debarment Audit Findings: Material Weakness, Other Matters Repeat Finding This is a repeat finding for suspension and debarment from the immediately prior report. The prior audit finding number was 2022-005. Condition and Context An effective internal control system was not in place at the School Corporation to ensure compliance with requirements related to the grant agreement and the Procurement and Suspension and Debarment compliance requirement. The School Corporation did not verify that one restaurant supplies vendor with a contract over $25,000 for both fiscal years 2022-2023 and 2023-2024 was not excluded or disqualified from participation in federal award programs. The lack of internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 180.300 states: "When you enter into a covered transaction with another person at the next lower tier, you must verify that the person with whom you intend to do business is not excluded or disqualified. You do this by: (a) Checking the SAM Exclusions; or (b) Collecting a certification from that person; or (c) Adding a clause or condition to the covered transaction with that person." Cause Management of the School Corporation was unaware that all vendors who received more than $25,000 during the school year had to be verified. Effect The failure to establish an effective system of internal controls enabled noncompliance to go undetected. As a result, the School Corporation did not verify all necessary vendors were not suspended or debarred. Without following the required methods for suspension and debarment, the Cooperative could be paying vendors who are precluded from receiving federal funds. Questioned Costs There were no questioned costs identified. Recommendation Management of the School Corporation should develop written policies and procedures to ensure vendors are not suspended or debarred. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.
FINDING 2024-004 Subject: Child Nutrition Cluster - Procurement and Suspension and Debarment Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY23, FY24 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Procurement and Suspension and Debarment Audit Findings: Material Weakness, Other Matters Repeat Finding This is a repeat finding for suspension and debarment from the immediately prior report. The prior audit finding number was 2022-005. Condition and Context An effective internal control system was not in place at the School Corporation to ensure compliance with requirements related to the grant agreement and the Procurement and Suspension and Debarment compliance requirement. The School Corporation did not verify that one restaurant supplies vendor with a contract over $25,000 for both fiscal years 2022-2023 and 2023-2024 was not excluded or disqualified from participation in federal award programs. The lack of internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 180.300 states: "When you enter into a covered transaction with another person at the next lower tier, you must verify that the person with whom you intend to do business is not excluded or disqualified. You do this by: (a) Checking the SAM Exclusions; or (b) Collecting a certification from that person; or (c) Adding a clause or condition to the covered transaction with that person." Cause Management of the School Corporation was unaware that all vendors who received more than $25,000 during the school year had to be verified. Effect The failure to establish an effective system of internal controls enabled noncompliance to go undetected. As a result, the School Corporation did not verify all necessary vendors were not suspended or debarred. Without following the required methods for suspension and debarment, the Cooperative could be paying vendors who are precluded from receiving federal funds. Questioned Costs There were no questioned costs identified. Recommendation Management of the School Corporation should develop written policies and procedures to ensure vendors are not suspended or debarred. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.
FINDING 2024-003 Subject: Child Nutrition Cluster - Allowable Costs/Cost Principles Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Number and Year (or Other Identifying Number): FY23 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Allowable Costs/Cost Principles Audit Findings: Material Weakness, Other Matters Repeat Finding This is a repeat finding from the immediately prior audit report. The prior audit finding number was 2022-003. Condition and Context An effective internal control system was not in place at the School Corporation to ensure compliance with requirements related to the grant agreement and the Allowable Costs/Cost Principles compliance requirement; however, it was not effective. The School Corporation was approved for an indirect cost rate for fiscal year 2021-2022 in order to allocate indirect costs to the School Corporation's Cafeteria fund. However, the School Corporation did not charge these indirect costs within the appropriate time frame. Indirect costs for 2021-2022 in the amount of $26,793 was not charged to the Cafeteria fund until September 2022. Per USDA guidance, it is unallowable to bill the National School Food Service Account (NSFSA) for indirect costs that were paid from the general fund in prior years unless an agreement exists to show that the district had been "loaning" the NSFSA funds to cover the indirect costs in one or more prior years. The School Corporation did not have an interfund loan agreement in place. Therefore, the amounts were considered questioned costs. The lack of effective internal controls and noncompliance were isolated to the indirect costs noted above. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." USDA Indirect Costs, Guidance for State Agencies & School Food Authorities states in part: ". . . It is unallowable to bill the NSFSA for indirect costs that were paid from the general fund in prior years unless an agreement exists to sow that the district had been 'loaning' the NSFSA funds to cover the indirect costs in one or more prior years. . . . There is no Federal requirement that prohibits an SFA from charging its internal fiscal policy regarding the recovery of indirect costs by those organizational units within the SFA that actually incur costs. Absent a documented 'inter-fund loan' as outlined above, however, an SFA may only change its policy to charge the NSFSA for indirect costs prospectively (that is going forward for the next school year.) It is unallowable to bill the NSFSA for indirect costs that were previously paid from the general fund unless an agreement exists to show that the district had been 'loaning' the NSFSA funds to cover the indirect costs in one or more prior years. . . ." 2 CFR 200.403 states in part: "Except where otherwise authorized by statute, costs must meet the following general criteria in order to be allowable under Federal awards: (a) Be necessary and reasonable for the performance of the Federal award and be allocable thereto under these principles. (b) Conform to any limitations or exclusions set forth in these principles or in the Federal award as to types or amount of cost items. . . . (g) Be adequately documented. . . ." Cause Management was not aware of the requirements before the transfer was made in September 2022. Effect The failure to establish an effective system of internal controls enabled noncompliance to go undetected and resulted in the School Corporation charging indirect costs that were not allowable. Questioned Costs Known questioned costs of $26,793 were identified as noted in the Condition and Context. Recommendation Management of the School Corporation should develop written policies and procedures to ensure that indirect costs are properly determined and paid in the appropriate fiscal year. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.
FINDING 2024-004 Subject: Child Nutrition Cluster - Procurement and Suspension and Debarment Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY23, FY24 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Procurement and Suspension and Debarment Audit Findings: Material Weakness, Other Matters Repeat Finding This is a repeat finding for suspension and debarment from the immediately prior report. The prior audit finding number was 2022-005. Condition and Context An effective internal control system was not in place at the School Corporation to ensure compliance with requirements related to the grant agreement and the Procurement and Suspension and Debarment compliance requirement. The School Corporation did not verify that one restaurant supplies vendor with a contract over $25,000 for both fiscal years 2022-2023 and 2023-2024 was not excluded or disqualified from participation in federal award programs. The lack of internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 180.300 states: "When you enter into a covered transaction with another person at the next lower tier, you must verify that the person with whom you intend to do business is not excluded or disqualified. You do this by: (a) Checking the SAM Exclusions; or (b) Collecting a certification from that person; or (c) Adding a clause or condition to the covered transaction with that person." Cause Management of the School Corporation was unaware that all vendors who received more than $25,000 during the school year had to be verified. Effect The failure to establish an effective system of internal controls enabled noncompliance to go undetected. As a result, the School Corporation did not verify all necessary vendors were not suspended or debarred. Without following the required methods for suspension and debarment, the Cooperative could be paying vendors who are precluded from receiving federal funds. Questioned Costs There were no questioned costs identified. Recommendation Management of the School Corporation should develop written policies and procedures to ensure vendors are not suspended or debarred. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.
FINDING 2024-004 Subject: Child Nutrition Cluster - Procurement and Suspension and Debarment Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY23, FY24 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Procurement and Suspension and Debarment Audit Findings: Material Weakness, Other Matters Repeat Finding This is a repeat finding for suspension and debarment from the immediately prior report. The prior audit finding number was 2022-005. Condition and Context An effective internal control system was not in place at the School Corporation to ensure compliance with requirements related to the grant agreement and the Procurement and Suspension and Debarment compliance requirement. The School Corporation did not verify that one restaurant supplies vendor with a contract over $25,000 for both fiscal years 2022-2023 and 2023-2024 was not excluded or disqualified from participation in federal award programs. The lack of internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 180.300 states: "When you enter into a covered transaction with another person at the next lower tier, you must verify that the person with whom you intend to do business is not excluded or disqualified. You do this by: (a) Checking the SAM Exclusions; or (b) Collecting a certification from that person; or (c) Adding a clause or condition to the covered transaction with that person." Cause Management of the School Corporation was unaware that all vendors who received more than $25,000 during the school year had to be verified. Effect The failure to establish an effective system of internal controls enabled noncompliance to go undetected. As a result, the School Corporation did not verify all necessary vendors were not suspended or debarred. Without following the required methods for suspension and debarment, the Cooperative could be paying vendors who are precluded from receiving federal funds. Questioned Costs There were no questioned costs identified. Recommendation Management of the School Corporation should develop written policies and procedures to ensure vendors are not suspended or debarred. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.
FINDING 2024-003 Subject: Child Nutrition Cluster - Allowable Costs/Cost Principles Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program for Children Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Number and Year (or Other Identifying Number): FY23 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Allowable Costs/Cost Principles Audit Findings: Material Weakness, Other Matters Repeat Finding This is a repeat finding from the immediately prior audit report. The prior audit finding number was 2022-003. Condition and Context An effective internal control system was not in place at the School Corporation to ensure compliance with requirements related to the grant agreement and the Allowable Costs/Cost Principles compliance requirement; however, it was not effective. The School Corporation was approved for an indirect cost rate for fiscal year 2021-2022 in order to allocate indirect costs to the School Corporation's Cafeteria fund. However, the School Corporation did not charge these indirect costs within the appropriate time frame. Indirect costs for 2021-2022 in the amount of $26,793 was not charged to the Cafeteria fund until September 2022. Per USDA guidance, it is unallowable to bill the National School Food Service Account (NSFSA) for indirect costs that were paid from the general fund in prior years unless an agreement exists to show that the district had been "loaning" the NSFSA funds to cover the indirect costs in one or more prior years. The School Corporation did not have an interfund loan agreement in place. Therefore, the amounts were considered questioned costs. The lack of effective internal controls and noncompliance were isolated to the indirect costs noted above. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." USDA Indirect Costs, Guidance for State Agencies & School Food Authorities states in part: ". . . It is unallowable to bill the NSFSA for indirect costs that were paid from the general fund in prior years unless an agreement exists to sow that the district had been 'loaning' the NSFSA funds to cover the indirect costs in one or more prior years. . . . There is no Federal requirement that prohibits an SFA from charging its internal fiscal policy regarding the recovery of indirect costs by those organizational units within the SFA that actually incur costs. Absent a documented 'inter-fund loan' as outlined above, however, an SFA may only change its policy to charge the NSFSA for indirect costs prospectively (that is going forward for the next school year.) It is unallowable to bill the NSFSA for indirect costs that were previously paid from the general fund unless an agreement exists to show that the district had been 'loaning' the NSFSA funds to cover the indirect costs in one or more prior years. . . ." 2 CFR 200.403 states in part: "Except where otherwise authorized by statute, costs must meet the following general criteria in order to be allowable under Federal awards: (a) Be necessary and reasonable for the performance of the Federal award and be allocable thereto under these principles. (b) Conform to any limitations or exclusions set forth in these principles or in the Federal award as to types or amount of cost items. . . . (g) Be adequately documented. . . ." Cause Management was not aware of the requirements before the transfer was made in September 2022. Effect The failure to establish an effective system of internal controls enabled noncompliance to go undetected and resulted in the School Corporation charging indirect costs that were not allowable. Questioned Costs Known questioned costs of $26,793 were identified as noted in the Condition and Context. Recommendation Management of the School Corporation should develop written policies and procedures to ensure that indirect costs are properly determined and paid in the appropriate fiscal year. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.
FINDING 2024-004 Subject: Child Nutrition Cluster - Procurement and Suspension and Debarment Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY23, FY24 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Procurement and Suspension and Debarment Audit Findings: Material Weakness, Other Matters Repeat Finding This is a repeat finding for suspension and debarment from the immediately prior report. The prior audit finding number was 2022-005. Condition and Context An effective internal control system was not in place at the School Corporation to ensure compliance with requirements related to the grant agreement and the Procurement and Suspension and Debarment compliance requirement. The School Corporation did not verify that one restaurant supplies vendor with a contract over $25,000 for both fiscal years 2022-2023 and 2023-2024 was not excluded or disqualified from participation in federal award programs. The lack of internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 180.300 states: "When you enter into a covered transaction with another person at the next lower tier, you must verify that the person with whom you intend to do business is not excluded or disqualified. You do this by: (a) Checking the SAM Exclusions; or (b) Collecting a certification from that person; or (c) Adding a clause or condition to the covered transaction with that person." Cause Management of the School Corporation was unaware that all vendors who received more than $25,000 during the school year had to be verified. Effect The failure to establish an effective system of internal controls enabled noncompliance to go undetected. As a result, the School Corporation did not verify all necessary vendors were not suspended or debarred. Without following the required methods for suspension and debarment, the Cooperative could be paying vendors who are precluded from receiving federal funds. Questioned Costs There were no questioned costs identified. Recommendation Management of the School Corporation should develop written policies and procedures to ensure vendors are not suspended or debarred. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.
FINDING 2024-004 Subject: Child Nutrition Cluster - Procurement and Suspension and Debarment Federal Agency: Department of Agriculture Federal Programs: School Breakfast Program, National School Lunch Program, Summer Food Service Program Assistance Listings Numbers: 10.553, 10.555, 10.559 Federal Award Numbers and Years (or Other Identifying Numbers): FY23, FY24 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Procurement and Suspension and Debarment Audit Findings: Material Weakness, Other Matters Repeat Finding This is a repeat finding for suspension and debarment from the immediately prior report. The prior audit finding number was 2022-005. Condition and Context An effective internal control system was not in place at the School Corporation to ensure compliance with requirements related to the grant agreement and the Procurement and Suspension and Debarment compliance requirement. The School Corporation did not verify that one restaurant supplies vendor with a contract over $25,000 for both fiscal years 2022-2023 and 2023-2024 was not excluded or disqualified from participation in federal award programs. The lack of internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 180.300 states: "When you enter into a covered transaction with another person at the next lower tier, you must verify that the person with whom you intend to do business is not excluded or disqualified. You do this by: (a) Checking the SAM Exclusions; or (b) Collecting a certification from that person; or (c) Adding a clause or condition to the covered transaction with that person." Cause Management of the School Corporation was unaware that all vendors who received more than $25,000 during the school year had to be verified. Effect The failure to establish an effective system of internal controls enabled noncompliance to go undetected. As a result, the School Corporation did not verify all necessary vendors were not suspended or debarred. Without following the required methods for suspension and debarment, the Cooperative could be paying vendors who are precluded from receiving federal funds. Questioned Costs There were no questioned costs identified. Recommendation Management of the School Corporation should develop written policies and procedures to ensure vendors are not suspended or debarred. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.
FINDING 2024-005 Subject: COVID-19 - Education Stabilization Fund - Allowable Costs/Cost Principles and Activities Allowed or Unallowed Federal Agency: Indiana Department of Education Federal Program: COVID-19 - Education Stabilization Fund Assistance Listings Numbers: 84.425D, 84.425U Federal Award Numbers and Years (or Other Identifying Numbers): S425D210013, S425U210013 Pass-Through Entity: Indiana Department of Education Compliance Requirements: Allowable Costs/Cost Principles, Activities Allowed or Unallowed Audit Findings: Material Weakness, Modified Opinion Condition and Context The COVID-19 - Education Stabilization Fund (ESF), established by the Coronavirus Aid, Relief, and Economic Security (CARES) Act and further funded by the Coronavirus Response and Relief Supplemental Appropriations Act (CRSSA) and the American Rescue Plan (ARP) Act, was for the purpose of preventing, preparing for, or responding to the novel coronavirus. A sample of 40 vendor and payroll disbursements that were charged to the ESF grant for which reimbursement was received during the audit period was selected for testing to verify the expenditures were in conformance with the applicable allowable cost principles. Of the 40 disbursements tested, 4 payroll disbursements for accelerated learning were approved, but the School Corporation could not provide documentation to show where the governing board approved their rate of pay. In addition, there was a transfer from the ESSER II - Cares grant fund to the Education fund for $117,177 to reimburse that fund for expenses on June 20, 2024. The School Corporation was unable to provide documentation for the expenses that were reimbursed to ensure they were for allowable activities and allowable costs. The ineffective internal controls were a systemic issue throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.334 states in part: "Financial records, supporting documents, statistical records, and all other non-Federal entity records pertinent to a Federal award must be retained for a period of three years from the date of submission of the final expenditure report or, for Federal awards that are renewed quarterly or annually, from the date of the submission of the quarterly or annual financial report, respectively, as reported to the Federal awarding agency or pass-through entity in the case of a subrecipient. . . ." 2 CFR 200.403 states in part: "Except where otherwise authorized by statute, costs must meet the following general criteria in order to be allowable under Federal awards: (a) Be necessary and reasonable for the performance of the Federal award and be allocable thereto under these principles. (b) Conform to any limitations or exclusions set forth in these principles or in the Federal award as to types or amount of cost items. . . . (g) Be adequately documented. . . ." Cause Management had not developed a system of internal controls that would have ensured compliance with the Allowable Costs/Cost Principles and the Activities Allowed or Unallowed compliance requirements. Management was not aware that they should have only been reimbursed for expenditures made out of the ESF funds or should have moved the expenditures and retained proper documentation to support what expenditures tied to what was reimbursed. It was noted that the accelerated learning rate of pay was discussed at a School Board meeting, but the approved wage rates were not documented in the School Board minutes or on any sort of salary schedule approved by the School Board members. Effect The failure to design and implement an effective internal control system enabled noncompliance to go undetected. Noncompliance with the grant agreement and the Allowable Cost/Cost Principles and the Activities Allowed or Unallowed compliance requirements could result in the loss of future federal funds to the School Corporation. Questioned Costs There was a total of $173,841 of questioned costs as referenced under the Condition and Context. Recommendation We recommended that the School Corporation's management establish a system of internal controls to ensure only allowable activities and allowable costs are charged to grants funds and to ensure grant money is only requested for reimbursement for monies directly related to the grant program. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.
FINDING 2024-006 Subject: COVID-19 - Education Stabilization Fund - Reporting Federal Agency: Indiana Department of Education Federal Program: COVID-19 - Education Stabilization Fund Assistance Listings Numbers: 84.425D, 84.425U Federal Award Numbers and Years (or Other Identifying Numbers): S425D210013, S425U210013 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Reporting Audit Findings: Material Weakness, Modified Opinion Repeat Finding This is a repeat finding from the immediately prior audit report. The prior audit finding number was 2022-010. Condition and Context An effective internal control system was not designed or implemented at the School Corporation to ensure compliance with requirements related to the grant agreement and the Reporting compliance requirement. Even though the reports were reviewed by someone other than the preparer, the School Corporation was not able to provide financial information that was used to determine amounts used in the reports. The School Corporation completed and submitted four annual Data Collection reports (Reports) for the Elementary and Secondary School Emergency Relief (ESSER) grants. For all four of the Reports, the School Corporation was unable to provide financial information to support the amounts in the Reports; therefore, the Indiana State Board of Accounts could not determine the accuracy of the Reports. Additionally, eight of eight key line items selected for testing could not be verified to the financial records. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.302(b) states in part: "The financial management system of each non-Federal entity must provide for the following . . . (2) Accurate, current, and complete disclosure of the financial results of each Federal award or program in accordance with the reporting requirements set forth in §§ 200.328 and 200.329. . . ." 34 CFR 76.722 states: "A State may require a subgrantee to submit reports in a manner and format that assists the State in complying with the requirements under 34 CFR 76.720 and in carrying out other responsibilities under the program." 2 CFR 200.334 states in part: "Financial records, supporting documents, statistical records, and all other non-Federal entity records pertinent to a Federal award must be retained for a period of three years from the date of submission of the final expenditure report or, for the Federal awards that are renewed quarterly or annual, from the date of submission of the quarterly or annual financial report, respectively, as reported to the Federal awarding agency or pass-through entity in the case of a subrecipient. . . ." 34 CFR 76.731 states: "A State and a subgrantee shall keep records to show its compliance with program requirements." Cause According to the School Corporation, these issues were due to the reporting differences of how the annual expenditure report categories are different than the annual Data Collection reports. The School Corporation indicated that it had to go employee by employee to properly place them under the correct category using the reimbursement requests but did not retain that documentation of how it came to the numbers. Effect The failure to design and implement an effective internal control system enabled noncompliance to go undetected with the Reporting compliance requirement. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the School Corporation's management establish effective internal controls to ensure reports submitted are accurate and have supporting documentation. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.