Findings Citing § 200.318

Questioned Costs: $88,135 Criteria: In accordance with 2 CFR § 200.403–.405, costs charged to federal awards must be allowable, allocable, and supported by valid documentation. Additionally, under 2 CFR § 200.318–.320, all contracts must be awarded with clear terms and timeframes and must be executed prior to the provision of goods or services. For subawards, 2 CFR § 200.331 requires that subrecipient agreements be in writing and include all legally required terms and conditions. Payments made outside the terms of a written, active contract — particularly beyond expiration dates — may be deemed unallowable due to lack of legal obligation and documentation. Condition: Of the ten contracts selected for testing, seven were expired at the time payments were made. In total, the Organization paid $88,135 for services rendered beyond the contract end dates, including payments to one subrecipient and multiple consultants or contractors. The Organization indicated that all payments were budgeted within the approved federal grant agreements; however, these payments were not supported by amendments, extensions, or new agreements authorizing continued work or compensation. Additionally, in four additional instances, one selected for testing, contracts specified hourly or deliverable rates and defined service periods but contained inaccurate or inconsistent total compensation amounts. One of four contracts made payments under these agreements that exceeded the stated contract total. Overall, the discrepancies created ambiguity about the authorized funding limit and raise concerns about enforceability and allowability of the costs under federal award terms. Cause: The Organization did not have sufficient procedures in place to monitor contract expiration dates or to ensure that updated agreements were executed before authorizing payments. In these cases, services continued based on verbal agreements or historical practice rather than a valid, enforceable contract. Effect: As a result, $88,135 in costs were incurred and charged to the federal grant without a valid contractual basis. Even though the costs were budgeted, the lack of a valid, active contract invalidates the legal obligation required for allowability under 2 CFR § 200.403 and § 200.405. Therefore, the costs are questioned pending resolution with the federal awarding agency. Furthermore, the absence of executed agreements represents a significant internal control deficiency and increases the risk of unauthorized or disputed expenditures. The inconsistencies in contractual rates expose the Organization to the risk of paying amounts not clearly authorized by written agreements and may result in questioned or disallowed costs, especially if contract limits are exceeded. Weaknesses in contract drafting and review also constitute a significant deficiency in internal control over compliance. Identification of Repeat Finding: ☐ Yes  ☑ No Recommendation: We recommend that the Organization: • Develop and implement a contract tracking system to monitor start and end dates. • Require that all contracts, extensions, and amendments be executed before services are rendered or payments are issued. • Provide training to program and procurement staff on federal procurement standards and contract management. • Review existing contracts to ensure compliance and take corrective action for any others that may have expired. • Work with the awarding agency to determine whether any portion of the $88,135 must be refunded.

2023-001 – Procurement and Suspension and Debarment Finding Type: Material Noncompliance; Material Weakness in Internal Control over Compliance Program: Rural Communities Opioid Response – Planning/Rural Health Outreach and Rural Network Development Program (AL# 93.912); U.S. Department of Health and Human Services; Direct award; all grant numbers. Criteria: Non-federal entities must follow the procurement standards set out at 2 CFR sections 200.318 through 200.326. They must use their own documented procurement procedures, which reflect applicable state and local laws and regulations, provided that the procurements conform to applicable federal statutes and the procurement requirements identified in 2 CFR Part 200. Condition: The Organization's procurement policies were not complete and the Organization did not follow the federal procurement standards which provides specific guidance including process and documentation requirements necessary to be in compliance as required by the 2 CFR sections 200.318 through 200.326. Cause: The Organization’s procurement policies do not include the federal procurement requirements noted at 2 CFR section 200.318 through 200.326. Additionally, the Organization did not maintain the required procurement documentation, provide for full and open competition, or provide support for limitation of such competition. Effect: Future procurement arrangements may not meet the federal guidelines necessary for projects funded by federal sources. The Organization may have to pay back funds received for a project where federal funds were used for the procurement of products or services, but the required federal process was not met. Recommendation: The Organization should update their procurement policy to include all requirements as noted in 2 CFR sections 200.318-200.326 and ensure that all future agreements follow the required processes. View of Responsible Officials: Management agrees with the finding and plans to update their procurement policy. Repeat Finding - 2022-001

2023-001 – Procurement and Suspension and Debarment Finding Type: Material Noncompliance; Material Weakness in Internal Control over Compliance Program: Rural Communities Opioid Response – Planning/Rural Health Outreach and Rural Network Development Program (AL# 93.912); U.S. Department of Health and Human Services; Direct award; all grant numbers. Criteria: Non-federal entities must follow the procurement standards set out at 2 CFR sections 200.318 through 200.326. They must use their own documented procurement procedures, which reflect applicable state and local laws and regulations, provided that the procurements conform to applicable federal statutes and the procurement requirements identified in 2 CFR Part 200. Condition: The Organization's procurement policies were not complete and the Organization did not follow the federal procurement standards which provides specific guidance including process and documentation requirements necessary to be in compliance as required by the 2 CFR sections 200.318 through 200.326. Cause: The Organization’s procurement policies do not include the federal procurement requirements noted at 2 CFR section 200.318 through 200.326. Additionally, the Organization did not maintain the required procurement documentation, provide for full and open competition, or provide support for limitation of such competition. Effect: Future procurement arrangements may not meet the federal guidelines necessary for projects funded by federal sources. The Organization may have to pay back funds received for a project where federal funds were used for the procurement of products or services, but the required federal process was not met. Recommendation: The Organization should update their procurement policy to include all requirements as noted in 2 CFR sections 200.318-200.326 and ensure that all future agreements follow the required processes. View of Responsible Officials: Management agrees with the finding and plans to update their procurement policy. Repeat Finding - 2022-001

2023-001 – Procurement and Suspension and Debarment Finding Type: Material Noncompliance; Material Weakness in Internal Control over Compliance Program: Rural Communities Opioid Response – Planning/Rural Health Outreach and Rural Network Development Program (AL# 93.912); U.S. Department of Health and Human Services; Direct award; all grant numbers. Criteria: Non-federal entities must follow the procurement standards set out at 2 CFR sections 200.318 through 200.326. They must use their own documented procurement procedures, which reflect applicable state and local laws and regulations, provided that the procurements conform to applicable federal statutes and the procurement requirements identified in 2 CFR Part 200. Condition: The Organization's procurement policies were not complete and the Organization did not follow the federal procurement standards which provides specific guidance including process and documentation requirements necessary to be in compliance as required by the 2 CFR sections 200.318 through 200.326. Cause: The Organization’s procurement policies do not include the federal procurement requirements noted at 2 CFR section 200.318 through 200.326. Additionally, the Organization did not maintain the required procurement documentation, provide for full and open competition, or provide support for limitation of such competition. Effect: Future procurement arrangements may not meet the federal guidelines necessary for projects funded by federal sources. The Organization may have to pay back funds received for a project where federal funds were used for the procurement of products or services, but the required federal process was not met. Recommendation: The Organization should update their procurement policy to include all requirements as noted in 2 CFR sections 200.318-200.326 and ensure that all future agreements follow the required processes. View of Responsible Officials: Management agrees with the finding and plans to update their procurement policy. Repeat Finding - 2022-001

2023-001 – Procurement and Suspension and Debarment Finding Type: Material Noncompliance; Material Weakness in Internal Control over Compliance Program: Rural Communities Opioid Response – Planning/Rural Health Outreach and Rural Network Development Program (AL# 93.912); U.S. Department of Health and Human Services; Direct award; all grant numbers. Criteria: Non-federal entities must follow the procurement standards set out at 2 CFR sections 200.318 through 200.326. They must use their own documented procurement procedures, which reflect applicable state and local laws and regulations, provided that the procurements conform to applicable federal statutes and the procurement requirements identified in 2 CFR Part 200. Condition: The Organization's procurement policies were not complete and the Organization did not follow the federal procurement standards which provides specific guidance including process and documentation requirements necessary to be in compliance as required by the 2 CFR sections 200.318 through 200.326. Cause: The Organization’s procurement policies do not include the federal procurement requirements noted at 2 CFR section 200.318 through 200.326. Additionally, the Organization did not maintain the required procurement documentation, provide for full and open competition, or provide support for limitation of such competition. Effect: Future procurement arrangements may not meet the federal guidelines necessary for projects funded by federal sources. The Organization may have to pay back funds received for a project where federal funds were used for the procurement of products or services, but the required federal process was not met. Recommendation: The Organization should update their procurement policy to include all requirements as noted in 2 CFR sections 200.318-200.326 and ensure that all future agreements follow the required processes. View of Responsible Officials: Management agrees with the finding and plans to update their procurement policy. Repeat Finding - 2022-001

2023-001 – Procurement and Suspension and Debarment Finding Type: Material Noncompliance; Material Weakness in Internal Control over Compliance Program: Rural Communities Opioid Response – Planning/Rural Health Outreach and Rural Network Development Program (AL# 93.912); U.S. Department of Health and Human Services; Direct award; all grant numbers. Criteria: Non-federal entities must follow the procurement standards set out at 2 CFR sections 200.318 through 200.326. They must use their own documented procurement procedures, which reflect applicable state and local laws and regulations, provided that the procurements conform to applicable federal statutes and the procurement requirements identified in 2 CFR Part 200. Condition: The Organization's procurement policies were not complete and the Organization did not follow the federal procurement standards which provides specific guidance including process and documentation requirements necessary to be in compliance as required by the 2 CFR sections 200.318 through 200.326. Cause: The Organization’s procurement policies do not include the federal procurement requirements noted at 2 CFR section 200.318 through 200.326. Additionally, the Organization did not maintain the required procurement documentation, provide for full and open competition, or provide support for limitation of such competition. Effect: Future procurement arrangements may not meet the federal guidelines necessary for projects funded by federal sources. The Organization may have to pay back funds received for a project where federal funds were used for the procurement of products or services, but the required federal process was not met. Recommendation: The Organization should update their procurement policy to include all requirements as noted in 2 CFR sections 200.318-200.326 and ensure that all future agreements follow the required processes. View of Responsible Officials: Management agrees with the finding and plans to update their procurement policy. Repeat Finding - 2022-001

Finding 2023-001: Procurement Policy and Related Contract Program: 66.958 Water Infrastructure Finance and Innovation Federal Agency: U.S. Environmental Protection Agency Award No: WIFIA-N18147WI Award Year: 2023 This finding is a repeat finding of 2022-001 Criteria: 2 CFR section 200.318 - General Procurement Standards, requires non-Federal entities to have and use documented procurement procedures, consistent with State, local and tribal laws and regulations and the standards of this section, for the acquisition of property or services required under a Federal award or subaward. The non-Federal entity's documented procurement procedures must conform to the procurement standards identified in §§ 200.317 through 200.327. Condition: We reviewed the water utility's procurement policy and service contracts with costs reimbursed during 2023, noting they did not contain necessary federal language related to conflicts of interest and debarment and suspension. Cause: The water utility has not received federal funding in the past and did not update their procurement policy when they sought federal funding for the Great Lakes Water Supply project. Additionally, service contracts were entered into prior to receiving federal funds. Effect: Without adequate control of contract language the water utility could enter into contracts related to the Great Lakes Water Supply project that do not qualify for federal reimbursement. Questioned Costs: None noted. Recommendation: We recommend the water utility review its procurement policy and make necessary updates to be in compliance with federal standards. Additionally, we recommend the utility enter into contract addendums related to contracts previously executed without required federal language. Management Response: Waukesha Water utility management has worked closely with WIFIA to craft contracts that include all necessary language prior to releasing RFPs for construction contracts. WIFIA was presented all service contracts to review prior to reimbursements received in fiscal year 2023. The finance department is working to update the procurement policy to ensure necessary federal language is included. The finance department will also work with service contractors to execute contract addendums.

Federal Awards Finding 2023-004: Noncompliance with Federal Award Program Requirements Criteria or Specific Requirement The Uniform Guidance states that the auditee is responsible for “maintaining internal control over Federal programs that provides reasonable assurance that the auditee is managing Federal awards in compliance with laws, regulations, and the provisions of contracts or grant agreements that could have a material effect on each of its Federal programs.” Specifically, this Finding applies to the following Compliance Requirements outlined in the 2023 Compliance Supplement: 1. Activities Allowed or Unallowed & Allowable Costs/Cost Principles 2. Procurement, Suspension & Debarment Finding/Condition We noted the following deficiencies: 1. The Rancheria was unable to provide supporting documentation for the allocation of expenditures reported for federal award programs. 2. The Rancheria was unable to provide actual time records for employees, supporting payroll expenditures claimed as expenditures for federal award programs. 3. The Rancheria was unable to provide documentation to show that it complied with the procurement standards required in 2 CFR 200.318. Additionally, the Rancheria does not have a procurement policy which complies with those standards. Context 1. 4 of 31 transactions tested 2. 2 of 31 transactions tested 3. 1 of 31 transactions tested Effect The Rancheria has possibly misstated federal expenditures between federal programs. Cause The Rancheria has not implemented a grant management system or procurement policy which is in compliances with 2 CFR 200.318. Recommendation The Rancheria should implement a grant management system, and also develop a process for capturing the correct allocation of expenditures for programs. Additionally the Rancheria should adopt and implement a new procurement policy.

Federal Awards Finding 2023-004: Noncompliance with Federal Award Program Requirements Criteria or Specific Requirement The Uniform Guidance states that the auditee is responsible for “maintaining internal control over Federal programs that provides reasonable assurance that the auditee is managing Federal awards in compliance with laws, regulations, and the provisions of contracts or grant agreements that could have a material effect on each of its Federal programs.” Specifically, this Finding applies to the following Compliance Requirements outlined in the 2023 Compliance Supplement: 1. Activities Allowed or Unallowed & Allowable Costs/Cost Principles 2. Procurement, Suspension & Debarment Finding/Condition We noted the following deficiencies: 1. The Rancheria was unable to provide supporting documentation for the allocation of expenditures reported for federal award programs. 2. The Rancheria was unable to provide actual time records for employees, supporting payroll expenditures claimed as expenditures for federal award programs. 3. The Rancheria was unable to provide documentation to show that it complied with the procurement standards required in 2 CFR 200.318. Additionally, the Rancheria does not have a procurement policy which complies with those standards. Context 1. 4 of 31 transactions tested 2. 2 of 31 transactions tested 3. 1 of 31 transactions tested Effect The Rancheria has possibly misstated federal expenditures between federal programs. Cause The Rancheria has not implemented a grant management system or procurement policy which is in compliances with 2 CFR 200.318. Recommendation The Rancheria should implement a grant management system, and also develop a process for capturing the correct allocation of expenditures for programs. Additionally the Rancheria should adopt and implement a new procurement policy.

Finding 2023–001 Department of Treasury Federal Assistance Listing No. 21.027 Coronavirus State and Local Fiscal Recovery Funds Significant Deficiency and Noncompliance over Procurement and Suspension and Debarment Repeat Finding: Yes Condition: During our testing and review of the Organization’s procurement policy, we were unable to obtain documentation to support the Organization’s basis for sole source contracts. Additionally, documentation was not available to support the inquiries around suspension and disbarment. Criteria: The Uniform Guidance and 45 CF Part 75 require that non-federal entities receiving federal awards establish and maintain internal controls designed to reasonably ensure compliance with federal laws, regulations, and program compliance requirements. The characteristics of internal controls are presented in the context of the components of internal controls discussed in the Internal Control-Integrated Framework (COSO Report), published by the Committee of Sponsoring Organizations of the Treadway Commission. The COSO Report provides a framework for organizations to design, implement, and evaluate controls that will facilitate compliance with the requirements of federal laws, regulations, and program compliance requirements. Per 2 CFR 200.320 General procurement stands: (a) Noncompetitive procurement. There are specific circumstances in which noncompetitive procurement can be used. Noncompetitive procurement can only be awarded if one or more of the following circumstances apply: (1) The acquisition of property or services, the aggregate dollar amount of which does not exceed the micro-purchase threshold; (2) The item is available only from a single source; (3) The public exigency or emergency for the requirement will not permit a delay resulting from publicizing a competitive solicitation; (4) The federal awarding agency or pass-through entity expressly authorizes a noncompetitive procurement in response to a written request from the non-federal entity; or (5) After solicitation of a number of sources, competition is determined inadequate. Per 2 CFR 200.318 General procurement stands: (b) The non-federal entity must use its own documented procurement procedures which reflect applicable state, local, and tribal laws and regulations, provided that the procurements conform to applicable federal law and the standards identified in this part. Per Uniform Guidance, non-federal entities are prohibited from contracting with or making subawards under covered transactions to parties that are suspended or debarred. “Covered transactions” include contracts for goods and services awarded under a non-procurement transaction (e.g., grant or cooperative agreement) that are expected to equal or exceed $25,000 or meet certain other criteria as specified in 2 CFR section 180.220. All non-procurement transactions entered into by a pass-through entity (i.e., subawards to subrecipients), irrespective of award amount, are considered covered transactions, unless they are exempt as provided in 2 CFR section 180.215. When a non-federal entity enters into a covered transaction with an entity at a lower tier, the non-federal entity must verify that the entity, as defined in 2 CFR section 180.995 and agency adopting regulations, is not suspended or debarred or otherwise excluded from participating in the transaction. This verification may be accomplished by (1) checking the System for Award Management (SAM) Exclusions maintained by the General Services Administration (GSA) and available at SAM.gov Home (2) collecting a certification from the entity, or (3) adding a clause or condition to the covered transaction with that entity (2 CFR section 180.300). Cause: The Organization did not apply the required procurement policy relative to sole source contracts in accordance with Uniform Guidance. Management also did not complete a review of vendors/contractors to verify they are not suspended, debarred, or otherwise excluded before contracting. Effect: The Organization does not have adequate documentation to support its sole source procurement and is not in compliance with federal guidelines. Questioned Costs: Unknown Recommendation: We recommend the Organization update and follow their controls to identify vendors that should go through the procurement process. We also recommend the Organization follow their process to verify that entities are not suspended, debarred, or otherwise excluded annually at time of award and to document those procedures. Views of Responsible Officials: Management agrees with the finding. Refer to the Corrective Action Plan.

Finding: 2023-001 Program Title: Congressionally Funded Community Projects Assistance Listing: 84.215K Contract Grant Number: S215K230172 Federal Award Years: July 1, 2023 to May 31, 2025 Federal Agency: U.S. Department of Education Type of Finding: Material Noncompliance Criteria: 2 CFR sections 200.318 through 200.326 establishes the procurement standards applicable to Non- Federal Entities applicable to federal awards. When acquisitions exceed the simplified acquisition threshold of $250,000, the non-federal entity must use one of the following procurement methods: the sealed bid method, the competitive proposals method, or the noncompetitive proposals method based on the criteria outlined in 2 CFR section 200.320. Condition: Based on procedures performed, SC&C identified acquisitions in excess of the simplified acquisition threshold that were not selected using an appropriate procurement method. Cause: The Organization was unaware of the compliance requirement. Also, the Organization did not follow its written procurement policy. Effect: $324,000 of costs are questioned costs as a result of failing to meet procurement requirements. This is considered material to the Congressionally Funded Community Projects. Repeat Finding: No Recommendation: We recommend the Organization establish and implement written policies and procedures to establish to ensure compliance with the compliance requirements and terms and conditions of the federal award. Views of Responsible Officials: Management agrees with the recommendations to establish and implement written policies and procedures to conform with the compliance requirements and terms and conditions of the federal award.

Information on Federal Programs: 93.083 – Centers for Disease Control and Prevention: Prevention of Disease, Disability, and Death through Immunization & Control of Respiratory & Related Diseases. Criteria or Specific Requirements: According to 2 CFR §200.303, the non-Federal entity must: establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in Standards for Internal Control in the Federal Government, issued by the Comptroller General of the United States, or the Internal Control Integrated Framework, issued by COSO. Additionally, according to 2 CFR §200.320, the non-Federal entity must have and use documented procurement procedures, consistent with the standards of this section and §200.318 and §200.319. Condition: During the testing of the procurement compliance requirement related to the major programs, it was determined that ATS did not have a documented procurement policy in place for procurement of property or services required under a Federal award. Cause: Management did not have internal control procedures in place to ensure that procurement requirements were adequately followed, documented and retained when Federal awards were obtained. Effect: Failure to have and use documented procurement policies and procedures could have resulted in noncompliance with the Criteria or Specific Requirements section above. Perspective: While ATS did not have documented procurement policies and procedures compliant with 2 CFR §200.320, ATS did establish a documented selection criteria policy for contractors under its Federal program. With this policy ATS created a selection subcommittee to review, evaluate and select contractors. The subcommittee evaluated the applications received and chose the contractors based on several selection criteria. Each contractor’s application was sent for review and approval by prime awardee. Within a random sample of 4 procurement contracts, 4 were selected based on the selection criteria policy established. Questioned Costs: Questioned costs were not identified. Repeat Finding: Not applicable. Recommendation: ATS should update its procurement policy to include requirements for procurement of property or services required under a Federal award or subaward to ensure compliance with the Uniform Guidance.

Criteria or Specific Requirement OMB’s Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (UG) requires that grant recipients follow procurement procedures for the acquisition of property or services under a federal award. Grantees are required to comply with certain procurement standards as defined in 2 CFR 200.318. These standards include the requirement that the grantee must use its own documented procurement procedures provided that they conform to applicable federal law. In addition, the grantee must maintain records sufficient to detail the history of procurement. Condition and Context During planning procedures for our audit, we concluded that the prior year finding over procurement was not yet remediated. Based on our procedures, there was no supporting documentation retained for those transactions subject to procurement and approvals were given verbally between the requestor and the Executive Director. Cause The Organization did not have adequate controls or policies in place to maintain formal evidence of procurement and to ensure the Organization’s procurement policy was adhered to. Effect or Potential Effect Due to the weakness in internal controls and compliance finding noted above, there is a risk that contracts may be awarded to vendors in a manner that is not consistent with Federal procurement requirements and the Organization’s procurement policy. No questioned costs are reported as vendors subject to procurement policies are below $25,000. Recommendation The Organization should address the weaknesses in internal controls noted above in order to ensure that federal procurements are conducted in accordance with federal requirements and supporting documentation is maintained to support such conclusion. The Organization should ensure that prior to entering into transactions, a review is performed over vendor selection and all required documentation is retained. Views of Responsible Official Management’s corrective action plan is included at the end of this report after the Schedule of Prior Year Findings.

Criteria or Specific Requirement OMB’s Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (UG) requires that grant recipients follow procurement procedures for the acquisition of property or services under a federal award. Grantees are required to comply with certain procurement standards as defined in 2 CFR 200.318. These standards include the requirement that the grantee must use its own documented procurement procedures provided that they conform to applicable federal law. In addition, the grantee must maintain records sufficient to detail the history of procurement. Condition and Context During planning procedures for our audit, we concluded that the prior year finding over procurement was not yet remediated. Based on our procedures, there was no supporting documentation retained for those transactions subject to procurement and approvals were given verbally between the requestor and the Executive Director. Cause The Organization did not have adequate controls or policies in place to maintain formal evidence of procurement and to ensure the Organization’s procurement policy was adhered to. Effect or Potential Effect Due to the weakness in internal controls and compliance finding noted above, there is a risk that contracts may be awarded to vendors in a manner that is not consistent with Federal procurement requirements and the Organization’s procurement policy. No questioned costs are reported as vendors subject to procurement policies are below $25,000. Recommendation The Organization should address the weaknesses in internal controls noted above in order to ensure that federal procurements are conducted in accordance with federal requirements and supporting documentation is maintained to support such conclusion. The Organization should ensure that prior to entering into transactions, a review is performed over vendor selection and all required documentation is retained. Views of Responsible Official Management’s corrective action plan is included at the end of this report after the Schedule of Prior Year Findings.

Uniform Guidance requires written policies for the requirements outlined in 2 CFR 200.302(b)(7), 2 CFR 200.318(c)(1), 2 CFR 200.318(c)(2), 2 CFR 200.320(b)(2), and 2 CFR 200.319(d). The Village does not have written policies in place for the requirements outlined in the Code of Federal Regulations sections referenced above.

Criteria: The Uniform Guidance requires written policies and procedures documenting how the organization determines and complies with the applicable compliance requirements. Condition: BREC does not currently maintain written policies and procedures for determining and documenting the applicable compliance requirements in accordance with 2 CFR 200.318-326. Questioned Costs: None. Cause: Written policies and procedures for the applicable compliance requirements have not been developed. Effect: Written policies and procedures over the applicable compliance requirements are not available to guide staff responsible for federal expenditures. Recommendation: We recommend that BREC develop written policies and procedures for determining and documenting the applicable compliance requirements under the Uniform Guidance. Repeat Finding: No. View of Responsible Official: While BREC currently does not have any federal expenses identified as unallowable costs applicable to this finding, a written SOP was recently developed for determining allowable costs and procurement requirements in accordance with the applicable CFR to guide key finance staff with responsibility for federally eligible expenditures.

Assistance Listing Number 66.468 Drinking Water State Revolving Fund United States Environmental Protection Agency North Dakota Public Finance Authority Procurement Suspension & Debarment 2 CFR Part 200.318 Criteria 2 CFR Part 200.318 states that a non-Federal entity must have and use documented procedures, consistent with state, local, and tribal laws and regulations and the standards of 2 CFR part 200.317 through 200.327. Condition District does not have a written procurement policy in place. Cause The District has not approved a written procurement policy. Effect Non-compliance with Procurement Suspension & Debarment compliance requirements. Questioned Costs Not Applicable Repeat Finding See 2022-005. Recommendation We recommend for the board of the District to create and implement a procurement policy that adheres to state and local regulations as well as 2 CFR Part 200.317 through 200.327. Views of Responsible Officials and Planned Corrective Actions The District will create and approve a procurement policy that adheres to state and local regulations as well as 2 CFR Part 200.317 through 200.327.

Finding 2023-001 Noncompliance and material weakness in internal control over compliance with procurement requirements Federal Agency: Department of Housing and Urban Development Assistance Listing Number: 14.251 Assistance Listing Name: Community Project Funding Award Number: B-23-CP-WA-1530 Criteria Nonfederal entities must follow the procurement standards set out at 2 CFR sections 200.318 through 200.326. For acquisitions exceeding the simplified acquisition threshold, the nonfederal entity must use one of the following procurement methods: the sealed bid method if the acquisition meets the criteria in 2 CFR section 200.320(b)(i); the competitive proposals method under the conditions specified in 2 CFR section 200.320(b)(2); or the noncompetitive proposals method (i.e., solicit a proposal from only one source) but only when one or more of four circumstances are met, in accordance with 2 CFR section 200.320(c)). Condition and Effect During our testing of the procurement compliance requirement, we noted that the Aquarium had not performed the required procurement procedures for one of the vendors in our sample. For this one vendor the acquisition exceeded the simplified acquisition threshold. The Aquarium used a noncompetitive method to select the vendor; however, the acquisition did not meet one of the four qualifying circumstances for a noncompetitive procurement. Cause The Aquarium’s system of internal control did not operate effectively to prevent the Aquarium from incorrectly using a noncompetitive procurement process, when instead a proscribed competitive procurement process should have been followed. Context During the year under audit there was a total population of nine vendors to which the procurement compliance requirement applied. For our testing of the procurement compliance requirement, we tested a sample of two vendors from the total population of nine. As noted in the condition section above, our testing found that the Aquarium did not comply with the procurement compliance requirements for one of the vendors tested. We also noted that the procurement activity for this vendor occurred in 2017 and prior to the Aquarium seeking federal funding for the Ocean Pavilion project. Questioned Costs Payments to that one vendor during 2023 that were charged to the major federal program totaled $118,845. Repeat Finding This is not a repeat finding. Recommendation We recommend management provide training for those involved with procurement activities for acquisitions that will be charged to federal awards to ensure the Aquarium’s procurement policies and procedures are consistently applied. We also recommend management update the Aquarium’s procurement policies and procedures to ensure they incorporate the required procedures and controls to ensure compliance with the procurement requirements in 2 CFR 200 (the Uniform Guidance) for acquisitions that will be charged to federal awards. Views of Responsible Officials and Corrective Action Plan Management agrees with the finding and has provided the accompanying corrective action plan.

Finding 2023-003: Significant Deficiency - Internal Control Over Procurement, Suspension and Debarment Program Water and Waste Disposal Systems for Rural Communities Federal Agency U.S. Department of Agriculture Assistance Listing Number 10.760 Criteria: For federal awards after January 1, 2018, guidance provided in 2 CFR part 200.318 requires nonfederal entities to establish and follow their own documented procurement procedures that conform to applicable federal law and standards. 2 CFR part 200.320 includes different allowable methods of procurement. There are also requirements to verify the vendors are not suspended or debarred. Condition/Context: During our testing for this program, we noted that the City did not have a written procurement policy to conform with Uniform Guidance requirements. The City contracted with a thirdparty administrator who provided the services related to procurement for this grant program. Cause: The City was not aware that a written policy was required to be in place outside of the terms and condition in the grant agreement. Effect: Without an adequate policy in place, procurement procedures may not adhere to requirements of federal awards. Questioned Costs: None noted. Recommendation: Program personnel should become familiar with the procurement, suspension and debarment rules for Federal programs and implement a formal written policy to conform with Uniform Guidance requirements. Views of Responsible Officials: Management agrees with the finding and will make efforts to implement a formal procurement policy.

Assistance Listing, Federal Agency, and Program Name - ALN 47.074, National Science Foundation, Biological Sciences - Collaborative Research: Phenobase: Community, Infrastructure, and Data for Global Scale Analyses of Plant Phenology; ALN 47.074, National Science Foundation, Biological Sciences - REU Site: Plant Biology and Conservation Research Experiences for Undergraduates Federal Award Identification Number and Year - DBI-2223510, DBI2149888 Pass through Entity - N/A Finding Type - Material weakness and material noncompliance with laws and regulations Repeat Finding - No Criteria - 2 CFR 180.300 - When you enter into a covered transaction with another person at the next lower tier, you must verify that the person with whom you intend to do business is not excluded of disqualified. You do this by: (a) checking SAM exclusions; or (b) Collecting a certification from that person; or (c) Adding a clause or condition to the covered transaction with that person. 2 CFR 200.318(i) - The entity must maintain records sufficient to detail the history of procurement. These records will include, but are not limited to, the following: Rationale for the method of procurement, selection of contract type, contractor selection or rejection, and the basis for the contract price. 2 CFR 200.319(a) - All procurement transactions for the acquisition of property or services required under a federal award must be conducted in a manner providing full and open competition consistent with the standards of this section and § 200.320. 2 CFR 200.320(a)(2)(i) - If small purchase procedures are used, price or rate quotations must be obtained from an adequate number of qualified sources as determined appropriate by the non Federal entity. Condition - The Society did not have documentation to support that two covered transactions were checked for potential suspension or debarment before entering into the transaction. There was one covered transaction where the Society did not have documentation to support the procurement process followed or that more than one vendor was reviewed for pricing before selecting the vendor chosen. Questioned Costs - The Society charged a total of $31,000 to grant DBI-2223510 during 2023 for a covered transaction in which there was not supporting documentation that the service was procured under the requirements above. Identification of How Questioned Costs Were Computed - The amount of the covered transaction that was submitted for reimbursement during 2023. Context - Two covered transactions with total expenditures charged to the grants of $85,735 were reviewed. The population subject to testing included a total of three covered transactions. Cause and Effect - The Society experienced significant personnel turnover during the year within its accounting and grants departments, which resulted in issues with documentation retention and records retrieval. Recommendation - The Society should implement an internal review process of its record retention to ensure that all procurement documentation is appropriately retained in accordance with its formal policies. Views of Responsible Officials and Planned Corrective Actions - Staff turnover in early 2023 resulted in limited capacity for dedicated staff to check for potential suspension or debarment before adding vendors to the system. We have dedicated staff who will be managing this process going forward. The Society has written procurement policies and procedures. Key leadership stakeholders have been apprised of our policies and procedures. The Society will be implementing a training series for government funded procurement stakeholders within the Society to ensure compliance.

Assistance Listing, Federal Agency, and Program Name - ALN 47.074, National Science Foundation, Biological Sciences - Collaborative Research: Phenobase: Community, Infrastructure, and Data for Global Scale Analyses of Plant Phenology; ALN 47.074, National Science Foundation, Biological Sciences - REU Site: Plant Biology and Conservation Research Experiences for Undergraduates Federal Award Identification Number and Year - DBI-2223510, DBI2149888 Pass through Entity - N/A Finding Type - Material weakness and material noncompliance with laws and regulations Repeat Finding - No Criteria - 2 CFR 180.300 - When you enter into a covered transaction with another person at the next lower tier, you must verify that the person with whom you intend to do business is not excluded of disqualified. You do this by: (a) checking SAM exclusions; or (b) Collecting a certification from that person; or (c) Adding a clause or condition to the covered transaction with that person. 2 CFR 200.318(i) - The entity must maintain records sufficient to detail the history of procurement. These records will include, but are not limited to, the following: Rationale for the method of procurement, selection of contract type, contractor selection or rejection, and the basis for the contract price. 2 CFR 200.319(a) - All procurement transactions for the acquisition of property or services required under a federal award must be conducted in a manner providing full and open competition consistent with the standards of this section and § 200.320. 2 CFR 200.320(a)(2)(i) - If small purchase procedures are used, price or rate quotations must be obtained from an adequate number of qualified sources as determined appropriate by the non Federal entity. Condition - The Society did not have documentation to support that two covered transactions were checked for potential suspension or debarment before entering into the transaction. There was one covered transaction where the Society did not have documentation to support the procurement process followed or that more than one vendor was reviewed for pricing before selecting the vendor chosen. Questioned Costs - The Society charged a total of $31,000 to grant DBI-2223510 during 2023 for a covered transaction in which there was not supporting documentation that the service was procured under the requirements above. Identification of How Questioned Costs Were Computed - The amount of the covered transaction that was submitted for reimbursement during 2023. Context - Two covered transactions with total expenditures charged to the grants of $85,735 were reviewed. The population subject to testing included a total of three covered transactions. Cause and Effect - The Society experienced significant personnel turnover during the year within its accounting and grants departments, which resulted in issues with documentation retention and records retrieval. Recommendation - The Society should implement an internal review process of its record retention to ensure that all procurement documentation is appropriately retained in accordance with its formal policies. Views of Responsible Officials and Planned Corrective Actions - Staff turnover in early 2023 resulted in limited capacity for dedicated staff to check for potential suspension or debarment before adding vendors to the system. We have dedicated staff who will be managing this process going forward. The Society has written procurement policies and procedures. Key leadership stakeholders have been apprised of our policies and procedures. The Society will be implementing a training series for government funded procurement stakeholders within the Society to ensure compliance.

Procurement Policy Federal Agency: U.S. Department of the Treasury Federal Program Title: NeighborWorks® America Grant Cluster Federal Assistance Listing Number: 21.U12 Compliance Requirement: Procurement Type of Finding: Significant Deficiency in Internal Control over Compliance, Other Matter Criteria or Specific Requirement: The Organization should have a formal procurement policy to guide the Organization when entering into covered transactions. The policy needs to include all components identified in 2 CFR 200.318. Condition: The Organization had 3 expenses applied to the grant in excess of the $10,000 required micro-purchase threshold and below their internal $15,000 policy. The Organization also did not have a procurement policy in place that follows Uniform Guidance. Questioned Costs: None Context: The Organization had an internal procurement policy in effect that specified procurement controls and documentation for purchases greater than $15,000, which exceeds the $10,000 micro-purchase threshold required under Uniform Guidance. The Organization entered into three transactions below their $15,000 internal policy but in excess of the $10,000 required micro purchase threshold for which an adequate number of price or rate quotes were not documented. Cause: Management Oversight Effect: The effect of not having a procurement policy with all the required components would be noncompliance with 2 CFR 200.318. Recommendation: It is recommended that the Organization review and update the procurement policy as necessary to ensure compliance with the Uniform Guidance. Views of Responsible Officials: There is no disagreement with the audit finding. Refer to the Organization’s Corrective Action Plan for more information.

Finding 2023-001: Procurement Policy Information on the Federal Program: All Criteria: According to 2 CFR §200.303, the non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in Standards for Internal Control in the Federal Government issued by the Comptroller General of the United States or the internal Control Integrated Framework, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Additionally, according to 2 CFR §200.318 Procurement standards, the non-Federal entity must maintain records sufficient to detail the history of procurement. These records will include, but are not necessarily limited to, the following: Rationale for the method of procurement, selection of contract type, contractor selection or rejection, and the basis for the contract price. Title 2, Subtitle A Chapter II Part 200 Subpart D 200.319 Procurement Standards. All procurement transactions for the acquisition of property or services required under a Federal award must be conducted in a manner providing full and open competition consistent with the standards of this section and §200.320. The non-Federal entity must have written procedures for procurement transactions." Additionally, according to 2 CFR §200.318 Procurement standards, the non-Federal entity must maintain records sufficient to detail the history of procurement. These records will include, but are not necessarily limited to, the following: Rationale for the method of procurement, selection of contract type, contractor selection or rejection, and the basis for the contract price. Title 2, Subtitle A Chapter II Part 200 Subpart D 200.319 Procurement Standards. All procurement transactions for the acquisition of property or services required under a Federal award must be conducted in a manner providing full and open competition consistent with the standards of this section and §200.320. The non-Federal entity must have written procedures for procurement transactions. Condition: During our testing performed over procurement and through inquiries with management, we noted the Organization does not have a formally documented procurement policy in place that is consistent with 2 CFR §200.318(a). Cause: Management has not formalized and implemented an official organizational procurement policy. Effect or Potential Effect: An official procurement policy will outline specified thresholds for which procurement is required, required documentation needed for each threshold, and individuals responsible for ensuring procurement is performed in all required circumstances. When no policy is in place, there is a risk that procurement would not be performed, or adequate documentation would not be obtained, when required. Questioned Costs: None noted. Context: We noted that the Organization does not have a documented procurement policy in effect.Identification as a Repeat Finding, if Applicable: Not a repeat finding. Recommendation: We recommend that management formalize and implement an official procurement policy. This policy should include thresholds for which various levels of procurement are required. The policy should also include what documentation is required for each level of procurement. Additionally, the policy should specify individuals responsible for conducting procurement, and approving the final selection.

Finding # 2023-002 Type: Immaterial noncompliance over procurement Assistance Listing: 10.937 Partnerships for Climate-Smart Commodities Criteria/Requirement The Organization’s procurement policies should incorporate the provisions of the procurement standards set out at 2 CFR sections 200.318 through 200.327. Cause: The Organization’s fiscal policies and procedures do not meet the required federal standards for procurement. Effect: Executed contracts using federal funds may be in violation of federal guidelines. Questioned Costs: None. Recommendation: The Organization's procurement policy must have documented procurement procedures, consistent with state, local, and tribal laws and regulations for the acquisition of property or services required under a federal award or subaward. The Organization should maintain records sufficient to detail the history of procurement. Management’s Response: The Organization agrees with the auditor’s recommendation. At the time of this audit’s issuance, the Organization has updated its procurement policies and procedures to be consistent with federal requirements.

Finding # 2023-002 Type: Immaterial noncompliance over procurement Assistance Listing: 10.937 Partnerships for Climate-Smart Commodities Criteria/Requirement The Organization’s procurement policies should incorporate the provisions of the procurement standards set out at 2 CFR sections 200.318 through 200.327. Cause: The Organization’s fiscal policies and procedures do not meet the required federal standards for procurement. Effect: Executed contracts using federal funds may be in violation of federal guidelines. Questioned Costs: None. Recommendation: The Organization's procurement policy must have documented procurement procedures, consistent with state, local, and tribal laws and regulations for the acquisition of property or services required under a federal award or subaward. The Organization should maintain records sufficient to detail the history of procurement. Management’s Response: The Organization agrees with the auditor’s recommendation. At the time of this audit’s issuance, the Organization has updated its procurement policies and procedures to be consistent with federal requirements.

Finding Number: 2023-001 Repeat Finding: No Program Name / Title: Special Supplemental Nutrition Program for Women, Infants, and Children and Grants for Capital Development in Health Centers Federal Assistance Listing Number: 10.557 and 93.526 Federal Agencies: United States Department of Agriculture and and U.S. Department of Health and Human Services Federal Award Number: 22-10305 and C8ECS44546 Type of Finding: Significant Deficiency Compliance Requirement: Procurement and Suspension and Debarment Questioned Cost: No Criteria: Under 2 CFR sections 180.220 and 200.318 through 200.326, 45 CFR 75.327 through 75.334 and 45 CFR 75 Part E, the Organization is required to implement certain written Procurement and Suspension and Debarment policies and procedures that adhere to the minimum Federal Procurement standards. The Organization must use its own documented procurement procedures, which reflect applicable State and local laws and regulations, provided that the procurements conform to applicable Federal statutes and the procurement requirements outlined in Uniform Guidance and maintain sufficient records to detail the history of procurements. Condition: Although the Organization maintained a written procurement policy, the Organization did not have adequate procurement policies in place to meet the minimum federal requirements for procurement standards and did not always follow its own procurement policies. Cause: The Organization's policy did not meet all of the minimum federal requirements under Uniform Guidance. In addition, the Organization could not provide support to demonstrate that it performed all of the necessary procurement steps and did not always retain documentation demonstrating compliance with Uniform Guidance for purchases made with federal funds. Effect: The Organization was not in compliance with federal regulations or its own policies. Recommendation: The Organization should update their procurement policy to meet the minimum federal requirements and ensure procurement policies are being followed for all procurement levels with written documentation. View of Responsible Officials: Introduction United Health Centers of the San Joaquin Valley (the "Organization") vigorously protests this finding. The Organization rigorously complies with not only federal and state procurement regulations, but also WIC regulations and the requirements found in the contract between the Organization and WIC. Additionally, numerous audits have been conducted by various entities (including audits by both WIC and the Health Resources and Services Administration (HRSA)) without any findings related to the Organization’s procurement. Finally, the Organization trains all individuals participating in the procurement process and provides guidance on procurement rules. Compliance with Regulations and WIC Program Contract The Organization’s compliance efforts are top tier. It uses many checks and balances to ensure compliance across the board with not only federal and state procurement regulations, but also WIC regulations and the requirements found in the contract between the Organization and WIC. It maintains written standards of conduct covering conflicts of interest and governing the actions of its employees engaged in the selection, award and administration of contracts, intentionally avoids acquisition of unnecessary or duplicative items and uses surplus items instead of purchasing items when feasible. It uses full and open competition and obtains prior written authorization from the appropriate CDPH Program Contract Manager as required. The Organization maintains a narrative description of the procurement system, guidelines, rules, or regulations that is used to make purchases, which is audited by WIC for compliance. The Organization’s contract with WIC even goes above and beyond the requirements of 2 CFR § 180.220 and §§ 200.318 through 200.327. For example, the contract requires the reporting, tagging and annual inventorying of all equipment and/or property that is furnished by CDPH or purchased/reimbursed with funds provided through the contract. Upon receipt of equipment and/or property, the Organization reports the receipt to the CDPH Program Contract Manager and receives property tags for the items, then tags and logs them. For all purchases, the Organization maintains copies of all paid vendor invoices, documents, bids and other information used in vendor selection, for inspection or audit. Justifications supporting the absence of bidding (i.e., sole source purchases) are also maintained on file by the Organization for inspection or audit. Finally, although training is not required under 2 CFR § 180.220 or §§ 200.318 through 200.327, the Organization trains all pertinent staff related to procurement, the Organization’s procurement policies and procedures, the WIC contract requirements, WIC’s regulations and Uniform Guidance. This is done to ensure compliance with the principles and requirements of each of these requirements. No Prior Audit Findings Most recently, in January 2024 the Organization’s procurement policies and procedures were comprehensively audited by the federal HRSA through an Operational Site Visit to verify the status of UHC’s compliance with the relevant statutory and regulatory requirements. The HRSA audit specifically reviewed the Organization’s procurement policies and procedures, as well as reviewed documentation related to procurements during the prior three years by evaluating ten elements. This assessment evaluated written procurement procedures to ensure compliance with federal procurement standards, including a process for ensuring that all procurement costs are allowable, consistent with federal cost principles found in 45 CFR 75 Subpart E: Cost Principles. Additionally, the audit reviewed records for procurement actions paid for in whole or in part under the federal award that include the rationale for method of procurement, selection of contract type, contractor selection or rejection, and the basis for the contract price. This review involved documentation related to noncompetitive procurements. The audit also included evaluating the Organization’s retention of final contracts and related procurement records, consistent with federal document maintenance requirements, for procurement actions paid for in whole or in part under the federal award. Another element of the audit was to ensure that all activities and reporting requirements are being carried out in accordance with the provisions and timelines of the related contract and UHC’s own policies and procedures. Following completion of the expansive audit, HRSA’s evaluation resulted in no findings related to procurement. UHC successfully met all six elements of the Operational Site Visit audit conducted by HRSA. Conclusion In conclusion, the Organization vehemently disputes the findings presented, underscoring its unwavering commitment to stringent compliance with federal and state procurement regulations, as well as the stipulations outlined in its contract with WIC. The Organization's robust compliance mechanisms, encompassing meticulous checks and balances, written standards of conduct, and adherence to full and open competition, exemplify its dedication to procurement integrity. Furthermore, the Organization's proactive measures, such as reporting, tagging, and inventorying equipment, surpass the mandated requirements, ensuring transparency and accountability. Notably, recent audits by both WIC and the Health Resources and Services Administration (HRSA) have yielded no findings pertaining to procurement, validating the efficacy of the Organization's practices. The Organization's unwavering commitment to compliance, coupled with its comprehensive procurement protocols and ongoing training efforts, unequivocally refute any assertions of impropriety. UHC will reevaluate the audit findings and may or may not adopt a Corrective Action Plan.

Finding Number: 2023-001 Repeat Finding: No Program Name / Title: Special Supplemental Nutrition Program for Women, Infants, and Children and Grants for Capital Development in Health Centers Federal Assistance Listing Number: 10.557 and 93.526 Federal Agencies: United States Department of Agriculture and and U.S. Department of Health and Human Services Federal Award Number: 22-10305 and C8ECS44546 Type of Finding: Significant Deficiency Compliance Requirement: Procurement and Suspension and Debarment Questioned Cost: No Criteria: Under 2 CFR sections 180.220 and 200.318 through 200.326, 45 CFR 75.327 through 75.334 and 45 CFR 75 Part E, the Organization is required to implement certain written Procurement and Suspension and Debarment policies and procedures that adhere to the minimum Federal Procurement standards. The Organization must use its own documented procurement procedures, which reflect applicable State and local laws and regulations, provided that the procurements conform to applicable Federal statutes and the procurement requirements outlined in Uniform Guidance and maintain sufficient records to detail the history of procurements. Condition: Although the Organization maintained a written procurement policy, the Organization did not have adequate procurement policies in place to meet the minimum federal requirements for procurement standards and did not always follow its own procurement policies. Cause: The Organization's policy did not meet all of the minimum federal requirements under Uniform Guidance. In addition, the Organization could not provide support to demonstrate that it performed all of the necessary procurement steps and did not always retain documentation demonstrating compliance with Uniform Guidance for purchases made with federal funds. Effect: The Organization was not in compliance with federal regulations or its own policies. Recommendation: The Organization should update their procurement policy to meet the minimum federal requirements and ensure procurement policies are being followed for all procurement levels with written documentation. View of Responsible Officials: Introduction United Health Centers of the San Joaquin Valley (the "Organization") vigorously protests this finding. The Organization rigorously complies with not only federal and state procurement regulations, but also WIC regulations and the requirements found in the contract between the Organization and WIC. Additionally, numerous audits have been conducted by various entities (including audits by both WIC and the Health Resources and Services Administration (HRSA)) without any findings related to the Organization’s procurement. Finally, the Organization trains all individuals participating in the procurement process and provides guidance on procurement rules. Compliance with Regulations and WIC Program Contract The Organization’s compliance efforts are top tier. It uses many checks and balances to ensure compliance across the board with not only federal and state procurement regulations, but also WIC regulations and the requirements found in the contract between the Organization and WIC. It maintains written standards of conduct covering conflicts of interest and governing the actions of its employees engaged in the selection, award and administration of contracts, intentionally avoids acquisition of unnecessary or duplicative items and uses surplus items instead of purchasing items when feasible. It uses full and open competition and obtains prior written authorization from the appropriate CDPH Program Contract Manager as required. The Organization maintains a narrative description of the procurement system, guidelines, rules, or regulations that is used to make purchases, which is audited by WIC for compliance. The Organization’s contract with WIC even goes above and beyond the requirements of 2 CFR § 180.220 and §§ 200.318 through 200.327. For example, the contract requires the reporting, tagging and annual inventorying of all equipment and/or property that is furnished by CDPH or purchased/reimbursed with funds provided through the contract. Upon receipt of equipment and/or property, the Organization reports the receipt to the CDPH Program Contract Manager and receives property tags for the items, then tags and logs them. For all purchases, the Organization maintains copies of all paid vendor invoices, documents, bids and other information used in vendor selection, for inspection or audit. Justifications supporting the absence of bidding (i.e., sole source purchases) are also maintained on file by the Organization for inspection or audit. Finally, although training is not required under 2 CFR § 180.220 or §§ 200.318 through 200.327, the Organization trains all pertinent staff related to procurement, the Organization’s procurement policies and procedures, the WIC contract requirements, WIC’s regulations and Uniform Guidance. This is done to ensure compliance with the principles and requirements of each of these requirements. No Prior Audit Findings Most recently, in January 2024 the Organization’s procurement policies and procedures were comprehensively audited by the federal HRSA through an Operational Site Visit to verify the status of UHC’s compliance with the relevant statutory and regulatory requirements. The HRSA audit specifically reviewed the Organization’s procurement policies and procedures, as well as reviewed documentation related to procurements during the prior three years by evaluating ten elements. This assessment evaluated written procurement procedures to ensure compliance with federal procurement standards, including a process for ensuring that all procurement costs are allowable, consistent with federal cost principles found in 45 CFR 75 Subpart E: Cost Principles. Additionally, the audit reviewed records for procurement actions paid for in whole or in part under the federal award that include the rationale for method of procurement, selection of contract type, contractor selection or rejection, and the basis for the contract price. This review involved documentation related to noncompetitive procurements. The audit also included evaluating the Organization’s retention of final contracts and related procurement records, consistent with federal document maintenance requirements, for procurement actions paid for in whole or in part under the federal award. Another element of the audit was to ensure that all activities and reporting requirements are being carried out in accordance with the provisions and timelines of the related contract and UHC’s own policies and procedures. Following completion of the expansive audit, HRSA’s evaluation resulted in no findings related to procurement. UHC successfully met all six elements of the Operational Site Visit audit conducted by HRSA. Conclusion In conclusion, the Organization vehemently disputes the findings presented, underscoring its unwavering commitment to stringent compliance with federal and state procurement regulations, as well as the stipulations outlined in its contract with WIC. The Organization's robust compliance mechanisms, encompassing meticulous checks and balances, written standards of conduct, and adherence to full and open competition, exemplify its dedication to procurement integrity. Furthermore, the Organization's proactive measures, such as reporting, tagging, and inventorying equipment, surpass the mandated requirements, ensuring transparency and accountability. Notably, recent audits by both WIC and the Health Resources and Services Administration (HRSA) have yielded no findings pertaining to procurement, validating the efficacy of the Organization's practices. The Organization's unwavering commitment to compliance, coupled with its comprehensive procurement protocols and ongoing training efforts, unequivocally refute any assertions of impropriety. UHC will reevaluate the audit findings and may or may not adopt a Corrective Action Plan.

2023-002 - Internal Control over Compliance and Compliance with Procurement, Suspension and Debarment Procurement, Suspension and Debarment Information on the Major Federal Program(s) U.S. Department of Health and Human Services Center for Disease Control and Prevention Assistance Listing Number: 93.261 Assistance Listing Name: Scaling the National Diabetes Prevention Program Preventing Type 2 Diabetes Among People at High Risk Grant Award Number(s): 6 NU58DP006364-05-05 Award Period: September 30, 2021 to September 30, 2023 Criteria or Specific Requirement – In accordance with 2 CFR §200.318(a), General Procurement Standards, the non-federal entity must use its own documented procurement procedures which reflect applicable State, local, and tribal laws and regulations, provided that the procurements conform to applicable federal law and the standards identified in General Procurement Standards. Additionally, §200.318(i) states that the non-federal entity must maintain records sufficient to detail the history of the procurement. These records are required to include but are not necessarily limited to the following: rationale for the method of procurement, selection of contract type, contractor selection or rejection, and the basis for the contract price. In accordance with §200.213 and §180.300, Suspension and Debarment, non-federal entities cannot enter into awards, subawards, or contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in federal assistance programs or activities. Non-federal entities must either check for exclusions in the System for Award Management (SAM); collect a certification from the entity, or add a clause or condition to the covered transaction with the entity prior to entering into a covered transaction with a non-federal entity. In addition, in accordance with §180.415(b), non-federal entities cannot renew or extend covered transactions (other than no-cost time extension) with any excluded person, or under which an excluded person is a principal, unless the non-federal entity obtains an exception under §180.135. Condition - During our testing of the procurement, suspension and debarment compliance requirements, we identified one procurement sample (out of a total of 1 procurement) that did not have documentation in the vendor/ procurement file to document that the debarment attestation from the vendor was provided and obtained prior to entering into contract with the vendor. The attestation statements directly from the vendor concluded that the vendor was not suspended or debarred. This is considered a finding as ADA did not follow its policy to maintain documentation in the vendor files (with a time stamp). Cause - ADA did not adhere to its documented policies and procedures for ensuring proper suspension and debarment validations were performed before entering into a contract. Effect or Potential Effect - Failure to timely verify that a vendor is not suspended or debarred could result in transactions involving unreasonable costs or result in unintentionally entering a contract with an entity that is barred from performing work for the Federal government. Questioned Costs - None. Context - This is a condition based on testing of ADA’s compliance with specified requirements. The sample was selected using a non-statistical method. Repeat Finding - This is not a repeat finding. Recommendation - We recommend management ensure that suspension and debarment regulations are followed. We also recommend management ensure all required procurement documentation is maintained in conjunction with its documented policy. Views of Responsible Officials - The finding related to a vendor that was in place and performing work in advance of inclusion as a covered transaction. Going forward, ADA will ensure that suspension and debarment regulations are followed. ADA will also ensure that all required procurement documentation is maintained in conjunction with its documented policy.

FINDING 2023-001 – Procurement and Suspension and Debarment-Significant Deficiency over Internal Controls over Compliance Federal Agency: U.S. Department of Housing and Urban Development Program: Emergency Solutions Grant Assistance Listing Number: 14.231 Compliance Requirement: Procurement and Suspension and Debarment (I) Pass-Through Agency: Los Angeles Homeless Services Authority Award Number: GT-BH-PHKCO-016 Criteria: Title 2 U.S. Code of Federal Regulations § 200.303 states that federal award recipients must establish and maintain effective internal control over the federal award that provides reasonable assurance that it is managing the federal award in compliance with federal statutes, regulations, and the terms and conditions of the federal award. Federal award recipients are prohibited from contracting with or making subawards under covered transactions to parties that are suspended or debarred. “Covered transactions” include contracts for goods and services awarded under a non-procurement transaction (e.g., grant or cooperative agreement) that are expected to equal or exceed $25,000 or meet certain other criteria as specified in Title 2 U.S. Code of Federal Regulations § 180.220. Per 2 CFR §180.300 when a federal award recipient enters into a covered transaction with another person at the next lower tier, it must verify that the person with whom you intend to do business is not excluded or disqualified. You do this by: (a) Checking the EPLS; or (b) Collecting a certification from that person if allowed by this rule; or (c) Adding a clause or condition to the covered transaction with that person. Per 2 CFR §200.318 (c )(1) Ethics and conflict of interest, the entity must maintain written standards of conduct covering conflicts of interest and governing the actions of its employees engaged in the selection, award, and administration of contracts. The policy should ensure that no one with a conflict of interest participates in the selection, award, or administration of a federal contract. Condition/Context: We selected two out of a universe of three vendors that had covered transactions over the covered transactions threshold. National Health Foundation was unable to provide supporting evidence documenting that it had verified either entity was not excluded or disqualified before National Health Foundation went under contract with those vendors. However, a subsequent review did show both vendors were not on the excluded or disqualified listing. The written policies at National Health Foundation include the requirement to attach evidence of the debarment verification when submitting an invoice for payment. The procurement policy effective during the audit period did not include the required written ethics and conflicts of interest standard to avoid actual or apparent conflict of interest involving expenditures of federal grant awards. National Health Foundation has a conflict-of-interest policy for employees to adhere to; however, the specific consideration for anyone who participates in the selection, awarding, or administration of a contract with federal funding was not included. Effect: Vendors to whom payments equal to or in excess of $25,000 may not be verified to be not suspended, debarred, or otherwise excluded. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in accidental engagement with excluded vendors. Cause: The system of internal controls as established by management of National Health Foundation was not properly implemented to ensure that the policies and procedures in place related to procurement and suspension and debarment were appropriately documented. Repeat finding: No. Recommendation: We recommended that management of National Health Foundation establish a proper system of internal controls, including strengthening its policies and procedures to ensure its compliance with requirements related to procurement and suspension and debarment. The use of standard forms or templates could help document verification that parties are not suspended or debarred before National Health Foundation goes under contract with such an entity. Additionally, we recommend the conflict-of-interest policy be amended to properly include all required verbiage for federal procurement contracts. Views of responsible officials: Management agrees with the recommendation.

Finding # 2023-002 Procurement, Suspension and Debarment (Significant Deficiency) Information on the Federal Programs: Assistance Listing #98.001 USAID Foreign Assistance for Programs Overseas Criteria or Specific Requirement: § 200.318 (i) General procurement standards, states that the non-federal entity must maintain records sufficient to detail the history of procurement. These records will include, but are not necessarily limited to the following: rationale for the method of procurement, selection of contract type, contractor selection or rejection, and the basis for the contract price. Furthermore: §200.320 (f) Methods of procurement to be followed, states that procurement by noncompetitive proposals is procurement through solicitation of a proposal from only one source and may be used only when certain requirements have been met. Additionally, §200.213 Reporting a determination that a non-Federal entity is not qualified for a Federal award states that non-federal entities are subject to the non-procurement debarment and suspension regulations implementing Executive Orders 12549 and 12689, 2 CFR part 180. These regulations restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in federal assistance programs or activities. The nonfederal entity must verify that the person with whom you intend to do business is not excluded or disqualified, by (a) checking SAM Exclusions; (b) collecting a certification from that person; (c) adding a clause or condition to the covered transaction with that person. Condition: During our audit, we noted contractual relationships under the federal awards for which evidence of procurement procedures and documentation of SAM Exclusion checks were unavailable for our inspection. It is our understanding that some contracts were procured under noncompetitive (sole source) justification. However, in certain instances we were unable to review documentation (prepared at the time the contracts were executed) detailing the history and rationale of the procurements. Cause: The Institute's processes in place during 2023 did not provide for the formalization and retention of procurement records and vendor screenings consistent with the expectations outlined in 2 CFR 200 and related guidance provided by USAID. Effect or Potential Effect: Purchases of goods and services could be made above the prevailing market rates if the prescribed procurement procedures are not adhered to. Additionally, the Institute may have inadvertently selected noncompetitive proposals method when the circumstances did not meet the requirements noted in § 200.320 (f) Methods of procurement to be followed, and thereby failing to administer full and open competition as required by the regulations. Finally, the Institute could inadvertently enter into a contractual relationship with an entity that is suspended, debarred or otherwise included on the US Federal sanction list. Questioned Costs: N/A Context: Our audit sample consisted of transactions incurred by both JGI USA and JGI Tanzania. The finding relates to a transaction incurred by both entities. Both entities have defined procurement policies. Identification as a Repeat Finding: N/A Recommendation: We recommend that the Institute ensure its policy is distributed and communicated in a formal manner to its employees, and that management properly enforce compliance with its policy. All procurement actions should be clearly documented in writing and maintained in the vendor or contractor files. Such documentation should include, but is not limited to; (1) Bids (2) Bid Analysis with documentation of vendor selection and rationale (3) Minutes of meetings of procurement committee (4) for sole source procurements, documentation of which of the allowable sole source criteria the procurement was done under. Additionally, we recommend that the procurement policies are enhanced to include compliance with §200.320 (f) Methods of procurement to be followed and, §200.213 Reporting a determination that a non-Federal entity is not qualified for a Federal award.

Finding # 2023-002 Procurement, Suspension and Debarment (Significant Deficiency) Information on the Federal Programs: Assistance Listing #98.001 USAID Foreign Assistance for Programs Overseas Criteria or Specific Requirement: § 200.318 (i) General procurement standards, states that the non-federal entity must maintain records sufficient to detail the history of procurement. These records will include, but are not necessarily limited to the following: rationale for the method of procurement, selection of contract type, contractor selection or rejection, and the basis for the contract price. Furthermore: §200.320 (f) Methods of procurement to be followed, states that procurement by noncompetitive proposals is procurement through solicitation of a proposal from only one source and may be used only when certain requirements have been met. Additionally, §200.213 Reporting a determination that a non-Federal entity is not qualified for a Federal award states that non-federal entities are subject to the non-procurement debarment and suspension regulations implementing Executive Orders 12549 and 12689, 2 CFR part 180. These regulations restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in federal assistance programs or activities. The nonfederal entity must verify that the person with whom you intend to do business is not excluded or disqualified, by (a) checking SAM Exclusions; (b) collecting a certification from that person; (c) adding a clause or condition to the covered transaction with that person. Condition: During our audit, we noted contractual relationships under the federal awards for which evidence of procurement procedures and documentation of SAM Exclusion checks were unavailable for our inspection. It is our understanding that some contracts were procured under noncompetitive (sole source) justification. However, in certain instances we were unable to review documentation (prepared at the time the contracts were executed) detailing the history and rationale of the procurements. Cause: The Institute's processes in place during 2023 did not provide for the formalization and retention of procurement records and vendor screenings consistent with the expectations outlined in 2 CFR 200 and related guidance provided by USAID. Effect or Potential Effect: Purchases of goods and services could be made above the prevailing market rates if the prescribed procurement procedures are not adhered to. Additionally, the Institute may have inadvertently selected noncompetitive proposals method when the circumstances did not meet the requirements noted in § 200.320 (f) Methods of procurement to be followed, and thereby failing to administer full and open competition as required by the regulations. Finally, the Institute could inadvertently enter into a contractual relationship with an entity that is suspended, debarred or otherwise included on the US Federal sanction list. Questioned Costs: N/A Context: Our audit sample consisted of transactions incurred by both JGI USA and JGI Tanzania. The finding relates to a transaction incurred by both entities. Both entities have defined procurement policies. Identification as a Repeat Finding: N/A Recommendation: We recommend that the Institute ensure its policy is distributed and communicated in a formal manner to its employees, and that management properly enforce compliance with its policy. All procurement actions should be clearly documented in writing and maintained in the vendor or contractor files. Such documentation should include, but is not limited to; (1) Bids (2) Bid Analysis with documentation of vendor selection and rationale (3) Minutes of meetings of procurement committee (4) for sole source procurements, documentation of which of the allowable sole source criteria the procurement was done under. Additionally, we recommend that the procurement policies are enhanced to include compliance with §200.320 (f) Methods of procurement to be followed and, §200.213 Reporting a determination that a non-Federal entity is not qualified for a Federal award.

Federal Agency: U.S. Department of Treasury Federal Program Name: COVID-19 State and Local Fiscal Recovery Funds Assistance Listing Number: 21.027 Federal Award Identification Number and Year: SLFRP3395, 2023 Award Period: 1/1/2023 – 12/31/2026 Type of Finding: Material Weakness in Internal Control over Compliance and Other Matters Criteria or specific requirement: Non-federal entities other than states must follow the procurement standards set out at CFR sections 200.318 through 200.326. This includes utilizing one of the five allowable procurement methods, including small purchase guidelines for items over the micro-purchase threshold and sealed bids, competitive proposals, or noncompetitive proposals when items exceed the simplified acquisition threshold. In addition, the Uniform Guidance requires that the entity maintain records sufficient to detail the history of the procurement. 2 CFR 200.303 requires that the entity have sufficient controls over compliance related to federal awards/ Condition: In our testing for the COVID-19 State and Local Fiscal Recovery Funds procurements, it was noted that not all procurements followed the appropriate method and history of the transaction was not sufficiently documented. Questioned Costs: ALN 21.027 - $33,266.48 Context: Out of five procurement which were tested, we noted two for which the City did not retain documentation detailing the history of the procurement, including the rationale for choosing the particular vendor. Cause: These procurements occurred prior to the City implementing its new Uniform Guidance for Federal Awards policy. Effect: The City was not in compliance with Uniform Guidance requirements for the proper documentation of all procurement transactions. Repeat Finding: Yes, 2022-003. Recommendation: We recommend the City reviews its procedures and controls over procurement to ensure that all procurements are documented such that a third party can clearly see and understand the detailed history of the procurement. Views of responsible officials and planned corrective actions: There is no disagreement with the audit finding. The City will work with their departments utilizing federal dollars to ensure the proper procurement method is utilized for all procurements and that documentation of that process is retained so it’s clear what considerations were made in the procurement decision.

Finding 2023-002: Procurement Criteria: According to 2 CFR §200.303, the non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in Standards for Internal Control in the Federal Government issued by the Comptroller General of the United States or the internal Control Integrated Framework, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Additionally, according to 2 CFR §200.318 Procurement standards, the non-Federal entity must maintain records sufficient to detail the history of procurement. These records will include, but are not necessarily limited to, the following: Rationale for the method of procurement, selection of contract type, contractor selection or rejection, and the basis for the contract price. Title 2, Subtitle A Chapter II Part 200 Subpart D 200.319 Procurement Standards. All procurement transactions for the acquisition of property or services required under a Federal award must be conducted in a manner providing full and open competition consistent with the standards of this section and §200.320. The non-Federal entity must have written procedures for procurement transactions. These procedures must ensure that all solicitations: (1) Incorporate a clear and accurate description of the technical requirements for the material, product, or service to be procured. Such description must not, in competitive procurements, contain features which unduly restrict competition. The description may include a statement of the qualitative nature of the material, product or service to be procured and, when necessary, must set forth those minimum essential characteristics and standards to which it must conform if it is to satisfy its intended use. Noncompetitive procurements can only be awarded in accordance with §200.320(c). According to 2 CFR §200.320 Procurement Standards, there are specific circumstances in which noncompetitive procurement can be used. Noncompetitive procurement can only be awarded if one or more of the following circumstances apply: 1. The acquisition of property or services, the aggregate dollar amount of which does not exceed the micro-purchase threshold (see paragraph (a)(1) of this section); 2. The item is available only from a single source; 3. The public exigency or emergency for the requirement will not permit a delay resulting from publicizing a competitive solicitation; 4. The Federal awarding agency or pass-through entity expressly authorizes a noncompetitive procurement in response to a written request from the non-Federal entity; or 5. After solicitation of a number of sources, competition is determined inadequate. Condition: During our testing over procurement, we determined that ASCB did not clearly document the rationale for the method of procurement, selection of contract type, contractor selection or rejection, and the basis for the contract price. Cause: Management did not have effective internal controls in place to ensure that procurement requirements were adequately documented and retained. Effect or Potential Effect: Procurement records were insufficient to meet the requirements noted in the Criteria section above, as well as ASCB's internal procurement policy. Questioned Costs: None. Context: We noted one item selected for testing did not document the rationale for the method of procurement, selection of contract type, contractor selection or rejection, and the basis for the contract price. Identification as a Repeat Finding: Not applicable. Recommendation: We recommend ASCB retain sufficient procurement documentation to meet the requirements noted in the Criteria section above.

Finding 2023-002: Procurement Criteria: According to 2 CFR §200.303, the non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in Standards for Internal Control in the Federal Government issued by the Comptroller General of the United States or the internal Control Integrated Framework, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Additionally, according to 2 CFR §200.318 Procurement standards, the non-Federal entity must maintain records sufficient to detail the history of procurement. These records will include, but are not necessarily limited to, the following: Rationale for the method of procurement, selection of contract type, contractor selection or rejection, and the basis for the contract price. Title 2, Subtitle A Chapter II Part 200 Subpart D 200.319 Procurement Standards. All procurement transactions for the acquisition of property or services required under a Federal award must be conducted in a manner providing full and open competition consistent with the standards of this section and §200.320. The non-Federal entity must have written procedures for procurement transactions. These procedures must ensure that all solicitations: (1) Incorporate a clear and accurate description of the technical requirements for the material, product, or service to be procured. Such description must not, in competitive procurements, contain features which unduly restrict competition. The description may include a statement of the qualitative nature of the material, product or service to be procured and, when necessary, must set forth those minimum essential characteristics and standards to which it must conform if it is to satisfy its intended use. Noncompetitive procurements can only be awarded in accordance with §200.320(c). According to 2 CFR §200.320 Procurement Standards, there are specific circumstances in which noncompetitive procurement can be used. Noncompetitive procurement can only be awarded if one or more of the following circumstances apply: 1. The acquisition of property or services, the aggregate dollar amount of which does not exceed the micro-purchase threshold (see paragraph (a)(1) of this section); 2. The item is available only from a single source; 3. The public exigency or emergency for the requirement will not permit a delay resulting from publicizing a competitive solicitation; 4. The Federal awarding agency or pass-through entity expressly authorizes a noncompetitive procurement in response to a written request from the non-Federal entity; or 5. After solicitation of a number of sources, competition is determined inadequate. Condition: During our testing over procurement, we determined that ASCB did not clearly document the rationale for the method of procurement, selection of contract type, contractor selection or rejection, and the basis for the contract price. Cause: Management did not have effective internal controls in place to ensure that procurement requirements were adequately documented and retained. Effect or Potential Effect: Procurement records were insufficient to meet the requirements noted in the Criteria section above, as well as ASCB's internal procurement policy. Questioned Costs: None. Context: We noted one item selected for testing did not document the rationale for the method of procurement, selection of contract type, contractor selection or rejection, and the basis for the contract price. Identification as a Repeat Finding: Not applicable. Recommendation: We recommend ASCB retain sufficient procurement documentation to meet the requirements noted in the Criteria section above.

U.S. Department of Agriculture Passed through Illinois Department of Education, Minnesota Department of Education, and North Dakota Department of Education Child Nutrition Cluster: School Breakfast Program, 10.553 National School Lunch Program, 10.555 Summer Food Service Program for Children, 10.559 Procurement, Suspension, and Debarment Significant Deficiency in Internal Control over Compliance Grant Award Number: Affects all grant awards under assistance listing 10.553, 10.555, and 10.559 on the Consolidated Schedule of Expenditures of Federal Awards. Criteria: Uniform Guidance and 2 CFR sections 200.318 through 200.326 set forth the procurement standards non-federal entities other than states must follow when operating federal programs and the procurement procedures required depending on the amount of the transaction. Condition: In our testing of procurement, suspension, and debarment, it was identified that the search for suspension and debarment was performed subsequent to entering into covered transactions with three vendors. Cause: The Organization has designated internal controls over this area; however, the controls were not performed timely. Effect: Failure to document the search for suspension and debarment before entering into the covered transaction could result in noncompliance. Questioned Costs: None reported. Context/Sampling: 7 vendors out of 31 vendors total were selected for testing which made up $240,437 of $572,161 federal awards. Repeat Finding from Prior Year: No Recommendation: We recommend that management review vendors for suspension and debarment prior to entering into contracts to ensure vendors are not suspended or debarred. Views of Responsible Officials: Management agrees with this finding.

U.S. Department of Agriculture Passed through Illinois Department of Education, Minnesota Department of Education, and North Dakota Department of Education Child Nutrition Cluster: School Breakfast Program, 10.553 National School Lunch Program, 10.555 Summer Food Service Program for Children, 10.559 Procurement, Suspension, and Debarment Significant Deficiency in Internal Control over Compliance Grant Award Number: Affects all grant awards under assistance listing 10.553, 10.555, and 10.559 on the Consolidated Schedule of Expenditures of Federal Awards. Criteria: Uniform Guidance and 2 CFR sections 200.318 through 200.326 set forth the procurement standards non-federal entities other than states must follow when operating federal programs and the procurement procedures required depending on the amount of the transaction. Condition: In our testing of procurement, suspension, and debarment, it was identified that the search for suspension and debarment was performed subsequent to entering into covered transactions with three vendors. Cause: The Organization has designated internal controls over this area; however, the controls were not performed timely. Effect: Failure to document the search for suspension and debarment before entering into the covered transaction could result in noncompliance. Questioned Costs: None reported. Context/Sampling: 7 vendors out of 31 vendors total were selected for testing which made up $240,437 of $572,161 federal awards. Repeat Finding from Prior Year: No Recommendation: We recommend that management review vendors for suspension and debarment prior to entering into contracts to ensure vendors are not suspended or debarred. Views of Responsible Officials: Management agrees with this finding.

U.S. Department of Agriculture Passed through Illinois Department of Education, Minnesota Department of Education, and North Dakota Department of Education Child Nutrition Cluster: School Breakfast Program, 10.553 National School Lunch Program, 10.555 Summer Food Service Program for Children, 10.559 Procurement, Suspension, and Debarment Significant Deficiency in Internal Control over Compliance Grant Award Number: Affects all grant awards under assistance listing 10.553, 10.555, and 10.559 on the Consolidated Schedule of Expenditures of Federal Awards. Criteria: Uniform Guidance and 2 CFR sections 200.318 through 200.326 set forth the procurement standards non-federal entities other than states must follow when operating federal programs and the procurement procedures required depending on the amount of the transaction. Condition: In our testing of procurement, suspension, and debarment, it was identified that the search for suspension and debarment was performed subsequent to entering into covered transactions with three vendors. Cause: The Organization has designated internal controls over this area; however, the controls were not performed timely. Effect: Failure to document the search for suspension and debarment before entering into the covered transaction could result in noncompliance. Questioned Costs: None reported. Context/Sampling: 7 vendors out of 31 vendors total were selected for testing which made up $240,437 of $572,161 federal awards. Repeat Finding from Prior Year: No Recommendation: We recommend that management review vendors for suspension and debarment prior to entering into contracts to ensure vendors are not suspended or debarred. Views of Responsible Officials: Management agrees with this finding.

U.S. Department of Agriculture Passed through Illinois Department of Education, Minnesota Department of Education, and North Dakota Department of Education Child Nutrition Cluster: School Breakfast Program, 10.553 National School Lunch Program, 10.555 Summer Food Service Program for Children, 10.559 Procurement, Suspension, and Debarment Significant Deficiency in Internal Control over Compliance Grant Award Number: Affects all grant awards under assistance listing 10.553, 10.555, and 10.559 on the Consolidated Schedule of Expenditures of Federal Awards. Criteria: Uniform Guidance and 2 CFR sections 200.318 through 200.326 set forth the procurement standards non-federal entities other than states must follow when operating federal programs and the procurement procedures required depending on the amount of the transaction. Condition: In our testing of procurement, suspension, and debarment, it was identified that the search for suspension and debarment was performed subsequent to entering into covered transactions with three vendors. Cause: The Organization has designated internal controls over this area; however, the controls were not performed timely. Effect: Failure to document the search for suspension and debarment before entering into the covered transaction could result in noncompliance. Questioned Costs: None reported. Context/Sampling: 7 vendors out of 31 vendors total were selected for testing which made up $240,437 of $572,161 federal awards. Repeat Finding from Prior Year: No Recommendation: We recommend that management review vendors for suspension and debarment prior to entering into contracts to ensure vendors are not suspended or debarred. Views of Responsible Officials: Management agrees with this finding.

U.S. Department of Agriculture Passed through Illinois Department of Education, Minnesota Department of Education, and North Dakota Department of Education Child Nutrition Cluster: School Breakfast Program, 10.553 National School Lunch Program, 10.555 Summer Food Service Program for Children, 10.559 Procurement, Suspension, and Debarment Significant Deficiency in Internal Control over Compliance Grant Award Number: Affects all grant awards under assistance listing 10.553, 10.555, and 10.559 on the Consolidated Schedule of Expenditures of Federal Awards. Criteria: Uniform Guidance and 2 CFR sections 200.318 through 200.326 set forth the procurement standards non-federal entities other than states must follow when operating federal programs and the procurement procedures required depending on the amount of the transaction. Condition: In our testing of procurement, suspension, and debarment, it was identified that the search for suspension and debarment was performed subsequent to entering into covered transactions with three vendors. Cause: The Organization has designated internal controls over this area; however, the controls were not performed timely. Effect: Failure to document the search for suspension and debarment before entering into the covered transaction could result in noncompliance. Questioned Costs: None reported. Context/Sampling: 7 vendors out of 31 vendors total were selected for testing which made up $240,437 of $572,161 federal awards. Repeat Finding from Prior Year: No Recommendation: We recommend that management review vendors for suspension and debarment prior to entering into contracts to ensure vendors are not suspended or debarred. Views of Responsible Officials: Management agrees with this finding.

U.S. Department of Agriculture Passed through Illinois Department of Education, Minnesota Department of Education, and North Dakota Department of Education Child Nutrition Cluster: School Breakfast Program, 10.553 National School Lunch Program, 10.555 Summer Food Service Program for Children, 10.559 Procurement, Suspension, and Debarment Significant Deficiency in Internal Control over Compliance Grant Award Number: Affects all grant awards under assistance listing 10.553, 10.555, and 10.559 on the Consolidated Schedule of Expenditures of Federal Awards. Criteria: Uniform Guidance and 2 CFR sections 200.318 through 200.326 set forth the procurement standards non-federal entities other than states must follow when operating federal programs and the procurement procedures required depending on the amount of the transaction. Condition: In our testing of procurement, suspension, and debarment, it was identified that the search for suspension and debarment was performed subsequent to entering into covered transactions with three vendors. Cause: The Organization has designated internal controls over this area; however, the controls were not performed timely. Effect: Failure to document the search for suspension and debarment before entering into the covered transaction could result in noncompliance. Questioned Costs: None reported. Context/Sampling: 7 vendors out of 31 vendors total were selected for testing which made up $240,437 of $572,161 federal awards. Repeat Finding from Prior Year: No Recommendation: We recommend that management review vendors for suspension and debarment prior to entering into contracts to ensure vendors are not suspended or debarred. Views of Responsible Officials: Management agrees with this finding.

U.S. Department of Agriculture Passed through Illinois Department of Education, Minnesota Department of Education, and North Dakota Department of Education Child Nutrition Cluster: School Breakfast Program, 10.553 National School Lunch Program, 10.555 Summer Food Service Program for Children, 10.559 Procurement, Suspension, and Debarment Significant Deficiency in Internal Control over Compliance Grant Award Number: Affects all grant awards under assistance listing 10.553, 10.555, and 10.559 on the Consolidated Schedule of Expenditures of Federal Awards. Criteria: Uniform Guidance and 2 CFR sections 200.318 through 200.326 set forth the procurement standards non-federal entities other than states must follow when operating federal programs and the procurement procedures required depending on the amount of the transaction. Condition: In our testing of procurement, suspension, and debarment, it was identified that the search for suspension and debarment was performed subsequent to entering into covered transactions with three vendors. Cause: The Organization has designated internal controls over this area; however, the controls were not performed timely. Effect: Failure to document the search for suspension and debarment before entering into the covered transaction could result in noncompliance. Questioned Costs: None reported. Context/Sampling: 7 vendors out of 31 vendors total were selected for testing which made up $240,437 of $572,161 federal awards. Repeat Finding from Prior Year: No Recommendation: We recommend that management review vendors for suspension and debarment prior to entering into contracts to ensure vendors are not suspended or debarred. Views of Responsible Officials: Management agrees with this finding.

U.S. Department of Agriculture Passed through Illinois Department of Education, Minnesota Department of Education, and North Dakota Department of Education Child Nutrition Cluster: School Breakfast Program, 10.553 National School Lunch Program, 10.555 Summer Food Service Program for Children, 10.559 Procurement, Suspension, and Debarment Significant Deficiency in Internal Control over Compliance Grant Award Number: Affects all grant awards under assistance listing 10.553, 10.555, and 10.559 on the Consolidated Schedule of Expenditures of Federal Awards. Criteria: Uniform Guidance and 2 CFR sections 200.318 through 200.326 set forth the procurement standards non-federal entities other than states must follow when operating federal programs and the procurement procedures required depending on the amount of the transaction. Condition: In our testing of procurement, suspension, and debarment, it was identified that the search for suspension and debarment was performed subsequent to entering into covered transactions with three vendors. Cause: The Organization has designated internal controls over this area; however, the controls were not performed timely. Effect: Failure to document the search for suspension and debarment before entering into the covered transaction could result in noncompliance. Questioned Costs: None reported. Context/Sampling: 7 vendors out of 31 vendors total were selected for testing which made up $240,437 of $572,161 federal awards. Repeat Finding from Prior Year: No Recommendation: We recommend that management review vendors for suspension and debarment prior to entering into contracts to ensure vendors are not suspended or debarred. Views of Responsible Officials: Management agrees with this finding.

U.S. Department of Agriculture Passed through Illinois Department of Education, Minnesota Department of Education, and North Dakota Department of Education Child Nutrition Cluster: School Breakfast Program, 10.553 National School Lunch Program, 10.555 Summer Food Service Program for Children, 10.559 Procurement, Suspension, and Debarment Significant Deficiency in Internal Control over Compliance Grant Award Number: Affects all grant awards under assistance listing 10.553, 10.555, and 10.559 on the Consolidated Schedule of Expenditures of Federal Awards. Criteria: Uniform Guidance and 2 CFR sections 200.318 through 200.326 set forth the procurement standards non-federal entities other than states must follow when operating federal programs and the procurement procedures required depending on the amount of the transaction. Condition: In our testing of procurement, suspension, and debarment, it was identified that the search for suspension and debarment was performed subsequent to entering into covered transactions with three vendors. Cause: The Organization has designated internal controls over this area; however, the controls were not performed timely. Effect: Failure to document the search for suspension and debarment before entering into the covered transaction could result in noncompliance. Questioned Costs: None reported. Context/Sampling: 7 vendors out of 31 vendors total were selected for testing which made up $240,437 of $572,161 federal awards. Repeat Finding from Prior Year: No Recommendation: We recommend that management review vendors for suspension and debarment prior to entering into contracts to ensure vendors are not suspended or debarred. Views of Responsible Officials: Management agrees with this finding.

U.S. Department of Agriculture Passed through Illinois Department of Education, Minnesota Department of Education, and North Dakota Department of Education Child Nutrition Cluster: School Breakfast Program, 10.553 National School Lunch Program, 10.555 Summer Food Service Program for Children, 10.559 Procurement, Suspension, and Debarment Significant Deficiency in Internal Control over Compliance Grant Award Number: Affects all grant awards under assistance listing 10.553, 10.555, and 10.559 on the Consolidated Schedule of Expenditures of Federal Awards. Criteria: Uniform Guidance and 2 CFR sections 200.318 through 200.326 set forth the procurement standards non-federal entities other than states must follow when operating federal programs and the procurement procedures required depending on the amount of the transaction. Condition: In our testing of procurement, suspension, and debarment, it was identified that the search for suspension and debarment was performed subsequent to entering into covered transactions with three vendors. Cause: The Organization has designated internal controls over this area; however, the controls were not performed timely. Effect: Failure to document the search for suspension and debarment before entering into the covered transaction could result in noncompliance. Questioned Costs: None reported. Context/Sampling: 7 vendors out of 31 vendors total were selected for testing which made up $240,437 of $572,161 federal awards. Repeat Finding from Prior Year: No Recommendation: We recommend that management review vendors for suspension and debarment prior to entering into contracts to ensure vendors are not suspended or debarred. Views of Responsible Officials: Management agrees with this finding.

U.S. Department of Agriculture Passed through Illinois Department of Education, Minnesota Department of Education, and North Dakota Department of Education Child Nutrition Cluster: School Breakfast Program, 10.553 National School Lunch Program, 10.555 Summer Food Service Program for Children, 10.559 Procurement, Suspension, and Debarment Significant Deficiency in Internal Control over Compliance Grant Award Number: Affects all grant awards under assistance listing 10.553, 10.555, and 10.559 on the Consolidated Schedule of Expenditures of Federal Awards. Criteria: Uniform Guidance and 2 CFR sections 200.318 through 200.326 set forth the procurement standards non-federal entities other than states must follow when operating federal programs and the procurement procedures required depending on the amount of the transaction. Condition: In our testing of procurement, suspension, and debarment, it was identified that the search for suspension and debarment was performed subsequent to entering into covered transactions with three vendors. Cause: The Organization has designated internal controls over this area; however, the controls were not performed timely. Effect: Failure to document the search for suspension and debarment before entering into the covered transaction could result in noncompliance. Questioned Costs: None reported. Context/Sampling: 7 vendors out of 31 vendors total were selected for testing which made up $240,437 of $572,161 federal awards. Repeat Finding from Prior Year: No Recommendation: We recommend that management review vendors for suspension and debarment prior to entering into contracts to ensure vendors are not suspended or debarred. Views of Responsible Officials: Management agrees with this finding.

U.S. Department of Agriculture Passed through Illinois Department of Education, Minnesota Department of Education, and North Dakota Department of Education Child Nutrition Cluster: School Breakfast Program, 10.553 National School Lunch Program, 10.555 Summer Food Service Program for Children, 10.559 Procurement, Suspension, and Debarment Significant Deficiency in Internal Control over Compliance Grant Award Number: Affects all grant awards under assistance listing 10.553, 10.555, and 10.559 on the Consolidated Schedule of Expenditures of Federal Awards. Criteria: Uniform Guidance and 2 CFR sections 200.318 through 200.326 set forth the procurement standards non-federal entities other than states must follow when operating federal programs and the procurement procedures required depending on the amount of the transaction. Condition: In our testing of procurement, suspension, and debarment, it was identified that the search for suspension and debarment was performed subsequent to entering into covered transactions with three vendors. Cause: The Organization has designated internal controls over this area; however, the controls were not performed timely. Effect: Failure to document the search for suspension and debarment before entering into the covered transaction could result in noncompliance. Questioned Costs: None reported. Context/Sampling: 7 vendors out of 31 vendors total were selected for testing which made up $240,437 of $572,161 federal awards. Repeat Finding from Prior Year: No Recommendation: We recommend that management review vendors for suspension and debarment prior to entering into contracts to ensure vendors are not suspended or debarred. Views of Responsible Officials: Management agrees with this finding.

U.S. Department of Agriculture Passed through Illinois Department of Education, Minnesota Department of Education, and North Dakota Department of Education Child Nutrition Cluster: School Breakfast Program, 10.553 National School Lunch Program, 10.555 Summer Food Service Program for Children, 10.559 Procurement, Suspension, and Debarment Significant Deficiency in Internal Control over Compliance Grant Award Number: Affects all grant awards under assistance listing 10.553, 10.555, and 10.559 on the Consolidated Schedule of Expenditures of Federal Awards. Criteria: Uniform Guidance and 2 CFR sections 200.318 through 200.326 set forth the procurement standards non-federal entities other than states must follow when operating federal programs and the procurement procedures required depending on the amount of the transaction. Condition: In our testing of procurement, suspension, and debarment, it was identified that the search for suspension and debarment was performed subsequent to entering into covered transactions with three vendors. Cause: The Organization has designated internal controls over this area; however, the controls were not performed timely. Effect: Failure to document the search for suspension and debarment before entering into the covered transaction could result in noncompliance. Questioned Costs: None reported. Context/Sampling: 7 vendors out of 31 vendors total were selected for testing which made up $240,437 of $572,161 federal awards. Repeat Finding from Prior Year: No Recommendation: We recommend that management review vendors for suspension and debarment prior to entering into contracts to ensure vendors are not suspended or debarred. Views of Responsible Officials: Management agrees with this finding.

U.S. Department of Treasury passed through Utah Governor’s Office of Economic Opportunity 2023-001 - Procurement and Suspension and Debarment Program Name of Federal Program (ALN Number): Coronavirus State and Local Fiscal Recover Funds (21.027) Criteria: Recipients of federal awards must follow the procurement standards set out at 2 CFR section 200.317 through 200.326. They must use their own documented procurement procedures, which reflect applicable State laws and regulations, provided that the procedures conform to applicable Federal law and the procurement requirements identified in 2 CFR part 200. Recipients “must maintain records sufficient to detail the history of procurement. These records will include, but are not necessarily limited to the following: rationale for the method of procurement, selection of contract type, contractor selection or rejection, and the basis for the contract price” 2 CFR section 200.318(i). The District’s procurement procedures include the requirement to maintain sufficient documentation of the history of procurement. The District also has procedures to identify procurement transactions requiring competitive bids or proposals. Context and Condition: We selected two contracts to test for compliance with procurementstandards. Records for one contract lacked documentation sufficient to detail procurement history. Cause: The District did not follow its documentation policy for obtaining contracts or bids. Effect: A potential failure to conduct procurement transactions in a manner providing full and open competition exists. Questioned Costs: No costs were questionable Repeat finding: No Statistically valid: Yes Recommendation: We recommend the District ensure it 1) maintains documentation of the history of procurement and 2) monitors compliance with documentation requirements. Views of responsible officials: The District will review its procurement policies and internal controls and ensure timely action is taken when noncompliance is identified.

Criteria: Non-Federal entities other than States, including those operating Federal programs as subrecipients of States, must follow the procurement standards set out at 2 CFR sections 200.318 through 200.326. They must use their own documented procurement procedures, which reflect applicable state and local laws and regulations, provided that the procurements conform to applicable Federal statutes and the procurement requirements identified in 2 CFR part 200. Questioned Costs: None Condition: The Foundation was able to provide a procurement policy, but it was not in accordance with the Federal procurement requirements within Uniform Guidance. Cause: The Foundation does not have internal controls in place surrounding procurement policies and procedures. Effect: We were unable to test procurement due to lack of a procurement policy in accordance with Uniform Guidance. The lack of internal controls surrounding the procurement policies and procedures could lead to potential funding issues in the future. Recommendation: We recommend that management continue to implement additional control processes in order to ensure proper controls are in place and followed. Foundation Response: Management agrees with the finding.

FINDING 2023-001 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Suspension and Debarment Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): SLFRP 3041 Compliance Requirement: Procurement and Suspension and Debarment Audit Findings: Material Weakness, Modified Opinion INDIANA STATE BOARD OF ACCOUNTS 13 VERMILLION COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Condition and Context Nonfederal entities and contractors are subject to nonprocurement suspension and debarment regulations. These regulations restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or are ineligible for participation in federal assistance programs or activities. This is done by checking the Excluded Parties List System, collecting a certification from the vendor, or adding a clause or condition to the covered transaction with the vendor. There were two vendors subject to suspension and debarment requirements during the audit period. Both vendors were selected for testing. The County did not perform procedures to ensure either vendor was not suspended, debarred, or otherwise excluded from or ineligible for participation in federal assistance programs or activities. Additionally, the County did not have a formalized procurement policy outlining its processes and procedures with regards to the procurement of goods and services using federal grant funds. The policy must conform to the procurement standards identified in 2 CFR 200.317 through 200.327 and should address ensuring vendors are not suspended or debarred prior to entering into covered transactions if the contract is expected to equal or exceed $25,000. The lack of internal controls was a systemic issue throughout the audit period and enabled material noncompliance to occur and remain undetected. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 31 CFR 19.300 states: "When you enter into a covered transaction with another person at the next lower tier, you must verify that the person with whom you intend to do business is not excluded or disqualified. You do this by: (a) Checking the EPLS; or (b) Collecting a certification from that person if allowed by this rule; or (c) Adding a clause or condition to the covered transaction with that person." INDIANA STATE BOARD OF ACCOUNTS 14 VERMILLION COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) 2 CFR 200.318(a) states: "The non-Federal entity must have and use documented procurement procedures, consistent with State, local, and tribal laws and regulations and the standards of this section, for the acquisition of property or services required under a Federal award or subaward. The non- Federal entity's documented procurement procedures must conform to the procurement standards identified in §§ 200.317 through 200.327." Cause A proper system of internal controls was not designed by management of the County. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the County's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper design and implementation of an effectively designed system of internal controls, the County cannot ensure the vendors paid with federal funds are eligible to participate in federal programs. Any program funds the County used to pay contractors that have been suspended or debarred would be unallowable, and the funding agency could potentially recover them. Furthermore, with adequately designed and implemented policies that reflect the federal regulations as required, the County cannot ensure that goods and services paid with federal funds are properly procured. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the County establish a system of internal controls to ensure that verifications are performed to determine whether each contractor has been suspended or debarred from participating in federal contracts prior to making payment. In addition, we recommended the County develop a procurement policy that addresses and adheres to the federal requirements outlined in regulations. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.