Findings Citing § 200.305

Cash Management - Significant Deficiency in Internal Controls over Major Programs Condition: The Organization requested reimbursement of certain federal grant awards in excess of actual, allowable expenditures incurred at the time of the request. Major Programs: ALN 93.138 - Protection and Advocacy or Individuals with Mental Illness; ALN 84.240A - Program of Protection and Advocacy of Individual Rights. Criteria: 2 CFR §200.305(b) requires non-federal entities to minimize the time elapsing between the transfer of federal funds and disbursement or incurrence of costs. Under the reimbursement method, drawdowns should be limited to actual, allowable expenditures incurred and not estimates or projections of future expenditures. Cause: The Organization did not follow their internal control procedures in place to ensure that reimbursement requests were supported by expenditures incurred prior to submission. Management relied on estimated expenditures rather than reconciling to actual amounts incurred at the time of the request. Effect: Federal funds were drawn in excess of actual expenditures incurred, increasing the risk of noncompliance with Uniform Guidance cash management requirements. Questioned Costs: While funds were drawn in advance, all amounts were subsequently expended on allowable program costs. Ultimately no questioned costs were noted, however, the excess funds were matched against allowable costs incurred after the grant period end of September 30, 2025. Recommendation: The Organization should follow internal control procedures necessary to ensure requests for reimbursement are based solely on allowable expenditures that have been incurred prior to the date of the request. View of Responsible Officials: The Organization agrees with the finding and will implement corrective action necessary to address the condition.

Interest Earned on Federal Funds. Criteria: 2 CFR 200.303 provides that non-federal entities must establish and maintain effective internal controls to provide reasonable assurance of compliance with Uniform Guidance. 2 CFR Section 200.305 sets forth the requirements for the return of interest earned on federal funds. Recipients of federal grants are required to establish internal controls to minimize the time that elapses between the receipt of federal funds from the grantor, and the payment of those funds to vendors who provide goods or services. Interest earnings that exceed $500 per year from excess cash balances must be paid to the federal grantor. Condition: CASIS did not calculate interest earnings on the federal cash balance to determine if any earnings should be repaid to the grantor. Cause: CASIS does not have a policy to monitor federal cash balances for cash management requirements, including the calculation of interest earnings. Effect: CASIS did not take steps to reduce the time elapsing from the date it received federal funds to the date it spent the funds on program costs. The lapse resulted in interest earned on federal funds. Questioned Costs: Fontana calculated that CASIS earned approximately $17,000 of interest on the federal funds balance for the fiscal year ended September 30, 2025. Interest earnings on federal funds of more than $500 must be returned to the grantor. Perspective: Interest was not calculated or returned to the grantor for fiscal year ended September 30, 2025. Recommendation: Fontana recommends that CASIS: o Implement controls to minimize the time between receipt of funds from the granting agency and disbursement of those funds. o Compute interest earned on advance funds and remit amounts in excess of $500 to the grantor when required.

2025-003 – Written Policies Year Initially Occurring: 2025 CONDITION: The Town does not have certain written policies required by the Uniform Guidance. CRITERIA: 2 CFR 200.302 (b) (6) states, in part, “written procedures to implement the requirements of section 200.305” and (7) states, in part, "Written procedures for determining the allowability of costs…” CAUSE: The condition results from the failure to design and implement policies and procedures which are in accordance with the Uniform Administrative Requirements. EFFECT: The Town is not in compliance with the Uniform Administrative Requirements. RECOMMENDATION: We recommend that the Town adopt written policies required under the Uniform Guidance.

Criteria – In accordance with 2 CFR 200.305(b), non-federal entities must minimize the time elapsing between the transfer of funds from the U.S. Treasury or pass-through entity and the disbursement of those funds for program costs. Condition and Description – During testing of cash management procedures for the program, we noted a few instances where federal funds received from the pass-through entity were not timely disbursed. Questioned Costs – None identified. Identification of a Repeat Finding – This finding was not reported in the prior year. Cause - The delay resulted primarily from timing differences between receipt of federal reimbursement funds and processing of vendor payments associated with program expenditures. Effect – Holding federal funds for extended periods prior to disbursement may result in noncompliance with federal cash management requirements and increases the risk that federal funds are not utilized in accordance with program guidelines.

Assistance Listing, Federal Agency, and Program Name - 93.837, U.S. Department of Health and Human Services, Cardiovascular Disease Research (Research and Development Cluster) Federal Award Identification Number and Year - 93.837 - U01HL146245 (2024) Pass through Entity - N/A Finding Type - Material weakness and material noncompliance with laws and regulations Repeat Finding - No Criteria - Per 2 CFR 200.303(a), nonfederal entities must establish and maintain effective internal controls over the federal award that provides reasonable assurance that the nonfederal entity is managing the federal award in compliance with federal statutes, regulations, and the terms and conditions of the federal award. These internal controls should be in compliance with the guidance in Standards for Internal Control in the Federal Government, issued by the Comptroller General of the United States, or the Internal Control Framework, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Per 2 CFR 200.305(b)(3), when the reimbursement method is used, the Federal agency or pass through entity must make payment within 30 calendar days after receipt of the payment request unless the Federal agency or pass through entity reasonably believes the request to be improper. Condition - Controls in place were not sufficient to ensure subrecipients were paid consistently within 30 days of a request for reimbursement. Questioned Costs - N/A If questioned costs are not determinable, description of why known questioned costs were undetermined or otherwise could not be reported - N/A Identification of How Questioned Costs Were Computed - N/A Context - Out of a sample of 29 subrecipient disbursements tested, we noted 6 were not paid within 30 days of the LLC receiving the request for reimbursement. Cause and Effect - A lack of effective internal controls resulted in material noncompliance with this requirement. Recommendation - We recommend management establish robust controls over subrecipient activity to ensure the 30 day requirement is met. Views of Responsible Officials and Planned Corrective Actions - Management acknowledges the finding. Delays in approvals may occur due to multiple internal and external parties involved. To prevent recurrence, management will monitor all parties, issue email reminders with clear deadlines, and enforce timely processing to ensure compliance with the 30 day requirement.

Federal Program: U.S. Department of Education: Fund for the Improvement of Postsecondary Education, ALN 84.116Z Criteria: Federal regulations (2 CFR section 200.305) require that recipients minimize the time between the drawdown of federal funds and their disbursement for allowable project costs. Advances of federal funds must be limited to the minimum amounts needed and timed to be in accordance with the actual, immediate cash requirements of the project. Condition: The College drew down federal funds in April 2025 for project expenses that were not spent until May and June 2025. Cause: The issue occurred due to internal miscommunication regarding which account code should be used to record the grant activity. The incorrect code was used when processing the April drawdown, which led to drawing funds before eligible expenditures were incurred. Effect: Although the funds were ultimately spent within the same fiscal year, the timing of the drawdown did not meet the requirements for advance drawdowns. Questioned Costs: None Context: The College requested and received two drawdowns related to this award. This error occurred in only the first drawdown. Project expenses reimbursed by the second drawdown were appropriately incurred prior to the drawdown request. Repeat Finding: No Recommendation: Crowe recommends the College establish clear guidance and training on the proper use of organization codes for federal grants. Views of Responsible Officials and Planned Corrective Actions: College officials acknowledge the error and attribute it to the misclassification of the grant under an incorrect organization code. They note that the funds were ultimately expended for allowable project costs within the same fiscal year. The College agrees to enhance training and implement additional review procedures to ensure compliance with cash management requirements going forward.

Program Name: Literacy Excellence Accelerates Performance – 84.215G Magnet Schools Assistance ARC – 84.165 Awarding Agency: U.S. Department of Education Finding Type: Significant Deficiency on Internal Controls over Compliance and Noncompliance Questioned Cost Amount: None Context / Criteria: The School District should maintain internal controls to retain documentation that is available to support the expenditures that were paid prior to the request for reimbursement based on Uniform Guidance. The internal controls should provide reasonable assurance that the expenditures are accurate, allowable, and properly allocated as to grant and period. Condition: We noted one reimbursement request for the Literacy Excellence Accelerates Performance program and one for the Magnet Schools Assistance ARC program where supporting documentation did not match the amounts requested for reimbursement. Cause / Effect: The School District has not established appropriate controls for all cash reimbursement requests to have a report retained that reflects the supporting expenditures. The School District may undercharge or overcharge the grant as a result. Recommendation: We recommend that the School District implement a process to ensure the School District is following and complying with 2 CFR 200.305(b)(3). Views of Responsible Officials and Corrective Actions: Management is in agreement with the finding. See accompanying corrective action plan.

Finding 2025-001: Cash Management Federal Agency-U.S. Department of Health and Human Services ALN: 93.297 and 93.217 Criteria: 2 CFR 200.305(b) states for non-Federal entities other than states, payments methods must minimize the time elapsing between the transfer of funds from the United States Treasury or the pass-through entity and the disbursement by the non-Federal entity whether the payment is made by electronic funds transfer, or issuance or redemption of checks, warrants, or payment by other means. Condition: The Council receives federal money to provide teen pregnancy prevention and family planning services. In order to carry out those services, the Council enters into sub-awards with providers throughout its service territory. Providers submit their invoices to the Council monthly, and the Council submits a request for payment to the grantor for reimbursement. The audit revealed that the non-federal entity did not consistently minimize the time between the transfer of federal funds from the U.S. Treasury and the disbursement of those funds for program purposes. Questioned Costs: None. Context: The Council provided services under grants received directly from the U.S. Department of Health and Human Services. In order to provide the services, sub-awards are made with providers within the Council’s service territory. Providers were to be paid based off the invoices submitted to the Council. The Council submits a request for payment to the U.S. Department of Health and Human Services and once the funds are received, the Council is to pay its providers in a timely manner. Cause: The finance department initiated drawdowns based on projected expenditures rather than actual, immediate disbursement needs, leading to early receipt and holding of funds. Effect: Holding federal funds for extended periods may result in noncompliance with federal cash management regulations, potential interest liabilities, and reduced efficiency in program execution. Repeat Finding: This is a repeat finding. Recommendation: We recommend updates in the payment process to ensure that all providers are paid timely after receipt of grant funds. Management Response: We acknowledge the finding and take full responsibility for ensuring compliance with federal cash management requirements. The delay in provider payments during the audit period was primarily due to a temporary halt in government disbursements, which created uncertainty and the potential for funding gaps. To prevent recurrence, we have implemented the following corrective actions: • Payment Process Update: Provider disbursements are now prioritized immediately upon receipt of federal funds. • Compliance Calendar: A centralized calendar with automated reminders ensures timely processing of all payments. • Contingency Planning: A reserve allocation for provider payments has been established to mitigate risks associated with government-related payment interruptions.

Assistance Listing, Federal Agency, and Program Name - 93.566, U.S. Department of Health and Human Services, Refugee and Entrant Assistance State/Replacement Designee Administered Programs Federal Award Identification Number and Year- FCSAK00843 2025 Pass- through Entity - Illinois Department of Human Services Finding Type - Significant deficiency and material noncompliance with laws and regulations Repeat Finding - Yes 2024-001 Criteria - In accordance with 2 CFR 200.305 2(b), for nonfederal entities other than states, payment methods must minimize the time elapsing between the transfer of funds from the United States Treasury or the pass through entity and the disbursement by the nonfederal entity whether the payment is made by electronic funds transfers or issuance or redemption of checks, warrants, or payments by other means. In accordance with 2 CFR 200.305(3), when the reimbursement method is used, the federal awarding agency or pass through entity must make payment within 30 calendar days after receipt of billing unless the request is believed to be improper. Condition - Controls in place did not minimize the time elapsing between the transfer receipt of billing from the subrecipient and disbursement of federal dollars to the subrecipient in accordance with the guidance above. Questioned Costs - None. If questioned costs are not determinable, description of why known questioned costs were undetermined or otherwise could not be reported - Not applicable as there are no questioned costs. Identification of How Questioned Costs Were Computed - Not applicable as there are no questioned costs. Context - Of the three transactions tested, two of the subrecipients were not paid within 30 days of receipt of billing. Cause and Effect - Policies, procedures, and related internal controls did not ensure compliance with federal payment requirements under Uniform Guidance. Recommendation - We recommend the Federation review its procedures and controls to ensure disbursement of funds to its subrecipients is consistent with applicable laws and regulations. Views of Responsible Officials and Corrective Action Plan - As a pass-through recipient, the Federation relies on the timeliness of the State for reimbursement. In all transactions tested, the Federation reimbursed the subrecipients within 30 days of receipt of funds from the State. As a pass-through entity, the Federation understands the requirement to reimburse subrecipients within 30 calendar days after receipt of a billing. However, Federation does not have the financial means to advance cash to subrecipients before funds are collected from the State. Therefore, Federation has requested an advance from the State of Illinois in order to comply with the 30 day requirement.

Specific Requirements: 2 CFR 200.302(b) requires non-Federal entities to provide the following – 1) identification, in its accounts, of all Federal awards received and expended; 2) accurate, current, and complete disclosure of the financial results of each Federal award program; 3) records that identify adequately the source and application of funds for federally-funded activities; 4) effective controls over, and accountability for all funds, property, and other assets; 5) comparison of expenditures with budget amounts for each Federal award; 6) written procedures to implement the requirements of the Federal payment section of Uniform Guidance (200.305); 7) written procedures for determining the allowability of costs in accordance with the cost principles as listed in Uniform Guidance. Best practices under generally accepted accounting principles require an organization to establish internal controls over financial reporting over federal awards, which includes tracking of federal dollars within the detailed general ledger by federal programs. Condition: We noted that internal controls over tracking federal funds in the general ledger by federal programs was not being executed to clearly identify which expenditures were for the federal program. Program expenses included both federal and non-federal dollars which made it difficult to ensure the expenditures for federal programs were accurately presented on the SEFA and to identify the specific expenditure to test for compliance. Cause: For the second year the accounting department had significant turnover and went through a software conversion in the current year. The software was not set up to track the expenditures by Federal grant. Effect or Potential Effect: Lack of controls over coding federal programs in detailed general ledger may result in either overstating or understating federal expenditures which could cause a material misstatement of the financial statements and SEFA. Repeat Finding: No Recommendation: We recommend the Organization update its coding process in their financial system. Begin including Project codes for expenses for all federal programs. Views of Responsible Officials and Planned Corrective Actions: Management agrees with the finding. See Corrective Action Plan.

2025-004 Inadequate Cash Management Procedures and Noncompliance with Period of Performance Requirements Program Name/Assistance Listing Number: 93.788 Opioid STR Federal Agency: Department of Health and Human Services Type of Finding: Significant Deficiency Compliance Requirement: Cash Management Criteria: Per 2 CFR §200.305(b), non-Federal entities must minimize the time elapsing between the transfer of funds from the U.S. Treasury and the disbursement of those funds for program purposes under the period of performance. Furthermore, entities must have written procedures that clearly outline the timing and methods for drawing down federal funds in accordance with cash management requirements. These procedures should be documented, reviewed, approved, and periodically revised to ensure ongoing compliance. Condition: During our testing of cash management procedures, we noted the following: 1. UMADAOP of Lucas’ written procedures lacked key information, including dates of preparation, approval, implementation, review, and revision. 2. For Grant ID 24001119 (budget period 9/30/2023–9/30/2024; NOSA received 5/22/2024), funds were drawn before the start of FY 2025:  First drawdown: 6/6/2024 – $1,125,000  Second drawdown: 7/22/2024 – $375,000  Total expenditures as of 12/31/2024: $352,021 expended before FY 2025 start; $990,223 July–Sept 2024; $157,756 Oct–Dec 2024 The timing of these drawdowns did not fully align with the requirement to minimize the time elapsed between the receipt of federal funds and their disbursement for program expenditures, resulting in funds being held in advance of actual cash needs. Cause of Condition: Management has not developed formal policies and procedures for subrecipient monitoring or consistent documentation standards. Cause of Condition: Funds were drawn before the start of FY 2025 because the Notice of Subaward (NOSA) for Grant ID 24001119 was received on 5/22/2024, which was prior to the beginning of the fiscal year. UMADAOP of Lucas’ written procedures did not provide guidance on aligning drawdowns with actual cash needs, and there was no documented review or update of the procedures to ensure compliance with federal cash management requirements. As a result, funds were held in advance of actual program expenditures, reflecting a gap in internal controls over cash management. Potential Effect of Condition: The use of a predetermined drawdown schedule that is not based on actual cash needs could lead to excess federal funds being held unnecessarily, increasing the risk of non compliance with cash management requirements. Additionally, the absence of comprehensive documentation for cash management procedures could result in inconsistencies in implementation, a lack of accountability, and difficulties in ensuring that policies remain current and effective. Questioned Cost: Not quantifiable. Recommendation: UMADAOP of Lucas should revise its cash management procedures to ensure they are in full compliance with federal requirements. UMADAOP of Lucas should adopt a drawdown process that is based on actual cash needs, minimizing the time elapsing between the drawdown of federal funds and their disbursement for program expenditures. Additionally, the organization should update its written procedures to include documentation of when the policies were prepared, approved, implemented, reviewed, and revised. This will help ensure that cash management practices are transparent, consistent, and compliant with applicable regulations. Finally, the organization should consider training relevant staff on the updated procedures and the importance of compliance with cash management requirements. Description of the Nature and Extent of Issues Reported: Funds were drawn and held longer than necessary, and the organization lacks adequate cash management procedures, constituting noncompliance with 2 CFR §200.305. Management Response: Management concurred with the finding. The organization will revise its current draw-down procedures to reflect timing and methods for drawing down federal funds that are in compliance with cash management requirements.

Federal Agency: U.S. Department of Housing and Urban Development Federal Program Name: Continuum of Care Assistance Listing Number: 14.267 Federal Award Identification Number and Year: PA0433L3T002312 - FY25, PA0433L3T002413 - FY25, PA0504L3T002211 - FY25, PA0504L3T002312 - FY25, PA0010L3T002316 - FY25, PA0004L3T002310 - FY25, PA0004L3T002411 - FY25, PA0681L3T002209 - FY25, PA0681L3T002310 - FY25, PA0911L3T002204 - FY25, PA0911L3T002305 - FY25, PA1067L3T002200 - FY25, PA1067L3T002301 - FY25 Award Period: July 1, 2024 through June 30, 2025 Type of Finding: - Material Weakness in Internal Controls over Cash Management - Noncompliance Criteria or specific requirement: Per the Uniform Guidance (2 CFR §200.305), nonfederal entities must minimize the time between the transfer of funds from the U.S. Treasury and the disbursement of program purposes. Drawdowns must be based on immediate cash needs and supported by incurred expenses. Condition: The entity drew down federal funds in excess of the amounts incurred for allowable expenses. Specifically, cash management procedures did not ensure that funds drawn down were limited to actual expenditures incurred, resulting in excess cash balances held temporarily beyond the allowable timeframe. Questioned Costs: Known: $3,547,358 Context: Through discussions with management and other required audit procedures, we noted that Pathways had drawn down $3,547,358 of advanced funding due to uncertainty of access to these funds in the future. The excess of these funds was subsequently returned to the funder. Cause: Due to pending changes in federal funding, the entity was concerned about its access to funding for contracts that were already executed. Effect: This deficiency resulted in noncompliance with federal cash management requirements and exposed to entity to potential interest liabilities and reputational risk. It also indicates a reasonable possibility that material noncompliance with federal requirements may not be prevented or detected and corrected on a timely basis. Repeat Finding: No Recommendation: We recommend that management ensure drawdowns are strictly aligned with incurred and allowable expense. This should include: - Pre-drawdown verification of expense documentation - Monthly reconciliations of drawdown activity to actual expenditures - Training for staff involved in federal fund management on Uniform Guidance. Views of responsible officials: There is no disagreement with the audit finding. See Corrective Action Plan.

Finding Type. Immaterial Noncompliance / Significant Deficiency in Internal Control over Compliance (Cash Management). Program. Research and Development Cluster; all Assistance Listing Numbers; all Award Numbers. Criteria. Per 2 CFR §200.305(b), non-federal entities must minimize the time elapsing between the transfer of funds and disbursement. Entities must also ensure that drawdowns are based on actual, allowable expenditures and supported by adequate documentation. Condition. The University did not have documented review procedures in place for federal grant drawdowns under the Research and Development cluster. Drawdowns were processed without a formal review or approval process to verify that amounts requested were based on allowable expenditures. Cause. The University lacked formal internal controls and oversight mechanisms to ensure drawdowns were reviewed prior to submission. The process relied on informal practices without documented policies or designated reviewers. Effect. This deficiency increases the risk of drawing federal funds in excess of actual expenditures or for unallowable costs, potentially resulting in noncompliance with federal regulations. Questioned Costs. No costs were questioned related to this finding. Recommendation. The University should implement formal review procedures for all federal grant drawdowns, including documented policies, designated reviewers, and system controls to ensure drawdowns are accurate, allowable, and properly supported. View of Responsible Officials. Management agrees with this finding and has prepared a Corrective Action Plan.

Criteria: Under Uniform Guidance (2 CFR §200.302, §200.303, §200.305, §200.318–§200.326, and §200.430), a non-federal entity must establish, document, and maintain written policies and procedures for the management of federal awards. Effective internal control over federal awards provides reasonable assurance that the entity is managing the award in compliance with federal statutes, regulations, and the terms and conditions of the awards. Condition: The Town did not have written policies and procedures required by Uniform Guidance (2 CFR 200) for the administration of its federal programs. Specifically, the Town has not formally documented policies and procedures addressing key areas required under the Uniform Guidance, including but not limited to allowable and unallowable costs and cost principles, procurement standards, suspension and debarment, conflicts of interest, cash management, and reporting and record retention requirements. While informal processes exist, they are not sufficiently documented to ensure consistent application or compliance with federal requirements. Cause: The Town has not developed or formally adopted written federal grant management policies and procedures. Effect: Without formal written policies and procedures, there is an increased risk of noncompliance with federal program requirements. This condition exposes the Town to potential noncompliance with federal regulations, increases the risk of unallowable costs being charged to federal awards, and may affect the Town’s ability to properly administer, monitor, and report federal program activity. Additionally, the lack of documentation may impair continuity of compliance in the event of change in key personnel. Recommendation: The Town should develop, formally adopt, and implement written policies and procedures to comply with Uniform Guidance (2 CFR 200). The policies should address all major compliance areas, including but not limited to allowable and unallowable costs and cost principles, procurement standards, suspension and debarment, conflicts of interest, cash management, and reporting and record retention requirements. The Town should ensure that staff responsible for federal grant administration are properly trained to ensure adherence to these policies and that the policies are reviewed periodically and updated as needed. Views of responsible officials: See management’s responses to findings on Page 78.

Assistance Listing Number, Federal Agency, and Program Name - ALN 93.914, Department of Health and Human Services (HHS), HIV Relief Project Grants Federal Award Identification Number and Year - 6 H89HA00021 32 01 2024 Pass through Entity - N/A Finding Type - Material weakness and material noncompliance with laws and regulations Repeat Finding - No Criteria - Per 2 CFR 200.303, the recipient must establish, document, and maintain effective internal control over the federal award that provides reasonable assurance that the recipient or subrecipient is managing the federal award in compliance with federal statutes, regulations, and the terms and conditions of the federal award. These internal controls should align with the guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control-Integrated Framework” issued by the Committee of Sponsoring Organizations of the Treadway Commission. Per 2 CFR 200.305(b)(3), when the reimbursement method is used, the federal agency or pass-through entity must make payment within 30 calendar days after receipt of the payment request, unless the federal agency or pass-through entity reasonably believes the request to be improper. Condition - A lack of effective controls resulted in noncompliance with federal payment requirements, specifically for payments made to subrecipients. Questioned Costs - None If Questioned Costs are Not Determinable, Description of Why Known Questioned Costs Were Undetermined or Otherwise Could Not be Reported - N/A Identification of How Questioned Costs Were Computed - N/A Context - During testing over a sample of 40 payments to subrecipients, we noted 3 payments that were made more than the required 30 days after the City received a reimbursement request from the subrecipient. Cause and Effect - A lack of effectively operating controls could result in the untimely disbursement of funds to subrecipients and material noncompliance with federal payment requirements. Recommendation - We recommend that the City design and implement controls to ensure compliance with federal payment requirements, including establishing timelines for processing subrecipient payments and review to ensure adherence to federal payment requirements. Views of Responsible Officials and Planned Corrective Actions - The three payments made were paid 1 to 2 days after the 30 day reimbursement requirement. The City will review its subrecipient payment terms and implement additional processes to help ensure compliance with federal payment requirements.

Federal Agency: U.S. Department of Treasury Federal Program Name: Community Development Financial Institutions Equitable Recovery Program Assistance Listing Number: 21.033 Federal Award Identification Number and Year: 22ERP061061 – 2022 Award Period: April 10, 2023 through December 31, 2028 Type of Finding: - Significant Deficiency in Internal Control Over Compliance - Other Matters Criteria or specific requirement: The CDFI ERP Grant Agreement requires recipients to track the use of award funds, maintain separate accounting records, and ensure that the initial payment is fully expended within 12 months of the award announcement date. Furthermore, 2 C.F.R. § 200.305(b)(7) requires entities to deposit advance payments in interest-bearing accounts and remit any interest earned to the federal government, with appropriate documentation retained. Condition: The Credit Union did not maintain supporting documentation to demonstrate that interest earned on unused CDFI ERP funds held in interest-bearing accounts was remitted to the federal government as required. Additionally, the full amount of the initial grant payment was not fully expended within the 12-month period specified in the grant agreement. Questioned costs: None Context: The deficiency was identified during the audit of the SEFA and reconciliation of unearned grant revenue. The original SEFA lacked sufficient documentation, and the timing of expenditures did not align with the grant agreement’s 12-month requirement. The absence of documentation regarding interest earned and remitted may result in audit findings or repayment obligations. Cause: The Credit Union did not implement adequate internal controls to ensure timely and complete documentation of grant expenditures and to monitor compliance with grant terms regarding expenditure timing and interest remittance. Effect: Failure to maintain adequate documentation and comply with grant terms increases the risk of noncompliance with federal requirements. This could result in audit findings, repayment obligations, or other sanctions imposed by the federal awarding agency. Repeat finding: Not a repeat finding. Recommendation: We recommend that the Credit Union implement and enforce internal controls to track and document interest earned on federal funds, ensure timely remittance to the federal government, and monitor compliance with all grant terms, including the 12-month expenditure requirement. Views of responsible officials and planned corrective actions: Management concurs with the finding and acknowledges the significance of the deficiency. They are committed to strengthening internal controls and ensuring full compliance with grant requirements.

Finding 2025.002: Cash Management - Significant Deficiency Grantor: U.S. Department of Health and Human Services Federal Program Name: Block Grants for Community Mental Health Services Federal Assistance Listing Number: 93.958 Federal Award Identification Number and Year: 24MHA2102 Criteria In accordance with §200.305, Federal Payment, grantees and subgrantees that receive grant funds are responsible for maintaining controls regarding the management of federal program funds under the Uniform Guidance in 2 CFR 200.302 and 200.303. Condition The Organization's drawdowns did not illustrate review and approval by management. Cause The Organization did not have adequate controls to ensure drawdowns were properly approved and such approval is documented. Effect or Potential Effect The condition may lead to inaccurate or improper drawdowns. Questioned Costs None Context We selected three drawdowns for testing of cash management procedures. We noted that for all three drawdowns, there was no formal approval or evidence of review. Identification of Repeat Finding No Recommendation The Organization should develop written procedures to review all drawdowns that occur in order to ensure accuracy. Views of Responsible Officials and Planned Corrective Actions Management and the Board of Directors agree with the finding and will implement additional controls to ensure there is formal evidence of review being performed.

Assistance Listing Number(s): 14.239 and 21.027 Name of Federal Program or Cluster: Home Investment Partnerships Program and COVID-19 Coronavirus State and Local Fiscal Recovery Funds Name of Federal Agency: Department of Housing and Urban Development and Department of the Treasury Name of Pass-Through Entity: Milwaukee County Department of Health and Human Services Criteria or Specific Requirement: Subparts D and E of 2 CFR Part 200 require a nonfederal entity to establish written policies, procedures, and standards of conduct, including procedures to implement the cash management requirements of 2 CFR section 200.305, procedures that comply with the procurement standards of 2 CFR sections 200.318 through 200.326, and procedures for determining the allowability of costs in accordance with Subpart E of 2 CFR Part 200. Specifically, 2 CFR sections 200.430, 200.431, and 200.475 require written policies concerning compensation for personal services, fringe benefits, and travel costs, respectively. Condition: Policies and procedures with requirements in accordance with 2 CFR Part 200 for cash management, procurement, compensation, including fringe benefits, and travel were not maintained. Cause: The Agency is not aware of the requirements of Subparts D and E of 2 CFR Part 200 for written policies, procedures, and standards of conduct. Effect or Potential Effect: A lack of written policies, procedures, and standards of conduct may result in noncompliance with the requirements of federal programs and/or disallowed costs. Repeat Finding: No Recommendation: The Agency should become familiar with the requirements of Subparts D and E of 2 CFR Part 200 and establish appropriate written policies, procedures, and standards of conduct. Views of Responsible Officials: Management has established written policies and procedures after year end that were the policies and procedures followed during the year under audit and meets the requirements of Subparts D and E of 2 CFR Part 200.

Finding Number: 2025-001 Federal Program: Student Financial Assistance Cluster Federal Award Identification Number and Year: Various, 2024-2025 Assistance Listing Number (ALN): 84.268, 84.038, 93.342, 93.925 Federal Awarding Agency: U.S. Department of Education and U.S. Department of Health & Human Services Pass-through Entity: N/A Repeat Finding: No Significant Deficiency and Noncompliance – Cash Management Criteria: 2 C.F.R. § 200.305 For recipients and subrecipients other than States, payment methods must minimize the time elapsing between the transfer of funds from the Federal agency or the pass-through entity and the disbursement of funds by the recipient or subrecipient regardless of whether the payment is made by electronic funds transfer or by other means. All other Federal funds must be returned to the payment system of the Federal agency. Returns should follow the instructions provided by the Federal agency. Condition: The University operates on a reimbursement basis; however, the University overdrew federal funds and did not return the overdrawn funds in a timely manner. Questioned Costs: None. Identification of How Questioned Costs Were Computed: N/A Context: Through testing of cash management draws during the year, we identified one instance where the University overdrew federal funds in the amount of $210,077. After discussion with personnel in the Bursar office, the University further reported that it overdrew additional funds of $349,952. In addition, the University did not return the funds timely, with return times ranging from three days to thirty days. Cause and Effect: The University experienced turnover in the Bursar office, which resulted in a misunderstanding of the procedures related to cash draws. As a result, three draws were made in a onemonth period that exceeded the cash needed for disbursements to students. Recommendation: We recommend management implement procedures and processes to ensure that all cash draws are for expenses incurred and any overdrawn funds are returned promptly. Views of Responsible Officials and Corrective Action Plan: See corrective action plan.

Assistance Listing Number, Federal Agency, and Program Name - ALN 66.202, U.S. Environmental Protection Agency - Congressionally Mandated Projects Federal Award Identification Number and Year - CG-00E03697-0, 2024 Pass through Entity - N/A Finding Type - Material weakness and material noncompliance with laws and regulations Repeat Finding - No Criteria - Per 2 CFR 200.319(d), the recipient is required to maintain a written procurement policy that adheres to procurement standards and requirements specified in 2 CFR 200.317 through 2 CFR 200.327. Per 2 CFR 200.305, the recipient is required to maintain a written cash management policy that addresses the requirements of the aforementioned code section. Condition - The Village did not have written policies for cash management or procurement that adhered to the requirements of the Uniform Guidance. Questioned Costs - None If Questioned Costs are Not Determinable, Description of Why Known Questioned Costs Were Undetermined or Otherwise Could Not Be Reported - N/A Identification of How Questioned Costs Were Computed - N/A Context - While the Village has written policies in place to address procurement and cash management, the policies do not address the requirements of 2 CFR 200.317 through 2 CFR 200.327 and of 2 CFR 200.305, respectively. Cause and Effect - The Village was not in compliance with grant requirements related to procurement and cash management, nor did it have proper controls in place to ensure these policies had the required elements. The absence of these requirements in the Village's policies increases the potential for further noncompliance because the Village's procedures may not adequately address relevant compliance requirements. Recommendation - We recommend that the Village create and put in place a procurement policy that addresses the requirements of 2 CFR 200.317 through 2 CFR 200.327 and a cash management policy that addresses the requirements of 2 CFR 200.305. Views of Responsible Officials and Planned Corrective Actions - The Village is currently reviewing existing policies to determine the best course of action and updating them for compliance. Some updates may require voter approval, as certain provisions are in the village charter.

2025-001: Cash Management Assistance Listing Number: 14.872, Capital Fund Program Condition and Criteria: 24 CFR 905.310 has the following conditions for the cash management regulation: 1) The PHA shall initiate a fund requisition only when funds are due and payable, unless HUD approves another payment schedule as authorized by 2 CFR 200.305. 2) The PHA shall maintain detailed disbursement records to document eligible expenditures (e.g., contracts or other documents), in a form and manner prescribed by HUD. During the current year audit, the following were noted: 1) One drawdown was deposited 2/5/2025, payment was made 2/27/25. 2) A drawdown dated 12/16/24 for $53,475 – The Housing Authority did not have any invoice documentation attached to the drawdown. 3) The Authority drew down funds from their 501-23 year program in February 2025. As of June 30, 2025, $256,674.13 remains unspent and is shown as an unearned revenue on the Statement of Net Position. Type of Finding: Material Weakness Cause: The Housing Authority experienced turnover in the Executive Director Position. Proper communication and training was not done in the internal control structure to allow compliance with HUD rules and regulations. Effect: The Housing Authority is not in compliance with the Cash Management requirements. Questioned Costs: None known Auditors’ Recommendation: We recommend that the Housing Authority strengthen its internal control structure in relation to the Cash Management requirements.

Program: 14.872 - Capital Funds Criteria: 2 CFR 200.305 requires PHAs to minimize the time federal funds are drawn down to expenditure. The Capital Fund Program provides guidelines of three business days from draw down to expenditure to minimize the interest accrued by the PHA. 24 CFR 905.310 states the PHA shall initiate a fund requisition from HUD only when funds are due and payable, unless HUD approves another payment schedule as authorized by 2 CFR 200.305. Condition: The Housing Authority had drawn down Capital Funds and did not expend within three days. Cause: The Housing Authority was not aware that Capital Funds drawn needed to be expended within three days. Questioned Costs: Not applicable. Effect: The Housing Authority is not in compliance with cash management requirements. Prior Year Finding: N/A Information: Isolated instance. Recommendation: Traditionally we would recommend that the Housing Authority implements appropriate controls over voucher draws to ensure compliance with Public Housing Capital Fund cash management requirements. We recognize that the Capital Funds have been fully expended as of June 30, 2025, so the recommendation does not apply. When receiving Capital Funds in the future, we recommend to follow this recommendation. Management’s Response: Management concurs with the recommendation to implement timely LOCCS fundings that coincides with our normal accounting cycle when receiving Capital Funds in the future.

Finding 2025-003: Cash Management Assistance Listing Number 84.126A Rehabilitation Services - Vocational Rehabilitation Grants to States Award Period: July 1, 2024 – June 30, 2025 Criteria: In accordance with 2 CFR 200.305 (b)(3) and per the terms of the underlying grant agreements, the College is funded under the reimbursement method and therefore, cash drawdowns/reimbursement requests made during the period from the federal agency or pass-through entity should be for expenditures incurred prior to the date of the reimbursement request. Condition: While reimbursement requests submitted by the College were for expenditures incurred prior to the date of the reimbursement requests, certain reimbursement requests were not submitted within the specific time frames and with the requisite documentation required per the grant agreements. Cause: Staff turnover within the Finance and Office of Grants and Sponsored Research (OGSR) prevented adequate levels of detailed review and understanding of the specific due dates and information requirements for reimbursement requests per the grant agreements. Effect: While reimbursement requests submitted by the College were for expenditures incurred prior to the date of the reimbursement requests, certain reimbursement requests were not submitted within the specific time frames and with the requisite documentation required per the grant agreements. Questioned Costs: None. Context: Final reimbursement request for the “I Can Connect (ICC)” grant was not submitted within 12 days of the grant end date as indicated in the initial grant agreement. Final reimbursement request for the “I Can Connect (ICC)” grant was due by July 19, 2025 but it was not submitted until November 17, 2025. The reimbursement requests were missing certain required documentation elements outlined in the underlying grant agreements. Repeat Finding: No. Recommendation: It is recommended that management conduct a more thorough review of the grant agreements to ensure that all timing and supporting documentation requirements are met as they relate to reimbursement requests submitted to granting agencies. Views of Responsible Individuals: In response, the College strengthened control processes as it relates to reimbursement processing, including enhanced month-end procedures, hiring a staff member for additional oversight, strengthening communication, and establishing a grant-specific reimbursement tracker. In addition, a mandatory annual training will be implemented beginning in fiscal year 2026. Refer to the Corrective Action Plan for Current Year Findings.

SA 2025-002: Develop Written Policies and Procedures Assistance Listing Number: 20.509 Federal Program/Cluster Name: Formula Grants for Rural Areas and Tribal Transit Federal Agency: U.S. Department of Transportation – Federal Transit Administration Federal Award Number: 64BA24-02507/64CA17-02442/64HC22-02180/64RO21-01648/64TO21-01865/64MO21-01910/64HC21-01500 Federal Award Year: July 1, 2024 to June 30, 2025 Compliance Requirement Others Criteria 2 CFR 200.303 requires nonfederal entities to establish and maintain effective internal control over federal awards to provide reasonable assurance that organizations who manage the federal award: • Understand and comply with the federal statutes, regulations, and terms and conditions of the award; • Evaluate and monitor compliance; • Take prompt action when instances of noncompliance is identified. These internal controls should be in compliance with guidance in Standards for Internal Control in the Federal Government, issued by the Comptroller General of the United States, or the Internal Control Integrated Framework, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Additionally, the Uniform Guidance requires non-federal entities to develop written procedures related to the following areas: 1. Cash Management 2 CFR 200.302(b)(6) states that the financial management system of each non-Federal entity must provide for the written procedures to implement the requirements of 2 CFR 200.305 Federal Payment. 2. Equipment Management Requirements Non-federal entities other than states must follow 2 CFR sections 200.313(c) through (e). Condition MARTA does not have comprehensive written policies and procedures concerning the following key compliance areas which are required by the Uniform Guidance: Cash Management MARTA does not have written procedures to implement the requirements of 2 CFR 200.305 Federal Payment. Equipment and Real Property Management MARTA has an Asset Inventory Policy and Procedures, however, it does not clearly define the policies and procedures that are in place for the use, management and disposition of equipment acquired under a Federal award in accordance with 2 CFR sections 200.313(c) through (e). Cause MARTA’s reliance on informal business practices leads to inconsistencies in its internal controls. Effect The absence of formal policies and procedures in the key compliance areas could result in non-compliance with federal regulations, which may lead to unnecessary sanctions. Additionally, without formal written policies and procedures, it is difficult to ensure consistent practices across the organization. Questioned Costs None Repeat Findings Yes, see the Summary Schedule of Prior Year Audit Findings, SA 2024‑001. The Cash Management and Equipment and Real Property Management policies have not been updated since last year’s audit. Recommendation MARTA should develop and implement formal written policies and procedures for the specific areas required by the Uniform Guidance. These policies and procedures must clearly delineate the requirements of Uniform Guidance. Personnel responsible for these areas should receive adequate training and apply the policies effectively. Regular reviews should be conducted to update the policies and procedures as needed. Views of Responsible Officials and Planned Corrective Action MARTA has grown substantially in the last several years. This progress includes identifying areas that need to be updated or developing new processes and documentation. MARTA has an Asset Inventory Policy and Procedures in which the purpose is to ensure that fixed assets are properly accounted for, identified, and tracked. MARTA also has Cash Handling Policy and Procedures which addresses safeguarding public funds and maximizing the available resources. This is designed to reduce the risks associated with the collection, receipts storage and reporting of cash transactions and to safeguard and maintain the security and integrity of MARTA's fiscal assets. MARTA will review and update these policies and/or create new policies to make sure that they are compliant with the Uniform Guidance. Personnel responsible: Sandy Benson, General Manager Anticipated completion date: October 2026

Federal Agency: U.S. Department of Health and Human Services Federal Program Name: Community Project Funding/Congressionally Directed Spending ‐ Construction Assistance Listing Number: 93.493 Federal Award Identification Number and Year: 6-CE1HS52375-07 - 2023 Award Period: September 30, 2023, through September 29, 2026 Type of Finding: • Material Weakness in Internal Control over Compliance – Cash Management – Subrecipient Payments • Other Matters Criteria or specific requirement: 2 CFR Part 200 Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards, §200.305 specifies that payments to subrecipients must minimize the time between the transfer of funds and their disbursement for program purposes. Subrecipients must be able to demonstrate proper use of funds, maintain records, and be subject to audit. Condition: During testing, it was noted that subrecipient payments were being directly remitted to vendors rather than subrecipients. Questioned costs: None. Context: Of the thirteen samples selected for testing, we noted that nine samples were paid directly to the vendor, rather than the subrecipient. Cause: The Association did not have internal controls in place to ensure subrecipient payments were being remitted directly to the subrecipients. Effect: The Association is noncompliant with federal regulations related to the federal award. Subrecipients do not receive or manage the federal funds, undermining their responsibility for programmatic and financial oversight. Repeat Finding: N/A. Recommendation: We recommend that the Association implement formal policies and procedures requiring remittance of federal funds directly to subrecipients, rather than paying vendors on the subrecipient's behalf. Views of responsible officials: There is no disagreement with the audit finding.

FINDING 2025-004 Subject: COVID-19 - Education Stabilization Fund - Cash Management Federal Agency: Department of Education Federal Program: COVID - 19 - Education Stabilization Fund Assistance Listings Numbers: 84.425D, 84.425U Federal Award Numbers and Years (or Other Identifying Numbers): S425D210013, S425U200013 Pass-Through Entity: Indiana Department of Education Compliance Requirement: Cash Management Audit Findings: Material Weakness, Other Matters Repeat Finding This is a repeat finding from the immediately prior audit report. The prior audit finding number was 2023-009. Condition and Context The School Corporation had not properly designed or implemented a system of internal controls, which would include appropriate segregation of duties, that would likely be effective in preventing, or detecting and correcting, noncompliance related to the Cash Management compliance requirement. Reimbursement requests for the program were prepared by one employee and reviewed by another employee; however, the supporting documentation that was provided to the reviewer did not give a clear distinction as to what expenditures were included in the reimbursement. As the documentation provided was not adequate that accompanied the reimbursement request, and the reimbursement requests, as noted below, did not agree to the ledger, the reviewer could not have ensured expenses were paid prior to requesting reimbursement. For 5 of 25 expenditures tested, the School Corporation was unable to provide supporting documentation traceable to the reimbursement request. There were 2 of those expenditures, totaling $1,715, that were for ESSER II's final reimbursement which requested the remainder of the grant award and expenses could not be traced to the documentation provided for the reimbursement amount. There were 3 of the expenditures, totaling $6,665, that were not traceable to an ESSER III reimbursement request. Therefore, as the expenditure could not be traced to a reimbursement request, it could not be determined if the School Corporation paid for the expense prior to requesting reimbursement. INDIANA STATE BOARD OF ACCOUNTS 21 SILVER CREEK SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Additionally, 1 of 25 expenditures tested, for $154, was an expense that occurred after the School Corporation requested reimbursement. The lack of internal controls and noncompliance were systemic issues throughout the audit period for ESSER II and ESSER III. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.305(b) states in part: "For non-Federal entities other than states, payments methods must minimize the time elapsing between the transfer of funds from the United States Treasury or the pass-through entity and the disbursement by the non-Federal entity whether the payment is made by electronic funds transfer, or issuance or redemption of checks, warrants, or payment by other means. . . . (3) Reimbursement is the preferred method when the requirements in this paragraph (b) cannot be met, when the Federal awarding agency sets a specific condition per § 200.208, or when the non-Federal entity requests payment by reimbursement. . . ." 2 CFR 200.302(b) states in part: "The financial management system of each non-Federal entity must provide for the following . . . (2) Accurate, current, and complete disclosure of the financial results of each Federal award or program in accordance with the reporting requirements set forth in §§ 200.328 and 200.329. . . ." Cause A proper system of internal controls was not designed and implemented by management of the School Corporation, which would include segregation of key functions. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. The School Corporation had not developed any policies that would have ensured compliance or that supporting documentation would have been maintained and available for audit related to the Cash Management compliance requirement. INDIANA STATE BOARD OF ACCOUNTS 22 SILVER CREEK SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Effect The failure to retain and provide appropriate supporting documentation prevented the determination of the School Corporation's compliance with the Cash Management compliance requirement. Noncompliance with the grant agreement and the Cash Management compliance requirement could result in the loss of future federal funds to the School Corporation. Questioned Costs There were no questioned costs identified. Recommendation We recommended that the School Corporation's management establish a system of internal controls to ensure that documentation will be maintained and available for audit and comply with the grant agreement and the Cash Management compliance requirement. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

2025-013: Improve Financial Management of Federal Grants Applicable to: Department of Wildlife Resources Assigned Topic: Federal Grants Management Prior Finding Number: N/A Finding Type: Internal Control and Compliance Finding Severity: Material Weakness Financial Statement Finding: No Federal Awards Finding: Yes ALPT - ALN: Sport Fish Restoration - 15.605; Wildlife Restoration and Basic Hunter Education and Safety - 15.611; Enhanced Hunter Education and Safety - 15.626 Federal Award ID (Year): F20AF10048 (2020); F20AF11897 (2020); F21AF02409 (2021); F22AF01121 (2022); F23AF00654 (2023); F23AF03173 (2023); F23AF03185 (2023); F24AF02770 (2024); F24AF02896 (2024); F24AF02903 (2024) Federal Agency: U.S. Department of the Interior Compliance Requirement: Allowable Costs/Cost Principles - 2 CFR § 200.302; 2 CFR § 200.303(a); 2 CFR § 200.305; 2 CFR § 200.510(b); 31 CFR § 205.33 Known Questioned Costs: $0 The Department of Wildlife Resources (Wildlife Resources) should improve its financial management of federal grants and documentation of internal controls to ensure compliance with state and federal requirements. Wildlife Resources has experienced recent turnover in its grants staff positions. Wildlife Resources has hired new staff; however, there was no transition period with the previous staff, and the previous grants staff did not sufficiently document internal controls over the federal programs. Staff have started documenting desk procedures, but agency-wide policies and procedures remain lacking. As such, grants staff did not appear to have sufficient knowledge of statewide policies and procedures to adequately perform the federal grants management processes in accordance with federal regulations and the Commonwealth Accounting Policies and Procedures (CAPP) Manual. We identified the following issues: Wildlife Resources should amend its procedures to comply with CAPP Manual requirements for cash management of federal funds. CAPP Manual Topic 20605 states that two methods of recording "split" funded expenses are acceptable. The method preferred by the State Comptroller is to establish procedures to "split code" the expenses by allocating the disbursement between a state fund and the federal fund at the matching ratio prescribed by the grant or contract. A second, and temporary, funding method allows the agency to charge the original expense to a state fund and subsequently, within seven business days, prepare and submit a general ledger journal in the Commonwealth’s accounting and financial reporting system to charge the federal fund for the federal portion of the original expense, referencing the original voucher in the journal reference line for transparency. If a state agency cannot comply, the agency must request approval from the State Comptroller. Wildlife Resources follows the temporary funding method to record its federal expenses. Wildlife Resources spends from state funds and then performs journal entries to move transactions to the federal fund in bulk with some journal entries representing hundreds of individual transactions, which does not allow for transparency regarding the nature of Wildlife Resources federal expenses. Further, our analysis found that Wildlife Resources enters journal entries for federal drawdowns up to three months after the original transaction date which is not consistent with the seven-day requirement in CAPP Manual Topic 20605. Per 2 Code of Federal Regulations (CFR) § 200.302, a recipient must comply with state laws and procedures for expending and accounting for the State's funds. Additionally, the untimely performance of these extensive journal entries may result in Wildlife Resources recording journal entries in the wrong fiscal year, which could result in inaccurate information within the Commonwealth’s Annual Comprehensive Financial Report. Wildlife Resources does not maintain adequate support for its journal entries. CAPP Manual Topic 20405 requires the agency to retain sufficient supporting documentation to provide auditable records containing evidence of required coding elements for journal entries. Wildlife Resources’ journal entries lack documentation related to changes in coding. Further, Wildlife Resources does not maintain supporting documentation for journal entries in one accessible location which would allow for sufficient supervisory review. Not maintaining adequate supporting documentation over journal entries increases the risk of inaccurate or fraudulent transactions. Wildlife Resources also does not have policies and procedures in place that detail how it creates the journal entries, what type of documentation to retain to support journal entries, or how Wildlife Resources ensures it only moves allowable costs to the federal fund. Title 2 CFR § 200.303(a) requires recipients to establish, document, and maintain effective internal control over the federal award that provides reasonable assurance that the recipient or subrecipient is managing the federal award in compliance with federal statutes, regulations, and the terms and conditions of the federal award. During fiscal year 2025, in response to our Office’s 2024 Internal Control Questionnaire Review, Wildlife Resources established a bimonthly drawdown and journal entry schedule to ensure timely drawdown of federal funds to reimburse expenses originally incurred within state funds and to assist in remediation of its cash flow issues. Per 31 CFR § 205.33, a state must minimize the time between the drawdown of federal funds from the federal government and their disbursement for federal program purposes in accordance with the actual, immediate cash requirements of the state. The timing and amount of funds transfers must be as close as is administratively feasible to a state's actual cash outlay for direct program costs and the proportionate share of any allowable indirect costs. However, based on our analysis of drawdowns, while Wildlife Resources has made progress in the rate of drawdowns since the previous review, due to staff shortages, Wildlife Resources has not fully followed its drawdown schedule to ensure timely drawdowns of federal funds, which could exacerbate the agency’s cash flow issues. Specifically, the drawdown schedule included twenty planned drawdowns, however Wildlife Resources completed only eleven (55%) in accordance with that schedule. Furthermore, Wildlife Resources does not have policies and procedures in place over the completion of drawdowns as required by 2 CFR § 200.302, which requires a recipient to have written procedures to implement the requirements of 2 CFR § 200.305 regarding federal drawdowns. Wildlife Resources did not record program income revenue of approximately $2.3 million in the correct fiscal year for the Fish and Wildlife Cluster. Wildlife Resources recorded the program income received in fiscal year 2025 in a suspense account and did not distribute the income to the proper revenue account until fiscal year 2026. CAPP Manual Topic 20205 requires recording of all state receipts in the Commonwealth’s accounting and financial reporting system in a timely manner within three business days of the deposit. Additionally, the Department of Accounts (Accounts) Fiscal Year-End Closing Procedures require agencies to certify that they properly distributed balances to the correct accounts before final close of Commonwealth’s accounting and financial reporting system. By not properly recording program income, Wildlife Resources may misrepresent financial information to the federal government and report information that does not agree with its accounting records. Wildlife Resources reported federal expenses on its Schedule of Expenditures of Federal Awards (SEFA), a schedule that details Wildlife Resources’ federal expenses for fiscal year 2025, that did not agree to its underlying accounting records. Wildlife Resources reported federal expenses in the SEFA that it recorded as state funds in the Commonwealth’s accounting and financial reporting system due to considering journal entries that they did not record in the system until the next fiscal year. Due to these issues and preparation of the SEFA by a member of management on long-term leave who was not available during the audit, Wildlife Resources could not support amounts totaling over $660,000 in its SEFA. Additionally, Wildlife Resources does not have documented procedures outlining its process for preparing the SEFA in accordance with 2 CFR § 200.510(b), which states that the auditee must prepare a schedule of expenditures of federal awards for the period covered by the auditee’s financial statements which must include the total federal awards expended as determined in accordance with 2 CFR § 200.502. Accounts’ Office of the Comptroller’s Directive No. 1-25 (Comptroller’s Directive) also provides specific directions for compiling the SEFA and supporting schedules to support its preparation of the Commonwealth’s SEFA and related disclosures. Furthermore, the Comptroller’s Directive states that an agency must ensure that it has internal controls in place to avoid material misstatements and/or misclassifications in the attachments and other financial information submitted to Accounts for inclusion in the Commonwealth’s Single Audit. By not implementing adequate internal controls over financial reporting, Wildlife Resources cannot provide reasonable assurance that the financial information it submits to Accounts for inclusion in the Commonwealth’s Single Audit is free of material misstatements. Because of the scope of the matters and errors noted above, we consider this finding to be a material weakness in internal control. Wildlife Resources should improve its financial management of federal funds and documentation of internal controls to ensure compliance with state and federal requirements. The need for strong internal controls is especially important given that Wildlife Resources is exploring additional federal funding opportunities. Wildlife Resources should work with Accounts to develop and implement a federal grants management process that complies with the CAPP Manual. Wildlife Resources should improve its process and controls related to federal fund drawdowns to ensure timely reimbursement of expenses within federal limitations. Further, Wildlife Resources should also improve its controls and procedures related to journal entry processing to ensure it retains adequate support for all entries and enters the entries timely. Additionally, Wildlife Resources should perform a thorough review of its SEFA before submitting it to Accounts and retain supporting documentation to support the SEFA. Finally, Wildlife Resources should develop policies and procedures over all federal grants processes including all compliance requirements. These improvements combined are necessary to ensure accurate accounting and financial reporting in accordance with the CAPP Manual, the Code of Federal Regulations, the Comptroller’s Directives, and applicable accounting standards. Views of Responsible Officials: The views of responsible officials are included in the report related to their organization, which can be found at www.apa.virginia.gov and, in summary, do not express disagreement with the finding.

Program: AL 12.401 – National Guard Military Operations and Maintenance (O&M) Projects – Cash Management & Reporting Grant Number & Year: Appendices – W91243-23-2-1001, FFY 2023; W91243-24-2-1001, FFY 2024; W91243-25-2-1024, FFY 2025; W91243-25-2-1001, FFY 2025; W91243-25-2-1021, FFY 2025 Federal Grantor Agency: U.S. Department of Defense Criteria: Per 2 CFR § 1128.100 and 2 CFR § 1128.200 (January 1, 2024, and January 1, 2025), the Department of Defense adopted the Uniform Administrative Requirements, Cost Principles, and Audit Requirements set forth at 2 CFR parts 200.302, 200.303, and 200.305. Per 2 CFR § 200.303 (January 1, 2024, and January 1, 2025), a non-Federal entity must establish and maintain effective internal control over the Federal award to provide reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Title 2 CFR § 200.302 (January 1, 2024, and January 1, 2025) requires financial management systems of the State be sufficient to permit preparation of required reports and permit the tracing of funds to expenditures adequate to establish the use of these funds were in accordance with applicable regulations. EnterpriseOne is the official accounting system for the State of Nebraska, and all expenditures are generated from it. Per Title 2 CFR § 200.305(a) (January 1, 2024, and January 1, 2025), payments for States are governed by Treasury-State Cash Management Improvement Act (CMIA) agreements and default procedures codified at 31 CFR part 205. National Guard Policy (NG Policy) 5-1, National Guard Grants and Cooperative Agreements, Section 11-5, Advance Payment Method, Section (5), states in part, “[T]he grantee agrees to minimize the time elapsing between the transfer of funds from the U.S. Treasury and their disbursement by the State. (no more than 45 days).” GCAPL 20-02 AQ-A Policy (February 4, 2020) turned NGR 5-1 into NG Policy 5-1. It generally maintained the principles and operational aspects of NGR 5-1, except as provisions of the document were adjusted in the AQ-A Policy. The AQ-A Policy did not make any changes to the 45-day requirement found in NGR 5-1. The instructions for OMB Standard Form 270 (REV. 1/2016) include the following for line 11a: Enter program outlays to date (net of refunds, rebates, and discounts), in the appropriate columns. For requests prepared on a cash basis, outlays are the sum of actual cash disbursements for goods and services, the amount of indirect expenses charged, the value of in- kind contributions applied, and the amount of cash advances and payments made to subcontractors and subrecipients. A good internal control plan would include procedures to ensure the time between the drawdown of Federal funds and disbursements is minimized and in compliance with National Guard Regulations. Condition: The Agency was noncompliant with the Federal cash management requirements during the fiscal year and did not properly report program outlays on the OMB Standard Form (SF) 270. A similar finding was noted in the prior audit. Repeat Finding: 2024-066 Questioned Costs: None Statistical Sample: No Context: We tested five drawdowns of Federal funds to support the Agency’s operations. We tested to determine whether the Agency had expended the cumulative amounts drawn down for the awards tested within the required timeframe and noted the following: • Three drawdowns were noncompliant with NG Policy 5-1. Cumulative drawdowns for one of the draws were expended 63 days after the drawdown of the Federal funds. Cumulative draws for the other draws had yet to be fully expended as of January 8, 2026. The table below provides a summary of the three draws: See Schedule of Findings and Questioned Costs for chart/table. • For 5 of 5 SF-270’s tested, the Agency did not properly report total program outlays on the OMB SF-270 report. The Agency reported the total drawdowns for the program to date, rather than actual cash disbursements, as total program outlays. The variance between what was reported and what should have been reported ranged from an overreporting of $2,764 to an overreporting of $3,530,797, with a net total overreporting of expenditures by $4,074,284 for the five reports tested. Cause: Inadequate procedures for estimating fund needs for the upcoming month. Regarding SF-270 reporting, the Agency has stated it agrees with the finding; however, it has yet to implement corrective action. Effect: The Agency is noncompliant with Federal cash management and reporting requirements, which could result in sanctions. Additionally, there is an increased risk for the loss of Federal funding. Recommendation: We recommend the Agency ensure the amount of time between the Federal draw and the disbursement of funds by the State is minimized and in compliance with National Guard requirements. We also recommend the Agency report total program outlays in compliance with Federal requirements. Management Response: The Agency agrees with the finding. The drawdown timeline is a partial result of the variances in federal reimbursement functionalities and the advance state requirement function. Program obligations and liquidations are reconciled and reported on at least a quarterly basis with federal constituents.

Lack of Review over Financial Status Reports Finding Type. Significant Deficiency in Internal Control over Compliance (Cash Management and Reporting). Program. Epidemiology and Laboratory Capacity for Infectious Diseases (ELC); U.S. Department of Health and Human Services; Assistance Listing Number 93.323; Award Number E20242798-00. Criteria. Per 2 CFR §200.305(b), non-federal entities must minimize the time elapsing between the transfer of funds and disbursement, and also must maintain accurate financial records and submit required Federal Financial Status Reports ("FSR"). Entities must also ensure that drawdowns and FSRs are complete, based on actual, allowable expenditures, supported by underlying accounting records, and prepared in accordance with Federal requirements. Condition. The University did not have documented review procedures in place for federal grant drawdowns nor review over monthly Financial Status Reports. Drawdowns were processed and Financial Status Reports were submitted without a formal review or approval process to verify that amounts reported and requested were based on allowable expenditures. Cause. The University lacked formal internal controls and oversight mechanisms to ensure drawdowns and FSRs were reviewed prior to submission. The process relied on informal practices without documented policies or designated reviewers. Effect. This deficiency increases the risk of drawing and reporting federal funds in excess of actual expenditures or for unallowable costs, potentially resulting in noncompliance with federal regulations. Questioned Costs. No costs are required to be questioned as a result of this finding, inasmuch as no unallowable expenditures were noted. Recommendation. The University should implement formal review procedures for all federal grant drawdowns including monthly FSRs, including enhancing policies around reviewing drawdowns, designated reviewers, and system controls to ensure drawdowns are accurate, allowable, and properly supported. View of Responsible Officials. Management agrees with this finding and has prepared a Corrective Action Plan.

Assistance listing number: 21.027 Program name: Coronavirus State and Local Fiscal Recovery Funds Pass-through entity: State of Michigan EGLE Project numbers: A7588-01 and A5817-01 Finding type: Material weakness and material noncompliance with laws and regulations Repeat finding: No Criteria: Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) requires non-federal entities to maintain specific written policies to ensure accountability for federal awards. Minimum mandatory policies include procurement procedures, allowability of costs, conflict of interest, cash management, and internal controls. Conditions: The City did not have written policies, as are required by Uniform Guidance, that adhered fully to the requirements of Uniform Guidance. Questioned Costs: None Why Questioned Costs Not Determinable: N/A How Questioned Computed: N/A Context: The City has some written policies or resolutions that address procurement and conflict of interest. The procurement policy, however, did not fully address the requirements of UG Section 200.318. In addition, the City had developed some procedures for cash management, allowability costs and internal control but did not adopt the written policies for cash management, allowability of costs and internal control that would fully address the requirements of UG Sections 200.305, 200.302, 200.400 and 200.303. Cause: The City was not in compliance with the UG requirements to have the correct written policies related to procurement, cash management, allowability costs and internal control. Effect: The absence of those properly prepared written policies increases the potential for further noncompliance because the City’s procedures may not adequately address the relevant compliance requirements. Recommendation: We recommend that the City create and put in place the written policies that address the requirements of 2 CFR 200.318-Procurement, 200.305-Cash Management, 200.302 & 200.400-Allowability of Costs, 200.303-Internal Control. View and Response of Responsible Officials: The City is reviewing existing documents and the requirements of UG for written policies to determine the best course of action to create and put in place the written policies required by UG.

Findings and Questioned Costs – Major Federal Programs Finding 2025-001: Internal Control over Compliance and Compliance with Cash Management Federal Programs: ALN 93.575/93.596, 93.558, 93.667 Criteria: In accordance with the grant agreement and 2 CFR 200.305(8) and (9), the non-Federal entity must maintain advance payments of Federal awards in interest-bearing accounts. Interest earned amounts up to $500 per year may be retained by the non-Federal entity for administrative expense. Any additional interest earned on Federal advance payments deposited in interest-bearing accounts must be remitted annually to the Department of Health and Human Services. Condition: The Coalition has a cash management policy in accordance with federal regulations, however, the policy was not followed. Federal funds were deposited into non-interest-bearing accounts. Cause: Lack of effective controls surrounding cash management and review of controls to ensure compliance with federal regulations. Effect: The Coalition has not accrued interest on DEL grant funds in accordance with federal regulations. Recommendation: We recommend the Coalition transfer all DEL grant funds to its interest-bearing account and return accrued interest to DEL. Management’s Response: See Management’s Corrective Action Plan beginning on page 25.

Department of Human Services Finding 2025 – 008: ALN 93.667 – Social Services Block Grant A Material Weakness and Material Noncompliance Exist in the Department of Human Services’ Program Monitoring of the Social Services Block Grant Subrecipients (A Similar Condition Was Noted in Prior Year Finding 2024-008) Federal Grant Number(s) and Year(s): 2501PASOSR (10/01/2024 – 9/30/2026), 2401PASOSR (10/01/2023 – 9/30/2025) Type of Finding: Material Weakness in Internal Control over Compliance, Material Noncompliance Compliance Requirements: Cash Management, Subrecipient Monitoring Condition: Our examination of the Department of Human Services’ (DHS) procedures for monitoring Social Services Block Grant (SSBG) subrecipients revealed that DHS did not adequately risk assess and monitor the SSBG Mental Health, Homeless Assistance, and Child Welfare subrecipients to ensure that SSBG awards are used in compliance with laws and regulations, which include allowable costs, period of performance, and other requirements. Although DHS performed risk assessments of these subrecipients, the risk assessments did not include a consideration of all of the items outlined in 2 CFR Section 200.332 (c) (1)-(4). Further, the risk assessments did not define the course of action to be taken for each assigned risk level. DHS program personnel indicated that they performed on-site monitoring of eight subrecipients with seven final monitoring reports issued and one report in progress. The remaining 67 subrecipients were not monitored during the audit period. Expenditures for Mental Health, Homeless Assistance, and Child Welfare subrecipient programs not monitored totaled $21.7 million (or approximately 23.2 percent) of total SSBG program expenditures of $93.6 million reported on the Schedule of Expenditures of Federal Awards (SEFA). While we noted that DHS monitored eight of the 75 Mental Health County/County Joinder subrecipients which included Mental Health, Homeless Assistance and Child Welfare services, this coverage was not adequate. In addition, our review of the risk assessments completed for all of the aforementioned subrecipients identified several instances where subrecipient monitoring was warranted but was not conducted, including several subrecipients assessed as high risk for which no monitoring procedures were performed. In addition, for the compliance requirement related to cash management, we noted that DHS advanced funds to SSBG subrecipients in four of nine program areas, representing $34.0 million (or approximately 36.3 percent) of SSBG program expenditures, without adequately monitoring the reasonableness of the subrecipient cash balances. In particular, for the program areas related to Mental Health, Intellectual Disabilities, Homeless Assistance, and Child Welfare, DHS advanced funds to subrecipients on a quarterly basis. Our inquiries with applicable DHS program administrators disclosed that DHS did not adequately monitor the four program areas’ subrecipients for cash management compliance either at the time of payment or at any other time during the fiscal year ended June 30, 2025. Furthermore, while Single Audits of SSBG subrecipients may be conducted each year, this auditing activity does not compensate for the lack of during-the-award program monitoring, since the timing, focus, and scope of subrecipient auditing activities after year end are different than compliance monitoring to be performed by program officials during the year. Criteria: 2 CFR Section 200.332, Requirements for pass-through entities, states: (c) Evaluate each subrecipient's fraud risk and risk of noncompliance with a subaward to determine the appropriate subrecipient monitoring described in paragraph (f) of this section. When evaluating a subrecipient's risk, a pass-through entity should consider the following: Finding 2025 – 008: (continued) (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits. This includes considering whether or not the subrecipient receives a Single Audit in accordance with subpart F and the extent to which the same or similar subawards have been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; and (4) The extent and results of any Federal agency monitoring (for example, if the subrecipient also receives Federal awards directly from the Federal agency). (e) Monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. The pass-through entity is responsible for monitoring the overall performance of a subrecipient to ensure that the goals and objectives of the subaward are achieved. In monitoring a subrecipient, a pass-through entity must: (1) Review financial and performance reports. (2) Ensure that the subrecipient takes corrective action on all significant developments that negatively affect the subaward. Significant developments include Single Audit findings related to the subaward, other audit findings, site visits, and written notifications from a subrecipient of adverse conditions which will impact their ability to meet the milestones or the objectives of a subaward. When significant developments negatively impact the subaward, a subrecipient must provide the pass-through entity with information on their plan for corrective action and any assistance needed to resolve the situation. (3) Issue a management decision for audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by § 200.521. (4) Resolve audit findings specifically related to the subaward. However, the pass-through entity is not responsible for resolving cross-cutting audit findings that apply to the subaward and other Federal awards or subawards. If a subrecipient has a current Single Audit report and has not been excluded from receiving Federal funding (meaning, has not been debarred or suspended), the pass-through entity may rely on the subrecipient's cognizant agency for audit or oversight agency for audit to perform audit follow-up and make management decisions related to cross-cutting audit findings in accordance with section § 200.513(a)(4)(viii). Such reliance does not eliminate the responsibility of the pass-through entity to issue subawards that conform to agency and award-specific requirements, to manage risk through ongoing subaward monitoring, and to monitor the status of the findings that are specifically related to the subaward. (f) Depending upon the pass-through entity's assessment of the risk posed by the subrecipient (as described in paragraph (c) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters; (2) Performing site visits to review the subrecipient's program operations; and (3) Arranging for agreed-upon-procedures engagements as described in § 200.425. Finding 2025 – 008: (continued) 2 CFR Section 200.305 (b)(1), applicable for recipients and subrecipients, states in part: …Advance payments to a recipient or subrecipient must be limited to the minimum amounts needed and be timed with actual, immediate cash requirements of the recipient or subrecipient in carrying out the purpose of the approved program or project. The timing and amount of advance payments must be as close as is administratively feasible to the actual disbursements by the recipient or subrecipient for direct program or project costs and the proportionate share of any allowable indirect costs. The recipient or subrecipient must make timely payments to contractors in accordance with the contract provisions. Management Directive 325.12, Amended – Standards for Enterprise Risk Management in Commonwealth Agencies, adopted the internal control framework outlined in the United States Government Accountability Office’s Standards for Internal Control in the Federal Government (Green Book). The Green Book states in part: Management should establish and operate monitoring activities to monitor the internal control system and evaluate the results. Management should remediate identified internal control deficiencies on a timely basis. Cause: DHS management indicated that risk assessment and monitoring documents were created for use during on-site monitoring of SSBG subrecipients. However, due to staffing issues, on-site monitoring was not performed for all SSBG subrecipients. Consistent with prior year audits, DHS management noted that there have been no changes to the payment methodology for the Homeless Assistance, Mental Health, Intellectual Disabilities, and Child Welfare components of SSBG. These programs provide subrecipients with advances to comply with Commonwealth law and also to ensure that adequate funds are available to provide services to participants on a timely basis. DHS officials believe that their in-house payment review procedures for the SSBG program are as efficient as administratively feasible and that controls exist in each of the program areas. Without on-site program monitoring visits by funding agency officials, we consider DHS’s limited in-house reviews of subrecipient status reports or other documents to be insufficient to detect potential subrecipient noncompliance, including excess cash violations. DHS does not adjust payments to the subrecipients based on in-house reviews. Effect: Since DHS does not adequately perform during-the-award monitoring of subrecipients, including the monitoring of subrecipient cash on hand, subrecipients may not be complying with applicable grant requirements and federal regulations, including cash management standards. Recommendation: DHS should perform risk based during-the-award monitoring procedures for all SSBG subrecipients to ensure timely compliance with all applicable federal regulations. On-site monitoring visits by state officials should be supported by documentation to show the monitoring performed, areas examined, conclusions reached, and that the monitoring was performed in compliance with applicable regulations. As recommended in previous Single Audits and supported by the United States Department of Health and Human Services, DHS should either consider changing their current subrecipient payment procedures from advancement basis to reimbursement basis or establish procedures to adequately monitor subrecipient cash on hand to ensure it is limited to immediate needs, but no longer than one month. The implementation and strengthening of these controls should provide DHS with reasonable assurance as to compliance with cash management requirements at the subrecipient level. Agency Response: DHS agrees with this finding. Questioned Costs: The amount of questioned costs cannot be determined.

Federal Agency: U.S. Department of Transportation Federal Program Name: Formula Grants for Rural Areas and Tribal Transit Program Assistance Listing Number: 20.509 Federal Award Identification Number and Year: 2025; FAIN not available. Pass-Through Agency: State of Vermont Agency of Transportation and Tribal Transit Program Pass-Through Numbers: EA#FT202201-704 EA#FT25FLEX-054 EA#FT25FLEX-954 EA#FT23FLEX-954 EA#FT25FLEX-454 EA#FT23FORM-704 EA#FT25FLEX-554 EA#FT24FORM-924 EA#FT25FLEX-854 EA#FT24FORM-934 EA#FT25FLEX-924 Award Period: July 1, 2024 through June 30, 2025 Compliance Requirement: Cash Management Type of Finding: Significant deficiency in internal control over compliance; other matter Criteria or Specific Requirement: The United States Code of Federal Regulations (CFR) 200.305 indicates reimbursement requests must be based on records that accurately reflect expenses being incurred prior to the reimbursement of funds. Condition: We identified the District submitted certain requests for reimbursement which were not supported by documentation of eligible expenses being incurred. Questioned Costs: Questioned costs total $140,757; which represent the total amounts submitted for reimbursement in fiscal year 2025 in excess of eligible expenses incurred. Context: CLA noted two (2) out of five (5) selections were submitted for reimbursement based on inaccurate expense information. The $140,757 represents the total amount of reimbursements submitted during the year based on inaccurate expense information. The expenses for which these reimbursements were submitted are not included in the schedule of expenditures of federal awards. Cause: Procedures were not implemented effectively to ensure invoices submitted for reimbursement were supported by accurate evidence of eligible expenses incurred. Effect: Noncompliance with the requirements of the federal program occurred. Repeat Finding: No. Recommendation: We recommend management enhance procedures and controls to ensure that the reimbursement requests are reconciled to accurate evidence of eligible expenses incurred. Views of Responsible Officials: Management agrees with the finding.

Assistance Listing, Federal Agency, and Program Name R&D Cluster: 10.500, U.S. Department of Agriculture, Cooperative Extension Service 12.800, U.S. Department of Defense, Air Force Defense Research Sciences Program 47.074, National Science Foundation, Biological Sciences Federal Award Identification Number and Year 10.500: 2021 48709 35659, 2021 12.800: FA9550 21 1 0202, 2021 47.074: DBI 2335029, 2024 Pass through Entity N/A all direct funded awards Finding Type Significant deficiency Repeat Finding Yes 2024 003 Criteria As outlined in 2 CFR 200.305(b)(3), for recipients and subrecipients other than states, payment methods must minimize the time elapsing between the transfer of funds from the federal agency or the pass through entity and the disbursement of funds by the recipient or subrecipient, regardless of whether the payment is made by electronic funds transfer or by other means. Further, when the reimbursement method is used for payment, organizations must make a payment within 30 calendar days after receipt of the billing unless the federal awarding agency or pass through entity reasonably believes the request to be improper. Condition The University did not have adequate controls in place to ensure invoices to subrecipients were paid timely within the 30 calendar day requirement. Questioned Costs None If questioned costs are not determinable, description of why known questioned costs were undetermined or otherwise could not be reported N/A, no questioned costs. Identification of How Questioned Costs Were Computed There were no questioned costs identified. Context Out of 40 payments to subrecipients that were tested, 4 were made after the 30 calendar day requirement. In all samples tested, payment was made to the subrecipient; however, the delayed payments ranged from 33 to 190 days between the invoice being received by the University and payment being made to the subrecipient. Cause and Effect The University’s controls are not designed to ensure payment for all subrecipients was made in accordance with the 2 CFR 200.305(b)(3). Recommendation The University should implement a control to ensure that payments made to subrecipients are completed within the 30 calendar day requirement. Views of Responsible Officials and Corrective Action Plan Penn State concurs with the audit finding. Penn State has already implementing stronger internal controls to ensure its subrecipients are paid timely. This was a repeat finding and after receiving the finding last year, Penn State created a new Subaward Administration and Compliance Office to provide oversight over key subaward compliance processes. This office was created more than halfway through the current audit period and was not anticipated to be fully implemented, per our corrective action plan, until FY2026, therefore a portion of the audit period did not have central oversight from the new office. Penn State created a new Subaward Administration and Compliance Office (SACO), which is part of the new Post Award Contractual Compliance Office. The SACO is led by its own director and provides central oversight over key subaward compliance processes, such as subrecipient payments, and provide training to campus on subrecipient processes. This function has already implemented new changes and workflows in the financial system to allow for better tracking and reporting of subaward compliance activities, and continues to refine subaward processes. The creation of this office demonstrates Penn State’s commitment to compliance for subaward activities.

Section II – Federal Award Findings and Questioned Costs Finding Number: 2025-001 Cash Management – Advance Drawdown Held 81 Days Federal Agency: Department of Education Federal Program: ALN 84.362A – Native Hawaiian Education Repeat Finding: No Type of Finding: Significant Deficiency Criteria According to 2 CFR Part 200.305, the Department pays grantees in advance of their expenditures if the grantee demonstrates a willingness and ability to minimize the time between the transfer of funds to the grantee and the disbursement of the funds by the grantee. Condition During testing of cash drawdowns from the G5 system, we noted that the grantee received an advance drawdown of $1,370,000 on February 7, 2025 but note disbursed to vendor until 81 days later on April 29, 2025. As a result, the grantee maintained excess Federal cash on hand for an extended period. Cause The grantee did not have effective controls to ensure Federal drawdowns were limited to immediate disbursement needs for draw requests were not consistently supported by a near-term disbursement schedule. Effect Maintaining Federal funds in advance of actual disbursement increases the risk that Federal funds are not managed in accordance with cash management requirements and interest liability may arise, if funds were maintained in an interest-bearing account. Recommendation We recommend the grantee implement and document controls to ensure drawdowns are limited to immediate cash needs for requesting draw requests to be supported by a disbursement forecast covering no more than 5 business days of expected payments and establishing written procedures for addressing delayed project timelines (e.g., reducing or returning funds, revising draw schedules).

Federal Agencies: US Department of Defense (DoD); US Department of Energy (DOE); US Health and Human Services (HHS) Program Names: Research & Development Cluster: Basic, Applied and Advanced Research in Science and Engineering; Research and Technology Development; Fossil Energy Research and Development; and HIV-Related Training and Technical Assistance ALN #s: 12.630; 12.910; 81.089; 93.145 Award Numbers (Federal Award Year): ARMY W911NF-17-2-0196 (2024-2025); DARPA HR0011-23-2-0004 (2024-2025); DOE DE-FE0031581 (2024-2025); and HRSA 5 U1OHA32109-07 (2024-2025) Questioned Costs: None 2025-003. Finding: Cash Management – Timeliness of Subrecipient Payments The University of Illinois Urbana-Champaign and the University of Illinois Chicago did not make certain subrecipient payments timely and the controls in place did not identify the late payments. Condition: Out of seventeen subrecipient payments tested which were made by the University of Illinois Urbana-Champaign under the Research & Development Cluster, three payments (18%) were not made within 30 days after receipt of the billing from the subrecipient. The payments ranged from 37-79 days after receipt of the billing from the subrecipients. The sample was not intended to be, and was not, a statistically valid sample. Out of eight subrecipient payments tested which were made by the University of Illinois Chicago under the HIV-Related Training and Technical Assistance Program, two payments (25%) were not made within 30 days after receipt of the billing from the subrecipient. The payments were made 34 and 40 days after the receipt of billing from the subrecipients. The sample was not intended to be, and was not, a statistically valid sample. Criteria: Under Uniform Guidance (2 CFR 200.305(b)(3)), when the reimbursement method is used, the Federal awarding agency or pass-through entity must make payment within 30 calendar days after receipt of the billing, unless the Federal awarding agency or pass-through entity reasonably believes the request to be improper. Uniform Grant Guidance (2 CFR 200.303) requires nonfederal entities receiving Federal awards to establish and maintain internal controls designed to reasonably ensure compliance with Federal laws, regulations, and program compliance requirements. Effective internal controls should include procedures to ensure subrecipient payments are made timely. Cause: University of Illinois Urbana-Champaign officials stated the multi-layered review and approval process along with workload caused the exceptions noted. University of Illinois Chicago officials stated the subrecipient payments were late due to competing priorities. Effect: Without proper program cash management processes and procedures, late subrecipient payments could result in the loss of future funding. (Finding Code No. 2025-003, 2024-002, 2023-006, 2022-008) Recommendation: We recommend the University of Illinois Urbana-Champaign and the University of Illinois Chicago review current processes, policies and procedures to minimize the time elapsing between the receipt of billings from the subrecipient and the transfer of federal funds to the subrecipient. University Response: Accepted. The University will take steps to address the recommendation in this finding.

FINDING 2025-008 Subject: COVID-19 - Education Stabilization Fund - Condition of Records Federal Agency: Department of Education Federal Program: COVID-19 - Education Stabilization Fund Assistance Listings Numbers: 84.425D, 84.425U, 84.425W Federal Award Numbers and Years (or Other Identifying Numbers): S425D210013, S425U210013, S425W210015 Pass-Through Entity: Indiana Department of Education Compliance Requirements: Activities Allowed or Unallowed; Allowable Costs/Cost Principles; Equipment and Real Property Management; Matching, Level of Effort, Earmarking; Special Tests and Provisions - Wage Rate Requirements Audit Findings: Material Weakness, Modified Opinion Repeat Finding This is a repeat finding from the immediately prior audit report. The prior audit finding numbers were 2023-007 and 2023-009 over the compliance requirements Equipment and Real Property Management and Special Tests and Provisions - Wage Rate Requirements, respectively. Condition and Context The School Corporation received reimbursements totaling $30,316,384 from the COVID-19 - Education Stabilization Fund (ESF) federal awards during the audit period. The reimbursements were associated with three separate federal awards, each of which was required to be accounted for in a separate fund within the School Corporation's financial management system. Expenditures were to be made in accordance with the approved grant applications and budgets, with reimbursement requests subsequently submitted to the Indiana Department of Education (IDOE). The School Corporation was responsible for maintaining detailed disbursement ledgers for each grant fund to support the amounts claimed for reimbursement. As is typical with reimbursement-based grants, the ending cash and investment balances of each grant fund were expected to reflect overdrawn balances until the subsequent reimbursements were received from the IDOE. The $30,316,384 received in ESF funds during the audit period was based on 28 reimbursement requests for expenditures incurred between June 1, 2023 through December 13, 2024. Based on our review of grant fund records and inquiry with management, we identified the following deficiencies:  The detailed disbursement ledger for the period of June 1, 2023 through December 13, 2024, excluding June 2024 for Grant #S425U210013 as no reimbursement request was submitted, reflected total expenditures of $23,051,334. This resulted in $7,265,050 in reimbursements that were not adequately supported by detailed records. INDIANA STATE BOARD OF ACCOUNTS 33 SCHOOL CITY OF EAST CHICAGO SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued)  A review of the submitted reimbursement requests indicated that $1,069,865 was reimbursed for indirect costs; however, a disbursement from the grant funds to other operating funds was not recorded within the School Corporations records.  Of the 28 reimbursement requests submitted, only 5 were supported by detailed disbursement ledgers that agreed with the dates and amounts claimed. The remaining 23 reimbursement requests could not be directly reconciled to the supporting documentation provided. Upon further inquiry with management, additional records were provided; however, these records lacked sufficient detail, such as fund number, fund name, check numbers, dates, and vendor names to be useable.  Reimbursements received were not posted to each grant fund properly. This resulted in the ARP EESER III fund receipts to be understated by $4,297,935 and the ESSER II and GEER PD funds receipts to be overstated by $4,174,376 and $123,560, respectively.  Since this is a reimbursement-based grant, the ending cash and investment balances of each grant fund should either be zero or overdrawn while awaiting reimbursement. However, as of June 30, 2025, the ESSER II and Geer PD funds reported positive cash and investment balances of $5,047,932 and $404,653, respectively. Due to the deficiencies noted above, the School Corporation was unable to provide sufficient appropriate evidence for us to determine populations, and, therefore, audit and base an opinion on the compliance requirements subject to audit that were determined to have a direct and material effect on the program. As a result, the $30,316,384 in reimbursements received during the audit period were considered questioned costs. The lack of internal controls and noncompliance were material and systemic throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.302 states in part: "(a) . . . the other non-Federal entity's financial management systems, including records documenting compliance with Federal statutes, regulations, and the terms and conditions of the Federal award, must be sufficient to permit the preparation of reports required by general and program-specific terms and conditions; and the tracing of funds to a level of expenditures adequate to establish that such funds have been used according to the Federal statutes, regulations, and the terms and conditions of the Federal award. See also § 200.450. INDIANA STATE BOARD OF ACCOUNTS 34 SCHOOL CITY OF EAST CHICAGO SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (b) The financial management system of each non-Federal entity must provide for the following (see §§ 200.334, 200.335, 200.336, and 200.337): (1) Identification, in its accounts, of all Federal awards received and expended and the Federal programs under which they were received. Federal program and Federal award identification must include, as applicable, the Assistance Listings title and number, Federal award identification number and year, name of the Federal agency, and name of the pass-through entity, if any. (2) Accurate, current, and complete disclosure of the financial results of each Federal award or program in accordance with the reporting requirements in §§ 200.328 and 200.329. . . . (3) Records that identify adequately the source and application of funds for federallyfunded activities. These records must contain information pertaining to Federal awards, authorizations, financial obligations, unobligated balances, assets, expenditures, income, and interest and be supported by source documentation. (4) Effective control over, and accountability, for all funds, property, and assets. The non- Federal entity must adequately safeguard all assets and ensure that they are used solely for authorized purposes. See § 200.303. (5) Comparison of expenditures with budget amounts for each Federal award. (6) Written procedures to implement the requirements of § 200.305. (7) Written procedures for determining the allowability of costs in accordance with subpart E of this part and the terms and conditions of the Federal award." 2 CFR 200.1 states in part: ". . . Questioned cost means a cost that is questioned by the auditor because of an audit finding: (1) Which resulted from a violation or possible violation of a statute, regulation, or the terms and conditions of a Federal award, including for funds used to match Federal funds; (2) Where the costs, at the time of the audit, are not supported by adequate documentation; or (3) Where the costs incurred appear unreasonable and do not reflect the actions a prudent person would take in the circumstances. (4) Questioned costs are not an improper payment until reviewed and confirmed to be improper as defined in OMB Circular A-123 appendix C. (See also the definition of Improper payment in this section)." 2 CFR 200.403 states in part: "Except where otherwise authorized by statute, costs must meet the following general criteria in order to be allowable under Federal awards: (a) Be necessary and reasonable for the performance of the Federal award and be allocable thereto under these principles. INDIANA STATE BOARD OF ACCOUNTS 35 SCHOOL CITY OF EAST CHICAGO SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (b) Conform to any limitations or exclusions set forth in these principles or in the Federal award as to types or amount of cost items. . . . (g) Be adequately documented. . . ." 2 CFR 200.313(d) states in part: ". . . (1) Property records must be maintained that include a description of the property, a serial number or other identification number, the source of funding for the property (including the FAIN), who holds title, the acquisition date, and cost of the property, percentage of Federal participation in the project costs for the Federal award under which the property was acquired, the location, use and condition of the property, and any ultimate disposition data including the date of disposal and sale price of the property. (2) A physical inventory of the property must be taken and the results reconciled with the property records at least once every two years. (3) A control system must be developed to ensure adequate safeguards to prevent loss, damage, or theft of the property. Any loss, damage, or theft must be investigated. (4) Adequate maintenance procedures must be developed to keep the property in good condition. . . ." 29 CFR 5.5 states in part: "(a) Required contract clauses. The Agency head will cause or require the contracting officer to require the contracting officer to [sic] insert in full, or (for contracts covered by the Federal Acquisition Regulation (48 CFR chapter 1)) by reference, in any contract in excess of $2,000 which is entered into for the actual construction, alteration and/or repair, including painting and decorating, of a public building or public work, or building or work financed in whole or in part from Federal funds or in accordance with guarantees of a Federal agency or financed from funds obtained by pledge of any contract of a Federal agency to make a loan, grant or annual contribution (except where a different meaning is expressly indicated), and which is subject to the labor standards provisions of any of the laws referenced by § 5.1, the following clauses . . . (1) Minimum wages— (i) Wage rates and fringe benefits. All laborers and mechanics employed or working upon the site of the work (or otherwise working in construction or development of the project under a development statute), will be paid unconditionally and not less often than once a week, and without subsequent deduction or rebate on any account (except such payroll deductions as are permitted by regulations issued by the Secretary of Labor under the Copeland Act (29 CFR part 3)), the full amount of basic hourly wages and bona fide fringe benefits (or cash equivalents thereof) due at time of payment computed at rates not less than those contained in the wage determination of the Secretary of Labor which is attached hereto and made a part hereof, regardless of any contractual relationship which may be alleged to exist between the contractor and such laborers and mechanics. . . . (3) Records and certified payrolls— (ii) Certified payroll requirements— INDIANA STATE BOARD OF ACCOUNTS 36 SCHOOL CITY OF EAST CHICAGO SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (A) Frequency and method of submission. The contractor or subcontractor must submit weekly, for each week in which any DBA- or Related Acts-covered work is performed, certified payrolls to the [write in name of appropriate Federal agency] if the agency is a party to the contract, but if the agency is not such a party, the contractor will submit the certified payrolls to the applicant, sponsor, owner, or other entity, as the case may be, that maintains such records, for transmission to the [write in name of agency]. . . ." 2 CFR 200 Appendix II to Part 200 states in part: "In addition to other provisions required by the Federal agency or non-Federal entity; all contracts made by the non-Federal entity under the Federal award must contain provisions covering the following, as applicable. . . . (D) Davis-Bacon Act, as amended (40 U.S.C. 3141-3148). When required by Federal program legislation, all prime construction contracts in excess of $2,000 awarded by non- Federal entities must include a provision for compliance with the Davis-Bacon Act (40 U.S.C. 3141-3144, and 3146-3148) as supplemented by Department of Labor regulations (29 CFR Part 5, 'Labor Standards Provisions Applicable to Contracts Covering Federally Financed and Assisted Construction'). In accordance with the statute, contractors must be required to pay wages to laborers and mechanics at a rate not less than the prevailing wages specified in a wage determination made by the Secretary of Labor. In addition, contractors must be required to pay wages not less than once a week. . . ." Cause The School Corporation experienced turnover in key personnel over the federal program, which contributed to the lack of appropriate supporting records. A proper system of internal controls was not designed to ensure continuity of policies, procedures, and records when personnel transitions occurred. Effect Noncompliance with the grant agreement and the compliance requirements could result in the repayment of federal funds. Questioned Costs We identified $30,316,384 in known questioned costs as noted in the Condition and Context. Recommendation We recommended that the School Corporation's management develop policies and procedures to ensure continuity of school records during a personnel change and that all reimbursement requests are properly supported by detail records. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

TRIO Cluster U.S. Department of Education Trio Student Support Services, ALN 84.042; TRIO Talent Search, ALN 84.044; TRIO Upward Bound, ALN 84.047; TRIO Educational Opportunity Centers, ALN 84.066; TRIO McNair Post-Baccalaureate, ALN 84.217 Applicable Institution: Jackson State University (JSU), University of Southern Mississippi (USM) Program Year 2024-2025 Type of Finding: Material Weakness in Internal Control Over Compliance, Other Matters Criteria or Specific Requirement – Cash Management – Non-federal entities must minimize the time elapsing between the transfer of funds from the US Treasury or pass-through entity and disbursement by the non-federal entity for direct program or project costs and the proportionate share of allowable indirect costs (2 CFR 200.305(b)). Condition – JSU and USM drew funds in advance that were not disbursed within 3 business days. Cause – JSU's internal controls did not ensure that disbursements were reconciled prior to drawing funds. USM changed from a monthly draw to a bi-weekly draw schedule and inadvertently included some of the prior months expenses in the draw that had already been drawn. Effect or Potential Effect – JSU: funds were drawn in March and not fully disbursed within 3 business days. USM: funds were drawn in January and not fully disbursed for 30 days. Questioned costs – $25,250 - ALN 84.042; $22,499 - ALN 84.217; $123,618 - ALN 84.047. Calculated as the amount of cumulative draws in excess of cumulative disbursements. Context –Out of 376 draws, a sample of 25 were selected for testing. Our sample was not, and was not intended to be, statistically valid. 3 draws were not fully expended within 3 business days (JSU - 2 draws; USM - 1 draw). Identification as a Repeat Finding, if Applicable – N/A Recommendation – The institutions should update policies and procedures to ensure the time is minimized between the transfer of funds from US Treasury and disbursement by the non-federal entity. Views of Responsible Officials and Planned Corrective Actions – There is no disagreement with the audit finding. See corrective action plans.

Dairy Business Innovation Initiatives—Cash Management Background: During FY 2024-25, UW-Madison expended $9.3 million in federal funds for the DBII grant, which is administered by the U.S. Department of Agriculture. At least one-half of each award is used for grants to farmers or dairy processors to diversify farming activities, create value-added products, or enhance dairy export programs. During FY 2024 25, UW-Madison’s payments to the subrecipient accounted for approximately 60.0 percent of the $9.3 million expended. This subrecipient assisted UW Madison in administering the grants to farmers and dairy processors under the program. During our FY 2023-24 single audit (report 25-04), we reported three concerns with UW Madison’s cash management procedures for making payments to the subrecipient. First, UW Madison did not ensure that the time between the subrecipient receiving funds and disbursing the funds to grant recipients was appropriately minimized. Second, UW-Madison did not ensure that the reimbursement method was used when subsequent payments were made following an advance payment to the subrecipient. Third, UW-Madison did not ensure that it adequately monitored interest that had accrued on the subrecipient’s cash balance. We recommended that UW Madison ensure that disbursements to the subrecipient complied with all federal cash management requirements (Finding 2024 713), including revising and documenting its procedures for making payments to the subrecipient, incorporating applicable federal requirements in its subrecipient agreements when advanced cash payments are made, and monitoring interest earnings that accrue to the subrecipient when advanced payments are made in order to return any interest that exceeds federal limits in a timely manner. Criteria: Under 2 CFR s. 200.305 (b), UW-Madison is required to implement procedures to ensure that the time between payments it makes to the subrecipient and the subrecipient’s disbursement of the funds to the grant recipients is minimized. Under 2 CFR s. 200.305 (b) (4), UW-Madison is permitted to provide advanced payments to a subrecipient if it determines that the subrecipient lacks sufficient working capital. However, if such an advanced payment is made, the payment should be aligned to the anticipated disbursements and subsequent payments are required to be on a reimbursement basis. Condition: In January 2025, UW-Madison remitted to the federal government interest earnings that had accrued by the largest subrecipient when UW-Madison made advanced payments to this subrecipient in prior years. This action resolved one of the concerns we included in report 25-04. However, two concerns were still present during FY 2024 25 because UW Madison did not modify its payment process for the subrecipient until June 30, 2025. As a result, UW-Madison again made advance payments to this subrecipient during FY 2024 25 that did not ensure the time between the subrecipient receiving funds and the subrecipient disbursing the funds to the grant recipients was appropriately minimized nor did it use a reimbursement basis for subsequent payments. Context: UW-Madison made payments totaling $5.4 million to the DBII subrecipient during FY 2024-25, which included advancing funding to enable the subrecipient to make payments as requested from grant recipients. We discussed UW-Madison’s updated procedures for providing funding to its DBII subrecipient and the timing of its corrective actions. We obtained documentation related to the subrecipients cash on-hand as of June 30, 2025, which was $1.4 million. Questioned Costs: None. Effect: UW-Madison did not comply with federal requirements to ensure that time was minimized between payments to its subrecipient for the DBII grant and when the subrecipient disbursed the funds to grant recipients. Cause: UW-Madison indicated that it changed it process for making payments to the subrecipient effective June 30, 2025. As a result, these changes were not in place for all of FY 2024 25. In addition, UW-Madison did not develop a policy and procedure on approving cash advances until December 2025. Additional corrective actions, such as developing a cost reimbursement agreement and training on the new policy and procedures, had not occurred as of December 31, 2025. Recommendation: We recommend the University of Wisconsin-Madison: -stop issuing any additional advanced payments to the Dairy Business Innovation Initiatives subrecipient until all federal cash management requirements are met; and -fully implement the December 2025 procedures and provide training on them. Finding 2025-700: Dairy Business Innovation Initiatives—Cash Management Dairy Business Innovation Initiatives (Assistance Listing number 10.176) Award Numbers Award Years 21DBIWI1006 2021 AM21DBIWI1010 2022 AM22DBIWI1014 2022 23DBIWI1019 2023 Questioned Costs: None Type of Finding: Material Weakness, Material Noncompliance As a result, we qualified our opinion on compliance for the cash management compliance requirement. Response from the University of Wisconsin-Madison: The University of Wisconsin-Madison agrees with the audit finding and recommendations.

(2025-034) Title: Internal control over Health Disparities program subrecipient cash management needs improvement Prior Year Findings: None State Department: Health and Human Services State Bureau: Maine Center for Disease Control & Prevention Federal Agency: U.S. Department of Health and Human Services Assistance Listing Title: Activities to Support State, Tribal, Local and Territorial (STLT) Health Department Response to Public Health or Healthcare Crises Assistance Listing Number: 93.391 Federal Award Identification Number: See E-65 to E-66 Compliance Area: Cash management Subrecipient monitoring Type of Finding: Significant deficiency Questioned Costs: None Criteria: 2 CFR 200.303; 2 CFR 200.305 The Department must establish, document, and maintain effective internal control over Federal awards that provides reasonable assurance that the Department is managing awards in compliance with Federal statutes, regulations, and the terms and conditions of awards. The Department is required to monitor cash drawdowns by their subrecipients to ensure that the time elapsing between the payment of Federal funds to the subrecipient and the subrecipient’s actual disbursement for program purposes is minimized. Condition: The Activities to Support State, Tribal, Local and Territorial (STLT) Health Department Response to Public Health or Healthcare Crises (Health Disparities) program was implemented to address disparities in access to healthcare in populations that are at high-risk and underserved, including racial and ethnic minority groups and people living in rural communities. The Health Disparities program is administered by the Maine Center for Disease Control & Prevention’s (MeCDC) Division of Population Health Equity. The Department makes equal advance monthly payments to subrecipients and then reconciles those amounts to quarterly financial reports submitted by the subrecipient. This procedure does not take into consideration the time elapsing between the payment of Federal funds to the subrecipient and the subrecipient’s actual disbursement for program purposes, and MeCDC’s subrecipient monitoring procedures do not include review of subrecipient compliance with cash management requirements. As a result, MeCDC procedures do not support that subrecipient cash management is properly monitored as required by Federal regulations. Context: MeCDC provided $3.2 million from a total of $6.2 million to Health Disparities program subrecipients during fiscal year 2025. Cause: • Lack of adequate subrecipient monitoring procedures • Lack of centralized oversight of subrecipient monitoring Effect: • Noncompliance with Federal regulations • Federal programs may not be effectively and efficiently administered. • The Federal government may require the implementation of more stringent subrecipient cash management procedures. Recommendation: We recommend that MeCDC implement monitoring procedures over subrecipient cash management requirements to ensure that the time elapsing between the payment of Federal funds to the subrecipient and the subrecipient’s actual disbursement for program purposes is minimized for the Health Disparities program. Corrective Action Plan: See F-20 Management’s Response: The Department disagrees with this finding. The Department is in compliance with the requirement for minimizing the time between payments to our subrecipients and the disbursement of the funds. Payments are made as close as is administratively feasible. The Compliance Supplement suggested audit procedures for Cash Management for pass-through entities refers to 200.305(b)(1) ... that same paragraph states that the timing and amount of advance payments must be as close as is administratively feasible. Contact: Eden Hale, Associate Director, Division of Population Health Equity, MeCDC, 207-441-1090 Auditor’s Concluding Remarks: The Department’s interpretation of the applicable Federal regulation emphasizes a single sentence from the broader paragraph, omitting context that informs the regulation’s full intent. According to the 2025 Compliance Supplement, pass-through entities must monitor cash drawdowns by their subrecipients to ensure that the time elapsing between the transfer of Federal funds to the subrecipient and their disbursement for program purposes is minimized as required by the applicable cash management requirements in the Federal award to the recipient (2 CFR 200.305(b)(1)). 2 CFR 200.305(b)(1) states that the recipient or subrecipient must be paid in advance, provided it maintains or demonstrates the willingness to maintain both written procedures that minimize the time elapsing between the transfer of funds and disbursement by the recipient or subrecipient, and financial management systems that meet the standards for fund control and accountability as established in this part. Advance payments to a recipient or subrecipient must be limited to the minimum amounts needed and be timed with actual, immediate cash requirements of the recipient or subrecipient in carrying out the purpose of the approved program or project. The timing and amount of advance payments must be as close as is administratively feasible to the actual disbursements by the recipient or subrecipient for direct program or project costs and the proportionate share of any allowable indirect costs. The recipient or subrecipient must make timely payments to contractors in accordance with the contract provisions. The Department references the phrase “as close as is administratively feasible” to justify their current process; however, this phrase is part of a broader requirement that establishes specific conditions for advance payments. The regulation requires that the timing between when the subrecipient receives Federal funds from the State and when the subrecipient disburses those funds is closely monitored to ensure that disbursements align with actual, immediate cash needs. The Department could not provide evidence to demonstrate that they adequately monitored subrecipient cash drawdowns to ensure alignment with actual, immediate cash needs. The finding remains as stated. (State Number: 25-1123-05)

(2025-040) Title: Internal control over PDG subrecipient cash management needs improvement Prior Year Findings: None State Department: Health and Human Services State Bureau: Office of Child and Family Services Federal Agency: U.S. Department of Health and Human Services Assistance Listing Title: Every Student Succeeds Act/Preschool Development Grants Assistance Listing Number: 93.434 Federal Award Identification Number: See E-65 to E-66 Compliance Area: Cash management Subrecipient monitoring Type of Finding: Significant deficiency Questioned Costs: None Criteria: 2 CFR 200.303; 2 CFR 200.305 The Department must establish, document, and maintain effective internal control over Federal awards that provides reasonable assurance that the Department is managing awards in compliance with Federal statutes, regulations, and the terms and conditions of awards. The Department is required to monitor cash drawdowns by their subrecipients to ensure that the time elapsing between the payment of Federal funds to the subrecipient and the subrecipient’s actual disbursement for program purposes is minimized. Condition: The Every Student Succeeds Act/Preschool Development Grants (PDG) program assists states in helping low-income and disadvantaged children enter kindergarten prepared and ready to succeed in school and helps improve the transitions from the early care and education setting to elementary school. PDG is administered by the Department of Health and Human Services’ Office of Child and Family Services (OCFS). The Department makes equal advance monthly payments to subrecipients and then reconciles those amounts to quarterly financial reports submitted by the subrecipient. This procedure does not take into consideration the time elapsing between the payment of Federal funds to the subrecipient and the subrecipient’s actual disbursement for program purposes, and OCFS’ subrecipient monitoring procedures do not include review of subrecipient compliance with cash management requirements. As a result, OCFS procedures do not support that subrecipient cash management is properly monitored as required by Federal regulations. Context: OCFS provided approximately $910,000 from a total of $11.5 million to PDG program subrecipients during fiscal year 2025. Cause: • Lack of adequate subrecipient monitoring procedures • Lack of centralized oversight of subrecipient monitoring Effect: • Noncompliance with Federal regulations • Federal programs may not be effectively and efficiently administered. • The Federal government may require the implementation of more stringent subrecipient cash management procedures. Recommendation: We recommend that OCFS implement monitoring procedures over subrecipient cash management requirements to ensure that the time elapsing between the payment of Federal funds to the subrecipient and the subrecipient’s actual disbursement for program purposes is minimized for the PDG program. Corrective Action Plan: See F-22 Management’s Response: The Department disagrees with this finding. The Department is in compliance with the requirement for minimizing the time between payments to our subrecipients and the disbursement of the funds. Payments are made as close as is administratively feasible. The Compliance Supplement suggested audit procedures for Cash Management for pass-through entities refers to 200.305(b)(1) ...that same paragraph states that the timing and amount of advance payments must be as close as is administratively feasible. Contact: Tara Williams, Associate Director of Early Care & Education, OCFS, DHHS, 207-557-2342 Auditor’s Concluding Remarks: The Department’s interpretation of the applicable Federal regulation emphasizes a single sentence from the broader paragraph, omitting context that informs the regulation’s full intent. According to the 2025 Compliance Supplement, pass-through entities must monitor cash drawdowns by their subrecipients to ensure that the time elapsing between the transfer of Federal funds to the subrecipient and their disbursement for program purposes is minimized as required by the applicable cash management requirements in the Federal award to the recipient (2 CFR 200.305(b)(1)). 2 CFR 200.305(b)(1) states that the recipient or subrecipient must be paid in advance, provided it maintains or demonstrates the willingness to maintain both written procedures that minimize the time elapsing between the transfer of funds and disbursement by the recipient or subrecipient, and financial management systems that meet the standards for fund control and accountability as established in this part. Advance payments to a recipient or subrecipient must be limited to the minimum amounts needed and be timed with actual, immediate cash requirements of the recipient or subrecipient in carrying out the purpose of the approved program or project. The timing and amount of advance payments must be as close as is administratively feasible to the actual disbursements by the recipient or subrecipient for direct program or project costs and the proportionate share of any allowable indirect costs. The recipient or subrecipient must make timely payments to contractors in accordance with the contract provisions. The Department references the phrase “as close as is administratively feasible” to justify their current process; however, this phrase is part of a broader requirement that establishes specific conditions for advance payments. The regulation requires that the timing between when the subrecipient receives Federal funds from the State and when the subrecipient disburses those funds is closely monitored to ensure that disbursements align with actual, immediate cash needs. The Department could not provide evidence to demonstrate that they adequately monitored subrecipient cash drawdowns to ensure alignment with actual, immediate cash needs. Furthermore, in finding 2025-036, Internal control over PDG subrecipient monitoring procedures needs improvement, the Office of the State Auditor identified that 1 PDG subrecipient received equal advance monthly payments that significantly outpaced the subrecipient’s spending of PDG funds throughout fiscal year 2025. Payments to the subrecipient were withheld after April 2025 for the subrecipient’s inability to meet performance goals, not due to the Department’s monitoring of subrecipient cash management, and OCFS allowed the subrecipient to retain the excess PDG funds. This exception corroborates that controls are not in place over subrecipient cash management. The finding remains as stated. (State Number: 25-1122-03)

(2025-053) Title: Internal control over CCDF subrecipient cash management needs improvement Prior Year Findings: None State Department: Health and Human Services State Bureau: Office of Child and Family Services Federal Agency: U.S. Department of Health and Human Services Assistance Listing Title: CCDF Cluster Assistance Listing Number: 93.489, 93.575, 93.596 Federal Award Identification Number: See E-65 to E-66 Compliance Area: Cash management Subrecipient monitoring Type of Finding: Significant deficiency Questioned Costs: None Criteria: 2 CFR 200.303; 2 CFR 200.305 The Department must establish, document, and maintain effective internal control over Federal awards that provides reasonable assurance that the Department is managing awards in compliance with Federal statutes, regulations, and the terms and conditions of awards. The Department is required to monitor cash drawdowns by their subrecipients to ensure that the time elapsing between the payment of Federal funds to the subrecipient and the subrecipient’s actual disbursement for program purposes is minimized. Condition: The Child Care and Development Fund (CCDF) program is administered by the Office of Child and Family Services (OCFS) and provides funding to increase the availability, affordability, and quality of childcare services in the State. The Department makes equal advance monthly payments to subrecipients and then reconciles those amounts to quarterly financial reports submitted by the subrecipient. This procedure does not consider the time elapsing between the payment of Federal funds to the subrecipient and the subrecipient’s actual disbursement for program purposes, and OCFS’ subrecipient monitoring procedures do not include a review of subrecipient compliance with cash management requirements. As a result, OCFS procedures do not support that subrecipient cash management is properly monitored as required by Federal regulations. Context: OCFS provided $2.8 million from a total of $45.1 million to CCDF program subrecipients during fiscal year 2025. Cause: • Lack of adequate subrecipient monitoring procedures • Lack of centralized oversight of subrecipient monitoring Effect: • Noncompliance with Federal regulations • Federal programs may not be effectively and efficiently administered. • The Federal government may require the implementation of more stringent subrecipient cash management procedures. Recommendation: We recommend that OCFS implement monitoring procedures over subrecipient cash management requirements to ensure that the time elapsing between the payment of Federal funds to the subrecipient and the subrecipient’s actual disbursement for program purposes is minimized for the CCDF program. Corrective Action Plan: See F-27 Management’s Response: The Department disagrees with this finding. The Department is in compliance with the requirement for minimizing the time between payments to our subrecipients and the disbursement of the funds. Payments are made as close as is administratively feasible. The Compliance Supplement suggested audit procedures for Cash Management for pass-through entities refers to 200.305(b)(1) ...that same paragraph states that the timing and amount of advance payments must be as close as is administratively feasible. Contact: Tara Williams, Associate Director of Early Care & Education, OCFS, DHHS, 207-557-2342 Auditor’s Concluding Remarks: The Department’s interpretation of the applicable Federal regulation emphasizes a single sentence from the broader paragraph, omitting context that informs the regulation’s full intent. According to the 2025 Compliance Supplement, pass-through entities must monitor cash drawdowns by their subrecipients to ensure that the time elapsing between the transfer of Federal funds to the subrecipient and their disbursement for program purposes is minimized as required by the applicable cash management requirements in the Federal award to the recipient (2 CFR 200.305(b)(1)). 2 CFR 200.305(b)(1) states that the recipient or subrecipient must be paid in advance, provided it maintains or demonstrates the willingness to maintain both written procedures that minimize the time elapsing between the transfer of funds and disbursement by the recipient or subrecipient, and financial management systems that meet the standards for fund control and accountability as established in this part. Advance payments to a recipient or subrecipient must be limited to the minimum amounts needed and be timed with actual, immediate cash requirements of the recipient or subrecipient in carrying out the purpose of the approved program or project. The timing and amount of advance payments must be as close as is administratively feasible to the actual disbursements by the recipient or subrecipient for direct program or project costs and the proportionate share of any allowable indirect costs. The recipient or subrecipient must make timely payments to contractors in accordance with the contract provisions. The Department references the phrase “as close as is administratively feasible” to justify their current process; however, this phrase is part of a broader requirement that establishes specific conditions for advance payments. The regulation requires that the timing between when the subrecipient receives Federal funds from the State and when the subrecipient disburses those funds is closely monitored to ensure that disbursements align with actual, immediate cash needs. The Department could not provide evidence to demonstrate that they adequately monitored subrecipient cash drawdowns to ensure alignment with actual, immediate cash needs. The finding remains as stated. (State Number: 25-1114-04)

Finding 2025-011 – C. Cash Management Information on Federal Program(s) – Research and Development Cluster (ALN 43.009, ALN 93.859) Criteria or Specific Requirement - 2 CFR §200.305(b)(1) indicates that advance payments to a non-Federal entity must be limited to the minimum amounts needed and be timed to be in accordance with actual, immediate cash requirements of the non-Federal entity in carrying out the purpose of the approved program or project. The timing and amount of advance payments must be as close as administratively feasible to the actual disbursements by the non-Federal entity for direct program or project costs and the proportionate share of any allowable indirect costs. Condition – The University was not able to provide reconciliations of funds drawn to expenditures incurred for certain funds drawn down during the current year that reconciled the amounts properly. Additionally, as formal draw down to expenditure reconciliations were not properly performed for certain draw dawns, instances were identified in which the University drew down funds twice for the same expenditure. The combination of the above also resulted in the University not minimizing the time between the date of drawdowns and the date the funds were used. Cause - Administrative oversight and insufficient internal controls. Effect or Potential Effect – The University was not in compliance with cash management requirements. Questioned Costs – None. Context – For 9 of 28 cash draws, the University did not properly perform formal reconciliations of funds drawn to expenditures. Additionally, 3 of 28 cash draws included certain expenditures for which funds were previously drawn, resulting in duplicative cash draws for the same expenditures. The above resulted in excess cash being drawn during the year ended June 30, 2025. Indication of Repeat Finding – No similar finding identified in the prior year. Recommendation – We recommend that the University enhance its procedures and internal controls over compliance to ensure that cash draws are properly reconciled to expenditures, that cash draws are only made once for each expenditure, and that time is minimized between cash draws and payment of expenditures incurred. Views of Responsible Officials – The University acknowledges that the internal controls surrounding the cash draws during fiscal year 2025 were lacking and needed to be reinforced for future fiscal years. With the hire of the new CFO and Senior Accountant post June 30, 2025 – these enhanced controls and processes have been put in place.

Finding 2025-001 Cash Management Identification of the federal program: U.S. Department of Health and Human Services National Institutes of Health Research and Development Cluster Assistance Listing No. Federal Program Title 43.014 Congressionally Directed Programs 47.049 Mathematical and Physical Sciences 93.172 Human Genome Research 93.393 Cancer Cause and Prevention Research 93.396 Cancer Biology Research 93.837 Cardiovascular Diseases Research 93.847 Diabetes, Digestive, and Kidney Diseases Extramural Research 93.853 Extramural Research Programs in the Neurosciences and Neurological Disorders 93.865 Child Health and Human Development Extramural Research Criteria or specific requirement (including statutory, regulatory or other citation): 2 CFR 200.303(a) requires that a non-federal entity must “(a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States and the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” 2 CFR 200.305(b)(3) requires that when the reimbursement method is used, the Federal agency or pass-through entity must make payment within 30 calendar days after receipt of the payment request unless the Federal agency or pass-through entity reasonably believes the request to be improper. Condition: The College did not provide evidence of effectively designed internal controls to ensure subrecipients are paid by the College within 30 days of requests for reimbursements received by the College. Cause: The College did not ensure that its established internal control processes were operating effectively to verify that invoices from subrecipients were paid within the required 30‑day period from the date the payment request was received. Effect or potential effect: The College did not comply with the cash management requirements of Uniform Guidance to pay subrecipients within 30 days of their requests for reimbursements. Questioned costs: None. Context: EY selected and tested a sample of 44 payments to subrecipients with expenditures totaling $5,843,778 from a population of $56,294,523 during the year ended June 30, 2025. Of the 44 samples selected for testing, 12 payments to subrecipients totaling $3,490,135 were made outside the required 30‑day payment window. Identification as a repeat finding, if applicable: Not a repeat finding. Recommendation: The College should strengthen its disbursement controls by ensuring that invoices received from subrecipients are promptly identified, logged, and tracked against the 30‑day payment requirement. Views of responsible officials: Management agrees with the finding and has developed a plan to ensure subrecipients are paid within 30 days of their requests for reimbursement.

Federal Agency: U.S. Department of Agriculture and U.S. Department of Health and Human Services Federal Program Name: Research and Development Assistance Listing Number: 10.215 and 93.433 Federal Award Identification Number and Year: 90RTEM0009 - 2025, 20213864034724 - 2025, 90RTST0002 - 2025 Award Period: July 1, 2024 to June 30, 2025 Type of Finding: - Significant Deficiency in Internal Control over Compliance - Other Matters Criteria or specific requirement: The Federal Government requires that when the reimbursement method is used, the Federal awarding agency or pass-through entity must make payment within 30 calendar days after receipt of the billing, unless the Federal awarding agency or pass-through entity reasonably believes the request to be improper (2 CFR section 200.305(b)(3)). Per Uniform Guidance 2 CFR 200.303, nonfederal entities receiving federal awards are required to establish and maintain internal controls designed to reasonably ensure compliance with federal laws, regulations, and program compliance requirements. Condition: The University did not make payments to subrecipients within 30 days after receipt of invoices. Questioned costs: None. Context: During our testing we identified 4 out of 14 subrecipient payments that did not process payment requests from the subrecipients timely. Cause: The University did not have an effective control in place to ensure subrecipient payments were paid timely. Effect: Subrecipients on federal awards do not receive timely payment for federal contract work. Repeat Finding: Yes, 2024-001 Recommendation: We recommend the University review and update policies and procedures to allow for more timely payment to subrecipients for work the University contracts them to perform. Views of responsible officials: Management agrees with the finding and has developed a plan to correct the finding.

Federal Agency: Department of Agriculture Assistance Listing Number: 10.310 Program Expenditures: $1,328,494 Program Name: Oilseed Pennycress: A New Cash Cover-Crop for the Midwest Award Number(s): 2019-69012-29851 Questioned Costs: None CONDITION: Western Illinois University (University) did not have adequate procedures in place to complete a timely disbursement of requested pass-through funds to subrecipients within the required time period. During our testing of payments made on requests from subrecipients, there were 2 out of 8 (25%) tested instances of the University not disbursing funds within 30 days of the payment request, as required. For the samples mentioned, the funds were sent 32 days and 120 days after the request. The sample was not a statistically valid sample. CRITERIA: Uniform Guidance (2 CFR 200.305(b)(3)) states that when the reimbursement method is used, the Federal agency or pass-through entity must make payment within 30 calendar days after receipt of the payment request unless the Federal agency or pass-through entity reasonably believes the request to be improper. Uniform Guidance (2 CFR 200.303(a)) requires non-Federal entities receiving Federal awards to establish and maintain internal controls designed to reasonably ensure compliance with Federal laws, regulations, and program compliance requirements. Effective internal controls should include procedures to ensure the timely disbursement of funds to subrecipients. CAUSE AND EFFECT: The University did not have adequate procedures in place to ensure all payments to subrecipients were made within the 30 day requirement. Without sufficient controls around return over subrecipient payments and overall cash management, there is a greater risk that the school will miss a payment to be passed through to the subrecipient, thus understating expenditures on the Schedule of Expenditures of Federal Awards. (Finding Code No. 2025-003) RECOMMENDATION: We recommend the University implement controls to ensure that all payments to be passed through to subrecipients are identified and paid within the required time frame. UNIVERSITY RESPONSE: The University agrees with the finding. The University is committed to developing a comprehensive plan to ensure compliance with payment of pass-through funds policies and procedures.

2025-008. FINDING - Noncompliance with Reimbursements to Subrecipients Federal Agency: National Science Foundation Assistance Listing Numbers: 47.070 Program Names and Award Numbers: Research and Development Cluster: CISE-MSI: RPEP: S&CC: Information Systems meet Cultural Competencies; CISE-MSI: DP: IIS-III: ACOSUS: An AI-driven counseling System for Underrepresented Transfer Students Award Numbers: 2131291 – 2021; 2219623 – 2022 Questioned Costs: None Northeastern Illinois University (University) did not pay reimbursements within 30 days for certain subrecipients in the Research and Development Cluster. CONDITIONS FOUND & CRITERIA: For three of 10 (30%) subrecipient invoices selected for testing in the Research and Development Cluster, the University made payments in a time period greater than 30 days. The sample was not intended to be, and was not, a statistically valid sample. Uniform Guidance (2 CFR 200.305(b)(3)) requires, for recipients and subrecipients other than states, payment methods must minimize the time elapsing between the transfer of funds from the federal agency or the pass-through entity and the disbursement of funds by the recipient or subrecipient, regardless of whether the payment is made by electronic funds transfer or by other means. Further, when the reimbursement method is used for payment, organizations must make a payment within 30 calendar days after receipt of the billing unless the federal awarding agency or pass-through entity reasonably believes the request to be improper. CAUSE: University officials stated the department did not timely enter invoices into the Accounts Payable system which resulted in delayed processing by Accounts Payable, thus the payment was not made in accordance with the Uniform Guidance. EFFECT: Failure to meet subrecipients payment requirements is noncompliance with federal regulations and could result in loss of grant funding in future years. (Finding Code No. 2025-008) RECOMMENDATION: We recommend the University implements processes and controls to ensure that payments to subrecipients are made in accordance with the Uniform Guidance. UNIVERSITY RESPONSE: The University agrees with the recommendation. This issue was due to one department’s oversight in maintaining and providing appropriate documentation. The department was sent a reminder of the expectation of timely filing all required documentation to ensure payments to subrecipients are made in accordance with the Uniform Guidance.

Federal agency: U.S. Small Business Administration Federal program name: Congressional Grants Inclusive Ventures Small Business Program Assistance listing number: 59.059 Pass-through agency: Anne Arundel County, Maryland Pass-through number: SBAHQ23I0140 Award Period: September 1,2023 through August 31, 2028 Compliance Requirement: Cash Management/Program Income Type of Findings: Material Weakness in Internal Control over Compliance, Material Noncompliance (Modified Opinion) Criteria or specific requirement: Compliance: 2 CFR 200.305(b)(8) requires that non-Federal entities must maintain advance payments in interest-bearing accounts and must remit interest earned on Federal advances in excess of $500 annually to the Federal agency. 2 CFR 200.80 defines program income as gross income earned that is directly generated by a supported activity or earned as a result of the Federal award. 2 CFR 200.307(e) requires program income to be properly accounted for, used, and reported in accordance with the terms and conditions of the Federal award. 2 CFR 200.302(b)(3) requires entities to maintain records that identify the source and application of funds, including program income. Condition The Corporation did not track, record, or report program income generated from interest earned on Federal funds received in advance. Interest accumulated in the bank account holding Federal advances was not segregated, monitored, or reported to the Federal awarding agency. As a result, the Corporation could not determine whether interest exceeded the $500 annual threshold requiring remittance. Questioned Costs Total program income identified during the audit was $61,226. Context The Corporation received Federal funds in advance for program activities but did not implement procedures to track interest earned on those funds. Cause The Corporation has not historically received federal funding so tracking program income earned from funds received in advance was not deemed necessary. Effect The Corporation may have retained Federal interest income that should have been remitted to the awarding agency. The Federal awarding agency was not informed of program income generated. Repeat Finding No Recommendation We recommend that management develop and implement written procedures to track, record, and report program income, including interest earned on Federal advances. Views of Responsible Officials Management agrees with finding. See corrective action plan for additional information.

Federal Agency: National Science Foundation, U.S. Department of Transportation, U.S. Department of Energy, U.S. Department of Commerce Federal Program Name: Research & Development Assistance Listing Number: 11.469, 20.000, 47.083 and 81.089 Federal Award Identification Number and Year: 1946093 - 2025, 692Ml5-20-T-00029 - 2025, DEFE0031776 - 2025, NA23NWS4690009 – 2025 Pass-Through Agency: Iowa State University Pass-Through Number: 692M15-20-T-00029 PASS THRU 023063C Award Period: July 1, 2024 to June 30, 2025 Type of Finding: - Significant Deficiency in Internal Control over Compliance - Other Matters Criteria or specific requirement: Uniform Grant Guidance (2 CFR Section 200.305(b)(3)) requires that when the reimbursement method is used, the Federal awarding agency or pass-through entity must make payment within 30 calendar days after receipt of the billing, unless the Federal awarding agency or pass-through entity reasonably believes the request to be improper. Per Uniform Guidance 2 CFR 200.303, nonfederal entities receiving federal awards are required to establish and maintain internal controls designed to reasonably ensure compliance with federal laws, regulations, and program compliance requirements. Condition: Oklahoma State University Stillwater (OSU STW) did not make payments to subrecipients within 30 days after receipt of invoices. Questioned costs: None. Context: During our testing we identified 7 subrecipient payments from OSU STW out of 40 payments that did not process payment requests from the subrecipients timely. Cause: OSU STW did not process payment requests from the subrecipient timely. Effect: Subrecipients on federal awards do not receive timely payment for federal contract work. Repeat Finding: No Recommendation: We recommend OSU STW review and update policies and procedures to allow for more timely payment to subrecipients for work the University contracts them to perform. Views of responsible officials: Management agrees with the finding and has developed a plan to correct the finding.

Criteria: The Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) allow non-Federal entities to request advance payments, provided that the timing and amount of such advances are limited to the entity’s immediate cash needs and that funds are expended only for allowable costs incurred within the approved period of performance. Under cash management requirements, advance payments must be limited to the minimum amounts needed and timed to align with the actual, immediate cash requirements of the non-Federal entity (2 CFR §200.305(b)(1); 2025 OMB Compliance Supplement, Cash Management). Additionally, regarding the period of performance, federal awards may only be charged for obligations incurred during the approved period of performance stated in the Notice of Award, and costs incurred outside that period are considered unallowable unless specifically authorized by the federal awarding agency (2 CFR §200.309; 2025 OMB Compliance Supplement, Period of Performance). Condition: During the fiscal year ended June 30, 2025, NeoMed Center requested and received advance payments through the Payment Management System (PMS) under the Health Center Program (93.224). The advances included funds related to a grant budget period running from May 2025 through April 2026; however, management intended to use a portion of these funds to support operations in the subsequent fiscal year (July 1, 2025 through June 30, 2026). As of June 30, 2025, a portion of the advanced federal funds had not been expended for allowable costs incurred within the applicable period of performance. While advance payments are permitted under federal regulations, the timing of the drawdowns exceeded NeoMed Center Inc.’s immediate cash needs for allowable expenditures incurred during the approved period of performance. Effect: As a result of this condition, federal funds were drawn earlier than necessary relative to allowable expenditures as of and for the yar ended June 30, 2025 and were held to be expended and recorded as revenues in the next fiscal year ending June 30, 2026. This situation exposed NMCI to an increased risk of noncompliance with federal cash management and allowability requirements. Additionally, cash balances as of June 30, 2025, included federal funds that were not eligible to be recognized as expenditures as of that date. Cause: Management stated that the advance payments were requested as a preventive measure in response to uncertainty related to federal funding disruptions during calendar year 2025. However, lack of internal controls to ensure that advance drawdowns were limited only to immediate cash needs and aligned with the applicable grant period of performance permitted excess drawdown with no support. Recommendations: We recommend that the Institution implement the following corrective actions: 1. Strengthen internal controls over federal cash management and grant expenditure monitoring to ensure compliance with Uniform Guidance requirements. 2. Revise policies and procedures manuals and Implement procedures to ensure that advance drawdowns from the Payment Management System (PMS) are limited to the entity’s immediate cash needs. 3. Ensure that federal funds are drawn only for allowable expenditures expected to be incurred within the approved period of performance. 4. Provide training to relevant personnel on federal cash management requirements and the proper administration of advance payments.