2 CFR 200 § 200.303

Findings Citing § 200.303

Internal controls.

Total Findings
97,665
Across all audits in database
Showing Page
3 of 1954
50 findings per page
About this section
Section 200.303 requires recipients and subrecipients of Federal awards to establish and maintain effective internal controls to ensure compliance with Federal laws and award conditions. This section affects organizations receiving Federal funding, mandating them to monitor compliance, address noncompliance promptly, and protect sensitive information.
View full section details →
FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

FY End: 2024-12-31
Sanford
Compliance Requirement: I
Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Su...

Procurement and Suspension and Debarment: Identification of the Federal Program; Federal Agency and Program Name, Assistance Listing # : U.S. Department of Defense, National Aeronautics and Space Administration, National Science Foundation U.S Department of Treasury, U.S. Department of Health and Human Services, Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement (RHC) 93.912 Research and Development Cluster (R&D) Various Substance Abuse and Mental Health Services Projects of Regional and National Significance (SAMHSA Project) Award Year: FY 2024 93.243 Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): 2 CFR 200.303 requires that the non-Federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: We noted the following matters during our testing of Procurement and Suspension and Debarment requirements: • For the New Vendor Setup process, we noted five instances out of 25 samples where the vendor screening for suspension and debarment was not performed prior to setting up the vendor in the system and procuring the goods/services. • Under the RHC program, for two of the three procurement transactions tested, we noted the requester and approver of the sole source justification form was the same individual. Cause: Sanford did not follow its policy and perform the vendor screening for suspension and debarment prior to setting up the vendor in the system. In addition, Sanford did not require a separate individual to approve the sole source justification forms. Effect or Potential Effect: By setting up the vendor in the system prior to performing the vendor screening for suspension and debarment, Sanford could have potentially entered into a business transaction with suspended or debarred parties and paid for those costs using federal grant funding. Sanford did not comply with its policy by having appropriate personnel, in addition to the requester, review and approve the sole source justification forms. Questioned Costs: $0 Context: Sanford follows a consistent vendor setup process for setting up each new vendor in the system, regardless of whether the vendor transactions are funded through federal grant funding or through other sources. To prevent a suspended or debarred vendor from being added as a new vendor, the vendor is checked against the suspension and debarment database electronically before completion of the vendor setup. We selected 25 new vendors that were set up in FY 2024 to verify that the suspension and debarment screening was performed prior to adding the vendors in the System and noted for five of these 25 vendors, the suspension and debarment screening was not performed prior to setting up the vendor in the system. Although Sanford’s policy was not followed, vendors that were not screened for suspension and debarment prior to transacting with them were not used for any of the major federal programs in FY 2024. Under the RHC program, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. Total procurement tested under the RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. The total federal expenditures for the RHC program for FY 2024 were $1,422,159. Identification as a Repeat Finding: Partial repeat finding of 2023–001. Recommendation: Management should strengthen its internal controls to ensure that the suspension and debarment screening is performed prior to adding the vendor in the System and entering into a business transaction with the vendor. Management should ensure that there is segregation of duties between the approver and requester of the sole source justification forms. Views of Responsible Officials: As it relates to the reliance on the third-party vendor that conducts suspension and debarment vendor searches, the third-party vendor provides Sanford a SOC (System and Organizational Controls) 2 Type II report annually over the effectiveness of its controls. This is reviewed by Sanford’s compliance department to ensure that there are no findings that would be of concern to Sanford’s reliance on the vendor transaction. Considering the third-party vendor is not relied upon for financial controls, the third-party vendor does not have a SOC 1 (System and Organization Controls) report and, therefore, did not provide this level of report to Sanford. Prior to this year’s review, in November 2024, Sanford enhanced its operating procedures and began documenting a monthly validation of the suspension and debarment search results performed by the third-party vendor. These preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being paid to the vendors that are suspended or debarred. Sanford believes the risk of any material disbursement to suspended and debarred vendors is effectively mitigated through existing preventive and detective internal controls. During the review, there were five instances out of 25 samples where suspension and debarment were not performed prior to vendor setup. None of those vendors were associated with the programs funded with federal funds. In addition, there were no instances where the suspension and debarment search was not performed after the enhanced operating procedures were implemented in November. As it relates to the procurement of goods and services, Sanford’s preventive and detective controls and operating procedures provide reasonable assurance over the effectiveness of the controls necessary to prevent the risk of federal funds being utilized for procurement. Sanford believes the risk of any material disbursement subject to procurement is effectively mitigated through existing preventive and detective internal controls. To provide context on the scale of sole source procurement, the two transactions for which the requester and the approver of the sole source justification form was the same individual totaled $56,551. The total federal expenditures for the RHC program for the fiscal year ended December 31, 2024, were $1,422,159. Total procurement tested under RHC program was $77,209. Total population subject to procurement was $77,209, which represents 5.42% of the total federal expenditures under the RHC program. Sanford has revised its internal procedures to strengthen controls for sole source justification and documentation.

« 1 2 4 5 1954 »