2 CFR 200 › § 200.303

Findings Citing § 200.303

Internal controls.

Total Findings
100,090
Across all audits in database
Showing Page
750 of 2002
50 findings per page
About this section
Section 200.303 requires recipients and subrecipients of Federal awards to establish and maintain effective internal controls to ensure compliance with Federal laws and award conditions. This section affects organizations receiving Federal funding, mandating them to monitor compliance, address noncompliance promptly, and protect sensitive information.
View full section details →
FY End: 2023-12-31
Northshore University Healthsystem
Compliance Requirement: L
Finding 2023-001 – Reporting Information of the federal program: Federal Grantor: Department of Defense (DOD) Assistance Listing No.: 12.420, Military Medical Research and Development Pass-Through Grantor: Johns Hopkins University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.172, Human Genome Research Pass-Through Grantor: University of Chicago Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listi...

Finding 2023-001 – Reporting Information of the federal program: Federal Grantor: Department of Defense (DOD) Assistance Listing No.: 12.420, Military Medical Research and Development Pass-Through Grantor: Johns Hopkins University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.172, Human Genome Research Pass-Through Grantor: University of Chicago Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.226, Research on Healthcare Costs, Quality and Outcomes Pass-Through Grantor: The Regents of the University of Michigan Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.242, Mental Health Research Grants Pass-Through Grantor: Rutgers State University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.307, Minority Health and Health Disparities Research Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.310, Trans-NIH Research Support Pass-Through Grantor: University of Chicago Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.350, National Center for Advancing Translational Sciences Pass-Through Grantor: University of Chicago Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.351, Research Infrastructure Program Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.361, Nursing Research Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.368, 21st Century Cures Act – Precision Medicine Initiative Pass-Through Grantor: University of Chicago Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.394, Cancer Detection and Diagnosis Research Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.395, Cancer Treatment Research Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.396, Cancer Biology Research Pass-Through Grantor: Tulane University, Louisiana State University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.397, Cancer Centers Support Grants Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.667, Social Services Block Grant Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.837, Cardiovascular Diseases Research Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.838, Lung Diseases Research Pass-Through Grantor: Northwestern University   Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.847, Diabetes, Digestive, and Kidney Diseases Extramural Research Pass-Through Grantors: Northwestern University, Duke University, University of Washington, The Regents of University of Michigan Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.853, Extramural Research Programs in the Neurosciences and Neurological Disorders Pass-Through Grantor: Rush University Medical Center Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.855, Allergy, Immunology and Transplantation Research Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.859, Biomedical Research and Research Training Pass-Through Grantor: University of Wisconsin – Madison Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.865, Child Health and Human Development Extramural Research Pass-Through Grantors: Northwestern University, University of Washington, The Regents of the University of California Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.866, Aging Research Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.946, Cooperative Agreements to Support State-Based Safe Motherhood and Infant Health Initiative Programs Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.994, Maternal and Child Health Services Block Grant to the States Pass-Through Grantor: Northwestern Memorial Hospital Criteria or specific requirement (including statutory, regulatory, or other citation): Section 200.303 of the Uniform Guidance states the following regarding internal control: “The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” The Uniform Guidance 2 CFR section 200.510 states, “(b) Schedule of expenditures of Federal awards. The auditee must also prepare a schedule of expenditures of federal awards (SEFA) for the period covered by the auditee’s financial statements which must include the total Federal awards expended as determined in accordance with §200.502 Basis for determining Federal awards expended.” Condition: Certain grants related to the Research and Development Cluster were misstated by $233,405 on the preliminary schedule of expenditures of federal awards (the Schedule) provided by management due to the inappropriate classification of costs within the general ledger; the final Schedule was corrected. In addition, an award which was not a federal grant award with expenditures of $148,388 was included on the preliminary Schedule provided by management. The final Schedule was corrected. Cause: Endeavor’s internal controls over the preparation of the Schedule were not sufficient to properly accumulate and accurately report all expenditures of federal awards. Effect or Potential Effect: Inaccurate or improper reporting of expenditures results in a misstated Schedule and can also potentially result in insufficient testing of the major programs or improper identification of major programs for audit purposes. Questioned costs: None. Context: The table below reflects the preliminary and adjusted assistance listing balances on the Schedule (only assistance listing programs which changed are included below): Assistance Listing No. Name of Federal Program Preliminary Schedule Adjusted Schedule Change 12.420 Military Medical Research and Development $ 241,025 $ 224,418 $ 16,607 93.172 Human Genome Research 14,874 15,121 (247) 93.226 Research on Healthcare Costs, Quality and Outcomes 251,325 248,842 2,483 93.242 Mental Health Research Grants 1,616,503 1,617,376 (873) 93.307 Minority Health and Health Disparities Research 17,323 15,122 2,201 93.310 Trans-NIH Research Support 313,459 313,490 (31) 93.350 National Center for Advancing Translational Sciences 516,734 518,429 (1,695) 93.351 Research Infrastructure Program 242,436 232,058 10,378 93.361 Nursing Research 8,745 7,645 1,100 93.368 21st Century Cures Act – Precision Medicine Initiative 100,324 94,609 5,715 93.394 Cancer Detection and Diagnosis Research 847,959 816,528 31,431 93.395 Cancer Treatment Research 438,349 439,286 (937) 93.396 Cancer Biology Research 93,919 88,642 5,277 93.397 Cancer Centers Support Grants 15,552 14,078 1,474 93.667 Social Services Block Grant 19,619 27,170 (7,551) 93.837 Cardiovascular Diseases Research 193,160 188,850 4,310 93.838 Lung Diseases Research 482,934 471,427 11,507 93.847 Diabetes, Digestive, and Kidney Diseases Extramural Research 1,075,493 1,035,041 40,452 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1,645,025 1,596,611 48,414 93.855 Allergy, Immunology and Transplantation Research 73,869 72,630 1,239 93.859 Biomedical Research and Research Training 363,336 366,791 (3,455) 93.865 Child Health and Human Development Extramural Research 3,790,797 3,733,008 57,789 93.866 Aging Research 1,101,363 1,098,891 2,472 93.946 Cooperative Agreements to Support State-Based Safe Motherhood and Infant Health Initiative Programs 80,039 78,033 2,006 93.994 Maternal and Child Health Services Block Grant to the States 171,995 168,656 3,339 The Role of Oral Care in Nonventilator Hospital-Acquired Pneumonia (NVHAP) Prevention 148,388 – 148,388 Total $ 13,864,545 $ 13,482,752 $ 381,793 Identification as a repeat finding, if applicable: The finding is not a repeat finding from the prior year. Recommendation: Management should implement internal controls to ensure amounts are appropriately accumulated and reported on the Schedule and all federal expenditures are appropriately identified and reported on the Schedule. Views of responsible officials: Award amounts were changed on the Schedule after management’s review was executed. Management acknowledges that implementing the new Enterprise Resource Planning (ERP) system, in 2023 presented changes to the SEFA reporting. Management has identified and addressed the reporting issues within the new system to ensure that the grant totals are appropriately captured in the SEFA. Endeavor will enhance grant management award processes by revising its procedures and adding additional controls to monitor for accuracy of the core data. Management will reinforce the importance of timeliness and accuracy of the Schedule reporting totals to facilitate accurate reporting.

FY End: 2023-12-31
Northshore University Healthsystem
Compliance Requirement: L
Finding 2023-001 – Reporting Information of the federal program: Federal Grantor: Department of Defense (DOD) Assistance Listing No.: 12.420, Military Medical Research and Development Pass-Through Grantor: Johns Hopkins University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.172, Human Genome Research Pass-Through Grantor: University of Chicago Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listi...

Finding 2023-001 – Reporting Information of the federal program: Federal Grantor: Department of Defense (DOD) Assistance Listing No.: 12.420, Military Medical Research and Development Pass-Through Grantor: Johns Hopkins University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.172, Human Genome Research Pass-Through Grantor: University of Chicago Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.226, Research on Healthcare Costs, Quality and Outcomes Pass-Through Grantor: The Regents of the University of Michigan Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.242, Mental Health Research Grants Pass-Through Grantor: Rutgers State University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.307, Minority Health and Health Disparities Research Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.310, Trans-NIH Research Support Pass-Through Grantor: University of Chicago Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.350, National Center for Advancing Translational Sciences Pass-Through Grantor: University of Chicago Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.351, Research Infrastructure Program Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.361, Nursing Research Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.368, 21st Century Cures Act – Precision Medicine Initiative Pass-Through Grantor: University of Chicago Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.394, Cancer Detection and Diagnosis Research Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.395, Cancer Treatment Research Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.396, Cancer Biology Research Pass-Through Grantor: Tulane University, Louisiana State University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.397, Cancer Centers Support Grants Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.667, Social Services Block Grant Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.837, Cardiovascular Diseases Research Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.838, Lung Diseases Research Pass-Through Grantor: Northwestern University   Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.847, Diabetes, Digestive, and Kidney Diseases Extramural Research Pass-Through Grantors: Northwestern University, Duke University, University of Washington, The Regents of University of Michigan Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.853, Extramural Research Programs in the Neurosciences and Neurological Disorders Pass-Through Grantor: Rush University Medical Center Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.855, Allergy, Immunology and Transplantation Research Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.859, Biomedical Research and Research Training Pass-Through Grantor: University of Wisconsin – Madison Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.865, Child Health and Human Development Extramural Research Pass-Through Grantors: Northwestern University, University of Washington, The Regents of the University of California Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.866, Aging Research Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.946, Cooperative Agreements to Support State-Based Safe Motherhood and Infant Health Initiative Programs Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.994, Maternal and Child Health Services Block Grant to the States Pass-Through Grantor: Northwestern Memorial Hospital Criteria or specific requirement (including statutory, regulatory, or other citation): Section 200.303 of the Uniform Guidance states the following regarding internal control: “The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” The Uniform Guidance 2 CFR section 200.510 states, “(b) Schedule of expenditures of Federal awards. The auditee must also prepare a schedule of expenditures of federal awards (SEFA) for the period covered by the auditee’s financial statements which must include the total Federal awards expended as determined in accordance with §200.502 Basis for determining Federal awards expended.” Condition: Certain grants related to the Research and Development Cluster were misstated by $233,405 on the preliminary schedule of expenditures of federal awards (the Schedule) provided by management due to the inappropriate classification of costs within the general ledger; the final Schedule was corrected. In addition, an award which was not a federal grant award with expenditures of $148,388 was included on the preliminary Schedule provided by management. The final Schedule was corrected. Cause: Endeavor’s internal controls over the preparation of the Schedule were not sufficient to properly accumulate and accurately report all expenditures of federal awards. Effect or Potential Effect: Inaccurate or improper reporting of expenditures results in a misstated Schedule and can also potentially result in insufficient testing of the major programs or improper identification of major programs for audit purposes. Questioned costs: None. Context: The table below reflects the preliminary and adjusted assistance listing balances on the Schedule (only assistance listing programs which changed are included below): Assistance Listing No. Name of Federal Program Preliminary Schedule Adjusted Schedule Change 12.420 Military Medical Research and Development $ 241,025 $ 224,418 $ 16,607 93.172 Human Genome Research 14,874 15,121 (247) 93.226 Research on Healthcare Costs, Quality and Outcomes 251,325 248,842 2,483 93.242 Mental Health Research Grants 1,616,503 1,617,376 (873) 93.307 Minority Health and Health Disparities Research 17,323 15,122 2,201 93.310 Trans-NIH Research Support 313,459 313,490 (31) 93.350 National Center for Advancing Translational Sciences 516,734 518,429 (1,695) 93.351 Research Infrastructure Program 242,436 232,058 10,378 93.361 Nursing Research 8,745 7,645 1,100 93.368 21st Century Cures Act – Precision Medicine Initiative 100,324 94,609 5,715 93.394 Cancer Detection and Diagnosis Research 847,959 816,528 31,431 93.395 Cancer Treatment Research 438,349 439,286 (937) 93.396 Cancer Biology Research 93,919 88,642 5,277 93.397 Cancer Centers Support Grants 15,552 14,078 1,474 93.667 Social Services Block Grant 19,619 27,170 (7,551) 93.837 Cardiovascular Diseases Research 193,160 188,850 4,310 93.838 Lung Diseases Research 482,934 471,427 11,507 93.847 Diabetes, Digestive, and Kidney Diseases Extramural Research 1,075,493 1,035,041 40,452 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1,645,025 1,596,611 48,414 93.855 Allergy, Immunology and Transplantation Research 73,869 72,630 1,239 93.859 Biomedical Research and Research Training 363,336 366,791 (3,455) 93.865 Child Health and Human Development Extramural Research 3,790,797 3,733,008 57,789 93.866 Aging Research 1,101,363 1,098,891 2,472 93.946 Cooperative Agreements to Support State-Based Safe Motherhood and Infant Health Initiative Programs 80,039 78,033 2,006 93.994 Maternal and Child Health Services Block Grant to the States 171,995 168,656 3,339 The Role of Oral Care in Nonventilator Hospital-Acquired Pneumonia (NVHAP) Prevention 148,388 – 148,388 Total $ 13,864,545 $ 13,482,752 $ 381,793 Identification as a repeat finding, if applicable: The finding is not a repeat finding from the prior year. Recommendation: Management should implement internal controls to ensure amounts are appropriately accumulated and reported on the Schedule and all federal expenditures are appropriately identified and reported on the Schedule. Views of responsible officials: Award amounts were changed on the Schedule after management’s review was executed. Management acknowledges that implementing the new Enterprise Resource Planning (ERP) system, in 2023 presented changes to the SEFA reporting. Management has identified and addressed the reporting issues within the new system to ensure that the grant totals are appropriately captured in the SEFA. Endeavor will enhance grant management award processes by revising its procedures and adding additional controls to monitor for accuracy of the core data. Management will reinforce the importance of timeliness and accuracy of the Schedule reporting totals to facilitate accurate reporting.

FY End: 2023-12-31
Northshore University Healthsystem
Compliance Requirement: L
Finding 2023-001 – Reporting Information of the federal program: Federal Grantor: Department of Defense (DOD) Assistance Listing No.: 12.420, Military Medical Research and Development Pass-Through Grantor: Johns Hopkins University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.172, Human Genome Research Pass-Through Grantor: University of Chicago Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listi...

Finding 2023-001 – Reporting Information of the federal program: Federal Grantor: Department of Defense (DOD) Assistance Listing No.: 12.420, Military Medical Research and Development Pass-Through Grantor: Johns Hopkins University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.172, Human Genome Research Pass-Through Grantor: University of Chicago Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.226, Research on Healthcare Costs, Quality and Outcomes Pass-Through Grantor: The Regents of the University of Michigan Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.242, Mental Health Research Grants Pass-Through Grantor: Rutgers State University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.307, Minority Health and Health Disparities Research Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.310, Trans-NIH Research Support Pass-Through Grantor: University of Chicago Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.350, National Center for Advancing Translational Sciences Pass-Through Grantor: University of Chicago Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.351, Research Infrastructure Program Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.361, Nursing Research Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.368, 21st Century Cures Act – Precision Medicine Initiative Pass-Through Grantor: University of Chicago Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.394, Cancer Detection and Diagnosis Research Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.395, Cancer Treatment Research Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.396, Cancer Biology Research Pass-Through Grantor: Tulane University, Louisiana State University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.397, Cancer Centers Support Grants Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.667, Social Services Block Grant Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.837, Cardiovascular Diseases Research Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.838, Lung Diseases Research Pass-Through Grantor: Northwestern University   Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.847, Diabetes, Digestive, and Kidney Diseases Extramural Research Pass-Through Grantors: Northwestern University, Duke University, University of Washington, The Regents of University of Michigan Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.853, Extramural Research Programs in the Neurosciences and Neurological Disorders Pass-Through Grantor: Rush University Medical Center Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.855, Allergy, Immunology and Transplantation Research Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.859, Biomedical Research and Research Training Pass-Through Grantor: University of Wisconsin – Madison Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.865, Child Health and Human Development Extramural Research Pass-Through Grantors: Northwestern University, University of Washington, The Regents of the University of California Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.866, Aging Research Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.946, Cooperative Agreements to Support State-Based Safe Motherhood and Infant Health Initiative Programs Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.994, Maternal and Child Health Services Block Grant to the States Pass-Through Grantor: Northwestern Memorial Hospital Criteria or specific requirement (including statutory, regulatory, or other citation): Section 200.303 of the Uniform Guidance states the following regarding internal control: “The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” The Uniform Guidance 2 CFR section 200.510 states, “(b) Schedule of expenditures of Federal awards. The auditee must also prepare a schedule of expenditures of federal awards (SEFA) for the period covered by the auditee’s financial statements which must include the total Federal awards expended as determined in accordance with §200.502 Basis for determining Federal awards expended.” Condition: Certain grants related to the Research and Development Cluster were misstated by $233,405 on the preliminary schedule of expenditures of federal awards (the Schedule) provided by management due to the inappropriate classification of costs within the general ledger; the final Schedule was corrected. In addition, an award which was not a federal grant award with expenditures of $148,388 was included on the preliminary Schedule provided by management. The final Schedule was corrected. Cause: Endeavor’s internal controls over the preparation of the Schedule were not sufficient to properly accumulate and accurately report all expenditures of federal awards. Effect or Potential Effect: Inaccurate or improper reporting of expenditures results in a misstated Schedule and can also potentially result in insufficient testing of the major programs or improper identification of major programs for audit purposes. Questioned costs: None. Context: The table below reflects the preliminary and adjusted assistance listing balances on the Schedule (only assistance listing programs which changed are included below): Assistance Listing No. Name of Federal Program Preliminary Schedule Adjusted Schedule Change 12.420 Military Medical Research and Development $ 241,025 $ 224,418 $ 16,607 93.172 Human Genome Research 14,874 15,121 (247) 93.226 Research on Healthcare Costs, Quality and Outcomes 251,325 248,842 2,483 93.242 Mental Health Research Grants 1,616,503 1,617,376 (873) 93.307 Minority Health and Health Disparities Research 17,323 15,122 2,201 93.310 Trans-NIH Research Support 313,459 313,490 (31) 93.350 National Center for Advancing Translational Sciences 516,734 518,429 (1,695) 93.351 Research Infrastructure Program 242,436 232,058 10,378 93.361 Nursing Research 8,745 7,645 1,100 93.368 21st Century Cures Act – Precision Medicine Initiative 100,324 94,609 5,715 93.394 Cancer Detection and Diagnosis Research 847,959 816,528 31,431 93.395 Cancer Treatment Research 438,349 439,286 (937) 93.396 Cancer Biology Research 93,919 88,642 5,277 93.397 Cancer Centers Support Grants 15,552 14,078 1,474 93.667 Social Services Block Grant 19,619 27,170 (7,551) 93.837 Cardiovascular Diseases Research 193,160 188,850 4,310 93.838 Lung Diseases Research 482,934 471,427 11,507 93.847 Diabetes, Digestive, and Kidney Diseases Extramural Research 1,075,493 1,035,041 40,452 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1,645,025 1,596,611 48,414 93.855 Allergy, Immunology and Transplantation Research 73,869 72,630 1,239 93.859 Biomedical Research and Research Training 363,336 366,791 (3,455) 93.865 Child Health and Human Development Extramural Research 3,790,797 3,733,008 57,789 93.866 Aging Research 1,101,363 1,098,891 2,472 93.946 Cooperative Agreements to Support State-Based Safe Motherhood and Infant Health Initiative Programs 80,039 78,033 2,006 93.994 Maternal and Child Health Services Block Grant to the States 171,995 168,656 3,339 The Role of Oral Care in Nonventilator Hospital-Acquired Pneumonia (NVHAP) Prevention 148,388 – 148,388 Total $ 13,864,545 $ 13,482,752 $ 381,793 Identification as a repeat finding, if applicable: The finding is not a repeat finding from the prior year. Recommendation: Management should implement internal controls to ensure amounts are appropriately accumulated and reported on the Schedule and all federal expenditures are appropriately identified and reported on the Schedule. Views of responsible officials: Award amounts were changed on the Schedule after management’s review was executed. Management acknowledges that implementing the new Enterprise Resource Planning (ERP) system, in 2023 presented changes to the SEFA reporting. Management has identified and addressed the reporting issues within the new system to ensure that the grant totals are appropriately captured in the SEFA. Endeavor will enhance grant management award processes by revising its procedures and adding additional controls to monitor for accuracy of the core data. Management will reinforce the importance of timeliness and accuracy of the Schedule reporting totals to facilitate accurate reporting.

FY End: 2023-12-31
Northshore University Healthsystem
Compliance Requirement: L
Finding 2023-001 – Reporting Information of the federal program: Federal Grantor: Department of Defense (DOD) Assistance Listing No.: 12.420, Military Medical Research and Development Pass-Through Grantor: Johns Hopkins University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.172, Human Genome Research Pass-Through Grantor: University of Chicago Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listi...

Finding 2023-001 – Reporting Information of the federal program: Federal Grantor: Department of Defense (DOD) Assistance Listing No.: 12.420, Military Medical Research and Development Pass-Through Grantor: Johns Hopkins University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.172, Human Genome Research Pass-Through Grantor: University of Chicago Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.226, Research on Healthcare Costs, Quality and Outcomes Pass-Through Grantor: The Regents of the University of Michigan Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.242, Mental Health Research Grants Pass-Through Grantor: Rutgers State University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.307, Minority Health and Health Disparities Research Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.310, Trans-NIH Research Support Pass-Through Grantor: University of Chicago Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.350, National Center for Advancing Translational Sciences Pass-Through Grantor: University of Chicago Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.351, Research Infrastructure Program Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.361, Nursing Research Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.368, 21st Century Cures Act – Precision Medicine Initiative Pass-Through Grantor: University of Chicago Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.394, Cancer Detection and Diagnosis Research Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.395, Cancer Treatment Research Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.396, Cancer Biology Research Pass-Through Grantor: Tulane University, Louisiana State University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.397, Cancer Centers Support Grants Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.667, Social Services Block Grant Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.837, Cardiovascular Diseases Research Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.838, Lung Diseases Research Pass-Through Grantor: Northwestern University   Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.847, Diabetes, Digestive, and Kidney Diseases Extramural Research Pass-Through Grantors: Northwestern University, Duke University, University of Washington, The Regents of University of Michigan Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.853, Extramural Research Programs in the Neurosciences and Neurological Disorders Pass-Through Grantor: Rush University Medical Center Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.855, Allergy, Immunology and Transplantation Research Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.859, Biomedical Research and Research Training Pass-Through Grantor: University of Wisconsin – Madison Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.865, Child Health and Human Development Extramural Research Pass-Through Grantors: Northwestern University, University of Washington, The Regents of the University of California Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.866, Aging Research Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.946, Cooperative Agreements to Support State-Based Safe Motherhood and Infant Health Initiative Programs Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.994, Maternal and Child Health Services Block Grant to the States Pass-Through Grantor: Northwestern Memorial Hospital Criteria or specific requirement (including statutory, regulatory, or other citation): Section 200.303 of the Uniform Guidance states the following regarding internal control: “The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” The Uniform Guidance 2 CFR section 200.510 states, “(b) Schedule of expenditures of Federal awards. The auditee must also prepare a schedule of expenditures of federal awards (SEFA) for the period covered by the auditee’s financial statements which must include the total Federal awards expended as determined in accordance with §200.502 Basis for determining Federal awards expended.” Condition: Certain grants related to the Research and Development Cluster were misstated by $233,405 on the preliminary schedule of expenditures of federal awards (the Schedule) provided by management due to the inappropriate classification of costs within the general ledger; the final Schedule was corrected. In addition, an award which was not a federal grant award with expenditures of $148,388 was included on the preliminary Schedule provided by management. The final Schedule was corrected. Cause: Endeavor’s internal controls over the preparation of the Schedule were not sufficient to properly accumulate and accurately report all expenditures of federal awards. Effect or Potential Effect: Inaccurate or improper reporting of expenditures results in a misstated Schedule and can also potentially result in insufficient testing of the major programs or improper identification of major programs for audit purposes. Questioned costs: None. Context: The table below reflects the preliminary and adjusted assistance listing balances on the Schedule (only assistance listing programs which changed are included below): Assistance Listing No. Name of Federal Program Preliminary Schedule Adjusted Schedule Change 12.420 Military Medical Research and Development $ 241,025 $ 224,418 $ 16,607 93.172 Human Genome Research 14,874 15,121 (247) 93.226 Research on Healthcare Costs, Quality and Outcomes 251,325 248,842 2,483 93.242 Mental Health Research Grants 1,616,503 1,617,376 (873) 93.307 Minority Health and Health Disparities Research 17,323 15,122 2,201 93.310 Trans-NIH Research Support 313,459 313,490 (31) 93.350 National Center for Advancing Translational Sciences 516,734 518,429 (1,695) 93.351 Research Infrastructure Program 242,436 232,058 10,378 93.361 Nursing Research 8,745 7,645 1,100 93.368 21st Century Cures Act – Precision Medicine Initiative 100,324 94,609 5,715 93.394 Cancer Detection and Diagnosis Research 847,959 816,528 31,431 93.395 Cancer Treatment Research 438,349 439,286 (937) 93.396 Cancer Biology Research 93,919 88,642 5,277 93.397 Cancer Centers Support Grants 15,552 14,078 1,474 93.667 Social Services Block Grant 19,619 27,170 (7,551) 93.837 Cardiovascular Diseases Research 193,160 188,850 4,310 93.838 Lung Diseases Research 482,934 471,427 11,507 93.847 Diabetes, Digestive, and Kidney Diseases Extramural Research 1,075,493 1,035,041 40,452 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1,645,025 1,596,611 48,414 93.855 Allergy, Immunology and Transplantation Research 73,869 72,630 1,239 93.859 Biomedical Research and Research Training 363,336 366,791 (3,455) 93.865 Child Health and Human Development Extramural Research 3,790,797 3,733,008 57,789 93.866 Aging Research 1,101,363 1,098,891 2,472 93.946 Cooperative Agreements to Support State-Based Safe Motherhood and Infant Health Initiative Programs 80,039 78,033 2,006 93.994 Maternal and Child Health Services Block Grant to the States 171,995 168,656 3,339 The Role of Oral Care in Nonventilator Hospital-Acquired Pneumonia (NVHAP) Prevention 148,388 – 148,388 Total $ 13,864,545 $ 13,482,752 $ 381,793 Identification as a repeat finding, if applicable: The finding is not a repeat finding from the prior year. Recommendation: Management should implement internal controls to ensure amounts are appropriately accumulated and reported on the Schedule and all federal expenditures are appropriately identified and reported on the Schedule. Views of responsible officials: Award amounts were changed on the Schedule after management’s review was executed. Management acknowledges that implementing the new Enterprise Resource Planning (ERP) system, in 2023 presented changes to the SEFA reporting. Management has identified and addressed the reporting issues within the new system to ensure that the grant totals are appropriately captured in the SEFA. Endeavor will enhance grant management award processes by revising its procedures and adding additional controls to monitor for accuracy of the core data. Management will reinforce the importance of timeliness and accuracy of the Schedule reporting totals to facilitate accurate reporting.

FY End: 2023-12-31
Northshore University Healthsystem
Compliance Requirement: L
Finding 2023-001 – Reporting Information of the federal program: Federal Grantor: Department of Defense (DOD) Assistance Listing No.: 12.420, Military Medical Research and Development Pass-Through Grantor: Johns Hopkins University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.172, Human Genome Research Pass-Through Grantor: University of Chicago Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listi...

Finding 2023-001 – Reporting Information of the federal program: Federal Grantor: Department of Defense (DOD) Assistance Listing No.: 12.420, Military Medical Research and Development Pass-Through Grantor: Johns Hopkins University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.172, Human Genome Research Pass-Through Grantor: University of Chicago Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.226, Research on Healthcare Costs, Quality and Outcomes Pass-Through Grantor: The Regents of the University of Michigan Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.242, Mental Health Research Grants Pass-Through Grantor: Rutgers State University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.307, Minority Health and Health Disparities Research Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.310, Trans-NIH Research Support Pass-Through Grantor: University of Chicago Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.350, National Center for Advancing Translational Sciences Pass-Through Grantor: University of Chicago Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.351, Research Infrastructure Program Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.361, Nursing Research Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.368, 21st Century Cures Act – Precision Medicine Initiative Pass-Through Grantor: University of Chicago Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.394, Cancer Detection and Diagnosis Research Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.395, Cancer Treatment Research Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.396, Cancer Biology Research Pass-Through Grantor: Tulane University, Louisiana State University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.397, Cancer Centers Support Grants Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.667, Social Services Block Grant Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.837, Cardiovascular Diseases Research Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.838, Lung Diseases Research Pass-Through Grantor: Northwestern University   Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.847, Diabetes, Digestive, and Kidney Diseases Extramural Research Pass-Through Grantors: Northwestern University, Duke University, University of Washington, The Regents of University of Michigan Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.853, Extramural Research Programs in the Neurosciences and Neurological Disorders Pass-Through Grantor: Rush University Medical Center Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.855, Allergy, Immunology and Transplantation Research Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.859, Biomedical Research and Research Training Pass-Through Grantor: University of Wisconsin – Madison Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.865, Child Health and Human Development Extramural Research Pass-Through Grantors: Northwestern University, University of Washington, The Regents of the University of California Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.866, Aging Research Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.946, Cooperative Agreements to Support State-Based Safe Motherhood and Infant Health Initiative Programs Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.994, Maternal and Child Health Services Block Grant to the States Pass-Through Grantor: Northwestern Memorial Hospital Criteria or specific requirement (including statutory, regulatory, or other citation): Section 200.303 of the Uniform Guidance states the following regarding internal control: “The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” The Uniform Guidance 2 CFR section 200.510 states, “(b) Schedule of expenditures of Federal awards. The auditee must also prepare a schedule of expenditures of federal awards (SEFA) for the period covered by the auditee’s financial statements which must include the total Federal awards expended as determined in accordance with §200.502 Basis for determining Federal awards expended.” Condition: Certain grants related to the Research and Development Cluster were misstated by $233,405 on the preliminary schedule of expenditures of federal awards (the Schedule) provided by management due to the inappropriate classification of costs within the general ledger; the final Schedule was corrected. In addition, an award which was not a federal grant award with expenditures of $148,388 was included on the preliminary Schedule provided by management. The final Schedule was corrected. Cause: Endeavor’s internal controls over the preparation of the Schedule were not sufficient to properly accumulate and accurately report all expenditures of federal awards. Effect or Potential Effect: Inaccurate or improper reporting of expenditures results in a misstated Schedule and can also potentially result in insufficient testing of the major programs or improper identification of major programs for audit purposes. Questioned costs: None. Context: The table below reflects the preliminary and adjusted assistance listing balances on the Schedule (only assistance listing programs which changed are included below): Assistance Listing No. Name of Federal Program Preliminary Schedule Adjusted Schedule Change 12.420 Military Medical Research and Development $ 241,025 $ 224,418 $ 16,607 93.172 Human Genome Research 14,874 15,121 (247) 93.226 Research on Healthcare Costs, Quality and Outcomes 251,325 248,842 2,483 93.242 Mental Health Research Grants 1,616,503 1,617,376 (873) 93.307 Minority Health and Health Disparities Research 17,323 15,122 2,201 93.310 Trans-NIH Research Support 313,459 313,490 (31) 93.350 National Center for Advancing Translational Sciences 516,734 518,429 (1,695) 93.351 Research Infrastructure Program 242,436 232,058 10,378 93.361 Nursing Research 8,745 7,645 1,100 93.368 21st Century Cures Act – Precision Medicine Initiative 100,324 94,609 5,715 93.394 Cancer Detection and Diagnosis Research 847,959 816,528 31,431 93.395 Cancer Treatment Research 438,349 439,286 (937) 93.396 Cancer Biology Research 93,919 88,642 5,277 93.397 Cancer Centers Support Grants 15,552 14,078 1,474 93.667 Social Services Block Grant 19,619 27,170 (7,551) 93.837 Cardiovascular Diseases Research 193,160 188,850 4,310 93.838 Lung Diseases Research 482,934 471,427 11,507 93.847 Diabetes, Digestive, and Kidney Diseases Extramural Research 1,075,493 1,035,041 40,452 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1,645,025 1,596,611 48,414 93.855 Allergy, Immunology and Transplantation Research 73,869 72,630 1,239 93.859 Biomedical Research and Research Training 363,336 366,791 (3,455) 93.865 Child Health and Human Development Extramural Research 3,790,797 3,733,008 57,789 93.866 Aging Research 1,101,363 1,098,891 2,472 93.946 Cooperative Agreements to Support State-Based Safe Motherhood and Infant Health Initiative Programs 80,039 78,033 2,006 93.994 Maternal and Child Health Services Block Grant to the States 171,995 168,656 3,339 The Role of Oral Care in Nonventilator Hospital-Acquired Pneumonia (NVHAP) Prevention 148,388 – 148,388 Total $ 13,864,545 $ 13,482,752 $ 381,793 Identification as a repeat finding, if applicable: The finding is not a repeat finding from the prior year. Recommendation: Management should implement internal controls to ensure amounts are appropriately accumulated and reported on the Schedule and all federal expenditures are appropriately identified and reported on the Schedule. Views of responsible officials: Award amounts were changed on the Schedule after management’s review was executed. Management acknowledges that implementing the new Enterprise Resource Planning (ERP) system, in 2023 presented changes to the SEFA reporting. Management has identified and addressed the reporting issues within the new system to ensure that the grant totals are appropriately captured in the SEFA. Endeavor will enhance grant management award processes by revising its procedures and adding additional controls to monitor for accuracy of the core data. Management will reinforce the importance of timeliness and accuracy of the Schedule reporting totals to facilitate accurate reporting.

FY End: 2023-12-31
Northshore University Healthsystem
Compliance Requirement: L
Finding 2023-001 – Reporting Information of the federal program: Federal Grantor: Department of Defense (DOD) Assistance Listing No.: 12.420, Military Medical Research and Development Pass-Through Grantor: Johns Hopkins University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.172, Human Genome Research Pass-Through Grantor: University of Chicago Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listi...

Finding 2023-001 – Reporting Information of the federal program: Federal Grantor: Department of Defense (DOD) Assistance Listing No.: 12.420, Military Medical Research and Development Pass-Through Grantor: Johns Hopkins University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.172, Human Genome Research Pass-Through Grantor: University of Chicago Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.226, Research on Healthcare Costs, Quality and Outcomes Pass-Through Grantor: The Regents of the University of Michigan Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.242, Mental Health Research Grants Pass-Through Grantor: Rutgers State University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.307, Minority Health and Health Disparities Research Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.310, Trans-NIH Research Support Pass-Through Grantor: University of Chicago Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.350, National Center for Advancing Translational Sciences Pass-Through Grantor: University of Chicago Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.351, Research Infrastructure Program Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.361, Nursing Research Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.368, 21st Century Cures Act – Precision Medicine Initiative Pass-Through Grantor: University of Chicago Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.394, Cancer Detection and Diagnosis Research Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.395, Cancer Treatment Research Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.396, Cancer Biology Research Pass-Through Grantor: Tulane University, Louisiana State University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.397, Cancer Centers Support Grants Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.667, Social Services Block Grant Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.837, Cardiovascular Diseases Research Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.838, Lung Diseases Research Pass-Through Grantor: Northwestern University   Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.847, Diabetes, Digestive, and Kidney Diseases Extramural Research Pass-Through Grantors: Northwestern University, Duke University, University of Washington, The Regents of University of Michigan Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.853, Extramural Research Programs in the Neurosciences and Neurological Disorders Pass-Through Grantor: Rush University Medical Center Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.855, Allergy, Immunology and Transplantation Research Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.859, Biomedical Research and Research Training Pass-Through Grantor: University of Wisconsin – Madison Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.865, Child Health and Human Development Extramural Research Pass-Through Grantors: Northwestern University, University of Washington, The Regents of the University of California Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.866, Aging Research Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.946, Cooperative Agreements to Support State-Based Safe Motherhood and Infant Health Initiative Programs Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.994, Maternal and Child Health Services Block Grant to the States Pass-Through Grantor: Northwestern Memorial Hospital Criteria or specific requirement (including statutory, regulatory, or other citation): Section 200.303 of the Uniform Guidance states the following regarding internal control: “The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” The Uniform Guidance 2 CFR section 200.510 states, “(b) Schedule of expenditures of Federal awards. The auditee must also prepare a schedule of expenditures of federal awards (SEFA) for the period covered by the auditee’s financial statements which must include the total Federal awards expended as determined in accordance with §200.502 Basis for determining Federal awards expended.” Condition: Certain grants related to the Research and Development Cluster were misstated by $233,405 on the preliminary schedule of expenditures of federal awards (the Schedule) provided by management due to the inappropriate classification of costs within the general ledger; the final Schedule was corrected. In addition, an award which was not a federal grant award with expenditures of $148,388 was included on the preliminary Schedule provided by management. The final Schedule was corrected. Cause: Endeavor’s internal controls over the preparation of the Schedule were not sufficient to properly accumulate and accurately report all expenditures of federal awards. Effect or Potential Effect: Inaccurate or improper reporting of expenditures results in a misstated Schedule and can also potentially result in insufficient testing of the major programs or improper identification of major programs for audit purposes. Questioned costs: None. Context: The table below reflects the preliminary and adjusted assistance listing balances on the Schedule (only assistance listing programs which changed are included below): Assistance Listing No. Name of Federal Program Preliminary Schedule Adjusted Schedule Change 12.420 Military Medical Research and Development $ 241,025 $ 224,418 $ 16,607 93.172 Human Genome Research 14,874 15,121 (247) 93.226 Research on Healthcare Costs, Quality and Outcomes 251,325 248,842 2,483 93.242 Mental Health Research Grants 1,616,503 1,617,376 (873) 93.307 Minority Health and Health Disparities Research 17,323 15,122 2,201 93.310 Trans-NIH Research Support 313,459 313,490 (31) 93.350 National Center for Advancing Translational Sciences 516,734 518,429 (1,695) 93.351 Research Infrastructure Program 242,436 232,058 10,378 93.361 Nursing Research 8,745 7,645 1,100 93.368 21st Century Cures Act – Precision Medicine Initiative 100,324 94,609 5,715 93.394 Cancer Detection and Diagnosis Research 847,959 816,528 31,431 93.395 Cancer Treatment Research 438,349 439,286 (937) 93.396 Cancer Biology Research 93,919 88,642 5,277 93.397 Cancer Centers Support Grants 15,552 14,078 1,474 93.667 Social Services Block Grant 19,619 27,170 (7,551) 93.837 Cardiovascular Diseases Research 193,160 188,850 4,310 93.838 Lung Diseases Research 482,934 471,427 11,507 93.847 Diabetes, Digestive, and Kidney Diseases Extramural Research 1,075,493 1,035,041 40,452 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1,645,025 1,596,611 48,414 93.855 Allergy, Immunology and Transplantation Research 73,869 72,630 1,239 93.859 Biomedical Research and Research Training 363,336 366,791 (3,455) 93.865 Child Health and Human Development Extramural Research 3,790,797 3,733,008 57,789 93.866 Aging Research 1,101,363 1,098,891 2,472 93.946 Cooperative Agreements to Support State-Based Safe Motherhood and Infant Health Initiative Programs 80,039 78,033 2,006 93.994 Maternal and Child Health Services Block Grant to the States 171,995 168,656 3,339 The Role of Oral Care in Nonventilator Hospital-Acquired Pneumonia (NVHAP) Prevention 148,388 – 148,388 Total $ 13,864,545 $ 13,482,752 $ 381,793 Identification as a repeat finding, if applicable: The finding is not a repeat finding from the prior year. Recommendation: Management should implement internal controls to ensure amounts are appropriately accumulated and reported on the Schedule and all federal expenditures are appropriately identified and reported on the Schedule. Views of responsible officials: Award amounts were changed on the Schedule after management’s review was executed. Management acknowledges that implementing the new Enterprise Resource Planning (ERP) system, in 2023 presented changes to the SEFA reporting. Management has identified and addressed the reporting issues within the new system to ensure that the grant totals are appropriately captured in the SEFA. Endeavor will enhance grant management award processes by revising its procedures and adding additional controls to monitor for accuracy of the core data. Management will reinforce the importance of timeliness and accuracy of the Schedule reporting totals to facilitate accurate reporting.

FY End: 2023-12-31
Northshore University Healthsystem
Compliance Requirement: L
Finding 2023-001 – Reporting Information of the federal program: Federal Grantor: Department of Defense (DOD) Assistance Listing No.: 12.420, Military Medical Research and Development Pass-Through Grantor: Johns Hopkins University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.172, Human Genome Research Pass-Through Grantor: University of Chicago Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listi...

Finding 2023-001 – Reporting Information of the federal program: Federal Grantor: Department of Defense (DOD) Assistance Listing No.: 12.420, Military Medical Research and Development Pass-Through Grantor: Johns Hopkins University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.172, Human Genome Research Pass-Through Grantor: University of Chicago Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.226, Research on Healthcare Costs, Quality and Outcomes Pass-Through Grantor: The Regents of the University of Michigan Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.242, Mental Health Research Grants Pass-Through Grantor: Rutgers State University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.307, Minority Health and Health Disparities Research Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.310, Trans-NIH Research Support Pass-Through Grantor: University of Chicago Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.350, National Center for Advancing Translational Sciences Pass-Through Grantor: University of Chicago Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.351, Research Infrastructure Program Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.361, Nursing Research Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.368, 21st Century Cures Act – Precision Medicine Initiative Pass-Through Grantor: University of Chicago Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.394, Cancer Detection and Diagnosis Research Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.395, Cancer Treatment Research Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.396, Cancer Biology Research Pass-Through Grantor: Tulane University, Louisiana State University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.397, Cancer Centers Support Grants Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.667, Social Services Block Grant Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.837, Cardiovascular Diseases Research Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.838, Lung Diseases Research Pass-Through Grantor: Northwestern University   Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.847, Diabetes, Digestive, and Kidney Diseases Extramural Research Pass-Through Grantors: Northwestern University, Duke University, University of Washington, The Regents of University of Michigan Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.853, Extramural Research Programs in the Neurosciences and Neurological Disorders Pass-Through Grantor: Rush University Medical Center Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.855, Allergy, Immunology and Transplantation Research Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.859, Biomedical Research and Research Training Pass-Through Grantor: University of Wisconsin – Madison Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.865, Child Health and Human Development Extramural Research Pass-Through Grantors: Northwestern University, University of Washington, The Regents of the University of California Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.866, Aging Research Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.946, Cooperative Agreements to Support State-Based Safe Motherhood and Infant Health Initiative Programs Pass-Through Grantor: Northwestern University Federal Grantor: United States Department of Health and Human Services (HHS) Assistance Listing No.: 93.994, Maternal and Child Health Services Block Grant to the States Pass-Through Grantor: Northwestern Memorial Hospital Criteria or specific requirement (including statutory, regulatory, or other citation): Section 200.303 of the Uniform Guidance states the following regarding internal control: “The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” The Uniform Guidance 2 CFR section 200.510 states, “(b) Schedule of expenditures of Federal awards. The auditee must also prepare a schedule of expenditures of federal awards (SEFA) for the period covered by the auditee’s financial statements which must include the total Federal awards expended as determined in accordance with §200.502 Basis for determining Federal awards expended.” Condition: Certain grants related to the Research and Development Cluster were misstated by $233,405 on the preliminary schedule of expenditures of federal awards (the Schedule) provided by management due to the inappropriate classification of costs within the general ledger; the final Schedule was corrected. In addition, an award which was not a federal grant award with expenditures of $148,388 was included on the preliminary Schedule provided by management. The final Schedule was corrected. Cause: Endeavor’s internal controls over the preparation of the Schedule were not sufficient to properly accumulate and accurately report all expenditures of federal awards. Effect or Potential Effect: Inaccurate or improper reporting of expenditures results in a misstated Schedule and can also potentially result in insufficient testing of the major programs or improper identification of major programs for audit purposes. Questioned costs: None. Context: The table below reflects the preliminary and adjusted assistance listing balances on the Schedule (only assistance listing programs which changed are included below): Assistance Listing No. Name of Federal Program Preliminary Schedule Adjusted Schedule Change 12.420 Military Medical Research and Development $ 241,025 $ 224,418 $ 16,607 93.172 Human Genome Research 14,874 15,121 (247) 93.226 Research on Healthcare Costs, Quality and Outcomes 251,325 248,842 2,483 93.242 Mental Health Research Grants 1,616,503 1,617,376 (873) 93.307 Minority Health and Health Disparities Research 17,323 15,122 2,201 93.310 Trans-NIH Research Support 313,459 313,490 (31) 93.350 National Center for Advancing Translational Sciences 516,734 518,429 (1,695) 93.351 Research Infrastructure Program 242,436 232,058 10,378 93.361 Nursing Research 8,745 7,645 1,100 93.368 21st Century Cures Act – Precision Medicine Initiative 100,324 94,609 5,715 93.394 Cancer Detection and Diagnosis Research 847,959 816,528 31,431 93.395 Cancer Treatment Research 438,349 439,286 (937) 93.396 Cancer Biology Research 93,919 88,642 5,277 93.397 Cancer Centers Support Grants 15,552 14,078 1,474 93.667 Social Services Block Grant 19,619 27,170 (7,551) 93.837 Cardiovascular Diseases Research 193,160 188,850 4,310 93.838 Lung Diseases Research 482,934 471,427 11,507 93.847 Diabetes, Digestive, and Kidney Diseases Extramural Research 1,075,493 1,035,041 40,452 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1,645,025 1,596,611 48,414 93.855 Allergy, Immunology and Transplantation Research 73,869 72,630 1,239 93.859 Biomedical Research and Research Training 363,336 366,791 (3,455) 93.865 Child Health and Human Development Extramural Research 3,790,797 3,733,008 57,789 93.866 Aging Research 1,101,363 1,098,891 2,472 93.946 Cooperative Agreements to Support State-Based Safe Motherhood and Infant Health Initiative Programs 80,039 78,033 2,006 93.994 Maternal and Child Health Services Block Grant to the States 171,995 168,656 3,339 The Role of Oral Care in Nonventilator Hospital-Acquired Pneumonia (NVHAP) Prevention 148,388 – 148,388 Total $ 13,864,545 $ 13,482,752 $ 381,793 Identification as a repeat finding, if applicable: The finding is not a repeat finding from the prior year. Recommendation: Management should implement internal controls to ensure amounts are appropriately accumulated and reported on the Schedule and all federal expenditures are appropriately identified and reported on the Schedule. Views of responsible officials: Award amounts were changed on the Schedule after management’s review was executed. Management acknowledges that implementing the new Enterprise Resource Planning (ERP) system, in 2023 presented changes to the SEFA reporting. Management has identified and addressed the reporting issues within the new system to ensure that the grant totals are appropriately captured in the SEFA. Endeavor will enhance grant management award processes by revising its procedures and adding additional controls to monitor for accuracy of the core data. Management will reinforce the importance of timeliness and accuracy of the Schedule reporting totals to facilitate accurate reporting.

FY End: 2023-12-31
Centro Hispano, Inc.
Compliance Requirement: I
Assistance Listing Number(s): 21.027 Name of Federal Program or Cluster: COVID-19 Coronavirus State and Local Fiscal Recovery Funds Name of Federal Agency: Department of the Treasury Name of Pass-through Entity: County of Dane Criteria or Specific Requirement: Title 2 U.S. Code of Federal Regulations (CFR) Section 200.303 requires establishing and maintaining internal controls that provides reasonable assurance that the non-federal entity is managing the Federal award in compliance with the F...

Assistance Listing Number(s): 21.027 Name of Federal Program or Cluster: COVID-19 Coronavirus State and Local Fiscal Recovery Funds Name of Federal Agency: Department of the Treasury Name of Pass-through Entity: County of Dane Criteria or Specific Requirement: Title 2 U.S. Code of Federal Regulations (CFR) Section 200.303 requires establishing and maintaining internal controls that provides reasonable assurance that the non-federal entity is managing the Federal award in compliance with the Federal statutes, regulations, and terms and conditions of the Federal award. Title 2 CFR Section 200.318(i) requires the maintenance of records sufficient to detail the history of procurement. These records will include the rationale for the method of procurement, selection of contract type, contractor selection or rejection, and the basis for the contract price. Condition: Centro Hispano does not have written procurement procedures, did not document the procurement history, and did not use the proper method of procurement. Cause: Centro Hispano obtained the contractor in 2022 and did not perform any procurement procedures prior to entering into the contract. During 2023, funding was obtained to cover the costs of this contract and nothing was indicated that the contractor was selected without proper procurement procedures for contracts over $250,000. Effect or Potential Effect: Contract costs not supported by adequate documentation of procurement history using the correct procurement method could be disallowed. Questioned Costs: $6,850,000 Repeat Finding: No. Recommendation: Procurements should follow the required methods per Uniform Guidance and document the full procurement history. Procurement procedures should be designed, implemented, and written consistent with Uniform Guidance. Personnel responsible for procurement should be trained on Uniform Guidance requirements and Centro Hispano's written procurement procedures. Views of Responsible Officials: Centro Hispano agrees with the finding and is establishing policies and procedures to provide adequate documentation of review and approval for procurement.

FY End: 2023-12-31
1890 Universities Foundation
Compliance Requirement: M
Significant Deficiency and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes Condition: Management did not verify that its subrecipient’s were not suspended or debarred or otherwise excluded from participating in the transactions. Criteria: In accordance with 2 CFR §200.303, the non-Federal entity must establish and maintain effective internal controls over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance wi...

Significant Deficiency and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes Condition: Management did not verify that its subrecipient’s were not suspended or debarred or otherwise excluded from participating in the transactions. Criteria: In accordance with 2 CFR §200.303, the non-Federal entity must establish and maintain effective internal controls over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Pursuant to 31 USC 7502(f)(2) (Single Audit Act Amendments of 1996 (Pub. L. No. 104-156)), 2 CFR sections 200.330, .331, and .501(h), a pass-through entity must identify the award and applicable requirements, evaluate risk, monitor, and ensure accountability of subrecipients. Additionally, when entering into subaward transactions, the non-federal entity must verify that the entity, as defined in 2 CFR section 180.995 and agency adopting regulations, not suspended or debarred or otherwise excluded from participating in the transaction. This verification may be accomplished by (1) checking the System for Award Management (SAM) Exclusions maintained by the General Services Administration (GSA). Cause: Program personnel were unaware of the requirement included in Uniform Guidance related to procedures required for subrecipient monitoring. Effect: If subrecipients were not in compliance with Uniform Guidance, the Foundation would not identify the noncompliance timely. Questioned Costs: Unknown. Recommendation: We recommend that the Foundation continue to improve the subrecipient monitoring controls its Federal programs and prepare and maintain a written plan to monitor its subrecipients. Auditee Response and Corrective Action Plan: Refer to management’s corrective action plans. Auditor’s Conclusion: Finding remains as stated.

FY End: 2023-12-31
1890 Universities Foundation
Compliance Requirement: M
Significant Deficiency and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes Condition: Management did not verify that its subrecipient’s were not suspended or debarred or otherwise excluded from participating in the transactions. Criteria: In accordance with 2 CFR §200.303, the non-Federal entity must establish and maintain effective internal controls over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance wi...

Significant Deficiency and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes Condition: Management did not verify that its subrecipient’s were not suspended or debarred or otherwise excluded from participating in the transactions. Criteria: In accordance with 2 CFR §200.303, the non-Federal entity must establish and maintain effective internal controls over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Pursuant to 31 USC 7502(f)(2) (Single Audit Act Amendments of 1996 (Pub. L. No. 104-156)), 2 CFR sections 200.330, .331, and .501(h), a pass-through entity must identify the award and applicable requirements, evaluate risk, monitor, and ensure accountability of subrecipients. Additionally, when entering into subaward transactions, the non-federal entity must verify that the entity, as defined in 2 CFR section 180.995 and agency adopting regulations, not suspended or debarred or otherwise excluded from participating in the transaction. This verification may be accomplished by (1) checking the System for Award Management (SAM) Exclusions maintained by the General Services Administration (GSA). Cause: Program personnel were unaware of the requirement included in Uniform Guidance related to procedures required for subrecipient monitoring. Effect: If subrecipients were not in compliance with Uniform Guidance, the Foundation would not identify the noncompliance timely. Questioned Costs: Unknown. Recommendation: We recommend that the Foundation continue to improve the subrecipient monitoring controls its Federal programs and prepare and maintain a written plan to monitor its subrecipients. Auditee Response and Corrective Action Plan: Refer to management’s corrective action plans. Auditor’s Conclusion: Finding remains as stated.

FY End: 2023-12-31
1890 Universities Foundation
Compliance Requirement: M
Significant Deficiency and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes Condition: Management did not verify that its subrecipient’s were not suspended or debarred or otherwise excluded from participating in the transactions. Criteria: In accordance with 2 CFR §200.303, the non-Federal entity must establish and maintain effective internal controls over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance wi...

Significant Deficiency and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes Condition: Management did not verify that its subrecipient’s were not suspended or debarred or otherwise excluded from participating in the transactions. Criteria: In accordance with 2 CFR §200.303, the non-Federal entity must establish and maintain effective internal controls over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Pursuant to 31 USC 7502(f)(2) (Single Audit Act Amendments of 1996 (Pub. L. No. 104-156)), 2 CFR sections 200.330, .331, and .501(h), a pass-through entity must identify the award and applicable requirements, evaluate risk, monitor, and ensure accountability of subrecipients. Additionally, when entering into subaward transactions, the non-federal entity must verify that the entity, as defined in 2 CFR section 180.995 and agency adopting regulations, not suspended or debarred or otherwise excluded from participating in the transaction. This verification may be accomplished by (1) checking the System for Award Management (SAM) Exclusions maintained by the General Services Administration (GSA). Cause: Program personnel were unaware of the requirement included in Uniform Guidance related to procedures required for subrecipient monitoring. Effect: If subrecipients were not in compliance with Uniform Guidance, the Foundation would not identify the noncompliance timely. Questioned Costs: Unknown. Recommendation: We recommend that the Foundation continue to improve the subrecipient monitoring controls its Federal programs and prepare and maintain a written plan to monitor its subrecipients. Auditee Response and Corrective Action Plan: Refer to management’s corrective action plans. Auditor’s Conclusion: Finding remains as stated.

FY End: 2023-12-31
1890 Universities Foundation
Compliance Requirement: M
Significant Deficiency and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes Condition: Management did not verify that its subrecipient’s were not suspended or debarred or otherwise excluded from participating in the transactions. Criteria: In accordance with 2 CFR §200.303, the non-Federal entity must establish and maintain effective internal controls over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance wi...

Significant Deficiency and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes Condition: Management did not verify that its subrecipient’s were not suspended or debarred or otherwise excluded from participating in the transactions. Criteria: In accordance with 2 CFR §200.303, the non-Federal entity must establish and maintain effective internal controls over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Pursuant to 31 USC 7502(f)(2) (Single Audit Act Amendments of 1996 (Pub. L. No. 104-156)), 2 CFR sections 200.330, .331, and .501(h), a pass-through entity must identify the award and applicable requirements, evaluate risk, monitor, and ensure accountability of subrecipients. Additionally, when entering into subaward transactions, the non-federal entity must verify that the entity, as defined in 2 CFR section 180.995 and agency adopting regulations, not suspended or debarred or otherwise excluded from participating in the transaction. This verification may be accomplished by (1) checking the System for Award Management (SAM) Exclusions maintained by the General Services Administration (GSA). Cause: Program personnel were unaware of the requirement included in Uniform Guidance related to procedures required for subrecipient monitoring. Effect: If subrecipients were not in compliance with Uniform Guidance, the Foundation would not identify the noncompliance timely. Questioned Costs: Unknown. Recommendation: We recommend that the Foundation continue to improve the subrecipient monitoring controls its Federal programs and prepare and maintain a written plan to monitor its subrecipients. Auditee Response and Corrective Action Plan: Refer to management’s corrective action plans. Auditor’s Conclusion: Finding remains as stated.

FY End: 2023-12-31
1890 Universities Foundation
Compliance Requirement: M
Significant Deficiency and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes Condition: Management did not verify that its subrecipient’s were not suspended or debarred or otherwise excluded from participating in the transactions. Criteria: In accordance with 2 CFR §200.303, the non-Federal entity must establish and maintain effective internal controls over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance wi...

Significant Deficiency and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes Condition: Management did not verify that its subrecipient’s were not suspended or debarred or otherwise excluded from participating in the transactions. Criteria: In accordance with 2 CFR §200.303, the non-Federal entity must establish and maintain effective internal controls over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Pursuant to 31 USC 7502(f)(2) (Single Audit Act Amendments of 1996 (Pub. L. No. 104-156)), 2 CFR sections 200.330, .331, and .501(h), a pass-through entity must identify the award and applicable requirements, evaluate risk, monitor, and ensure accountability of subrecipients. Additionally, when entering into subaward transactions, the non-federal entity must verify that the entity, as defined in 2 CFR section 180.995 and agency adopting regulations, not suspended or debarred or otherwise excluded from participating in the transaction. This verification may be accomplished by (1) checking the System for Award Management (SAM) Exclusions maintained by the General Services Administration (GSA). Cause: Program personnel were unaware of the requirement included in Uniform Guidance related to procedures required for subrecipient monitoring. Effect: If subrecipients were not in compliance with Uniform Guidance, the Foundation would not identify the noncompliance timely. Questioned Costs: Unknown. Recommendation: We recommend that the Foundation continue to improve the subrecipient monitoring controls its Federal programs and prepare and maintain a written plan to monitor its subrecipients. Auditee Response and Corrective Action Plan: Refer to management’s corrective action plans. Auditor’s Conclusion: Finding remains as stated.

FY End: 2023-12-31
1890 Universities Foundation
Compliance Requirement: M
Significant Deficiency and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes Condition: Management did not verify that its subrecipient’s were not suspended or debarred or otherwise excluded from participating in the transactions. Criteria: In accordance with 2 CFR §200.303, the non-Federal entity must establish and maintain effective internal controls over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance wi...

Significant Deficiency and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes Condition: Management did not verify that its subrecipient’s were not suspended or debarred or otherwise excluded from participating in the transactions. Criteria: In accordance with 2 CFR §200.303, the non-Federal entity must establish and maintain effective internal controls over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Pursuant to 31 USC 7502(f)(2) (Single Audit Act Amendments of 1996 (Pub. L. No. 104-156)), 2 CFR sections 200.330, .331, and .501(h), a pass-through entity must identify the award and applicable requirements, evaluate risk, monitor, and ensure accountability of subrecipients. Additionally, when entering into subaward transactions, the non-federal entity must verify that the entity, as defined in 2 CFR section 180.995 and agency adopting regulations, not suspended or debarred or otherwise excluded from participating in the transaction. This verification may be accomplished by (1) checking the System for Award Management (SAM) Exclusions maintained by the General Services Administration (GSA). Cause: Program personnel were unaware of the requirement included in Uniform Guidance related to procedures required for subrecipient monitoring. Effect: If subrecipients were not in compliance with Uniform Guidance, the Foundation would not identify the noncompliance timely. Questioned Costs: Unknown. Recommendation: We recommend that the Foundation continue to improve the subrecipient monitoring controls its Federal programs and prepare and maintain a written plan to monitor its subrecipients. Auditee Response and Corrective Action Plan: Refer to management’s corrective action plans. Auditor’s Conclusion: Finding remains as stated.

FY End: 2023-12-31
1890 Universities Foundation
Compliance Requirement: M
Significant Deficiency and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes Condition: Management did not verify that its subrecipient’s were not suspended or debarred or otherwise excluded from participating in the transactions. Criteria: In accordance with 2 CFR §200.303, the non-Federal entity must establish and maintain effective internal controls over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance wi...

Significant Deficiency and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes Condition: Management did not verify that its subrecipient’s were not suspended or debarred or otherwise excluded from participating in the transactions. Criteria: In accordance with 2 CFR §200.303, the non-Federal entity must establish and maintain effective internal controls over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Pursuant to 31 USC 7502(f)(2) (Single Audit Act Amendments of 1996 (Pub. L. No. 104-156)), 2 CFR sections 200.330, .331, and .501(h), a pass-through entity must identify the award and applicable requirements, evaluate risk, monitor, and ensure accountability of subrecipients. Additionally, when entering into subaward transactions, the non-federal entity must verify that the entity, as defined in 2 CFR section 180.995 and agency adopting regulations, not suspended or debarred or otherwise excluded from participating in the transaction. This verification may be accomplished by (1) checking the System for Award Management (SAM) Exclusions maintained by the General Services Administration (GSA). Cause: Program personnel were unaware of the requirement included in Uniform Guidance related to procedures required for subrecipient monitoring. Effect: If subrecipients were not in compliance with Uniform Guidance, the Foundation would not identify the noncompliance timely. Questioned Costs: Unknown. Recommendation: We recommend that the Foundation continue to improve the subrecipient monitoring controls its Federal programs and prepare and maintain a written plan to monitor its subrecipients. Auditee Response and Corrective Action Plan: Refer to management’s corrective action plans. Auditor’s Conclusion: Finding remains as stated.

FY End: 2023-12-31
1890 Universities Foundation
Compliance Requirement: M
Significant Deficiency and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes Condition: Management did not verify that its subrecipient’s were not suspended or debarred or otherwise excluded from participating in the transactions. Criteria: In accordance with 2 CFR §200.303, the non-Federal entity must establish and maintain effective internal controls over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance wi...

Significant Deficiency and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes Condition: Management did not verify that its subrecipient’s were not suspended or debarred or otherwise excluded from participating in the transactions. Criteria: In accordance with 2 CFR §200.303, the non-Federal entity must establish and maintain effective internal controls over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Pursuant to 31 USC 7502(f)(2) (Single Audit Act Amendments of 1996 (Pub. L. No. 104-156)), 2 CFR sections 200.330, .331, and .501(h), a pass-through entity must identify the award and applicable requirements, evaluate risk, monitor, and ensure accountability of subrecipients. Additionally, when entering into subaward transactions, the non-federal entity must verify that the entity, as defined in 2 CFR section 180.995 and agency adopting regulations, not suspended or debarred or otherwise excluded from participating in the transaction. This verification may be accomplished by (1) checking the System for Award Management (SAM) Exclusions maintained by the General Services Administration (GSA). Cause: Program personnel were unaware of the requirement included in Uniform Guidance related to procedures required for subrecipient monitoring. Effect: If subrecipients were not in compliance with Uniform Guidance, the Foundation would not identify the noncompliance timely. Questioned Costs: Unknown. Recommendation: We recommend that the Foundation continue to improve the subrecipient monitoring controls its Federal programs and prepare and maintain a written plan to monitor its subrecipients. Auditee Response and Corrective Action Plan: Refer to management’s corrective action plans. Auditor’s Conclusion: Finding remains as stated.

FY End: 2023-12-31
1890 Universities Foundation
Compliance Requirement: M
Significant Deficiency and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes Condition: Management did not verify that its subrecipient’s were not suspended or debarred or otherwise excluded from participating in the transactions. Criteria: In accordance with 2 CFR §200.303, the non-Federal entity must establish and maintain effective internal controls over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance wi...

Significant Deficiency and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes Condition: Management did not verify that its subrecipient’s were not suspended or debarred or otherwise excluded from participating in the transactions. Criteria: In accordance with 2 CFR §200.303, the non-Federal entity must establish and maintain effective internal controls over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Pursuant to 31 USC 7502(f)(2) (Single Audit Act Amendments of 1996 (Pub. L. No. 104-156)), 2 CFR sections 200.330, .331, and .501(h), a pass-through entity must identify the award and applicable requirements, evaluate risk, monitor, and ensure accountability of subrecipients. Additionally, when entering into subaward transactions, the non-federal entity must verify that the entity, as defined in 2 CFR section 180.995 and agency adopting regulations, not suspended or debarred or otherwise excluded from participating in the transaction. This verification may be accomplished by (1) checking the System for Award Management (SAM) Exclusions maintained by the General Services Administration (GSA). Cause: Program personnel were unaware of the requirement included in Uniform Guidance related to procedures required for subrecipient monitoring. Effect: If subrecipients were not in compliance with Uniform Guidance, the Foundation would not identify the noncompliance timely. Questioned Costs: Unknown. Recommendation: We recommend that the Foundation continue to improve the subrecipient monitoring controls its Federal programs and prepare and maintain a written plan to monitor its subrecipients. Auditee Response and Corrective Action Plan: Refer to management’s corrective action plans. Auditor’s Conclusion: Finding remains as stated.

FY End: 2023-12-31
Educare of Omaha, Inc.
Compliance Requirement: AB
US Department of Health and Human Services Passed through Omaha Public Schools Federal Financial Assistance Listing #93.600 Head Start Cluster Applicable Federal Award Number and Year – 07CH011832-03-00 11/1/2022 – 10/31/2023, 07CH011832-02-00 11/1/2021 – 10/31/2022 Activities Allowed or Unallowed and Allowable Costs/Cost Principles Material Weakness in Internal Control Over Compliance Material Noncompliance Criteria: 2 CFR 200.303(a) establishes that the auditee must establish and maintain eff...

US Department of Health and Human Services Passed through Omaha Public Schools Federal Financial Assistance Listing #93.600 Head Start Cluster Applicable Federal Award Number and Year – 07CH011832-03-00 11/1/2022 – 10/31/2023, 07CH011832-02-00 11/1/2021 – 10/31/2022 Activities Allowed or Unallowed and Allowable Costs/Cost Principles Material Weakness in Internal Control Over Compliance Material Noncompliance Criteria: 2 CFR 200.303(a) establishes that the auditee must establish and maintain effective internal control over the federal award that provides assurance that the entity is managing the federal award in compliance with federal statutes, regulations, and conditions of the federal award. Condition: The Organization requested drawdowns of grant funds in excess of amounts awarded for the grant years ended 10/31/2023 and 10/31/2022 that were denied by the passthrough agency, Omaha Public Schools, resulting in an overstatement in grant revenue and receivables, and federal awards expended included in the schedule of expenditures of federal awards. Cause: Management was not effectively tracking expenditures applied to its grant award during the year. Effect: Drawdowns submitted for reimbursement for the grant year ended 10/31/2023 in the amount of $203,096 and for the grant year ended 10/31/2022 in the amount of $102,927 were not approved resulting in grants receivable and revenue being overstated during the year. An entry was provided by management to write off the uncollectible amounts in the consolidated financial statements. The schedule of expenditures of Federal awards was adjusted to reduce federal awards expended for the amount of the overstatement during the current fiscal year. Questioned Costs: $306,023. Context: In testing the balances of grants receivable at June 30, 2024, it was noted that certain amounts were disallowed by the passthrough agency administering grant funds for the Organization. Of the $390,226 written off as uncollectible, $306,023 was applicable to the Head Start grant. Repeat Finding from Prior Years: No Recommendation: We recommend that management continue to evaluate its processes and controls over its grant monitoring to ensure that expenditures applied to each grant award are complete and accurate. Views of Responsible Officials: Management is aware of the deficiency in internal control over its grant monitoring. Management is in the process of reviewing its accounting policies and procedures over grant monitoring to ensure amounts are tracked appropriately.

FY End: 2023-12-31
Educare of Omaha, Inc.
Compliance Requirement: AB
US Department of Health and Human Services Passed through Omaha Public Schools Federal Financial Assistance Listing #93.600 Head Start Cluster Applicable Federal Award Number and Year – 07CH011832-03-00 11/1/2022 – 10/31/2023, 07CH011832-02-00 11/1/2021 – 10/31/2022 Activities Allowed or Unallowed and Allowable Costs/Cost Principles Material Weakness in Internal Control Over Compliance Material Noncompliance Criteria: 2 CFR 200.303(a) establishes that the auditee must establish and maintain eff...

US Department of Health and Human Services Passed through Omaha Public Schools Federal Financial Assistance Listing #93.600 Head Start Cluster Applicable Federal Award Number and Year – 07CH011832-03-00 11/1/2022 – 10/31/2023, 07CH011832-02-00 11/1/2021 – 10/31/2022 Activities Allowed or Unallowed and Allowable Costs/Cost Principles Material Weakness in Internal Control Over Compliance Material Noncompliance Criteria: 2 CFR 200.303(a) establishes that the auditee must establish and maintain effective internal control over the federal award that provides assurance that the entity is managing the federal award in compliance with federal statutes, regulations, and conditions of the federal award. Condition: The Organization requested drawdowns of grant funds in excess of amounts awarded for the grant years ended 10/31/2023 and 10/31/2022 that were denied by the passthrough agency, Omaha Public Schools, resulting in an overstatement in grant revenue and receivables, and federal awards expended included in the schedule of expenditures of federal awards. Cause: Management was not effectively tracking expenditures applied to its grant award during the year. Effect: Drawdowns submitted for reimbursement for the grant year ended 10/31/2023 in the amount of $203,096 and for the grant year ended 10/31/2022 in the amount of $102,927 were not approved resulting in grants receivable and revenue being overstated during the year. An entry was provided by management to write off the uncollectible amounts in the consolidated financial statements. The schedule of expenditures of Federal awards was adjusted to reduce federal awards expended for the amount of the overstatement during the current fiscal year. Questioned Costs: $306,023. Context: In testing the balances of grants receivable at June 30, 2024, it was noted that certain amounts were disallowed by the passthrough agency administering grant funds for the Organization. Of the $390,226 written off as uncollectible, $306,023 was applicable to the Head Start grant. Repeat Finding from Prior Years: No Recommendation: We recommend that management continue to evaluate its processes and controls over its grant monitoring to ensure that expenditures applied to each grant award are complete and accurate. Views of Responsible Officials: Management is aware of the deficiency in internal control over its grant monitoring. Management is in the process of reviewing its accounting policies and procedures over grant monitoring to ensure amounts are tracked appropriately.

FY End: 2023-12-31
Educare of Omaha, Inc.
Compliance Requirement: I
US Department of Agriculture Passed through Nebraska Department of Education Federal Financial Assistance Listing #10.558 Child and Adult Food Care Program (CACFP) Applicable Federal Award Number and Year – 28-1183-000 7/1/2022 6/30/2023 and 7/1/2023 – 6/30/2024 Procurement, Suspension and Debarment Material Weakness in Internal Control Over Compliance Material Noncompliance Criteria: CFR 200.303(a) establishes that the auditee must establish and maintain effective internal control over federal ...

US Department of Agriculture Passed through Nebraska Department of Education Federal Financial Assistance Listing #10.558 Child and Adult Food Care Program (CACFP) Applicable Federal Award Number and Year – 28-1183-000 7/1/2022 6/30/2023 and 7/1/2023 – 6/30/2024 Procurement, Suspension and Debarment Material Weakness in Internal Control Over Compliance Material Noncompliance Criteria: CFR 200.303(a) establishes that the auditee must establish and maintain effective internal control over federal awards that provides reasonable assurance that the Organization is managing the federal awards in compliance with federal statutes, regulations and terms and conditions of the federal award. Condition: The Organization entered into purchase agreements with two vendors without complying with their purchasing and procurement policies and did not follow their internal policies related to debarment and suspension. Cause: The Organization did not seek competitive bids for purchase agreements that met the requirements of the Organization’s procurement policy. The Organization also did not document verification that vendors utilized were listed on the General Services List of Parties Excluded from Federal Procurement or Non-procurement programs. Effect: Purchases were made by the Organization with federal grant funds that did not follow the procurement policies in place by the Organization. Also, contracts may have been entered into with parties that may have been debarred or suspended from federal procurement programs. Questioned Costs: None reported Context: We selected a sample of purchases made by the Organization subject to the procurement compliance requirement, and noted that two purchase agreements, which accounted for $543,031 of amounts expended for the program were not subjected to a competitive bid process. Repeat Finding from Prior Years: No Recommendation: The Organization should review its procedures and controls over compliance with its purchasing and procurement policies to ensure compliance with the Procurement, Suspension, and Debarment compliance requirements of the Uniform Guidance. Views of Responsible Officials: Management is aware of the deficiency in internal control and compliance with its procurement policies. Management is in the process of reviewing its existing purchasing and procurement policies and controls over the administration of those policies to ensure compliance with Uniform Guidance requirements.

FY End: 2023-12-31
Educare of Omaha, Inc.
Compliance Requirement: C
US Department of Agriculture Federal Financial Assistance Listing #10.558 Child and Adult Food Care Program (CACFP) Cash Management Material Weakness in Internal Control Over Compliance Criteria: CFR 200.303(a) establishes that the auditee must establish and maintain effective internal control over federal awards that provides reasonable assurance that the Organization is managing the federal awards in compliance with federal statutes, regulations and terms and conditions of the federal award. C...

US Department of Agriculture Federal Financial Assistance Listing #10.558 Child and Adult Food Care Program (CACFP) Cash Management Material Weakness in Internal Control Over Compliance Criteria: CFR 200.303(a) establishes that the auditee must establish and maintain effective internal control over federal awards that provides reasonable assurance that the Organization is managing the federal awards in compliance with federal statutes, regulations and terms and conditions of the federal award. Condition: The Organization was unable to provide adequate documentation to support the number of meals claimed for reimbursement. Cause: The Organization did not properly reconcile its reimbursement claims to its meal counts included in its attendance records. Effect: Meals claimed for reimbursement by the Organization were not properly supported by its internal records. Questioned Costs: None reported Context: Reimbursement to institutions is based upon the actual and verifiable daily counts of meals served by meal type (breakfast, lunch, snack and supper) and eligibility status (paid, reduced, free) multiplied by the applicable meal rate of reimbursement. A sample of four monthly reimbursement requests made by the Organization subject to the reporting requirement was selected for testing. Of the four monthly reimbursement requests selected, each of them contained variances between the reported number of meals served not agreeing to the Organization’s meal counts included in attendance records for the selected month. Of the items tested, meal counts were overstated by 3 meals for one meal type (breakfast) on one reimbursement request and understated by a total of 384 meals for other meal types (breakfast, lunch and snack) on the four monthly reimbursement requests. Repeat Finding from Prior Years: No Recommendation: We recommend that management continue to evaluate its processes and controls to ensure that reimbursement requests for meals are properly reconciled to supporting documentation. Views of Responsible Officials: Management is aware of the deficiency in internal control over compliance. Management is in the process of reviewing its existing controls over the tracking and submitting of its meal counts included in its attendance records for reimbursement.

FY End: 2023-12-31
Nationwide Children's Hospital
Compliance Requirement: I
Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseas...

Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR078395-02 93.837 Cardiovascular Diseases Research 5R01HL157491-02 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.242 Mental Health Research Grants 1P50MH127476-01A1 93.855 Allergy and Infectious Diseases Research 5R01AI139511-05 93.838 Lung Diseases Research 5R01HL155095-03 93.855 Allergy and Infectious Diseases Research 5R01AI146581-02 93.396 Cancer Biology Research 5R01CA260178-02 93.RD MP2PRT - Cosgrove 21X121F Q2 Leidos Biomedical Research Inc 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.865 Child Health and Human Development Extramural Research 5R01HD095976-04 93.847 Diabetes, Digestive, and Kidney Diseases Extramural Research 109938-19114 University of Illinois Champaign 93.396 Cancer Biology Research 5R01CA247941-03 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.273 Alcohol Research Programs 5R01AA027502-04 93.838 Lung Diseases Research 5R01HL155095-03 93.394 Cancer Detection and Diagnosis Research 5U24CA196173-08 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.859 Biomedical Research and Research Training 5R35GM131875-05 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 12.420 Military Medical Research and Development W81XWH2210597 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.396 Cancer Biology Research 1R01CA260178-01A1 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.121 Oral Diseases and Disorders Research ULRF_21-0285-01 University of Louisville Research Foundation, Inc. 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.RD CCG-BCR HHSN261201700015I 75N91022F000 93.855 Allergy and Infectious Diseases Research 5R21AI156406-02 93.865 Child Health and Human Development Extramural Research 5R01HD100420-03 93.394 Cancer Detection and Diagnosis Research 5U24CA254445-03 93.855 Allergy and Infectious Diseases Research 5R01AI139519-05 93.394 Cancer Detection and Diagnosis Research BSB06-RAMIREZ NRG Oncology Criteria or specific requirement (including statutory, regulatory or other citation): Section 200.303 of Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) states the following regarding internal control: “The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in ‘Standards for Internal Control in the Federal Government’ issued by the Comptroller General of the United States or the “Internal Control Integrated Framework,” issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Section 200.214 Suspension and Debarment “Non-Federal entities are subject to the non-procurement debarment and suspension regulations implementing Executive Orders 12549 and 12689, 2 CFR part 180. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities.” Condition: Nationwide Children’s Hospital (the Corporation) uses a third-party to perform its suspension and debarment checks on a monthly basis. However, we noted the following matters: • The Corporation did not retain the monthly supporting documentation related to the monthly suspension and debarment check. The suspension and debarment checks performed at year-end were retained. • The Corporation does not have a process to reconcile the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed to ensure the listing is complete. • The third-party vendor does not have a SOC 1 (System and Organization Controls) Report. The Corporation relied on the results of the suspension and debarment checks performed by the third-party vendor without implementing an internal process to ensure the results provided by the third-party vendor were accurate. In addition, the Corporation performs a suspension and debarment check of all new vendors prior to activating them in the procurement system. The Corporation did not consistently maintain supporting documentation to support the vendor was checked for suspension and debarment before the-“new”-vendor was set up in the procurement system. Cause: The Corporation does not have internal controls in place to require supporting documentation be maintained over the monthly suspension and debarment checks including documentation of management’s review and approval. The Corporation does not have internal controls in place to review the accuracy of third-party reports and to require a reconciliation between the vendor list sent to the third-party vendor and the results provided by the third-party vendor. The Corporation does not have internal controls in place to require supporting documentation be maintained over the suspension and debarment check performed on new vendors. Effect or potential effect: The Corporation’s vendors may not be screened for suspension and debarment, or the suspension and debarment results may not be accurate. A vendor may be set up in the procurement system that is suspended or debarred. Questioned costs: None Context: We tested a sample of 40 new vendors set up in the procurement system in 2023 and noted three instances where management did not retain the supporting documents of its review of suspension and debarment for the new vendor set up. The federal portion of procurement expenditures subject to suspension and debarment was $12,965,319 which represents approximately 12.5% of the R&D Cluster federal expenditures. The total amount reported on the schedule of expenditures of federal awards (Schedule) for the R&D cluster is $103,660,603. Identification as a repeat finding, if applicable: This is a repeat finding; see 2022-001. Recommendation: The Corporation should implement the following internal controls: • The monthly suspension and debarment review process • Reconciliation of the number of vendor files sent to the third-party vendor with the number of files received from the third-party vendor with the suspension and debarment results and review of the accuracy of the suspension and debarment results performed by the third-party vendor • Maintenance of the supporting documentation over the suspension and debarment checks performed on new vendors Views of responsible officials: Management agrees with the recommendation.   In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system. Views of responsible officials: Management agrees with the recommendation. In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system.

FY End: 2023-12-31
Nationwide Children's Hospital
Compliance Requirement: I
Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseas...

Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR078395-02 93.837 Cardiovascular Diseases Research 5R01HL157491-02 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.242 Mental Health Research Grants 1P50MH127476-01A1 93.855 Allergy and Infectious Diseases Research 5R01AI139511-05 93.838 Lung Diseases Research 5R01HL155095-03 93.855 Allergy and Infectious Diseases Research 5R01AI146581-02 93.396 Cancer Biology Research 5R01CA260178-02 93.RD MP2PRT - Cosgrove 21X121F Q2 Leidos Biomedical Research Inc 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.865 Child Health and Human Development Extramural Research 5R01HD095976-04 93.847 Diabetes, Digestive, and Kidney Diseases Extramural Research 109938-19114 University of Illinois Champaign 93.396 Cancer Biology Research 5R01CA247941-03 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.273 Alcohol Research Programs 5R01AA027502-04 93.838 Lung Diseases Research 5R01HL155095-03 93.394 Cancer Detection and Diagnosis Research 5U24CA196173-08 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.859 Biomedical Research and Research Training 5R35GM131875-05 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 12.420 Military Medical Research and Development W81XWH2210597 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.396 Cancer Biology Research 1R01CA260178-01A1 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.121 Oral Diseases and Disorders Research ULRF_21-0285-01 University of Louisville Research Foundation, Inc. 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.RD CCG-BCR HHSN261201700015I 75N91022F000 93.855 Allergy and Infectious Diseases Research 5R21AI156406-02 93.865 Child Health and Human Development Extramural Research 5R01HD100420-03 93.394 Cancer Detection and Diagnosis Research 5U24CA254445-03 93.855 Allergy and Infectious Diseases Research 5R01AI139519-05 93.394 Cancer Detection and Diagnosis Research BSB06-RAMIREZ NRG Oncology Criteria or specific requirement (including statutory, regulatory or other citation): Section 200.303 of Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) states the following regarding internal control: “The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in ‘Standards for Internal Control in the Federal Government’ issued by the Comptroller General of the United States or the “Internal Control Integrated Framework,” issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Section 200.214 Suspension and Debarment “Non-Federal entities are subject to the non-procurement debarment and suspension regulations implementing Executive Orders 12549 and 12689, 2 CFR part 180. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities.” Condition: Nationwide Children’s Hospital (the Corporation) uses a third-party to perform its suspension and debarment checks on a monthly basis. However, we noted the following matters: • The Corporation did not retain the monthly supporting documentation related to the monthly suspension and debarment check. The suspension and debarment checks performed at year-end were retained. • The Corporation does not have a process to reconcile the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed to ensure the listing is complete. • The third-party vendor does not have a SOC 1 (System and Organization Controls) Report. The Corporation relied on the results of the suspension and debarment checks performed by the third-party vendor without implementing an internal process to ensure the results provided by the third-party vendor were accurate. In addition, the Corporation performs a suspension and debarment check of all new vendors prior to activating them in the procurement system. The Corporation did not consistently maintain supporting documentation to support the vendor was checked for suspension and debarment before the-“new”-vendor was set up in the procurement system. Cause: The Corporation does not have internal controls in place to require supporting documentation be maintained over the monthly suspension and debarment checks including documentation of management’s review and approval. The Corporation does not have internal controls in place to review the accuracy of third-party reports and to require a reconciliation between the vendor list sent to the third-party vendor and the results provided by the third-party vendor. The Corporation does not have internal controls in place to require supporting documentation be maintained over the suspension and debarment check performed on new vendors. Effect or potential effect: The Corporation’s vendors may not be screened for suspension and debarment, or the suspension and debarment results may not be accurate. A vendor may be set up in the procurement system that is suspended or debarred. Questioned costs: None Context: We tested a sample of 40 new vendors set up in the procurement system in 2023 and noted three instances where management did not retain the supporting documents of its review of suspension and debarment for the new vendor set up. The federal portion of procurement expenditures subject to suspension and debarment was $12,965,319 which represents approximately 12.5% of the R&D Cluster federal expenditures. The total amount reported on the schedule of expenditures of federal awards (Schedule) for the R&D cluster is $103,660,603. Identification as a repeat finding, if applicable: This is a repeat finding; see 2022-001. Recommendation: The Corporation should implement the following internal controls: • The monthly suspension and debarment review process • Reconciliation of the number of vendor files sent to the third-party vendor with the number of files received from the third-party vendor with the suspension and debarment results and review of the accuracy of the suspension and debarment results performed by the third-party vendor • Maintenance of the supporting documentation over the suspension and debarment checks performed on new vendors Views of responsible officials: Management agrees with the recommendation.   In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system. Views of responsible officials: Management agrees with the recommendation. In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system.

FY End: 2023-12-31
Nationwide Children's Hospital
Compliance Requirement: I
Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseas...

Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR078395-02 93.837 Cardiovascular Diseases Research 5R01HL157491-02 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.242 Mental Health Research Grants 1P50MH127476-01A1 93.855 Allergy and Infectious Diseases Research 5R01AI139511-05 93.838 Lung Diseases Research 5R01HL155095-03 93.855 Allergy and Infectious Diseases Research 5R01AI146581-02 93.396 Cancer Biology Research 5R01CA260178-02 93.RD MP2PRT - Cosgrove 21X121F Q2 Leidos Biomedical Research Inc 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.865 Child Health and Human Development Extramural Research 5R01HD095976-04 93.847 Diabetes, Digestive, and Kidney Diseases Extramural Research 109938-19114 University of Illinois Champaign 93.396 Cancer Biology Research 5R01CA247941-03 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.273 Alcohol Research Programs 5R01AA027502-04 93.838 Lung Diseases Research 5R01HL155095-03 93.394 Cancer Detection and Diagnosis Research 5U24CA196173-08 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.859 Biomedical Research and Research Training 5R35GM131875-05 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 12.420 Military Medical Research and Development W81XWH2210597 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.396 Cancer Biology Research 1R01CA260178-01A1 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.121 Oral Diseases and Disorders Research ULRF_21-0285-01 University of Louisville Research Foundation, Inc. 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.RD CCG-BCR HHSN261201700015I 75N91022F000 93.855 Allergy and Infectious Diseases Research 5R21AI156406-02 93.865 Child Health and Human Development Extramural Research 5R01HD100420-03 93.394 Cancer Detection and Diagnosis Research 5U24CA254445-03 93.855 Allergy and Infectious Diseases Research 5R01AI139519-05 93.394 Cancer Detection and Diagnosis Research BSB06-RAMIREZ NRG Oncology Criteria or specific requirement (including statutory, regulatory or other citation): Section 200.303 of Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) states the following regarding internal control: “The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in ‘Standards for Internal Control in the Federal Government’ issued by the Comptroller General of the United States or the “Internal Control Integrated Framework,” issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Section 200.214 Suspension and Debarment “Non-Federal entities are subject to the non-procurement debarment and suspension regulations implementing Executive Orders 12549 and 12689, 2 CFR part 180. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities.” Condition: Nationwide Children’s Hospital (the Corporation) uses a third-party to perform its suspension and debarment checks on a monthly basis. However, we noted the following matters: • The Corporation did not retain the monthly supporting documentation related to the monthly suspension and debarment check. The suspension and debarment checks performed at year-end were retained. • The Corporation does not have a process to reconcile the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed to ensure the listing is complete. • The third-party vendor does not have a SOC 1 (System and Organization Controls) Report. The Corporation relied on the results of the suspension and debarment checks performed by the third-party vendor without implementing an internal process to ensure the results provided by the third-party vendor were accurate. In addition, the Corporation performs a suspension and debarment check of all new vendors prior to activating them in the procurement system. The Corporation did not consistently maintain supporting documentation to support the vendor was checked for suspension and debarment before the-“new”-vendor was set up in the procurement system. Cause: The Corporation does not have internal controls in place to require supporting documentation be maintained over the monthly suspension and debarment checks including documentation of management’s review and approval. The Corporation does not have internal controls in place to review the accuracy of third-party reports and to require a reconciliation between the vendor list sent to the third-party vendor and the results provided by the third-party vendor. The Corporation does not have internal controls in place to require supporting documentation be maintained over the suspension and debarment check performed on new vendors. Effect or potential effect: The Corporation’s vendors may not be screened for suspension and debarment, or the suspension and debarment results may not be accurate. A vendor may be set up in the procurement system that is suspended or debarred. Questioned costs: None Context: We tested a sample of 40 new vendors set up in the procurement system in 2023 and noted three instances where management did not retain the supporting documents of its review of suspension and debarment for the new vendor set up. The federal portion of procurement expenditures subject to suspension and debarment was $12,965,319 which represents approximately 12.5% of the R&D Cluster federal expenditures. The total amount reported on the schedule of expenditures of federal awards (Schedule) for the R&D cluster is $103,660,603. Identification as a repeat finding, if applicable: This is a repeat finding; see 2022-001. Recommendation: The Corporation should implement the following internal controls: • The monthly suspension and debarment review process • Reconciliation of the number of vendor files sent to the third-party vendor with the number of files received from the third-party vendor with the suspension and debarment results and review of the accuracy of the suspension and debarment results performed by the third-party vendor • Maintenance of the supporting documentation over the suspension and debarment checks performed on new vendors Views of responsible officials: Management agrees with the recommendation.   In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system. Views of responsible officials: Management agrees with the recommendation. In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system.

FY End: 2023-12-31
Nationwide Children's Hospital
Compliance Requirement: I
Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseas...

Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR078395-02 93.837 Cardiovascular Diseases Research 5R01HL157491-02 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.242 Mental Health Research Grants 1P50MH127476-01A1 93.855 Allergy and Infectious Diseases Research 5R01AI139511-05 93.838 Lung Diseases Research 5R01HL155095-03 93.855 Allergy and Infectious Diseases Research 5R01AI146581-02 93.396 Cancer Biology Research 5R01CA260178-02 93.RD MP2PRT - Cosgrove 21X121F Q2 Leidos Biomedical Research Inc 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.865 Child Health and Human Development Extramural Research 5R01HD095976-04 93.847 Diabetes, Digestive, and Kidney Diseases Extramural Research 109938-19114 University of Illinois Champaign 93.396 Cancer Biology Research 5R01CA247941-03 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.273 Alcohol Research Programs 5R01AA027502-04 93.838 Lung Diseases Research 5R01HL155095-03 93.394 Cancer Detection and Diagnosis Research 5U24CA196173-08 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.859 Biomedical Research and Research Training 5R35GM131875-05 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 12.420 Military Medical Research and Development W81XWH2210597 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.396 Cancer Biology Research 1R01CA260178-01A1 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.121 Oral Diseases and Disorders Research ULRF_21-0285-01 University of Louisville Research Foundation, Inc. 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.RD CCG-BCR HHSN261201700015I 75N91022F000 93.855 Allergy and Infectious Diseases Research 5R21AI156406-02 93.865 Child Health and Human Development Extramural Research 5R01HD100420-03 93.394 Cancer Detection and Diagnosis Research 5U24CA254445-03 93.855 Allergy and Infectious Diseases Research 5R01AI139519-05 93.394 Cancer Detection and Diagnosis Research BSB06-RAMIREZ NRG Oncology Criteria or specific requirement (including statutory, regulatory or other citation): Section 200.303 of Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) states the following regarding internal control: “The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in ‘Standards for Internal Control in the Federal Government’ issued by the Comptroller General of the United States or the “Internal Control Integrated Framework,” issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Section 200.214 Suspension and Debarment “Non-Federal entities are subject to the non-procurement debarment and suspension regulations implementing Executive Orders 12549 and 12689, 2 CFR part 180. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities.” Condition: Nationwide Children’s Hospital (the Corporation) uses a third-party to perform its suspension and debarment checks on a monthly basis. However, we noted the following matters: • The Corporation did not retain the monthly supporting documentation related to the monthly suspension and debarment check. The suspension and debarment checks performed at year-end were retained. • The Corporation does not have a process to reconcile the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed to ensure the listing is complete. • The third-party vendor does not have a SOC 1 (System and Organization Controls) Report. The Corporation relied on the results of the suspension and debarment checks performed by the third-party vendor without implementing an internal process to ensure the results provided by the third-party vendor were accurate. In addition, the Corporation performs a suspension and debarment check of all new vendors prior to activating them in the procurement system. The Corporation did not consistently maintain supporting documentation to support the vendor was checked for suspension and debarment before the-“new”-vendor was set up in the procurement system. Cause: The Corporation does not have internal controls in place to require supporting documentation be maintained over the monthly suspension and debarment checks including documentation of management’s review and approval. The Corporation does not have internal controls in place to review the accuracy of third-party reports and to require a reconciliation between the vendor list sent to the third-party vendor and the results provided by the third-party vendor. The Corporation does not have internal controls in place to require supporting documentation be maintained over the suspension and debarment check performed on new vendors. Effect or potential effect: The Corporation’s vendors may not be screened for suspension and debarment, or the suspension and debarment results may not be accurate. A vendor may be set up in the procurement system that is suspended or debarred. Questioned costs: None Context: We tested a sample of 40 new vendors set up in the procurement system in 2023 and noted three instances where management did not retain the supporting documents of its review of suspension and debarment for the new vendor set up. The federal portion of procurement expenditures subject to suspension and debarment was $12,965,319 which represents approximately 12.5% of the R&D Cluster federal expenditures. The total amount reported on the schedule of expenditures of federal awards (Schedule) for the R&D cluster is $103,660,603. Identification as a repeat finding, if applicable: This is a repeat finding; see 2022-001. Recommendation: The Corporation should implement the following internal controls: • The monthly suspension and debarment review process • Reconciliation of the number of vendor files sent to the third-party vendor with the number of files received from the third-party vendor with the suspension and debarment results and review of the accuracy of the suspension and debarment results performed by the third-party vendor • Maintenance of the supporting documentation over the suspension and debarment checks performed on new vendors Views of responsible officials: Management agrees with the recommendation.   In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system. Views of responsible officials: Management agrees with the recommendation. In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system.

FY End: 2023-12-31
Nationwide Children's Hospital
Compliance Requirement: I
Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseas...

Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR078395-02 93.837 Cardiovascular Diseases Research 5R01HL157491-02 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.242 Mental Health Research Grants 1P50MH127476-01A1 93.855 Allergy and Infectious Diseases Research 5R01AI139511-05 93.838 Lung Diseases Research 5R01HL155095-03 93.855 Allergy and Infectious Diseases Research 5R01AI146581-02 93.396 Cancer Biology Research 5R01CA260178-02 93.RD MP2PRT - Cosgrove 21X121F Q2 Leidos Biomedical Research Inc 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.865 Child Health and Human Development Extramural Research 5R01HD095976-04 93.847 Diabetes, Digestive, and Kidney Diseases Extramural Research 109938-19114 University of Illinois Champaign 93.396 Cancer Biology Research 5R01CA247941-03 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.273 Alcohol Research Programs 5R01AA027502-04 93.838 Lung Diseases Research 5R01HL155095-03 93.394 Cancer Detection and Diagnosis Research 5U24CA196173-08 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.859 Biomedical Research and Research Training 5R35GM131875-05 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 12.420 Military Medical Research and Development W81XWH2210597 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.396 Cancer Biology Research 1R01CA260178-01A1 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.121 Oral Diseases and Disorders Research ULRF_21-0285-01 University of Louisville Research Foundation, Inc. 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.RD CCG-BCR HHSN261201700015I 75N91022F000 93.855 Allergy and Infectious Diseases Research 5R21AI156406-02 93.865 Child Health and Human Development Extramural Research 5R01HD100420-03 93.394 Cancer Detection and Diagnosis Research 5U24CA254445-03 93.855 Allergy and Infectious Diseases Research 5R01AI139519-05 93.394 Cancer Detection and Diagnosis Research BSB06-RAMIREZ NRG Oncology Criteria or specific requirement (including statutory, regulatory or other citation): Section 200.303 of Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) states the following regarding internal control: “The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in ‘Standards for Internal Control in the Federal Government’ issued by the Comptroller General of the United States or the “Internal Control Integrated Framework,” issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Section 200.214 Suspension and Debarment “Non-Federal entities are subject to the non-procurement debarment and suspension regulations implementing Executive Orders 12549 and 12689, 2 CFR part 180. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities.” Condition: Nationwide Children’s Hospital (the Corporation) uses a third-party to perform its suspension and debarment checks on a monthly basis. However, we noted the following matters: • The Corporation did not retain the monthly supporting documentation related to the monthly suspension and debarment check. The suspension and debarment checks performed at year-end were retained. • The Corporation does not have a process to reconcile the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed to ensure the listing is complete. • The third-party vendor does not have a SOC 1 (System and Organization Controls) Report. The Corporation relied on the results of the suspension and debarment checks performed by the third-party vendor without implementing an internal process to ensure the results provided by the third-party vendor were accurate. In addition, the Corporation performs a suspension and debarment check of all new vendors prior to activating them in the procurement system. The Corporation did not consistently maintain supporting documentation to support the vendor was checked for suspension and debarment before the-“new”-vendor was set up in the procurement system. Cause: The Corporation does not have internal controls in place to require supporting documentation be maintained over the monthly suspension and debarment checks including documentation of management’s review and approval. The Corporation does not have internal controls in place to review the accuracy of third-party reports and to require a reconciliation between the vendor list sent to the third-party vendor and the results provided by the third-party vendor. The Corporation does not have internal controls in place to require supporting documentation be maintained over the suspension and debarment check performed on new vendors. Effect or potential effect: The Corporation’s vendors may not be screened for suspension and debarment, or the suspension and debarment results may not be accurate. A vendor may be set up in the procurement system that is suspended or debarred. Questioned costs: None Context: We tested a sample of 40 new vendors set up in the procurement system in 2023 and noted three instances where management did not retain the supporting documents of its review of suspension and debarment for the new vendor set up. The federal portion of procurement expenditures subject to suspension and debarment was $12,965,319 which represents approximately 12.5% of the R&D Cluster federal expenditures. The total amount reported on the schedule of expenditures of federal awards (Schedule) for the R&D cluster is $103,660,603. Identification as a repeat finding, if applicable: This is a repeat finding; see 2022-001. Recommendation: The Corporation should implement the following internal controls: • The monthly suspension and debarment review process • Reconciliation of the number of vendor files sent to the third-party vendor with the number of files received from the third-party vendor with the suspension and debarment results and review of the accuracy of the suspension and debarment results performed by the third-party vendor • Maintenance of the supporting documentation over the suspension and debarment checks performed on new vendors Views of responsible officials: Management agrees with the recommendation.   In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system. Views of responsible officials: Management agrees with the recommendation. In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system.

FY End: 2023-12-31
Nationwide Children's Hospital
Compliance Requirement: I
Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseas...

Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR078395-02 93.837 Cardiovascular Diseases Research 5R01HL157491-02 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.242 Mental Health Research Grants 1P50MH127476-01A1 93.855 Allergy and Infectious Diseases Research 5R01AI139511-05 93.838 Lung Diseases Research 5R01HL155095-03 93.855 Allergy and Infectious Diseases Research 5R01AI146581-02 93.396 Cancer Biology Research 5R01CA260178-02 93.RD MP2PRT - Cosgrove 21X121F Q2 Leidos Biomedical Research Inc 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.865 Child Health and Human Development Extramural Research 5R01HD095976-04 93.847 Diabetes, Digestive, and Kidney Diseases Extramural Research 109938-19114 University of Illinois Champaign 93.396 Cancer Biology Research 5R01CA247941-03 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.273 Alcohol Research Programs 5R01AA027502-04 93.838 Lung Diseases Research 5R01HL155095-03 93.394 Cancer Detection and Diagnosis Research 5U24CA196173-08 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.859 Biomedical Research and Research Training 5R35GM131875-05 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 12.420 Military Medical Research and Development W81XWH2210597 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.396 Cancer Biology Research 1R01CA260178-01A1 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.121 Oral Diseases and Disorders Research ULRF_21-0285-01 University of Louisville Research Foundation, Inc. 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.RD CCG-BCR HHSN261201700015I 75N91022F000 93.855 Allergy and Infectious Diseases Research 5R21AI156406-02 93.865 Child Health and Human Development Extramural Research 5R01HD100420-03 93.394 Cancer Detection and Diagnosis Research 5U24CA254445-03 93.855 Allergy and Infectious Diseases Research 5R01AI139519-05 93.394 Cancer Detection and Diagnosis Research BSB06-RAMIREZ NRG Oncology Criteria or specific requirement (including statutory, regulatory or other citation): Section 200.303 of Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) states the following regarding internal control: “The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in ‘Standards for Internal Control in the Federal Government’ issued by the Comptroller General of the United States or the “Internal Control Integrated Framework,” issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Section 200.214 Suspension and Debarment “Non-Federal entities are subject to the non-procurement debarment and suspension regulations implementing Executive Orders 12549 and 12689, 2 CFR part 180. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities.” Condition: Nationwide Children’s Hospital (the Corporation) uses a third-party to perform its suspension and debarment checks on a monthly basis. However, we noted the following matters: • The Corporation did not retain the monthly supporting documentation related to the monthly suspension and debarment check. The suspension and debarment checks performed at year-end were retained. • The Corporation does not have a process to reconcile the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed to ensure the listing is complete. • The third-party vendor does not have a SOC 1 (System and Organization Controls) Report. The Corporation relied on the results of the suspension and debarment checks performed by the third-party vendor without implementing an internal process to ensure the results provided by the third-party vendor were accurate. In addition, the Corporation performs a suspension and debarment check of all new vendors prior to activating them in the procurement system. The Corporation did not consistently maintain supporting documentation to support the vendor was checked for suspension and debarment before the-“new”-vendor was set up in the procurement system. Cause: The Corporation does not have internal controls in place to require supporting documentation be maintained over the monthly suspension and debarment checks including documentation of management’s review and approval. The Corporation does not have internal controls in place to review the accuracy of third-party reports and to require a reconciliation between the vendor list sent to the third-party vendor and the results provided by the third-party vendor. The Corporation does not have internal controls in place to require supporting documentation be maintained over the suspension and debarment check performed on new vendors. Effect or potential effect: The Corporation’s vendors may not be screened for suspension and debarment, or the suspension and debarment results may not be accurate. A vendor may be set up in the procurement system that is suspended or debarred. Questioned costs: None Context: We tested a sample of 40 new vendors set up in the procurement system in 2023 and noted three instances where management did not retain the supporting documents of its review of suspension and debarment for the new vendor set up. The federal portion of procurement expenditures subject to suspension and debarment was $12,965,319 which represents approximately 12.5% of the R&D Cluster federal expenditures. The total amount reported on the schedule of expenditures of federal awards (Schedule) for the R&D cluster is $103,660,603. Identification as a repeat finding, if applicable: This is a repeat finding; see 2022-001. Recommendation: The Corporation should implement the following internal controls: • The monthly suspension and debarment review process • Reconciliation of the number of vendor files sent to the third-party vendor with the number of files received from the third-party vendor with the suspension and debarment results and review of the accuracy of the suspension and debarment results performed by the third-party vendor • Maintenance of the supporting documentation over the suspension and debarment checks performed on new vendors Views of responsible officials: Management agrees with the recommendation.   In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system. Views of responsible officials: Management agrees with the recommendation. In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system.

FY End: 2023-12-31
Nationwide Children's Hospital
Compliance Requirement: I
Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseas...

Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR078395-02 93.837 Cardiovascular Diseases Research 5R01HL157491-02 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.242 Mental Health Research Grants 1P50MH127476-01A1 93.855 Allergy and Infectious Diseases Research 5R01AI139511-05 93.838 Lung Diseases Research 5R01HL155095-03 93.855 Allergy and Infectious Diseases Research 5R01AI146581-02 93.396 Cancer Biology Research 5R01CA260178-02 93.RD MP2PRT - Cosgrove 21X121F Q2 Leidos Biomedical Research Inc 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.865 Child Health and Human Development Extramural Research 5R01HD095976-04 93.847 Diabetes, Digestive, and Kidney Diseases Extramural Research 109938-19114 University of Illinois Champaign 93.396 Cancer Biology Research 5R01CA247941-03 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.273 Alcohol Research Programs 5R01AA027502-04 93.838 Lung Diseases Research 5R01HL155095-03 93.394 Cancer Detection and Diagnosis Research 5U24CA196173-08 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.859 Biomedical Research and Research Training 5R35GM131875-05 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 12.420 Military Medical Research and Development W81XWH2210597 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.396 Cancer Biology Research 1R01CA260178-01A1 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.121 Oral Diseases and Disorders Research ULRF_21-0285-01 University of Louisville Research Foundation, Inc. 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.RD CCG-BCR HHSN261201700015I 75N91022F000 93.855 Allergy and Infectious Diseases Research 5R21AI156406-02 93.865 Child Health and Human Development Extramural Research 5R01HD100420-03 93.394 Cancer Detection and Diagnosis Research 5U24CA254445-03 93.855 Allergy and Infectious Diseases Research 5R01AI139519-05 93.394 Cancer Detection and Diagnosis Research BSB06-RAMIREZ NRG Oncology Criteria or specific requirement (including statutory, regulatory or other citation): Section 200.303 of Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) states the following regarding internal control: “The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in ‘Standards for Internal Control in the Federal Government’ issued by the Comptroller General of the United States or the “Internal Control Integrated Framework,” issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Section 200.214 Suspension and Debarment “Non-Federal entities are subject to the non-procurement debarment and suspension regulations implementing Executive Orders 12549 and 12689, 2 CFR part 180. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities.” Condition: Nationwide Children’s Hospital (the Corporation) uses a third-party to perform its suspension and debarment checks on a monthly basis. However, we noted the following matters: • The Corporation did not retain the monthly supporting documentation related to the monthly suspension and debarment check. The suspension and debarment checks performed at year-end were retained. • The Corporation does not have a process to reconcile the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed to ensure the listing is complete. • The third-party vendor does not have a SOC 1 (System and Organization Controls) Report. The Corporation relied on the results of the suspension and debarment checks performed by the third-party vendor without implementing an internal process to ensure the results provided by the third-party vendor were accurate. In addition, the Corporation performs a suspension and debarment check of all new vendors prior to activating them in the procurement system. The Corporation did not consistently maintain supporting documentation to support the vendor was checked for suspension and debarment before the-“new”-vendor was set up in the procurement system. Cause: The Corporation does not have internal controls in place to require supporting documentation be maintained over the monthly suspension and debarment checks including documentation of management’s review and approval. The Corporation does not have internal controls in place to review the accuracy of third-party reports and to require a reconciliation between the vendor list sent to the third-party vendor and the results provided by the third-party vendor. The Corporation does not have internal controls in place to require supporting documentation be maintained over the suspension and debarment check performed on new vendors. Effect or potential effect: The Corporation’s vendors may not be screened for suspension and debarment, or the suspension and debarment results may not be accurate. A vendor may be set up in the procurement system that is suspended or debarred. Questioned costs: None Context: We tested a sample of 40 new vendors set up in the procurement system in 2023 and noted three instances where management did not retain the supporting documents of its review of suspension and debarment for the new vendor set up. The federal portion of procurement expenditures subject to suspension and debarment was $12,965,319 which represents approximately 12.5% of the R&D Cluster federal expenditures. The total amount reported on the schedule of expenditures of federal awards (Schedule) for the R&D cluster is $103,660,603. Identification as a repeat finding, if applicable: This is a repeat finding; see 2022-001. Recommendation: The Corporation should implement the following internal controls: • The monthly suspension and debarment review process • Reconciliation of the number of vendor files sent to the third-party vendor with the number of files received from the third-party vendor with the suspension and debarment results and review of the accuracy of the suspension and debarment results performed by the third-party vendor • Maintenance of the supporting documentation over the suspension and debarment checks performed on new vendors Views of responsible officials: Management agrees with the recommendation.   In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system. Views of responsible officials: Management agrees with the recommendation. In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system.

FY End: 2023-12-31
Nationwide Children's Hospital
Compliance Requirement: I
Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseas...

Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR078395-02 93.837 Cardiovascular Diseases Research 5R01HL157491-02 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.242 Mental Health Research Grants 1P50MH127476-01A1 93.855 Allergy and Infectious Diseases Research 5R01AI139511-05 93.838 Lung Diseases Research 5R01HL155095-03 93.855 Allergy and Infectious Diseases Research 5R01AI146581-02 93.396 Cancer Biology Research 5R01CA260178-02 93.RD MP2PRT - Cosgrove 21X121F Q2 Leidos Biomedical Research Inc 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.865 Child Health and Human Development Extramural Research 5R01HD095976-04 93.847 Diabetes, Digestive, and Kidney Diseases Extramural Research 109938-19114 University of Illinois Champaign 93.396 Cancer Biology Research 5R01CA247941-03 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.273 Alcohol Research Programs 5R01AA027502-04 93.838 Lung Diseases Research 5R01HL155095-03 93.394 Cancer Detection and Diagnosis Research 5U24CA196173-08 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.859 Biomedical Research and Research Training 5R35GM131875-05 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 12.420 Military Medical Research and Development W81XWH2210597 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.396 Cancer Biology Research 1R01CA260178-01A1 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.121 Oral Diseases and Disorders Research ULRF_21-0285-01 University of Louisville Research Foundation, Inc. 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.RD CCG-BCR HHSN261201700015I 75N91022F000 93.855 Allergy and Infectious Diseases Research 5R21AI156406-02 93.865 Child Health and Human Development Extramural Research 5R01HD100420-03 93.394 Cancer Detection and Diagnosis Research 5U24CA254445-03 93.855 Allergy and Infectious Diseases Research 5R01AI139519-05 93.394 Cancer Detection and Diagnosis Research BSB06-RAMIREZ NRG Oncology Criteria or specific requirement (including statutory, regulatory or other citation): Section 200.303 of Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) states the following regarding internal control: “The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in ‘Standards for Internal Control in the Federal Government’ issued by the Comptroller General of the United States or the “Internal Control Integrated Framework,” issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Section 200.214 Suspension and Debarment “Non-Federal entities are subject to the non-procurement debarment and suspension regulations implementing Executive Orders 12549 and 12689, 2 CFR part 180. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities.” Condition: Nationwide Children’s Hospital (the Corporation) uses a third-party to perform its suspension and debarment checks on a monthly basis. However, we noted the following matters: • The Corporation did not retain the monthly supporting documentation related to the monthly suspension and debarment check. The suspension and debarment checks performed at year-end were retained. • The Corporation does not have a process to reconcile the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed to ensure the listing is complete. • The third-party vendor does not have a SOC 1 (System and Organization Controls) Report. The Corporation relied on the results of the suspension and debarment checks performed by the third-party vendor without implementing an internal process to ensure the results provided by the third-party vendor were accurate. In addition, the Corporation performs a suspension and debarment check of all new vendors prior to activating them in the procurement system. The Corporation did not consistently maintain supporting documentation to support the vendor was checked for suspension and debarment before the-“new”-vendor was set up in the procurement system. Cause: The Corporation does not have internal controls in place to require supporting documentation be maintained over the monthly suspension and debarment checks including documentation of management’s review and approval. The Corporation does not have internal controls in place to review the accuracy of third-party reports and to require a reconciliation between the vendor list sent to the third-party vendor and the results provided by the third-party vendor. The Corporation does not have internal controls in place to require supporting documentation be maintained over the suspension and debarment check performed on new vendors. Effect or potential effect: The Corporation’s vendors may not be screened for suspension and debarment, or the suspension and debarment results may not be accurate. A vendor may be set up in the procurement system that is suspended or debarred. Questioned costs: None Context: We tested a sample of 40 new vendors set up in the procurement system in 2023 and noted three instances where management did not retain the supporting documents of its review of suspension and debarment for the new vendor set up. The federal portion of procurement expenditures subject to suspension and debarment was $12,965,319 which represents approximately 12.5% of the R&D Cluster federal expenditures. The total amount reported on the schedule of expenditures of federal awards (Schedule) for the R&D cluster is $103,660,603. Identification as a repeat finding, if applicable: This is a repeat finding; see 2022-001. Recommendation: The Corporation should implement the following internal controls: • The monthly suspension and debarment review process • Reconciliation of the number of vendor files sent to the third-party vendor with the number of files received from the third-party vendor with the suspension and debarment results and review of the accuracy of the suspension and debarment results performed by the third-party vendor • Maintenance of the supporting documentation over the suspension and debarment checks performed on new vendors Views of responsible officials: Management agrees with the recommendation.   In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system. Views of responsible officials: Management agrees with the recommendation. In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system.

FY End: 2023-12-31
Nationwide Children's Hospital
Compliance Requirement: I
Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseas...

Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR078395-02 93.837 Cardiovascular Diseases Research 5R01HL157491-02 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.242 Mental Health Research Grants 1P50MH127476-01A1 93.855 Allergy and Infectious Diseases Research 5R01AI139511-05 93.838 Lung Diseases Research 5R01HL155095-03 93.855 Allergy and Infectious Diseases Research 5R01AI146581-02 93.396 Cancer Biology Research 5R01CA260178-02 93.RD MP2PRT - Cosgrove 21X121F Q2 Leidos Biomedical Research Inc 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.865 Child Health and Human Development Extramural Research 5R01HD095976-04 93.847 Diabetes, Digestive, and Kidney Diseases Extramural Research 109938-19114 University of Illinois Champaign 93.396 Cancer Biology Research 5R01CA247941-03 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.273 Alcohol Research Programs 5R01AA027502-04 93.838 Lung Diseases Research 5R01HL155095-03 93.394 Cancer Detection and Diagnosis Research 5U24CA196173-08 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.859 Biomedical Research and Research Training 5R35GM131875-05 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 12.420 Military Medical Research and Development W81XWH2210597 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.396 Cancer Biology Research 1R01CA260178-01A1 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.121 Oral Diseases and Disorders Research ULRF_21-0285-01 University of Louisville Research Foundation, Inc. 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.RD CCG-BCR HHSN261201700015I 75N91022F000 93.855 Allergy and Infectious Diseases Research 5R21AI156406-02 93.865 Child Health and Human Development Extramural Research 5R01HD100420-03 93.394 Cancer Detection and Diagnosis Research 5U24CA254445-03 93.855 Allergy and Infectious Diseases Research 5R01AI139519-05 93.394 Cancer Detection and Diagnosis Research BSB06-RAMIREZ NRG Oncology Criteria or specific requirement (including statutory, regulatory or other citation): Section 200.303 of Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) states the following regarding internal control: “The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in ‘Standards for Internal Control in the Federal Government’ issued by the Comptroller General of the United States or the “Internal Control Integrated Framework,” issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Section 200.214 Suspension and Debarment “Non-Federal entities are subject to the non-procurement debarment and suspension regulations implementing Executive Orders 12549 and 12689, 2 CFR part 180. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities.” Condition: Nationwide Children’s Hospital (the Corporation) uses a third-party to perform its suspension and debarment checks on a monthly basis. However, we noted the following matters: • The Corporation did not retain the monthly supporting documentation related to the monthly suspension and debarment check. The suspension and debarment checks performed at year-end were retained. • The Corporation does not have a process to reconcile the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed to ensure the listing is complete. • The third-party vendor does not have a SOC 1 (System and Organization Controls) Report. The Corporation relied on the results of the suspension and debarment checks performed by the third-party vendor without implementing an internal process to ensure the results provided by the third-party vendor were accurate. In addition, the Corporation performs a suspension and debarment check of all new vendors prior to activating them in the procurement system. The Corporation did not consistently maintain supporting documentation to support the vendor was checked for suspension and debarment before the-“new”-vendor was set up in the procurement system. Cause: The Corporation does not have internal controls in place to require supporting documentation be maintained over the monthly suspension and debarment checks including documentation of management’s review and approval. The Corporation does not have internal controls in place to review the accuracy of third-party reports and to require a reconciliation between the vendor list sent to the third-party vendor and the results provided by the third-party vendor. The Corporation does not have internal controls in place to require supporting documentation be maintained over the suspension and debarment check performed on new vendors. Effect or potential effect: The Corporation’s vendors may not be screened for suspension and debarment, or the suspension and debarment results may not be accurate. A vendor may be set up in the procurement system that is suspended or debarred. Questioned costs: None Context: We tested a sample of 40 new vendors set up in the procurement system in 2023 and noted three instances where management did not retain the supporting documents of its review of suspension and debarment for the new vendor set up. The federal portion of procurement expenditures subject to suspension and debarment was $12,965,319 which represents approximately 12.5% of the R&D Cluster federal expenditures. The total amount reported on the schedule of expenditures of federal awards (Schedule) for the R&D cluster is $103,660,603. Identification as a repeat finding, if applicable: This is a repeat finding; see 2022-001. Recommendation: The Corporation should implement the following internal controls: • The monthly suspension and debarment review process • Reconciliation of the number of vendor files sent to the third-party vendor with the number of files received from the third-party vendor with the suspension and debarment results and review of the accuracy of the suspension and debarment results performed by the third-party vendor • Maintenance of the supporting documentation over the suspension and debarment checks performed on new vendors Views of responsible officials: Management agrees with the recommendation.   In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system. Views of responsible officials: Management agrees with the recommendation. In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system.

FY End: 2023-12-31
Nationwide Children's Hospital
Compliance Requirement: I
Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseas...

Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR078395-02 93.837 Cardiovascular Diseases Research 5R01HL157491-02 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.242 Mental Health Research Grants 1P50MH127476-01A1 93.855 Allergy and Infectious Diseases Research 5R01AI139511-05 93.838 Lung Diseases Research 5R01HL155095-03 93.855 Allergy and Infectious Diseases Research 5R01AI146581-02 93.396 Cancer Biology Research 5R01CA260178-02 93.RD MP2PRT - Cosgrove 21X121F Q2 Leidos Biomedical Research Inc 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.865 Child Health and Human Development Extramural Research 5R01HD095976-04 93.847 Diabetes, Digestive, and Kidney Diseases Extramural Research 109938-19114 University of Illinois Champaign 93.396 Cancer Biology Research 5R01CA247941-03 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.273 Alcohol Research Programs 5R01AA027502-04 93.838 Lung Diseases Research 5R01HL155095-03 93.394 Cancer Detection and Diagnosis Research 5U24CA196173-08 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.859 Biomedical Research and Research Training 5R35GM131875-05 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 12.420 Military Medical Research and Development W81XWH2210597 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.396 Cancer Biology Research 1R01CA260178-01A1 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.121 Oral Diseases and Disorders Research ULRF_21-0285-01 University of Louisville Research Foundation, Inc. 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.RD CCG-BCR HHSN261201700015I 75N91022F000 93.855 Allergy and Infectious Diseases Research 5R21AI156406-02 93.865 Child Health and Human Development Extramural Research 5R01HD100420-03 93.394 Cancer Detection and Diagnosis Research 5U24CA254445-03 93.855 Allergy and Infectious Diseases Research 5R01AI139519-05 93.394 Cancer Detection and Diagnosis Research BSB06-RAMIREZ NRG Oncology Criteria or specific requirement (including statutory, regulatory or other citation): Section 200.303 of Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) states the following regarding internal control: “The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in ‘Standards for Internal Control in the Federal Government’ issued by the Comptroller General of the United States or the “Internal Control Integrated Framework,” issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Section 200.214 Suspension and Debarment “Non-Federal entities are subject to the non-procurement debarment and suspension regulations implementing Executive Orders 12549 and 12689, 2 CFR part 180. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities.” Condition: Nationwide Children’s Hospital (the Corporation) uses a third-party to perform its suspension and debarment checks on a monthly basis. However, we noted the following matters: • The Corporation did not retain the monthly supporting documentation related to the monthly suspension and debarment check. The suspension and debarment checks performed at year-end were retained. • The Corporation does not have a process to reconcile the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed to ensure the listing is complete. • The third-party vendor does not have a SOC 1 (System and Organization Controls) Report. The Corporation relied on the results of the suspension and debarment checks performed by the third-party vendor without implementing an internal process to ensure the results provided by the third-party vendor were accurate. In addition, the Corporation performs a suspension and debarment check of all new vendors prior to activating them in the procurement system. The Corporation did not consistently maintain supporting documentation to support the vendor was checked for suspension and debarment before the-“new”-vendor was set up in the procurement system. Cause: The Corporation does not have internal controls in place to require supporting documentation be maintained over the monthly suspension and debarment checks including documentation of management’s review and approval. The Corporation does not have internal controls in place to review the accuracy of third-party reports and to require a reconciliation between the vendor list sent to the third-party vendor and the results provided by the third-party vendor. The Corporation does not have internal controls in place to require supporting documentation be maintained over the suspension and debarment check performed on new vendors. Effect or potential effect: The Corporation’s vendors may not be screened for suspension and debarment, or the suspension and debarment results may not be accurate. A vendor may be set up in the procurement system that is suspended or debarred. Questioned costs: None Context: We tested a sample of 40 new vendors set up in the procurement system in 2023 and noted three instances where management did not retain the supporting documents of its review of suspension and debarment for the new vendor set up. The federal portion of procurement expenditures subject to suspension and debarment was $12,965,319 which represents approximately 12.5% of the R&D Cluster federal expenditures. The total amount reported on the schedule of expenditures of federal awards (Schedule) for the R&D cluster is $103,660,603. Identification as a repeat finding, if applicable: This is a repeat finding; see 2022-001. Recommendation: The Corporation should implement the following internal controls: • The monthly suspension and debarment review process • Reconciliation of the number of vendor files sent to the third-party vendor with the number of files received from the third-party vendor with the suspension and debarment results and review of the accuracy of the suspension and debarment results performed by the third-party vendor • Maintenance of the supporting documentation over the suspension and debarment checks performed on new vendors Views of responsible officials: Management agrees with the recommendation.   In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system. Views of responsible officials: Management agrees with the recommendation. In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system.

FY End: 2023-12-31
Nationwide Children's Hospital
Compliance Requirement: I
Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseas...

Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR078395-02 93.837 Cardiovascular Diseases Research 5R01HL157491-02 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.242 Mental Health Research Grants 1P50MH127476-01A1 93.855 Allergy and Infectious Diseases Research 5R01AI139511-05 93.838 Lung Diseases Research 5R01HL155095-03 93.855 Allergy and Infectious Diseases Research 5R01AI146581-02 93.396 Cancer Biology Research 5R01CA260178-02 93.RD MP2PRT - Cosgrove 21X121F Q2 Leidos Biomedical Research Inc 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.865 Child Health and Human Development Extramural Research 5R01HD095976-04 93.847 Diabetes, Digestive, and Kidney Diseases Extramural Research 109938-19114 University of Illinois Champaign 93.396 Cancer Biology Research 5R01CA247941-03 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.273 Alcohol Research Programs 5R01AA027502-04 93.838 Lung Diseases Research 5R01HL155095-03 93.394 Cancer Detection and Diagnosis Research 5U24CA196173-08 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.859 Biomedical Research and Research Training 5R35GM131875-05 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 12.420 Military Medical Research and Development W81XWH2210597 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.396 Cancer Biology Research 1R01CA260178-01A1 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.121 Oral Diseases and Disorders Research ULRF_21-0285-01 University of Louisville Research Foundation, Inc. 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.RD CCG-BCR HHSN261201700015I 75N91022F000 93.855 Allergy and Infectious Diseases Research 5R21AI156406-02 93.865 Child Health and Human Development Extramural Research 5R01HD100420-03 93.394 Cancer Detection and Diagnosis Research 5U24CA254445-03 93.855 Allergy and Infectious Diseases Research 5R01AI139519-05 93.394 Cancer Detection and Diagnosis Research BSB06-RAMIREZ NRG Oncology Criteria or specific requirement (including statutory, regulatory or other citation): Section 200.303 of Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) states the following regarding internal control: “The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in ‘Standards for Internal Control in the Federal Government’ issued by the Comptroller General of the United States or the “Internal Control Integrated Framework,” issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Section 200.214 Suspension and Debarment “Non-Federal entities are subject to the non-procurement debarment and suspension regulations implementing Executive Orders 12549 and 12689, 2 CFR part 180. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities.” Condition: Nationwide Children’s Hospital (the Corporation) uses a third-party to perform its suspension and debarment checks on a monthly basis. However, we noted the following matters: • The Corporation did not retain the monthly supporting documentation related to the monthly suspension and debarment check. The suspension and debarment checks performed at year-end were retained. • The Corporation does not have a process to reconcile the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed to ensure the listing is complete. • The third-party vendor does not have a SOC 1 (System and Organization Controls) Report. The Corporation relied on the results of the suspension and debarment checks performed by the third-party vendor without implementing an internal process to ensure the results provided by the third-party vendor were accurate. In addition, the Corporation performs a suspension and debarment check of all new vendors prior to activating them in the procurement system. The Corporation did not consistently maintain supporting documentation to support the vendor was checked for suspension and debarment before the-“new”-vendor was set up in the procurement system. Cause: The Corporation does not have internal controls in place to require supporting documentation be maintained over the monthly suspension and debarment checks including documentation of management’s review and approval. The Corporation does not have internal controls in place to review the accuracy of third-party reports and to require a reconciliation between the vendor list sent to the third-party vendor and the results provided by the third-party vendor. The Corporation does not have internal controls in place to require supporting documentation be maintained over the suspension and debarment check performed on new vendors. Effect or potential effect: The Corporation’s vendors may not be screened for suspension and debarment, or the suspension and debarment results may not be accurate. A vendor may be set up in the procurement system that is suspended or debarred. Questioned costs: None Context: We tested a sample of 40 new vendors set up in the procurement system in 2023 and noted three instances where management did not retain the supporting documents of its review of suspension and debarment for the new vendor set up. The federal portion of procurement expenditures subject to suspension and debarment was $12,965,319 which represents approximately 12.5% of the R&D Cluster federal expenditures. The total amount reported on the schedule of expenditures of federal awards (Schedule) for the R&D cluster is $103,660,603. Identification as a repeat finding, if applicable: This is a repeat finding; see 2022-001. Recommendation: The Corporation should implement the following internal controls: • The monthly suspension and debarment review process • Reconciliation of the number of vendor files sent to the third-party vendor with the number of files received from the third-party vendor with the suspension and debarment results and review of the accuracy of the suspension and debarment results performed by the third-party vendor • Maintenance of the supporting documentation over the suspension and debarment checks performed on new vendors Views of responsible officials: Management agrees with the recommendation.   In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system. Views of responsible officials: Management agrees with the recommendation. In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system.

FY End: 2023-12-31
Nationwide Children's Hospital
Compliance Requirement: I
Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseas...

Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR078395-02 93.837 Cardiovascular Diseases Research 5R01HL157491-02 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.242 Mental Health Research Grants 1P50MH127476-01A1 93.855 Allergy and Infectious Diseases Research 5R01AI139511-05 93.838 Lung Diseases Research 5R01HL155095-03 93.855 Allergy and Infectious Diseases Research 5R01AI146581-02 93.396 Cancer Biology Research 5R01CA260178-02 93.RD MP2PRT - Cosgrove 21X121F Q2 Leidos Biomedical Research Inc 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.865 Child Health and Human Development Extramural Research 5R01HD095976-04 93.847 Diabetes, Digestive, and Kidney Diseases Extramural Research 109938-19114 University of Illinois Champaign 93.396 Cancer Biology Research 5R01CA247941-03 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.273 Alcohol Research Programs 5R01AA027502-04 93.838 Lung Diseases Research 5R01HL155095-03 93.394 Cancer Detection and Diagnosis Research 5U24CA196173-08 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.859 Biomedical Research and Research Training 5R35GM131875-05 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 12.420 Military Medical Research and Development W81XWH2210597 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.396 Cancer Biology Research 1R01CA260178-01A1 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.121 Oral Diseases and Disorders Research ULRF_21-0285-01 University of Louisville Research Foundation, Inc. 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.RD CCG-BCR HHSN261201700015I 75N91022F000 93.855 Allergy and Infectious Diseases Research 5R21AI156406-02 93.865 Child Health and Human Development Extramural Research 5R01HD100420-03 93.394 Cancer Detection and Diagnosis Research 5U24CA254445-03 93.855 Allergy and Infectious Diseases Research 5R01AI139519-05 93.394 Cancer Detection and Diagnosis Research BSB06-RAMIREZ NRG Oncology Criteria or specific requirement (including statutory, regulatory or other citation): Section 200.303 of Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) states the following regarding internal control: “The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in ‘Standards for Internal Control in the Federal Government’ issued by the Comptroller General of the United States or the “Internal Control Integrated Framework,” issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Section 200.214 Suspension and Debarment “Non-Federal entities are subject to the non-procurement debarment and suspension regulations implementing Executive Orders 12549 and 12689, 2 CFR part 180. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities.” Condition: Nationwide Children’s Hospital (the Corporation) uses a third-party to perform its suspension and debarment checks on a monthly basis. However, we noted the following matters: • The Corporation did not retain the monthly supporting documentation related to the monthly suspension and debarment check. The suspension and debarment checks performed at year-end were retained. • The Corporation does not have a process to reconcile the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed to ensure the listing is complete. • The third-party vendor does not have a SOC 1 (System and Organization Controls) Report. The Corporation relied on the results of the suspension and debarment checks performed by the third-party vendor without implementing an internal process to ensure the results provided by the third-party vendor were accurate. In addition, the Corporation performs a suspension and debarment check of all new vendors prior to activating them in the procurement system. The Corporation did not consistently maintain supporting documentation to support the vendor was checked for suspension and debarment before the-“new”-vendor was set up in the procurement system. Cause: The Corporation does not have internal controls in place to require supporting documentation be maintained over the monthly suspension and debarment checks including documentation of management’s review and approval. The Corporation does not have internal controls in place to review the accuracy of third-party reports and to require a reconciliation between the vendor list sent to the third-party vendor and the results provided by the third-party vendor. The Corporation does not have internal controls in place to require supporting documentation be maintained over the suspension and debarment check performed on new vendors. Effect or potential effect: The Corporation’s vendors may not be screened for suspension and debarment, or the suspension and debarment results may not be accurate. A vendor may be set up in the procurement system that is suspended or debarred. Questioned costs: None Context: We tested a sample of 40 new vendors set up in the procurement system in 2023 and noted three instances where management did not retain the supporting documents of its review of suspension and debarment for the new vendor set up. The federal portion of procurement expenditures subject to suspension and debarment was $12,965,319 which represents approximately 12.5% of the R&D Cluster federal expenditures. The total amount reported on the schedule of expenditures of federal awards (Schedule) for the R&D cluster is $103,660,603. Identification as a repeat finding, if applicable: This is a repeat finding; see 2022-001. Recommendation: The Corporation should implement the following internal controls: • The monthly suspension and debarment review process • Reconciliation of the number of vendor files sent to the third-party vendor with the number of files received from the third-party vendor with the suspension and debarment results and review of the accuracy of the suspension and debarment results performed by the third-party vendor • Maintenance of the supporting documentation over the suspension and debarment checks performed on new vendors Views of responsible officials: Management agrees with the recommendation.   In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system. Views of responsible officials: Management agrees with the recommendation. In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system.

FY End: 2023-12-31
Nationwide Children's Hospital
Compliance Requirement: I
Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseas...

Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR078395-02 93.837 Cardiovascular Diseases Research 5R01HL157491-02 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.242 Mental Health Research Grants 1P50MH127476-01A1 93.855 Allergy and Infectious Diseases Research 5R01AI139511-05 93.838 Lung Diseases Research 5R01HL155095-03 93.855 Allergy and Infectious Diseases Research 5R01AI146581-02 93.396 Cancer Biology Research 5R01CA260178-02 93.RD MP2PRT - Cosgrove 21X121F Q2 Leidos Biomedical Research Inc 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.865 Child Health and Human Development Extramural Research 5R01HD095976-04 93.847 Diabetes, Digestive, and Kidney Diseases Extramural Research 109938-19114 University of Illinois Champaign 93.396 Cancer Biology Research 5R01CA247941-03 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.273 Alcohol Research Programs 5R01AA027502-04 93.838 Lung Diseases Research 5R01HL155095-03 93.394 Cancer Detection and Diagnosis Research 5U24CA196173-08 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.859 Biomedical Research and Research Training 5R35GM131875-05 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 12.420 Military Medical Research and Development W81XWH2210597 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.396 Cancer Biology Research 1R01CA260178-01A1 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.121 Oral Diseases and Disorders Research ULRF_21-0285-01 University of Louisville Research Foundation, Inc. 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.RD CCG-BCR HHSN261201700015I 75N91022F000 93.855 Allergy and Infectious Diseases Research 5R21AI156406-02 93.865 Child Health and Human Development Extramural Research 5R01HD100420-03 93.394 Cancer Detection and Diagnosis Research 5U24CA254445-03 93.855 Allergy and Infectious Diseases Research 5R01AI139519-05 93.394 Cancer Detection and Diagnosis Research BSB06-RAMIREZ NRG Oncology Criteria or specific requirement (including statutory, regulatory or other citation): Section 200.303 of Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) states the following regarding internal control: “The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in ‘Standards for Internal Control in the Federal Government’ issued by the Comptroller General of the United States or the “Internal Control Integrated Framework,” issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Section 200.214 Suspension and Debarment “Non-Federal entities are subject to the non-procurement debarment and suspension regulations implementing Executive Orders 12549 and 12689, 2 CFR part 180. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities.” Condition: Nationwide Children’s Hospital (the Corporation) uses a third-party to perform its suspension and debarment checks on a monthly basis. However, we noted the following matters: • The Corporation did not retain the monthly supporting documentation related to the monthly suspension and debarment check. The suspension and debarment checks performed at year-end were retained. • The Corporation does not have a process to reconcile the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed to ensure the listing is complete. • The third-party vendor does not have a SOC 1 (System and Organization Controls) Report. The Corporation relied on the results of the suspension and debarment checks performed by the third-party vendor without implementing an internal process to ensure the results provided by the third-party vendor were accurate. In addition, the Corporation performs a suspension and debarment check of all new vendors prior to activating them in the procurement system. The Corporation did not consistently maintain supporting documentation to support the vendor was checked for suspension and debarment before the-“new”-vendor was set up in the procurement system. Cause: The Corporation does not have internal controls in place to require supporting documentation be maintained over the monthly suspension and debarment checks including documentation of management’s review and approval. The Corporation does not have internal controls in place to review the accuracy of third-party reports and to require a reconciliation between the vendor list sent to the third-party vendor and the results provided by the third-party vendor. The Corporation does not have internal controls in place to require supporting documentation be maintained over the suspension and debarment check performed on new vendors. Effect or potential effect: The Corporation’s vendors may not be screened for suspension and debarment, or the suspension and debarment results may not be accurate. A vendor may be set up in the procurement system that is suspended or debarred. Questioned costs: None Context: We tested a sample of 40 new vendors set up in the procurement system in 2023 and noted three instances where management did not retain the supporting documents of its review of suspension and debarment for the new vendor set up. The federal portion of procurement expenditures subject to suspension and debarment was $12,965,319 which represents approximately 12.5% of the R&D Cluster federal expenditures. The total amount reported on the schedule of expenditures of federal awards (Schedule) for the R&D cluster is $103,660,603. Identification as a repeat finding, if applicable: This is a repeat finding; see 2022-001. Recommendation: The Corporation should implement the following internal controls: • The monthly suspension and debarment review process • Reconciliation of the number of vendor files sent to the third-party vendor with the number of files received from the third-party vendor with the suspension and debarment results and review of the accuracy of the suspension and debarment results performed by the third-party vendor • Maintenance of the supporting documentation over the suspension and debarment checks performed on new vendors Views of responsible officials: Management agrees with the recommendation.   In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system. Views of responsible officials: Management agrees with the recommendation. In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system.

FY End: 2023-12-31
Nationwide Children's Hospital
Compliance Requirement: I
Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseas...

Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR078395-02 93.837 Cardiovascular Diseases Research 5R01HL157491-02 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.242 Mental Health Research Grants 1P50MH127476-01A1 93.855 Allergy and Infectious Diseases Research 5R01AI139511-05 93.838 Lung Diseases Research 5R01HL155095-03 93.855 Allergy and Infectious Diseases Research 5R01AI146581-02 93.396 Cancer Biology Research 5R01CA260178-02 93.RD MP2PRT - Cosgrove 21X121F Q2 Leidos Biomedical Research Inc 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.865 Child Health and Human Development Extramural Research 5R01HD095976-04 93.847 Diabetes, Digestive, and Kidney Diseases Extramural Research 109938-19114 University of Illinois Champaign 93.396 Cancer Biology Research 5R01CA247941-03 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.273 Alcohol Research Programs 5R01AA027502-04 93.838 Lung Diseases Research 5R01HL155095-03 93.394 Cancer Detection and Diagnosis Research 5U24CA196173-08 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.859 Biomedical Research and Research Training 5R35GM131875-05 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 12.420 Military Medical Research and Development W81XWH2210597 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.396 Cancer Biology Research 1R01CA260178-01A1 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.121 Oral Diseases and Disorders Research ULRF_21-0285-01 University of Louisville Research Foundation, Inc. 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.RD CCG-BCR HHSN261201700015I 75N91022F000 93.855 Allergy and Infectious Diseases Research 5R21AI156406-02 93.865 Child Health and Human Development Extramural Research 5R01HD100420-03 93.394 Cancer Detection and Diagnosis Research 5U24CA254445-03 93.855 Allergy and Infectious Diseases Research 5R01AI139519-05 93.394 Cancer Detection and Diagnosis Research BSB06-RAMIREZ NRG Oncology Criteria or specific requirement (including statutory, regulatory or other citation): Section 200.303 of Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) states the following regarding internal control: “The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in ‘Standards for Internal Control in the Federal Government’ issued by the Comptroller General of the United States or the “Internal Control Integrated Framework,” issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Section 200.214 Suspension and Debarment “Non-Federal entities are subject to the non-procurement debarment and suspension regulations implementing Executive Orders 12549 and 12689, 2 CFR part 180. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities.” Condition: Nationwide Children’s Hospital (the Corporation) uses a third-party to perform its suspension and debarment checks on a monthly basis. However, we noted the following matters: • The Corporation did not retain the monthly supporting documentation related to the monthly suspension and debarment check. The suspension and debarment checks performed at year-end were retained. • The Corporation does not have a process to reconcile the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed to ensure the listing is complete. • The third-party vendor does not have a SOC 1 (System and Organization Controls) Report. The Corporation relied on the results of the suspension and debarment checks performed by the third-party vendor without implementing an internal process to ensure the results provided by the third-party vendor were accurate. In addition, the Corporation performs a suspension and debarment check of all new vendors prior to activating them in the procurement system. The Corporation did not consistently maintain supporting documentation to support the vendor was checked for suspension and debarment before the-“new”-vendor was set up in the procurement system. Cause: The Corporation does not have internal controls in place to require supporting documentation be maintained over the monthly suspension and debarment checks including documentation of management’s review and approval. The Corporation does not have internal controls in place to review the accuracy of third-party reports and to require a reconciliation between the vendor list sent to the third-party vendor and the results provided by the third-party vendor. The Corporation does not have internal controls in place to require supporting documentation be maintained over the suspension and debarment check performed on new vendors. Effect or potential effect: The Corporation’s vendors may not be screened for suspension and debarment, or the suspension and debarment results may not be accurate. A vendor may be set up in the procurement system that is suspended or debarred. Questioned costs: None Context: We tested a sample of 40 new vendors set up in the procurement system in 2023 and noted three instances where management did not retain the supporting documents of its review of suspension and debarment for the new vendor set up. The federal portion of procurement expenditures subject to suspension and debarment was $12,965,319 which represents approximately 12.5% of the R&D Cluster federal expenditures. The total amount reported on the schedule of expenditures of federal awards (Schedule) for the R&D cluster is $103,660,603. Identification as a repeat finding, if applicable: This is a repeat finding; see 2022-001. Recommendation: The Corporation should implement the following internal controls: • The monthly suspension and debarment review process • Reconciliation of the number of vendor files sent to the third-party vendor with the number of files received from the third-party vendor with the suspension and debarment results and review of the accuracy of the suspension and debarment results performed by the third-party vendor • Maintenance of the supporting documentation over the suspension and debarment checks performed on new vendors Views of responsible officials: Management agrees with the recommendation.   In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system. Views of responsible officials: Management agrees with the recommendation. In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system.

FY End: 2023-12-31
Nationwide Children's Hospital
Compliance Requirement: I
Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseas...

Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR078395-02 93.837 Cardiovascular Diseases Research 5R01HL157491-02 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.242 Mental Health Research Grants 1P50MH127476-01A1 93.855 Allergy and Infectious Diseases Research 5R01AI139511-05 93.838 Lung Diseases Research 5R01HL155095-03 93.855 Allergy and Infectious Diseases Research 5R01AI146581-02 93.396 Cancer Biology Research 5R01CA260178-02 93.RD MP2PRT - Cosgrove 21X121F Q2 Leidos Biomedical Research Inc 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.865 Child Health and Human Development Extramural Research 5R01HD095976-04 93.847 Diabetes, Digestive, and Kidney Diseases Extramural Research 109938-19114 University of Illinois Champaign 93.396 Cancer Biology Research 5R01CA247941-03 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.273 Alcohol Research Programs 5R01AA027502-04 93.838 Lung Diseases Research 5R01HL155095-03 93.394 Cancer Detection and Diagnosis Research 5U24CA196173-08 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.859 Biomedical Research and Research Training 5R35GM131875-05 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 12.420 Military Medical Research and Development W81XWH2210597 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.396 Cancer Biology Research 1R01CA260178-01A1 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.121 Oral Diseases and Disorders Research ULRF_21-0285-01 University of Louisville Research Foundation, Inc. 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.RD CCG-BCR HHSN261201700015I 75N91022F000 93.855 Allergy and Infectious Diseases Research 5R21AI156406-02 93.865 Child Health and Human Development Extramural Research 5R01HD100420-03 93.394 Cancer Detection and Diagnosis Research 5U24CA254445-03 93.855 Allergy and Infectious Diseases Research 5R01AI139519-05 93.394 Cancer Detection and Diagnosis Research BSB06-RAMIREZ NRG Oncology Criteria or specific requirement (including statutory, regulatory or other citation): Section 200.303 of Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) states the following regarding internal control: “The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in ‘Standards for Internal Control in the Federal Government’ issued by the Comptroller General of the United States or the “Internal Control Integrated Framework,” issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Section 200.214 Suspension and Debarment “Non-Federal entities are subject to the non-procurement debarment and suspension regulations implementing Executive Orders 12549 and 12689, 2 CFR part 180. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities.” Condition: Nationwide Children’s Hospital (the Corporation) uses a third-party to perform its suspension and debarment checks on a monthly basis. However, we noted the following matters: • The Corporation did not retain the monthly supporting documentation related to the monthly suspension and debarment check. The suspension and debarment checks performed at year-end were retained. • The Corporation does not have a process to reconcile the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed to ensure the listing is complete. • The third-party vendor does not have a SOC 1 (System and Organization Controls) Report. The Corporation relied on the results of the suspension and debarment checks performed by the third-party vendor without implementing an internal process to ensure the results provided by the third-party vendor were accurate. In addition, the Corporation performs a suspension and debarment check of all new vendors prior to activating them in the procurement system. The Corporation did not consistently maintain supporting documentation to support the vendor was checked for suspension and debarment before the-“new”-vendor was set up in the procurement system. Cause: The Corporation does not have internal controls in place to require supporting documentation be maintained over the monthly suspension and debarment checks including documentation of management’s review and approval. The Corporation does not have internal controls in place to review the accuracy of third-party reports and to require a reconciliation between the vendor list sent to the third-party vendor and the results provided by the third-party vendor. The Corporation does not have internal controls in place to require supporting documentation be maintained over the suspension and debarment check performed on new vendors. Effect or potential effect: The Corporation’s vendors may not be screened for suspension and debarment, or the suspension and debarment results may not be accurate. A vendor may be set up in the procurement system that is suspended or debarred. Questioned costs: None Context: We tested a sample of 40 new vendors set up in the procurement system in 2023 and noted three instances where management did not retain the supporting documents of its review of suspension and debarment for the new vendor set up. The federal portion of procurement expenditures subject to suspension and debarment was $12,965,319 which represents approximately 12.5% of the R&D Cluster federal expenditures. The total amount reported on the schedule of expenditures of federal awards (Schedule) for the R&D cluster is $103,660,603. Identification as a repeat finding, if applicable: This is a repeat finding; see 2022-001. Recommendation: The Corporation should implement the following internal controls: • The monthly suspension and debarment review process • Reconciliation of the number of vendor files sent to the third-party vendor with the number of files received from the third-party vendor with the suspension and debarment results and review of the accuracy of the suspension and debarment results performed by the third-party vendor • Maintenance of the supporting documentation over the suspension and debarment checks performed on new vendors Views of responsible officials: Management agrees with the recommendation.   In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system. Views of responsible officials: Management agrees with the recommendation. In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system.

FY End: 2023-12-31
Nationwide Children's Hospital
Compliance Requirement: I
Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseas...

Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR078395-02 93.837 Cardiovascular Diseases Research 5R01HL157491-02 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.242 Mental Health Research Grants 1P50MH127476-01A1 93.855 Allergy and Infectious Diseases Research 5R01AI139511-05 93.838 Lung Diseases Research 5R01HL155095-03 93.855 Allergy and Infectious Diseases Research 5R01AI146581-02 93.396 Cancer Biology Research 5R01CA260178-02 93.RD MP2PRT - Cosgrove 21X121F Q2 Leidos Biomedical Research Inc 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.865 Child Health and Human Development Extramural Research 5R01HD095976-04 93.847 Diabetes, Digestive, and Kidney Diseases Extramural Research 109938-19114 University of Illinois Champaign 93.396 Cancer Biology Research 5R01CA247941-03 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.273 Alcohol Research Programs 5R01AA027502-04 93.838 Lung Diseases Research 5R01HL155095-03 93.394 Cancer Detection and Diagnosis Research 5U24CA196173-08 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.859 Biomedical Research and Research Training 5R35GM131875-05 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 12.420 Military Medical Research and Development W81XWH2210597 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.396 Cancer Biology Research 1R01CA260178-01A1 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.121 Oral Diseases and Disorders Research ULRF_21-0285-01 University of Louisville Research Foundation, Inc. 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.RD CCG-BCR HHSN261201700015I 75N91022F000 93.855 Allergy and Infectious Diseases Research 5R21AI156406-02 93.865 Child Health and Human Development Extramural Research 5R01HD100420-03 93.394 Cancer Detection and Diagnosis Research 5U24CA254445-03 93.855 Allergy and Infectious Diseases Research 5R01AI139519-05 93.394 Cancer Detection and Diagnosis Research BSB06-RAMIREZ NRG Oncology Criteria or specific requirement (including statutory, regulatory or other citation): Section 200.303 of Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) states the following regarding internal control: “The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in ‘Standards for Internal Control in the Federal Government’ issued by the Comptroller General of the United States or the “Internal Control Integrated Framework,” issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Section 200.214 Suspension and Debarment “Non-Federal entities are subject to the non-procurement debarment and suspension regulations implementing Executive Orders 12549 and 12689, 2 CFR part 180. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities.” Condition: Nationwide Children’s Hospital (the Corporation) uses a third-party to perform its suspension and debarment checks on a monthly basis. However, we noted the following matters: • The Corporation did not retain the monthly supporting documentation related to the monthly suspension and debarment check. The suspension and debarment checks performed at year-end were retained. • The Corporation does not have a process to reconcile the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed to ensure the listing is complete. • The third-party vendor does not have a SOC 1 (System and Organization Controls) Report. The Corporation relied on the results of the suspension and debarment checks performed by the third-party vendor without implementing an internal process to ensure the results provided by the third-party vendor were accurate. In addition, the Corporation performs a suspension and debarment check of all new vendors prior to activating them in the procurement system. The Corporation did not consistently maintain supporting documentation to support the vendor was checked for suspension and debarment before the-“new”-vendor was set up in the procurement system. Cause: The Corporation does not have internal controls in place to require supporting documentation be maintained over the monthly suspension and debarment checks including documentation of management’s review and approval. The Corporation does not have internal controls in place to review the accuracy of third-party reports and to require a reconciliation between the vendor list sent to the third-party vendor and the results provided by the third-party vendor. The Corporation does not have internal controls in place to require supporting documentation be maintained over the suspension and debarment check performed on new vendors. Effect or potential effect: The Corporation’s vendors may not be screened for suspension and debarment, or the suspension and debarment results may not be accurate. A vendor may be set up in the procurement system that is suspended or debarred. Questioned costs: None Context: We tested a sample of 40 new vendors set up in the procurement system in 2023 and noted three instances where management did not retain the supporting documents of its review of suspension and debarment for the new vendor set up. The federal portion of procurement expenditures subject to suspension and debarment was $12,965,319 which represents approximately 12.5% of the R&D Cluster federal expenditures. The total amount reported on the schedule of expenditures of federal awards (Schedule) for the R&D cluster is $103,660,603. Identification as a repeat finding, if applicable: This is a repeat finding; see 2022-001. Recommendation: The Corporation should implement the following internal controls: • The monthly suspension and debarment review process • Reconciliation of the number of vendor files sent to the third-party vendor with the number of files received from the third-party vendor with the suspension and debarment results and review of the accuracy of the suspension and debarment results performed by the third-party vendor • Maintenance of the supporting documentation over the suspension and debarment checks performed on new vendors Views of responsible officials: Management agrees with the recommendation.   In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system. Views of responsible officials: Management agrees with the recommendation. In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system.

FY End: 2023-12-31
Nationwide Children's Hospital
Compliance Requirement: I
Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseas...

Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR078395-02 93.837 Cardiovascular Diseases Research 5R01HL157491-02 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.242 Mental Health Research Grants 1P50MH127476-01A1 93.855 Allergy and Infectious Diseases Research 5R01AI139511-05 93.838 Lung Diseases Research 5R01HL155095-03 93.855 Allergy and Infectious Diseases Research 5R01AI146581-02 93.396 Cancer Biology Research 5R01CA260178-02 93.RD MP2PRT - Cosgrove 21X121F Q2 Leidos Biomedical Research Inc 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.865 Child Health and Human Development Extramural Research 5R01HD095976-04 93.847 Diabetes, Digestive, and Kidney Diseases Extramural Research 109938-19114 University of Illinois Champaign 93.396 Cancer Biology Research 5R01CA247941-03 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.273 Alcohol Research Programs 5R01AA027502-04 93.838 Lung Diseases Research 5R01HL155095-03 93.394 Cancer Detection and Diagnosis Research 5U24CA196173-08 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.859 Biomedical Research and Research Training 5R35GM131875-05 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 12.420 Military Medical Research and Development W81XWH2210597 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.396 Cancer Biology Research 1R01CA260178-01A1 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.121 Oral Diseases and Disorders Research ULRF_21-0285-01 University of Louisville Research Foundation, Inc. 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.RD CCG-BCR HHSN261201700015I 75N91022F000 93.855 Allergy and Infectious Diseases Research 5R21AI156406-02 93.865 Child Health and Human Development Extramural Research 5R01HD100420-03 93.394 Cancer Detection and Diagnosis Research 5U24CA254445-03 93.855 Allergy and Infectious Diseases Research 5R01AI139519-05 93.394 Cancer Detection and Diagnosis Research BSB06-RAMIREZ NRG Oncology Criteria or specific requirement (including statutory, regulatory or other citation): Section 200.303 of Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) states the following regarding internal control: “The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in ‘Standards for Internal Control in the Federal Government’ issued by the Comptroller General of the United States or the “Internal Control Integrated Framework,” issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Section 200.214 Suspension and Debarment “Non-Federal entities are subject to the non-procurement debarment and suspension regulations implementing Executive Orders 12549 and 12689, 2 CFR part 180. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities.” Condition: Nationwide Children’s Hospital (the Corporation) uses a third-party to perform its suspension and debarment checks on a monthly basis. However, we noted the following matters: • The Corporation did not retain the monthly supporting documentation related to the monthly suspension and debarment check. The suspension and debarment checks performed at year-end were retained. • The Corporation does not have a process to reconcile the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed to ensure the listing is complete. • The third-party vendor does not have a SOC 1 (System and Organization Controls) Report. The Corporation relied on the results of the suspension and debarment checks performed by the third-party vendor without implementing an internal process to ensure the results provided by the third-party vendor were accurate. In addition, the Corporation performs a suspension and debarment check of all new vendors prior to activating them in the procurement system. The Corporation did not consistently maintain supporting documentation to support the vendor was checked for suspension and debarment before the-“new”-vendor was set up in the procurement system. Cause: The Corporation does not have internal controls in place to require supporting documentation be maintained over the monthly suspension and debarment checks including documentation of management’s review and approval. The Corporation does not have internal controls in place to review the accuracy of third-party reports and to require a reconciliation between the vendor list sent to the third-party vendor and the results provided by the third-party vendor. The Corporation does not have internal controls in place to require supporting documentation be maintained over the suspension and debarment check performed on new vendors. Effect or potential effect: The Corporation’s vendors may not be screened for suspension and debarment, or the suspension and debarment results may not be accurate. A vendor may be set up in the procurement system that is suspended or debarred. Questioned costs: None Context: We tested a sample of 40 new vendors set up in the procurement system in 2023 and noted three instances where management did not retain the supporting documents of its review of suspension and debarment for the new vendor set up. The federal portion of procurement expenditures subject to suspension and debarment was $12,965,319 which represents approximately 12.5% of the R&D Cluster federal expenditures. The total amount reported on the schedule of expenditures of federal awards (Schedule) for the R&D cluster is $103,660,603. Identification as a repeat finding, if applicable: This is a repeat finding; see 2022-001. Recommendation: The Corporation should implement the following internal controls: • The monthly suspension and debarment review process • Reconciliation of the number of vendor files sent to the third-party vendor with the number of files received from the third-party vendor with the suspension and debarment results and review of the accuracy of the suspension and debarment results performed by the third-party vendor • Maintenance of the supporting documentation over the suspension and debarment checks performed on new vendors Views of responsible officials: Management agrees with the recommendation.   In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system. Views of responsible officials: Management agrees with the recommendation. In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system.

FY End: 2023-12-31
Nationwide Children's Hospital
Compliance Requirement: I
Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseas...

Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR078395-02 93.837 Cardiovascular Diseases Research 5R01HL157491-02 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.242 Mental Health Research Grants 1P50MH127476-01A1 93.855 Allergy and Infectious Diseases Research 5R01AI139511-05 93.838 Lung Diseases Research 5R01HL155095-03 93.855 Allergy and Infectious Diseases Research 5R01AI146581-02 93.396 Cancer Biology Research 5R01CA260178-02 93.RD MP2PRT - Cosgrove 21X121F Q2 Leidos Biomedical Research Inc 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.865 Child Health and Human Development Extramural Research 5R01HD095976-04 93.847 Diabetes, Digestive, and Kidney Diseases Extramural Research 109938-19114 University of Illinois Champaign 93.396 Cancer Biology Research 5R01CA247941-03 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.273 Alcohol Research Programs 5R01AA027502-04 93.838 Lung Diseases Research 5R01HL155095-03 93.394 Cancer Detection and Diagnosis Research 5U24CA196173-08 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.859 Biomedical Research and Research Training 5R35GM131875-05 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 12.420 Military Medical Research and Development W81XWH2210597 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.396 Cancer Biology Research 1R01CA260178-01A1 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.121 Oral Diseases and Disorders Research ULRF_21-0285-01 University of Louisville Research Foundation, Inc. 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.RD CCG-BCR HHSN261201700015I 75N91022F000 93.855 Allergy and Infectious Diseases Research 5R21AI156406-02 93.865 Child Health and Human Development Extramural Research 5R01HD100420-03 93.394 Cancer Detection and Diagnosis Research 5U24CA254445-03 93.855 Allergy and Infectious Diseases Research 5R01AI139519-05 93.394 Cancer Detection and Diagnosis Research BSB06-RAMIREZ NRG Oncology Criteria or specific requirement (including statutory, regulatory or other citation): Section 200.303 of Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) states the following regarding internal control: “The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in ‘Standards for Internal Control in the Federal Government’ issued by the Comptroller General of the United States or the “Internal Control Integrated Framework,” issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Section 200.214 Suspension and Debarment “Non-Federal entities are subject to the non-procurement debarment and suspension regulations implementing Executive Orders 12549 and 12689, 2 CFR part 180. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities.” Condition: Nationwide Children’s Hospital (the Corporation) uses a third-party to perform its suspension and debarment checks on a monthly basis. However, we noted the following matters: • The Corporation did not retain the monthly supporting documentation related to the monthly suspension and debarment check. The suspension and debarment checks performed at year-end were retained. • The Corporation does not have a process to reconcile the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed to ensure the listing is complete. • The third-party vendor does not have a SOC 1 (System and Organization Controls) Report. The Corporation relied on the results of the suspension and debarment checks performed by the third-party vendor without implementing an internal process to ensure the results provided by the third-party vendor were accurate. In addition, the Corporation performs a suspension and debarment check of all new vendors prior to activating them in the procurement system. The Corporation did not consistently maintain supporting documentation to support the vendor was checked for suspension and debarment before the-“new”-vendor was set up in the procurement system. Cause: The Corporation does not have internal controls in place to require supporting documentation be maintained over the monthly suspension and debarment checks including documentation of management’s review and approval. The Corporation does not have internal controls in place to review the accuracy of third-party reports and to require a reconciliation between the vendor list sent to the third-party vendor and the results provided by the third-party vendor. The Corporation does not have internal controls in place to require supporting documentation be maintained over the suspension and debarment check performed on new vendors. Effect or potential effect: The Corporation’s vendors may not be screened for suspension and debarment, or the suspension and debarment results may not be accurate. A vendor may be set up in the procurement system that is suspended or debarred. Questioned costs: None Context: We tested a sample of 40 new vendors set up in the procurement system in 2023 and noted three instances where management did not retain the supporting documents of its review of suspension and debarment for the new vendor set up. The federal portion of procurement expenditures subject to suspension and debarment was $12,965,319 which represents approximately 12.5% of the R&D Cluster federal expenditures. The total amount reported on the schedule of expenditures of federal awards (Schedule) for the R&D cluster is $103,660,603. Identification as a repeat finding, if applicable: This is a repeat finding; see 2022-001. Recommendation: The Corporation should implement the following internal controls: • The monthly suspension and debarment review process • Reconciliation of the number of vendor files sent to the third-party vendor with the number of files received from the third-party vendor with the suspension and debarment results and review of the accuracy of the suspension and debarment results performed by the third-party vendor • Maintenance of the supporting documentation over the suspension and debarment checks performed on new vendors Views of responsible officials: Management agrees with the recommendation.   In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system. Views of responsible officials: Management agrees with the recommendation. In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system.

FY End: 2023-12-31
Nationwide Children's Hospital
Compliance Requirement: I
Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseas...

Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR078395-02 93.837 Cardiovascular Diseases Research 5R01HL157491-02 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.242 Mental Health Research Grants 1P50MH127476-01A1 93.855 Allergy and Infectious Diseases Research 5R01AI139511-05 93.838 Lung Diseases Research 5R01HL155095-03 93.855 Allergy and Infectious Diseases Research 5R01AI146581-02 93.396 Cancer Biology Research 5R01CA260178-02 93.RD MP2PRT - Cosgrove 21X121F Q2 Leidos Biomedical Research Inc 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.865 Child Health and Human Development Extramural Research 5R01HD095976-04 93.847 Diabetes, Digestive, and Kidney Diseases Extramural Research 109938-19114 University of Illinois Champaign 93.396 Cancer Biology Research 5R01CA247941-03 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.273 Alcohol Research Programs 5R01AA027502-04 93.838 Lung Diseases Research 5R01HL155095-03 93.394 Cancer Detection and Diagnosis Research 5U24CA196173-08 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.859 Biomedical Research and Research Training 5R35GM131875-05 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 12.420 Military Medical Research and Development W81XWH2210597 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.396 Cancer Biology Research 1R01CA260178-01A1 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.121 Oral Diseases and Disorders Research ULRF_21-0285-01 University of Louisville Research Foundation, Inc. 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.RD CCG-BCR HHSN261201700015I 75N91022F000 93.855 Allergy and Infectious Diseases Research 5R21AI156406-02 93.865 Child Health and Human Development Extramural Research 5R01HD100420-03 93.394 Cancer Detection and Diagnosis Research 5U24CA254445-03 93.855 Allergy and Infectious Diseases Research 5R01AI139519-05 93.394 Cancer Detection and Diagnosis Research BSB06-RAMIREZ NRG Oncology Criteria or specific requirement (including statutory, regulatory or other citation): Section 200.303 of Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) states the following regarding internal control: “The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in ‘Standards for Internal Control in the Federal Government’ issued by the Comptroller General of the United States or the “Internal Control Integrated Framework,” issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Section 200.214 Suspension and Debarment “Non-Federal entities are subject to the non-procurement debarment and suspension regulations implementing Executive Orders 12549 and 12689, 2 CFR part 180. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities.” Condition: Nationwide Children’s Hospital (the Corporation) uses a third-party to perform its suspension and debarment checks on a monthly basis. However, we noted the following matters: • The Corporation did not retain the monthly supporting documentation related to the monthly suspension and debarment check. The suspension and debarment checks performed at year-end were retained. • The Corporation does not have a process to reconcile the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed to ensure the listing is complete. • The third-party vendor does not have a SOC 1 (System and Organization Controls) Report. The Corporation relied on the results of the suspension and debarment checks performed by the third-party vendor without implementing an internal process to ensure the results provided by the third-party vendor were accurate. In addition, the Corporation performs a suspension and debarment check of all new vendors prior to activating them in the procurement system. The Corporation did not consistently maintain supporting documentation to support the vendor was checked for suspension and debarment before the-“new”-vendor was set up in the procurement system. Cause: The Corporation does not have internal controls in place to require supporting documentation be maintained over the monthly suspension and debarment checks including documentation of management’s review and approval. The Corporation does not have internal controls in place to review the accuracy of third-party reports and to require a reconciliation between the vendor list sent to the third-party vendor and the results provided by the third-party vendor. The Corporation does not have internal controls in place to require supporting documentation be maintained over the suspension and debarment check performed on new vendors. Effect or potential effect: The Corporation’s vendors may not be screened for suspension and debarment, or the suspension and debarment results may not be accurate. A vendor may be set up in the procurement system that is suspended or debarred. Questioned costs: None Context: We tested a sample of 40 new vendors set up in the procurement system in 2023 and noted three instances where management did not retain the supporting documents of its review of suspension and debarment for the new vendor set up. The federal portion of procurement expenditures subject to suspension and debarment was $12,965,319 which represents approximately 12.5% of the R&D Cluster federal expenditures. The total amount reported on the schedule of expenditures of federal awards (Schedule) for the R&D cluster is $103,660,603. Identification as a repeat finding, if applicable: This is a repeat finding; see 2022-001. Recommendation: The Corporation should implement the following internal controls: • The monthly suspension and debarment review process • Reconciliation of the number of vendor files sent to the third-party vendor with the number of files received from the third-party vendor with the suspension and debarment results and review of the accuracy of the suspension and debarment results performed by the third-party vendor • Maintenance of the supporting documentation over the suspension and debarment checks performed on new vendors Views of responsible officials: Management agrees with the recommendation.   In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system. Views of responsible officials: Management agrees with the recommendation. In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system.

FY End: 2023-12-31
Nationwide Children's Hospital
Compliance Requirement: I
Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseas...

Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR078395-02 93.837 Cardiovascular Diseases Research 5R01HL157491-02 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.242 Mental Health Research Grants 1P50MH127476-01A1 93.855 Allergy and Infectious Diseases Research 5R01AI139511-05 93.838 Lung Diseases Research 5R01HL155095-03 93.855 Allergy and Infectious Diseases Research 5R01AI146581-02 93.396 Cancer Biology Research 5R01CA260178-02 93.RD MP2PRT - Cosgrove 21X121F Q2 Leidos Biomedical Research Inc 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.865 Child Health and Human Development Extramural Research 5R01HD095976-04 93.847 Diabetes, Digestive, and Kidney Diseases Extramural Research 109938-19114 University of Illinois Champaign 93.396 Cancer Biology Research 5R01CA247941-03 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.273 Alcohol Research Programs 5R01AA027502-04 93.838 Lung Diseases Research 5R01HL155095-03 93.394 Cancer Detection and Diagnosis Research 5U24CA196173-08 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.859 Biomedical Research and Research Training 5R35GM131875-05 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 12.420 Military Medical Research and Development W81XWH2210597 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.396 Cancer Biology Research 1R01CA260178-01A1 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.121 Oral Diseases and Disorders Research ULRF_21-0285-01 University of Louisville Research Foundation, Inc. 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.RD CCG-BCR HHSN261201700015I 75N91022F000 93.855 Allergy and Infectious Diseases Research 5R21AI156406-02 93.865 Child Health and Human Development Extramural Research 5R01HD100420-03 93.394 Cancer Detection and Diagnosis Research 5U24CA254445-03 93.855 Allergy and Infectious Diseases Research 5R01AI139519-05 93.394 Cancer Detection and Diagnosis Research BSB06-RAMIREZ NRG Oncology Criteria or specific requirement (including statutory, regulatory or other citation): Section 200.303 of Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) states the following regarding internal control: “The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in ‘Standards for Internal Control in the Federal Government’ issued by the Comptroller General of the United States or the “Internal Control Integrated Framework,” issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Section 200.214 Suspension and Debarment “Non-Federal entities are subject to the non-procurement debarment and suspension regulations implementing Executive Orders 12549 and 12689, 2 CFR part 180. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities.” Condition: Nationwide Children’s Hospital (the Corporation) uses a third-party to perform its suspension and debarment checks on a monthly basis. However, we noted the following matters: • The Corporation did not retain the monthly supporting documentation related to the monthly suspension and debarment check. The suspension and debarment checks performed at year-end were retained. • The Corporation does not have a process to reconcile the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed to ensure the listing is complete. • The third-party vendor does not have a SOC 1 (System and Organization Controls) Report. The Corporation relied on the results of the suspension and debarment checks performed by the third-party vendor without implementing an internal process to ensure the results provided by the third-party vendor were accurate. In addition, the Corporation performs a suspension and debarment check of all new vendors prior to activating them in the procurement system. The Corporation did not consistently maintain supporting documentation to support the vendor was checked for suspension and debarment before the-“new”-vendor was set up in the procurement system. Cause: The Corporation does not have internal controls in place to require supporting documentation be maintained over the monthly suspension and debarment checks including documentation of management’s review and approval. The Corporation does not have internal controls in place to review the accuracy of third-party reports and to require a reconciliation between the vendor list sent to the third-party vendor and the results provided by the third-party vendor. The Corporation does not have internal controls in place to require supporting documentation be maintained over the suspension and debarment check performed on new vendors. Effect or potential effect: The Corporation’s vendors may not be screened for suspension and debarment, or the suspension and debarment results may not be accurate. A vendor may be set up in the procurement system that is suspended or debarred. Questioned costs: None Context: We tested a sample of 40 new vendors set up in the procurement system in 2023 and noted three instances where management did not retain the supporting documents of its review of suspension and debarment for the new vendor set up. The federal portion of procurement expenditures subject to suspension and debarment was $12,965,319 which represents approximately 12.5% of the R&D Cluster federal expenditures. The total amount reported on the schedule of expenditures of federal awards (Schedule) for the R&D cluster is $103,660,603. Identification as a repeat finding, if applicable: This is a repeat finding; see 2022-001. Recommendation: The Corporation should implement the following internal controls: • The monthly suspension and debarment review process • Reconciliation of the number of vendor files sent to the third-party vendor with the number of files received from the third-party vendor with the suspension and debarment results and review of the accuracy of the suspension and debarment results performed by the third-party vendor • Maintenance of the supporting documentation over the suspension and debarment checks performed on new vendors Views of responsible officials: Management agrees with the recommendation.   In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system. Views of responsible officials: Management agrees with the recommendation. In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system.

FY End: 2023-12-31
Nationwide Children's Hospital
Compliance Requirement: I
Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseas...

Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR078395-02 93.837 Cardiovascular Diseases Research 5R01HL157491-02 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.242 Mental Health Research Grants 1P50MH127476-01A1 93.855 Allergy and Infectious Diseases Research 5R01AI139511-05 93.838 Lung Diseases Research 5R01HL155095-03 93.855 Allergy and Infectious Diseases Research 5R01AI146581-02 93.396 Cancer Biology Research 5R01CA260178-02 93.RD MP2PRT - Cosgrove 21X121F Q2 Leidos Biomedical Research Inc 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.865 Child Health and Human Development Extramural Research 5R01HD095976-04 93.847 Diabetes, Digestive, and Kidney Diseases Extramural Research 109938-19114 University of Illinois Champaign 93.396 Cancer Biology Research 5R01CA247941-03 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.273 Alcohol Research Programs 5R01AA027502-04 93.838 Lung Diseases Research 5R01HL155095-03 93.394 Cancer Detection and Diagnosis Research 5U24CA196173-08 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.859 Biomedical Research and Research Training 5R35GM131875-05 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 12.420 Military Medical Research and Development W81XWH2210597 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.396 Cancer Biology Research 1R01CA260178-01A1 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.121 Oral Diseases and Disorders Research ULRF_21-0285-01 University of Louisville Research Foundation, Inc. 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.RD CCG-BCR HHSN261201700015I 75N91022F000 93.855 Allergy and Infectious Diseases Research 5R21AI156406-02 93.865 Child Health and Human Development Extramural Research 5R01HD100420-03 93.394 Cancer Detection and Diagnosis Research 5U24CA254445-03 93.855 Allergy and Infectious Diseases Research 5R01AI139519-05 93.394 Cancer Detection and Diagnosis Research BSB06-RAMIREZ NRG Oncology Criteria or specific requirement (including statutory, regulatory or other citation): Section 200.303 of Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) states the following regarding internal control: “The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in ‘Standards for Internal Control in the Federal Government’ issued by the Comptroller General of the United States or the “Internal Control Integrated Framework,” issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Section 200.214 Suspension and Debarment “Non-Federal entities are subject to the non-procurement debarment and suspension regulations implementing Executive Orders 12549 and 12689, 2 CFR part 180. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities.” Condition: Nationwide Children’s Hospital (the Corporation) uses a third-party to perform its suspension and debarment checks on a monthly basis. However, we noted the following matters: • The Corporation did not retain the monthly supporting documentation related to the monthly suspension and debarment check. The suspension and debarment checks performed at year-end were retained. • The Corporation does not have a process to reconcile the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed to ensure the listing is complete. • The third-party vendor does not have a SOC 1 (System and Organization Controls) Report. The Corporation relied on the results of the suspension and debarment checks performed by the third-party vendor without implementing an internal process to ensure the results provided by the third-party vendor were accurate. In addition, the Corporation performs a suspension and debarment check of all new vendors prior to activating them in the procurement system. The Corporation did not consistently maintain supporting documentation to support the vendor was checked for suspension and debarment before the-“new”-vendor was set up in the procurement system. Cause: The Corporation does not have internal controls in place to require supporting documentation be maintained over the monthly suspension and debarment checks including documentation of management’s review and approval. The Corporation does not have internal controls in place to review the accuracy of third-party reports and to require a reconciliation between the vendor list sent to the third-party vendor and the results provided by the third-party vendor. The Corporation does not have internal controls in place to require supporting documentation be maintained over the suspension and debarment check performed on new vendors. Effect or potential effect: The Corporation’s vendors may not be screened for suspension and debarment, or the suspension and debarment results may not be accurate. A vendor may be set up in the procurement system that is suspended or debarred. Questioned costs: None Context: We tested a sample of 40 new vendors set up in the procurement system in 2023 and noted three instances where management did not retain the supporting documents of its review of suspension and debarment for the new vendor set up. The federal portion of procurement expenditures subject to suspension and debarment was $12,965,319 which represents approximately 12.5% of the R&D Cluster federal expenditures. The total amount reported on the schedule of expenditures of federal awards (Schedule) for the R&D cluster is $103,660,603. Identification as a repeat finding, if applicable: This is a repeat finding; see 2022-001. Recommendation: The Corporation should implement the following internal controls: • The monthly suspension and debarment review process • Reconciliation of the number of vendor files sent to the third-party vendor with the number of files received from the third-party vendor with the suspension and debarment results and review of the accuracy of the suspension and debarment results performed by the third-party vendor • Maintenance of the supporting documentation over the suspension and debarment checks performed on new vendors Views of responsible officials: Management agrees with the recommendation.   In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system. Views of responsible officials: Management agrees with the recommendation. In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system.

FY End: 2023-12-31
Nationwide Children's Hospital
Compliance Requirement: I
Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseas...

Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR078395-02 93.837 Cardiovascular Diseases Research 5R01HL157491-02 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.242 Mental Health Research Grants 1P50MH127476-01A1 93.855 Allergy and Infectious Diseases Research 5R01AI139511-05 93.838 Lung Diseases Research 5R01HL155095-03 93.855 Allergy and Infectious Diseases Research 5R01AI146581-02 93.396 Cancer Biology Research 5R01CA260178-02 93.RD MP2PRT - Cosgrove 21X121F Q2 Leidos Biomedical Research Inc 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.865 Child Health and Human Development Extramural Research 5R01HD095976-04 93.847 Diabetes, Digestive, and Kidney Diseases Extramural Research 109938-19114 University of Illinois Champaign 93.396 Cancer Biology Research 5R01CA247941-03 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.273 Alcohol Research Programs 5R01AA027502-04 93.838 Lung Diseases Research 5R01HL155095-03 93.394 Cancer Detection and Diagnosis Research 5U24CA196173-08 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.859 Biomedical Research and Research Training 5R35GM131875-05 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 12.420 Military Medical Research and Development W81XWH2210597 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.396 Cancer Biology Research 1R01CA260178-01A1 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.121 Oral Diseases and Disorders Research ULRF_21-0285-01 University of Louisville Research Foundation, Inc. 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.RD CCG-BCR HHSN261201700015I 75N91022F000 93.855 Allergy and Infectious Diseases Research 5R21AI156406-02 93.865 Child Health and Human Development Extramural Research 5R01HD100420-03 93.394 Cancer Detection and Diagnosis Research 5U24CA254445-03 93.855 Allergy and Infectious Diseases Research 5R01AI139519-05 93.394 Cancer Detection and Diagnosis Research BSB06-RAMIREZ NRG Oncology Criteria or specific requirement (including statutory, regulatory or other citation): Section 200.303 of Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) states the following regarding internal control: “The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in ‘Standards for Internal Control in the Federal Government’ issued by the Comptroller General of the United States or the “Internal Control Integrated Framework,” issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Section 200.214 Suspension and Debarment “Non-Federal entities are subject to the non-procurement debarment and suspension regulations implementing Executive Orders 12549 and 12689, 2 CFR part 180. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities.” Condition: Nationwide Children’s Hospital (the Corporation) uses a third-party to perform its suspension and debarment checks on a monthly basis. However, we noted the following matters: • The Corporation did not retain the monthly supporting documentation related to the monthly suspension and debarment check. The suspension and debarment checks performed at year-end were retained. • The Corporation does not have a process to reconcile the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed to ensure the listing is complete. • The third-party vendor does not have a SOC 1 (System and Organization Controls) Report. The Corporation relied on the results of the suspension and debarment checks performed by the third-party vendor without implementing an internal process to ensure the results provided by the third-party vendor were accurate. In addition, the Corporation performs a suspension and debarment check of all new vendors prior to activating them in the procurement system. The Corporation did not consistently maintain supporting documentation to support the vendor was checked for suspension and debarment before the-“new”-vendor was set up in the procurement system. Cause: The Corporation does not have internal controls in place to require supporting documentation be maintained over the monthly suspension and debarment checks including documentation of management’s review and approval. The Corporation does not have internal controls in place to review the accuracy of third-party reports and to require a reconciliation between the vendor list sent to the third-party vendor and the results provided by the third-party vendor. The Corporation does not have internal controls in place to require supporting documentation be maintained over the suspension and debarment check performed on new vendors. Effect or potential effect: The Corporation’s vendors may not be screened for suspension and debarment, or the suspension and debarment results may not be accurate. A vendor may be set up in the procurement system that is suspended or debarred. Questioned costs: None Context: We tested a sample of 40 new vendors set up in the procurement system in 2023 and noted three instances where management did not retain the supporting documents of its review of suspension and debarment for the new vendor set up. The federal portion of procurement expenditures subject to suspension and debarment was $12,965,319 which represents approximately 12.5% of the R&D Cluster federal expenditures. The total amount reported on the schedule of expenditures of federal awards (Schedule) for the R&D cluster is $103,660,603. Identification as a repeat finding, if applicable: This is a repeat finding; see 2022-001. Recommendation: The Corporation should implement the following internal controls: • The monthly suspension and debarment review process • Reconciliation of the number of vendor files sent to the third-party vendor with the number of files received from the third-party vendor with the suspension and debarment results and review of the accuracy of the suspension and debarment results performed by the third-party vendor • Maintenance of the supporting documentation over the suspension and debarment checks performed on new vendors Views of responsible officials: Management agrees with the recommendation.   In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system. Views of responsible officials: Management agrees with the recommendation. In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system.

FY End: 2023-12-31
Nationwide Children's Hospital
Compliance Requirement: I
Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseas...

Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR078395-02 93.837 Cardiovascular Diseases Research 5R01HL157491-02 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.242 Mental Health Research Grants 1P50MH127476-01A1 93.855 Allergy and Infectious Diseases Research 5R01AI139511-05 93.838 Lung Diseases Research 5R01HL155095-03 93.855 Allergy and Infectious Diseases Research 5R01AI146581-02 93.396 Cancer Biology Research 5R01CA260178-02 93.RD MP2PRT - Cosgrove 21X121F Q2 Leidos Biomedical Research Inc 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.865 Child Health and Human Development Extramural Research 5R01HD095976-04 93.847 Diabetes, Digestive, and Kidney Diseases Extramural Research 109938-19114 University of Illinois Champaign 93.396 Cancer Biology Research 5R01CA247941-03 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.273 Alcohol Research Programs 5R01AA027502-04 93.838 Lung Diseases Research 5R01HL155095-03 93.394 Cancer Detection and Diagnosis Research 5U24CA196173-08 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.859 Biomedical Research and Research Training 5R35GM131875-05 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 12.420 Military Medical Research and Development W81XWH2210597 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.396 Cancer Biology Research 1R01CA260178-01A1 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.121 Oral Diseases and Disorders Research ULRF_21-0285-01 University of Louisville Research Foundation, Inc. 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.RD CCG-BCR HHSN261201700015I 75N91022F000 93.855 Allergy and Infectious Diseases Research 5R21AI156406-02 93.865 Child Health and Human Development Extramural Research 5R01HD100420-03 93.394 Cancer Detection and Diagnosis Research 5U24CA254445-03 93.855 Allergy and Infectious Diseases Research 5R01AI139519-05 93.394 Cancer Detection and Diagnosis Research BSB06-RAMIREZ NRG Oncology Criteria or specific requirement (including statutory, regulatory or other citation): Section 200.303 of Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) states the following regarding internal control: “The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in ‘Standards for Internal Control in the Federal Government’ issued by the Comptroller General of the United States or the “Internal Control Integrated Framework,” issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Section 200.214 Suspension and Debarment “Non-Federal entities are subject to the non-procurement debarment and suspension regulations implementing Executive Orders 12549 and 12689, 2 CFR part 180. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities.” Condition: Nationwide Children’s Hospital (the Corporation) uses a third-party to perform its suspension and debarment checks on a monthly basis. However, we noted the following matters: • The Corporation did not retain the monthly supporting documentation related to the monthly suspension and debarment check. The suspension and debarment checks performed at year-end were retained. • The Corporation does not have a process to reconcile the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed to ensure the listing is complete. • The third-party vendor does not have a SOC 1 (System and Organization Controls) Report. The Corporation relied on the results of the suspension and debarment checks performed by the third-party vendor without implementing an internal process to ensure the results provided by the third-party vendor were accurate. In addition, the Corporation performs a suspension and debarment check of all new vendors prior to activating them in the procurement system. The Corporation did not consistently maintain supporting documentation to support the vendor was checked for suspension and debarment before the-“new”-vendor was set up in the procurement system. Cause: The Corporation does not have internal controls in place to require supporting documentation be maintained over the monthly suspension and debarment checks including documentation of management’s review and approval. The Corporation does not have internal controls in place to review the accuracy of third-party reports and to require a reconciliation between the vendor list sent to the third-party vendor and the results provided by the third-party vendor. The Corporation does not have internal controls in place to require supporting documentation be maintained over the suspension and debarment check performed on new vendors. Effect or potential effect: The Corporation’s vendors may not be screened for suspension and debarment, or the suspension and debarment results may not be accurate. A vendor may be set up in the procurement system that is suspended or debarred. Questioned costs: None Context: We tested a sample of 40 new vendors set up in the procurement system in 2023 and noted three instances where management did not retain the supporting documents of its review of suspension and debarment for the new vendor set up. The federal portion of procurement expenditures subject to suspension and debarment was $12,965,319 which represents approximately 12.5% of the R&D Cluster federal expenditures. The total amount reported on the schedule of expenditures of federal awards (Schedule) for the R&D cluster is $103,660,603. Identification as a repeat finding, if applicable: This is a repeat finding; see 2022-001. Recommendation: The Corporation should implement the following internal controls: • The monthly suspension and debarment review process • Reconciliation of the number of vendor files sent to the third-party vendor with the number of files received from the third-party vendor with the suspension and debarment results and review of the accuracy of the suspension and debarment results performed by the third-party vendor • Maintenance of the supporting documentation over the suspension and debarment checks performed on new vendors Views of responsible officials: Management agrees with the recommendation.   In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system. Views of responsible officials: Management agrees with the recommendation. In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system.

FY End: 2023-12-31
Nationwide Children's Hospital
Compliance Requirement: I
Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseas...

Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR078395-02 93.837 Cardiovascular Diseases Research 5R01HL157491-02 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.242 Mental Health Research Grants 1P50MH127476-01A1 93.855 Allergy and Infectious Diseases Research 5R01AI139511-05 93.838 Lung Diseases Research 5R01HL155095-03 93.855 Allergy and Infectious Diseases Research 5R01AI146581-02 93.396 Cancer Biology Research 5R01CA260178-02 93.RD MP2PRT - Cosgrove 21X121F Q2 Leidos Biomedical Research Inc 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.865 Child Health and Human Development Extramural Research 5R01HD095976-04 93.847 Diabetes, Digestive, and Kidney Diseases Extramural Research 109938-19114 University of Illinois Champaign 93.396 Cancer Biology Research 5R01CA247941-03 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.273 Alcohol Research Programs 5R01AA027502-04 93.838 Lung Diseases Research 5R01HL155095-03 93.394 Cancer Detection and Diagnosis Research 5U24CA196173-08 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.859 Biomedical Research and Research Training 5R35GM131875-05 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 12.420 Military Medical Research and Development W81XWH2210597 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.396 Cancer Biology Research 1R01CA260178-01A1 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.121 Oral Diseases and Disorders Research ULRF_21-0285-01 University of Louisville Research Foundation, Inc. 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.RD CCG-BCR HHSN261201700015I 75N91022F000 93.855 Allergy and Infectious Diseases Research 5R21AI156406-02 93.865 Child Health and Human Development Extramural Research 5R01HD100420-03 93.394 Cancer Detection and Diagnosis Research 5U24CA254445-03 93.855 Allergy and Infectious Diseases Research 5R01AI139519-05 93.394 Cancer Detection and Diagnosis Research BSB06-RAMIREZ NRG Oncology Criteria or specific requirement (including statutory, regulatory or other citation): Section 200.303 of Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) states the following regarding internal control: “The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in ‘Standards for Internal Control in the Federal Government’ issued by the Comptroller General of the United States or the “Internal Control Integrated Framework,” issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Section 200.214 Suspension and Debarment “Non-Federal entities are subject to the non-procurement debarment and suspension regulations implementing Executive Orders 12549 and 12689, 2 CFR part 180. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities.” Condition: Nationwide Children’s Hospital (the Corporation) uses a third-party to perform its suspension and debarment checks on a monthly basis. However, we noted the following matters: • The Corporation did not retain the monthly supporting documentation related to the monthly suspension and debarment check. The suspension and debarment checks performed at year-end were retained. • The Corporation does not have a process to reconcile the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed to ensure the listing is complete. • The third-party vendor does not have a SOC 1 (System and Organization Controls) Report. The Corporation relied on the results of the suspension and debarment checks performed by the third-party vendor without implementing an internal process to ensure the results provided by the third-party vendor were accurate. In addition, the Corporation performs a suspension and debarment check of all new vendors prior to activating them in the procurement system. The Corporation did not consistently maintain supporting documentation to support the vendor was checked for suspension and debarment before the-“new”-vendor was set up in the procurement system. Cause: The Corporation does not have internal controls in place to require supporting documentation be maintained over the monthly suspension and debarment checks including documentation of management’s review and approval. The Corporation does not have internal controls in place to review the accuracy of third-party reports and to require a reconciliation between the vendor list sent to the third-party vendor and the results provided by the third-party vendor. The Corporation does not have internal controls in place to require supporting documentation be maintained over the suspension and debarment check performed on new vendors. Effect or potential effect: The Corporation’s vendors may not be screened for suspension and debarment, or the suspension and debarment results may not be accurate. A vendor may be set up in the procurement system that is suspended or debarred. Questioned costs: None Context: We tested a sample of 40 new vendors set up in the procurement system in 2023 and noted three instances where management did not retain the supporting documents of its review of suspension and debarment for the new vendor set up. The federal portion of procurement expenditures subject to suspension and debarment was $12,965,319 which represents approximately 12.5% of the R&D Cluster federal expenditures. The total amount reported on the schedule of expenditures of federal awards (Schedule) for the R&D cluster is $103,660,603. Identification as a repeat finding, if applicable: This is a repeat finding; see 2022-001. Recommendation: The Corporation should implement the following internal controls: • The monthly suspension and debarment review process • Reconciliation of the number of vendor files sent to the third-party vendor with the number of files received from the third-party vendor with the suspension and debarment results and review of the accuracy of the suspension and debarment results performed by the third-party vendor • Maintenance of the supporting documentation over the suspension and debarment checks performed on new vendors Views of responsible officials: Management agrees with the recommendation.   In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system. Views of responsible officials: Management agrees with the recommendation. In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system.

FY End: 2023-12-31
Nationwide Children's Hospital
Compliance Requirement: I
Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseas...

Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR078395-02 93.837 Cardiovascular Diseases Research 5R01HL157491-02 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.242 Mental Health Research Grants 1P50MH127476-01A1 93.855 Allergy and Infectious Diseases Research 5R01AI139511-05 93.838 Lung Diseases Research 5R01HL155095-03 93.855 Allergy and Infectious Diseases Research 5R01AI146581-02 93.396 Cancer Biology Research 5R01CA260178-02 93.RD MP2PRT - Cosgrove 21X121F Q2 Leidos Biomedical Research Inc 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.865 Child Health and Human Development Extramural Research 5R01HD095976-04 93.847 Diabetes, Digestive, and Kidney Diseases Extramural Research 109938-19114 University of Illinois Champaign 93.396 Cancer Biology Research 5R01CA247941-03 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.273 Alcohol Research Programs 5R01AA027502-04 93.838 Lung Diseases Research 5R01HL155095-03 93.394 Cancer Detection and Diagnosis Research 5U24CA196173-08 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.859 Biomedical Research and Research Training 5R35GM131875-05 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 12.420 Military Medical Research and Development W81XWH2210597 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.396 Cancer Biology Research 1R01CA260178-01A1 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.121 Oral Diseases and Disorders Research ULRF_21-0285-01 University of Louisville Research Foundation, Inc. 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.RD CCG-BCR HHSN261201700015I 75N91022F000 93.855 Allergy and Infectious Diseases Research 5R21AI156406-02 93.865 Child Health and Human Development Extramural Research 5R01HD100420-03 93.394 Cancer Detection and Diagnosis Research 5U24CA254445-03 93.855 Allergy and Infectious Diseases Research 5R01AI139519-05 93.394 Cancer Detection and Diagnosis Research BSB06-RAMIREZ NRG Oncology Criteria or specific requirement (including statutory, regulatory or other citation): Section 200.303 of Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) states the following regarding internal control: “The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in ‘Standards for Internal Control in the Federal Government’ issued by the Comptroller General of the United States or the “Internal Control Integrated Framework,” issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Section 200.214 Suspension and Debarment “Non-Federal entities are subject to the non-procurement debarment and suspension regulations implementing Executive Orders 12549 and 12689, 2 CFR part 180. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities.” Condition: Nationwide Children’s Hospital (the Corporation) uses a third-party to perform its suspension and debarment checks on a monthly basis. However, we noted the following matters: • The Corporation did not retain the monthly supporting documentation related to the monthly suspension and debarment check. The suspension and debarment checks performed at year-end were retained. • The Corporation does not have a process to reconcile the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed to ensure the listing is complete. • The third-party vendor does not have a SOC 1 (System and Organization Controls) Report. The Corporation relied on the results of the suspension and debarment checks performed by the third-party vendor without implementing an internal process to ensure the results provided by the third-party vendor were accurate. In addition, the Corporation performs a suspension and debarment check of all new vendors prior to activating them in the procurement system. The Corporation did not consistently maintain supporting documentation to support the vendor was checked for suspension and debarment before the-“new”-vendor was set up in the procurement system. Cause: The Corporation does not have internal controls in place to require supporting documentation be maintained over the monthly suspension and debarment checks including documentation of management’s review and approval. The Corporation does not have internal controls in place to review the accuracy of third-party reports and to require a reconciliation between the vendor list sent to the third-party vendor and the results provided by the third-party vendor. The Corporation does not have internal controls in place to require supporting documentation be maintained over the suspension and debarment check performed on new vendors. Effect or potential effect: The Corporation’s vendors may not be screened for suspension and debarment, or the suspension and debarment results may not be accurate. A vendor may be set up in the procurement system that is suspended or debarred. Questioned costs: None Context: We tested a sample of 40 new vendors set up in the procurement system in 2023 and noted three instances where management did not retain the supporting documents of its review of suspension and debarment for the new vendor set up. The federal portion of procurement expenditures subject to suspension and debarment was $12,965,319 which represents approximately 12.5% of the R&D Cluster federal expenditures. The total amount reported on the schedule of expenditures of federal awards (Schedule) for the R&D cluster is $103,660,603. Identification as a repeat finding, if applicable: This is a repeat finding; see 2022-001. Recommendation: The Corporation should implement the following internal controls: • The monthly suspension and debarment review process • Reconciliation of the number of vendor files sent to the third-party vendor with the number of files received from the third-party vendor with the suspension and debarment results and review of the accuracy of the suspension and debarment results performed by the third-party vendor • Maintenance of the supporting documentation over the suspension and debarment checks performed on new vendors Views of responsible officials: Management agrees with the recommendation.   In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system. Views of responsible officials: Management agrees with the recommendation. In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system.

FY End: 2023-12-31
Nationwide Children's Hospital
Compliance Requirement: I
Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseas...

Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR078395-02 93.837 Cardiovascular Diseases Research 5R01HL157491-02 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.242 Mental Health Research Grants 1P50MH127476-01A1 93.855 Allergy and Infectious Diseases Research 5R01AI139511-05 93.838 Lung Diseases Research 5R01HL155095-03 93.855 Allergy and Infectious Diseases Research 5R01AI146581-02 93.396 Cancer Biology Research 5R01CA260178-02 93.RD MP2PRT - Cosgrove 21X121F Q2 Leidos Biomedical Research Inc 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.865 Child Health and Human Development Extramural Research 5R01HD095976-04 93.847 Diabetes, Digestive, and Kidney Diseases Extramural Research 109938-19114 University of Illinois Champaign 93.396 Cancer Biology Research 5R01CA247941-03 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.273 Alcohol Research Programs 5R01AA027502-04 93.838 Lung Diseases Research 5R01HL155095-03 93.394 Cancer Detection and Diagnosis Research 5U24CA196173-08 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.859 Biomedical Research and Research Training 5R35GM131875-05 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 12.420 Military Medical Research and Development W81XWH2210597 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.396 Cancer Biology Research 1R01CA260178-01A1 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.121 Oral Diseases and Disorders Research ULRF_21-0285-01 University of Louisville Research Foundation, Inc. 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.RD CCG-BCR HHSN261201700015I 75N91022F000 93.855 Allergy and Infectious Diseases Research 5R21AI156406-02 93.865 Child Health and Human Development Extramural Research 5R01HD100420-03 93.394 Cancer Detection and Diagnosis Research 5U24CA254445-03 93.855 Allergy and Infectious Diseases Research 5R01AI139519-05 93.394 Cancer Detection and Diagnosis Research BSB06-RAMIREZ NRG Oncology Criteria or specific requirement (including statutory, regulatory or other citation): Section 200.303 of Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) states the following regarding internal control: “The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in ‘Standards for Internal Control in the Federal Government’ issued by the Comptroller General of the United States or the “Internal Control Integrated Framework,” issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Section 200.214 Suspension and Debarment “Non-Federal entities are subject to the non-procurement debarment and suspension regulations implementing Executive Orders 12549 and 12689, 2 CFR part 180. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities.” Condition: Nationwide Children’s Hospital (the Corporation) uses a third-party to perform its suspension and debarment checks on a monthly basis. However, we noted the following matters: • The Corporation did not retain the monthly supporting documentation related to the monthly suspension and debarment check. The suspension and debarment checks performed at year-end were retained. • The Corporation does not have a process to reconcile the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed to ensure the listing is complete. • The third-party vendor does not have a SOC 1 (System and Organization Controls) Report. The Corporation relied on the results of the suspension and debarment checks performed by the third-party vendor without implementing an internal process to ensure the results provided by the third-party vendor were accurate. In addition, the Corporation performs a suspension and debarment check of all new vendors prior to activating them in the procurement system. The Corporation did not consistently maintain supporting documentation to support the vendor was checked for suspension and debarment before the-“new”-vendor was set up in the procurement system. Cause: The Corporation does not have internal controls in place to require supporting documentation be maintained over the monthly suspension and debarment checks including documentation of management’s review and approval. The Corporation does not have internal controls in place to review the accuracy of third-party reports and to require a reconciliation between the vendor list sent to the third-party vendor and the results provided by the third-party vendor. The Corporation does not have internal controls in place to require supporting documentation be maintained over the suspension and debarment check performed on new vendors. Effect or potential effect: The Corporation’s vendors may not be screened for suspension and debarment, or the suspension and debarment results may not be accurate. A vendor may be set up in the procurement system that is suspended or debarred. Questioned costs: None Context: We tested a sample of 40 new vendors set up in the procurement system in 2023 and noted three instances where management did not retain the supporting documents of its review of suspension and debarment for the new vendor set up. The federal portion of procurement expenditures subject to suspension and debarment was $12,965,319 which represents approximately 12.5% of the R&D Cluster federal expenditures. The total amount reported on the schedule of expenditures of federal awards (Schedule) for the R&D cluster is $103,660,603. Identification as a repeat finding, if applicable: This is a repeat finding; see 2022-001. Recommendation: The Corporation should implement the following internal controls: • The monthly suspension and debarment review process • Reconciliation of the number of vendor files sent to the third-party vendor with the number of files received from the third-party vendor with the suspension and debarment results and review of the accuracy of the suspension and debarment results performed by the third-party vendor • Maintenance of the supporting documentation over the suspension and debarment checks performed on new vendors Views of responsible officials: Management agrees with the recommendation.   In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system. Views of responsible officials: Management agrees with the recommendation. In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system.

FY End: 2023-12-31
Nationwide Children's Hospital
Compliance Requirement: I
Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseas...

Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR078395-02 93.837 Cardiovascular Diseases Research 5R01HL157491-02 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.242 Mental Health Research Grants 1P50MH127476-01A1 93.855 Allergy and Infectious Diseases Research 5R01AI139511-05 93.838 Lung Diseases Research 5R01HL155095-03 93.855 Allergy and Infectious Diseases Research 5R01AI146581-02 93.396 Cancer Biology Research 5R01CA260178-02 93.RD MP2PRT - Cosgrove 21X121F Q2 Leidos Biomedical Research Inc 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.865 Child Health and Human Development Extramural Research 5R01HD095976-04 93.847 Diabetes, Digestive, and Kidney Diseases Extramural Research 109938-19114 University of Illinois Champaign 93.396 Cancer Biology Research 5R01CA247941-03 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.273 Alcohol Research Programs 5R01AA027502-04 93.838 Lung Diseases Research 5R01HL155095-03 93.394 Cancer Detection and Diagnosis Research 5U24CA196173-08 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.859 Biomedical Research and Research Training 5R35GM131875-05 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 12.420 Military Medical Research and Development W81XWH2210597 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.396 Cancer Biology Research 1R01CA260178-01A1 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.121 Oral Diseases and Disorders Research ULRF_21-0285-01 University of Louisville Research Foundation, Inc. 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.RD CCG-BCR HHSN261201700015I 75N91022F000 93.855 Allergy and Infectious Diseases Research 5R21AI156406-02 93.865 Child Health and Human Development Extramural Research 5R01HD100420-03 93.394 Cancer Detection and Diagnosis Research 5U24CA254445-03 93.855 Allergy and Infectious Diseases Research 5R01AI139519-05 93.394 Cancer Detection and Diagnosis Research BSB06-RAMIREZ NRG Oncology Criteria or specific requirement (including statutory, regulatory or other citation): Section 200.303 of Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) states the following regarding internal control: “The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in ‘Standards for Internal Control in the Federal Government’ issued by the Comptroller General of the United States or the “Internal Control Integrated Framework,” issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Section 200.214 Suspension and Debarment “Non-Federal entities are subject to the non-procurement debarment and suspension regulations implementing Executive Orders 12549 and 12689, 2 CFR part 180. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities.” Condition: Nationwide Children’s Hospital (the Corporation) uses a third-party to perform its suspension and debarment checks on a monthly basis. However, we noted the following matters: • The Corporation did not retain the monthly supporting documentation related to the monthly suspension and debarment check. The suspension and debarment checks performed at year-end were retained. • The Corporation does not have a process to reconcile the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed to ensure the listing is complete. • The third-party vendor does not have a SOC 1 (System and Organization Controls) Report. The Corporation relied on the results of the suspension and debarment checks performed by the third-party vendor without implementing an internal process to ensure the results provided by the third-party vendor were accurate. In addition, the Corporation performs a suspension and debarment check of all new vendors prior to activating them in the procurement system. The Corporation did not consistently maintain supporting documentation to support the vendor was checked for suspension and debarment before the-“new”-vendor was set up in the procurement system. Cause: The Corporation does not have internal controls in place to require supporting documentation be maintained over the monthly suspension and debarment checks including documentation of management’s review and approval. The Corporation does not have internal controls in place to review the accuracy of third-party reports and to require a reconciliation between the vendor list sent to the third-party vendor and the results provided by the third-party vendor. The Corporation does not have internal controls in place to require supporting documentation be maintained over the suspension and debarment check performed on new vendors. Effect or potential effect: The Corporation’s vendors may not be screened for suspension and debarment, or the suspension and debarment results may not be accurate. A vendor may be set up in the procurement system that is suspended or debarred. Questioned costs: None Context: We tested a sample of 40 new vendors set up in the procurement system in 2023 and noted three instances where management did not retain the supporting documents of its review of suspension and debarment for the new vendor set up. The federal portion of procurement expenditures subject to suspension and debarment was $12,965,319 which represents approximately 12.5% of the R&D Cluster federal expenditures. The total amount reported on the schedule of expenditures of federal awards (Schedule) for the R&D cluster is $103,660,603. Identification as a repeat finding, if applicable: This is a repeat finding; see 2022-001. Recommendation: The Corporation should implement the following internal controls: • The monthly suspension and debarment review process • Reconciliation of the number of vendor files sent to the third-party vendor with the number of files received from the third-party vendor with the suspension and debarment results and review of the accuracy of the suspension and debarment results performed by the third-party vendor • Maintenance of the supporting documentation over the suspension and debarment checks performed on new vendors Views of responsible officials: Management agrees with the recommendation.   In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system. Views of responsible officials: Management agrees with the recommendation. In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system.

FY End: 2023-12-31
Nationwide Children's Hospital
Compliance Requirement: I
Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseas...

Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR078395-02 93.837 Cardiovascular Diseases Research 5R01HL157491-02 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.242 Mental Health Research Grants 1P50MH127476-01A1 93.855 Allergy and Infectious Diseases Research 5R01AI139511-05 93.838 Lung Diseases Research 5R01HL155095-03 93.855 Allergy and Infectious Diseases Research 5R01AI146581-02 93.396 Cancer Biology Research 5R01CA260178-02 93.RD MP2PRT - Cosgrove 21X121F Q2 Leidos Biomedical Research Inc 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.865 Child Health and Human Development Extramural Research 5R01HD095976-04 93.847 Diabetes, Digestive, and Kidney Diseases Extramural Research 109938-19114 University of Illinois Champaign 93.396 Cancer Biology Research 5R01CA247941-03 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.273 Alcohol Research Programs 5R01AA027502-04 93.838 Lung Diseases Research 5R01HL155095-03 93.394 Cancer Detection and Diagnosis Research 5U24CA196173-08 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.859 Biomedical Research and Research Training 5R35GM131875-05 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 12.420 Military Medical Research and Development W81XWH2210597 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.396 Cancer Biology Research 1R01CA260178-01A1 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.121 Oral Diseases and Disorders Research ULRF_21-0285-01 University of Louisville Research Foundation, Inc. 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.RD CCG-BCR HHSN261201700015I 75N91022F000 93.855 Allergy and Infectious Diseases Research 5R21AI156406-02 93.865 Child Health and Human Development Extramural Research 5R01HD100420-03 93.394 Cancer Detection and Diagnosis Research 5U24CA254445-03 93.855 Allergy and Infectious Diseases Research 5R01AI139519-05 93.394 Cancer Detection and Diagnosis Research BSB06-RAMIREZ NRG Oncology Criteria or specific requirement (including statutory, regulatory or other citation): Section 200.303 of Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) states the following regarding internal control: “The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in ‘Standards for Internal Control in the Federal Government’ issued by the Comptroller General of the United States or the “Internal Control Integrated Framework,” issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Section 200.214 Suspension and Debarment “Non-Federal entities are subject to the non-procurement debarment and suspension regulations implementing Executive Orders 12549 and 12689, 2 CFR part 180. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities.” Condition: Nationwide Children’s Hospital (the Corporation) uses a third-party to perform its suspension and debarment checks on a monthly basis. However, we noted the following matters: • The Corporation did not retain the monthly supporting documentation related to the monthly suspension and debarment check. The suspension and debarment checks performed at year-end were retained. • The Corporation does not have a process to reconcile the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed to ensure the listing is complete. • The third-party vendor does not have a SOC 1 (System and Organization Controls) Report. The Corporation relied on the results of the suspension and debarment checks performed by the third-party vendor without implementing an internal process to ensure the results provided by the third-party vendor were accurate. In addition, the Corporation performs a suspension and debarment check of all new vendors prior to activating them in the procurement system. The Corporation did not consistently maintain supporting documentation to support the vendor was checked for suspension and debarment before the-“new”-vendor was set up in the procurement system. Cause: The Corporation does not have internal controls in place to require supporting documentation be maintained over the monthly suspension and debarment checks including documentation of management’s review and approval. The Corporation does not have internal controls in place to review the accuracy of third-party reports and to require a reconciliation between the vendor list sent to the third-party vendor and the results provided by the third-party vendor. The Corporation does not have internal controls in place to require supporting documentation be maintained over the suspension and debarment check performed on new vendors. Effect or potential effect: The Corporation’s vendors may not be screened for suspension and debarment, or the suspension and debarment results may not be accurate. A vendor may be set up in the procurement system that is suspended or debarred. Questioned costs: None Context: We tested a sample of 40 new vendors set up in the procurement system in 2023 and noted three instances where management did not retain the supporting documents of its review of suspension and debarment for the new vendor set up. The federal portion of procurement expenditures subject to suspension and debarment was $12,965,319 which represents approximately 12.5% of the R&D Cluster federal expenditures. The total amount reported on the schedule of expenditures of federal awards (Schedule) for the R&D cluster is $103,660,603. Identification as a repeat finding, if applicable: This is a repeat finding; see 2022-001. Recommendation: The Corporation should implement the following internal controls: • The monthly suspension and debarment review process • Reconciliation of the number of vendor files sent to the third-party vendor with the number of files received from the third-party vendor with the suspension and debarment results and review of the accuracy of the suspension and debarment results performed by the third-party vendor • Maintenance of the supporting documentation over the suspension and debarment checks performed on new vendors Views of responsible officials: Management agrees with the recommendation.   In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system. Views of responsible officials: Management agrees with the recommendation. In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system.

FY End: 2023-12-31
Nationwide Children's Hospital
Compliance Requirement: I
Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseas...

Finding 2023-001 Identification of the federal program: Federal Agency: Department of Defense and Department of Health and Human Services Assistance Listing No., Award Name, Award Number and Pass-Through Agency: Assistance Listing Award Name Award Number Pass-Through Agency 93.865 Child Health and Human Development Extramural Research 5R00HD096115-05 93.242 Mental Health Research Grants 1R01MH130437-01A1 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR078395-02 93.837 Cardiovascular Diseases Research 5R01HL157491-02 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.242 Mental Health Research Grants 1P50MH127476-01A1 93.855 Allergy and Infectious Diseases Research 5R01AI139511-05 93.838 Lung Diseases Research 5R01HL155095-03 93.855 Allergy and Infectious Diseases Research 5R01AI146581-02 93.396 Cancer Biology Research 5R01CA260178-02 93.RD MP2PRT - Cosgrove 21X121F Q2 Leidos Biomedical Research Inc 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.865 Child Health and Human Development Extramural Research 5R01HD095976-04 93.847 Diabetes, Digestive, and Kidney Diseases Extramural Research 109938-19114 University of Illinois Champaign 93.396 Cancer Biology Research 5R01CA247941-03 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.273 Alcohol Research Programs 5R01AA027502-04 93.838 Lung Diseases Research 5R01HL155095-03 93.394 Cancer Detection and Diagnosis Research 5U24CA196173-08 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 1R01NS129784-01 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.859 Biomedical Research and Research Training 5R35GM131875-05 93.855 Allergy and Infectious Diseases Research 5R01AI155501-03 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 12.420 Military Medical Research and Development W81XWH2210597 93.846 Arthritis, Musculoskeletal and Skin Diseases Research 5R01AR073908-04 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.396 Cancer Biology Research 1R01CA260178-01A1 93.121 Oral Diseases and Disorders Research 5R01DE028296-05 93.393 Cancer Cause and Prevention Research 1R01CA272872-01 93.121 Oral Diseases and Disorders Research ULRF_21-0285-01 University of Louisville Research Foundation, Inc. 93.353 21st Century Cures Act - Beau Biden Cancer Moonshot 1U01CA232488-01 93.RD CCG-BCR HHSN261201700015I 75N91022F000 93.855 Allergy and Infectious Diseases Research 5R21AI156406-02 93.865 Child Health and Human Development Extramural Research 5R01HD100420-03 93.394 Cancer Detection and Diagnosis Research 5U24CA254445-03 93.855 Allergy and Infectious Diseases Research 5R01AI139519-05 93.394 Cancer Detection and Diagnosis Research BSB06-RAMIREZ NRG Oncology Criteria or specific requirement (including statutory, regulatory or other citation): Section 200.303 of Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) states the following regarding internal control: “The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in ‘Standards for Internal Control in the Federal Government’ issued by the Comptroller General of the United States or the “Internal Control Integrated Framework,” issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Section 200.214 Suspension and Debarment “Non-Federal entities are subject to the non-procurement debarment and suspension regulations implementing Executive Orders 12549 and 12689, 2 CFR part 180. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities.” Condition: Nationwide Children’s Hospital (the Corporation) uses a third-party to perform its suspension and debarment checks on a monthly basis. However, we noted the following matters: • The Corporation did not retain the monthly supporting documentation related to the monthly suspension and debarment check. The suspension and debarment checks performed at year-end were retained. • The Corporation does not have a process to reconcile the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed to ensure the listing is complete. • The third-party vendor does not have a SOC 1 (System and Organization Controls) Report. The Corporation relied on the results of the suspension and debarment checks performed by the third-party vendor without implementing an internal process to ensure the results provided by the third-party vendor were accurate. In addition, the Corporation performs a suspension and debarment check of all new vendors prior to activating them in the procurement system. The Corporation did not consistently maintain supporting documentation to support the vendor was checked for suspension and debarment before the-“new”-vendor was set up in the procurement system. Cause: The Corporation does not have internal controls in place to require supporting documentation be maintained over the monthly suspension and debarment checks including documentation of management’s review and approval. The Corporation does not have internal controls in place to review the accuracy of third-party reports and to require a reconciliation between the vendor list sent to the third-party vendor and the results provided by the third-party vendor. The Corporation does not have internal controls in place to require supporting documentation be maintained over the suspension and debarment check performed on new vendors. Effect or potential effect: The Corporation’s vendors may not be screened for suspension and debarment, or the suspension and debarment results may not be accurate. A vendor may be set up in the procurement system that is suspended or debarred. Questioned costs: None Context: We tested a sample of 40 new vendors set up in the procurement system in 2023 and noted three instances where management did not retain the supporting documents of its review of suspension and debarment for the new vendor set up. The federal portion of procurement expenditures subject to suspension and debarment was $12,965,319 which represents approximately 12.5% of the R&D Cluster federal expenditures. The total amount reported on the schedule of expenditures of federal awards (Schedule) for the R&D cluster is $103,660,603. Identification as a repeat finding, if applicable: This is a repeat finding; see 2022-001. Recommendation: The Corporation should implement the following internal controls: • The monthly suspension and debarment review process • Reconciliation of the number of vendor files sent to the third-party vendor with the number of files received from the third-party vendor with the suspension and debarment results and review of the accuracy of the suspension and debarment results performed by the third-party vendor • Maintenance of the supporting documentation over the suspension and debarment checks performed on new vendors Views of responsible officials: Management agrees with the recommendation.   In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system. Views of responsible officials: Management agrees with the recommendation. In September 2023, E&Y rendered the same finding and recommendation for the 2022 calendar year audit. The finding has been partially remediated. Management implemented the following remediations between Q4 2023 and Q1 2024: • Retained the monthly supporting documentation related to a monthly suspension and debarment check • Reconciled the vendor list provided to the third-party vendor with the results received from the third-party vendor after the suspension and debarment checks are performed • Verified the accuracy of the results produced by the third-party vendor • Consistently maintained supporting documentation to support the vendor was checked for suspension and debarment before the “new”-vendor is set up in the procurement system.

« 1 748 749 751 752 2002 »