Findings Citing § 200.318

2023-001 – Uniform Guidance Procurement Standards Criteria: One of the more significant provisions of the Uniform Guidance that affects the District is the procurement standards under 2 CFR sections 200.318 through 200.327. Under the procurement standards, the Trust is required to have a documented purchasing policy, which at a minimum incorporates the provisions of the Uniform Guidance. Statement of Condition: The Office of Management and Budget (OMB) revised regulations applicable to federally funded programs. The new regulations are contained in Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance). The Uniform Guidance replaced OMB Circulars A-133, A-87, and A-110 and incorporates new requirements for grant recipients. The Uniform Guidance includes not only protocols for program management and administration, but also updates compliance regulations for federal awards. Currently, the District does not have a formal written procurement policy that incorporates all provisions of the Uniform Guidance procurement standards. Cause: The District has not adopted a procurement policy that covers all aspects required by the Uniform Guidance. However, during our testing of procurement over federal expenditures, we did not notate any violations of the Uniform Guidance procurement standards. Effect: Items required by the Uniform Guidance procurement standards that are not currently addressed in the District’s procurement policy are as follows: • Contracting with small and minority businesses, women’s business enterprises, and labor surplus area firms • General procurement standards, including oversight of contractors, conflicts of interest, and avoidance of duplicative items • Competition • Bonding requirements • Contract provisions • Federal agency or pass-through entity review • Subrecipient and contractor determinations • Retention requirements for records • Domestic preferences • Procurement of recovered materials Recommendation: We recommend that management review the applicable provisions of the Uniform Guidance procurement standards and update the District’s procurement policy appropriately. This would include adding any missing components to the District’s current procurement policy and updating definitions of types of procurement (i.e., micro-purchases, small purchases, and small acquisition threshold), to match the language used in the Uniform Guidance procurement standards. Questioned Costs: None

2023-001 – Uniform Guidance Procurement Standards Criteria: One of the more significant provisions of the Uniform Guidance that affects the District is the procurement standards under 2 CFR sections 200.318 through 200.327. Under the procurement standards, the Trust is required to have a documented purchasing policy, which at a minimum incorporates the provisions of the Uniform Guidance. Statement of Condition: The Office of Management and Budget (OMB) revised regulations applicable to federally funded programs. The new regulations are contained in Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance). The Uniform Guidance replaced OMB Circulars A-133, A-87, and A-110 and incorporates new requirements for grant recipients. The Uniform Guidance includes not only protocols for program management and administration, but also updates compliance regulations for federal awards. Currently, the District does not have a formal written procurement policy that incorporates all provisions of the Uniform Guidance procurement standards. Cause: The District has not adopted a procurement policy that covers all aspects required by the Uniform Guidance. However, during our testing of procurement over federal expenditures, we did not notate any violations of the Uniform Guidance procurement standards. Effect: Items required by the Uniform Guidance procurement standards that are not currently addressed in the District’s procurement policy are as follows: • Contracting with small and minority businesses, women’s business enterprises, and labor surplus area firms • General procurement standards, including oversight of contractors, conflicts of interest, and avoidance of duplicative items • Competition • Bonding requirements • Contract provisions • Federal agency or pass-through entity review • Subrecipient and contractor determinations • Retention requirements for records • Domestic preferences • Procurement of recovered materials Recommendation: We recommend that management review the applicable provisions of the Uniform Guidance procurement standards and update the District’s procurement policy appropriately. This would include adding any missing components to the District’s current procurement policy and updating definitions of types of procurement (i.e., micro-purchases, small purchases, and small acquisition threshold), to match the language used in the Uniform Guidance procurement standards. Questioned Costs: None

2023-001 – Uniform Guidance Procurement Standards Criteria: One of the more significant provisions of the Uniform Guidance that affects the District is the procurement standards under 2 CFR sections 200.318 through 200.327. Under the procurement standards, the Trust is required to have a documented purchasing policy, which at a minimum incorporates the provisions of the Uniform Guidance. Statement of Condition: The Office of Management and Budget (OMB) revised regulations applicable to federally funded programs. The new regulations are contained in Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance). The Uniform Guidance replaced OMB Circulars A-133, A-87, and A-110 and incorporates new requirements for grant recipients. The Uniform Guidance includes not only protocols for program management and administration, but also updates compliance regulations for federal awards. Currently, the District does not have a formal written procurement policy that incorporates all provisions of the Uniform Guidance procurement standards. Cause: The District has not adopted a procurement policy that covers all aspects required by the Uniform Guidance. However, during our testing of procurement over federal expenditures, we did not notate any violations of the Uniform Guidance procurement standards. Effect: Items required by the Uniform Guidance procurement standards that are not currently addressed in the District’s procurement policy are as follows: • Contracting with small and minority businesses, women’s business enterprises, and labor surplus area firms • General procurement standards, including oversight of contractors, conflicts of interest, and avoidance of duplicative items • Competition • Bonding requirements • Contract provisions • Federal agency or pass-through entity review • Subrecipient and contractor determinations • Retention requirements for records • Domestic preferences • Procurement of recovered materials Recommendation: We recommend that management review the applicable provisions of the Uniform Guidance procurement standards and update the District’s procurement policy appropriately. This would include adding any missing components to the District’s current procurement policy and updating definitions of types of procurement (i.e., micro-purchases, small purchases, and small acquisition threshold), to match the language used in the Uniform Guidance procurement standards. Questioned Costs: None

Criteria or specific requirement: 2 CFR Part 200 sections 200.318-327 outline the required general procurement standards, competition, and methods of procurement to be followed. These elements must be incorporated into an organization’s procurement policies and must be followed to ensure procurements are supported and covered transactions are only entered into with entities that are not federally suspended or debarred. Condition: ICEDC’s procurement policy is not in compliance with Uniform Guidance. For the sampled procurement transactions, documentation was not retained for determining that vendors were single source, as required by Uniform Guidance. In addition, documentation was not retained showing selected entities were checked for suspension and debarment prior to entering into the covered transactions. Questioned costs: None. Context: As the ICEDC procurement policy did not specify a micro purchase threshold, CLA tested all procurement transactions charged to the major program that exceeded Uniform Guidance's micro purchase threshold of $10,000 (a total of 3 procurement). The transactions were found to be out of compliance with federal procurement requirements, as documentation was not retained detailing the history of the procurement; determination process of contractors as single source, including the rationale for the method of procurement; determination of contract type; basis for contractor selection; and the basis for the contract price. Documentation should be retained to evidence that an adequate number of quotes were reviewed, that price analysis was performed, and the rationale that a procurement should be considered a noncompetitive procurement. In addition, documentation was not retained showing that the procured vendors were checked for federal suspension and debarment prior to entering into the covered transactions. Cause: Due to improper policy in place and lack of knowledge about federal procurement, suspension and debarment, and documentation requirements. Effect: Noncompliant policies and documentation can lead to selecting vendors that are federally suspended or debarred and could result in procurement of goods and services that are unideal for the federal program. Repeat Finding: No. Recommendation: CLA recommends ICEDC to update the procurement policy to be compliance in with Uniform Guidance and to include more rigorous documentation as required by 2 CFR sections 200.318-200.327. ICEDC needs to ensure that policy includes the need for suspension and debarment checks to be done prior to entering into a covered transaction. CLA also recommends emphasizing the importance of the procurement standards and established policy to all authorized purchasers within ICEDC. Views of responsible officials: There is no disagreement with the audit finding.

Criteria or specific requirement: 2 CFR Part 200 sections 200.318-327 outline the required general procurement standards, competition, and methods of procurement to be followed. These elements must be incorporated into an organization’s procurement policies and must be followed to ensure procurements are supported and covered transactions are only entered into with entities that are not federally suspended or debarred. Condition: ICEDC’s procurement policy is not in compliance with Uniform Guidance. For the sampled procurement transactions, documentation was not retained for determining that vendors were single source, as required by Uniform Guidance. In addition, documentation was not retained showing selected entities were checked for suspension and debarment prior to entering into the covered transactions. Questioned costs: None. Context: As the ICEDC procurement policy did not specify a micro purchase threshold, CLA tested all procurement transactions charged to the major program that exceeded Uniform Guidance's micro purchase threshold of $10,000 (a total of 3 procurement). The transactions were found to be out of compliance with federal procurement requirements, as documentation was not retained detailing the history of the procurement; determination process of contractors as single source, including the rationale for the method of procurement; determination of contract type; basis for contractor selection; and the basis for the contract price. Documentation should be retained to evidence that an adequate number of quotes were reviewed, that price analysis was performed, and the rationale that a procurement should be considered a noncompetitive procurement. In addition, documentation was not retained showing that the procured vendors were checked for federal suspension and debarment prior to entering into the covered transactions. Cause: Due to improper policy in place and lack of knowledge about federal procurement, suspension and debarment, and documentation requirements. Effect: Noncompliant policies and documentation can lead to selecting vendors that are federally suspended or debarred and could result in procurement of goods and services that are unideal for the federal program. Repeat Finding: No. Recommendation: CLA recommends ICEDC to update the procurement policy to be compliance in with Uniform Guidance and to include more rigorous documentation as required by 2 CFR sections 200.318-200.327. ICEDC needs to ensure that policy includes the need for suspension and debarment checks to be done prior to entering into a covered transaction. CLA also recommends emphasizing the importance of the procurement standards and established policy to all authorized purchasers within ICEDC. Views of responsible officials: There is no disagreement with the audit finding.

Criteria or specific requirement: 2 CFR Part 200 sections 200.318-327 outline the required general procurement standards, competition, and methods of procurement to be followed. These elements must be incorporated into an organization’s procurement policies and must be followed to ensure procurements are supported and covered transactions are only entered into with entities that are not federally suspended or debarred. Condition: ICEDC’s procurement policy is not in compliance with Uniform Guidance. For the sampled procurement transactions, documentation was not retained for determining that vendors were single source, as required by Uniform Guidance. In addition, documentation was not retained showing selected entities were checked for suspension and debarment prior to entering into the covered transactions. Questioned costs: None. Context: As the ICEDC procurement policy did not specify a micro purchase threshold, CLA tested all procurement transactions charged to the major program that exceeded Uniform Guidance's micro purchase threshold of $10,000 (a total of 3 procurement). The transactions were found to be out of compliance with federal procurement requirements, as documentation was not retained detailing the history of the procurement; determination process of contractors as single source, including the rationale for the method of procurement; determination of contract type; basis for contractor selection; and the basis for the contract price. Documentation should be retained to evidence that an adequate number of quotes were reviewed, that price analysis was performed, and the rationale that a procurement should be considered a noncompetitive procurement. In addition, documentation was not retained showing that the procured vendors were checked for federal suspension and debarment prior to entering into the covered transactions. Cause: Due to improper policy in place and lack of knowledge about federal procurement, suspension and debarment, and documentation requirements. Effect: Noncompliant policies and documentation can lead to selecting vendors that are federally suspended or debarred and could result in procurement of goods and services that are unideal for the federal program. Repeat Finding: No. Recommendation: CLA recommends ICEDC to update the procurement policy to be compliance in with Uniform Guidance and to include more rigorous documentation as required by 2 CFR sections 200.318-200.327. ICEDC needs to ensure that policy includes the need for suspension and debarment checks to be done prior to entering into a covered transaction. CLA also recommends emphasizing the importance of the procurement standards and established policy to all authorized purchasers within ICEDC. Views of responsible officials: There is no disagreement with the audit finding.

Criteria or specific requirement: 2 CFR Part 200 sections 200.318-327 outline the required general procurement standards, competition, and methods of procurement to be followed. These elements must be incorporated into an organization’s procurement policies and must be followed to ensure procurements are supported and covered transactions are only entered into with entities that are not federally suspended or debarred. Condition: ICEDC’s procurement policy is not in compliance with Uniform Guidance. For the sampled procurement transactions, documentation was not retained for determining that vendors were single source, as required by Uniform Guidance. In addition, documentation was not retained showing selected entities were checked for suspension and debarment prior to entering into the covered transactions. Questioned costs: None. Context: As the ICEDC procurement policy did not specify a micro purchase threshold, CLA tested all procurement transactions charged to the major program that exceeded Uniform Guidance's micro purchase threshold of $10,000 (a total of 3 procurement). The transactions were found to be out of compliance with federal procurement requirements, as documentation was not retained detailing the history of the procurement; determination process of contractors as single source, including the rationale for the method of procurement; determination of contract type; basis for contractor selection; and the basis for the contract price. Documentation should be retained to evidence that an adequate number of quotes were reviewed, that price analysis was performed, and the rationale that a procurement should be considered a noncompetitive procurement. In addition, documentation was not retained showing that the procured vendors were checked for federal suspension and debarment prior to entering into the covered transactions. Cause: Due to improper policy in place and lack of knowledge about federal procurement, suspension and debarment, and documentation requirements. Effect: Noncompliant policies and documentation can lead to selecting vendors that are federally suspended or debarred and could result in procurement of goods and services that are unideal for the federal program. Repeat Finding: No. Recommendation: CLA recommends ICEDC to update the procurement policy to be compliance in with Uniform Guidance and to include more rigorous documentation as required by 2 CFR sections 200.318-200.327. ICEDC needs to ensure that policy includes the need for suspension and debarment checks to be done prior to entering into a covered transaction. CLA also recommends emphasizing the importance of the procurement standards and established policy to all authorized purchasers within ICEDC. Views of responsible officials: There is no disagreement with the audit finding.

Criteria or specific requirement: 2 CFR Part 200 sections 200.318-327 outline the required general procurement standards, competition, and methods of procurement to be followed. These elements must be incorporated into an organization’s procurement policies and must be followed to ensure procurements are supported and covered transactions are only entered into with entities that are not federally suspended or debarred. Condition: ICEDC’s procurement policy is not in compliance with Uniform Guidance. For the sampled procurement transactions, documentation was not retained for determining that vendors were single source, as required by Uniform Guidance. In addition, documentation was not retained showing selected entities were checked for suspension and debarment prior to entering into the covered transactions. Questioned costs: None. Context: As the ICEDC procurement policy did not specify a micro purchase threshold, CLA tested all procurement transactions charged to the major program that exceeded Uniform Guidance's micro purchase threshold of $10,000 (a total of 3 procurement). The transactions were found to be out of compliance with federal procurement requirements, as documentation was not retained detailing the history of the procurement; determination process of contractors as single source, including the rationale for the method of procurement; determination of contract type; basis for contractor selection; and the basis for the contract price. Documentation should be retained to evidence that an adequate number of quotes were reviewed, that price analysis was performed, and the rationale that a procurement should be considered a noncompetitive procurement. In addition, documentation was not retained showing that the procured vendors were checked for federal suspension and debarment prior to entering into the covered transactions. Cause: Due to improper policy in place and lack of knowledge about federal procurement, suspension and debarment, and documentation requirements. Effect: Noncompliant policies and documentation can lead to selecting vendors that are federally suspended or debarred and could result in procurement of goods and services that are unideal for the federal program. Repeat Finding: No. Recommendation: CLA recommends ICEDC to update the procurement policy to be compliance in with Uniform Guidance and to include more rigorous documentation as required by 2 CFR sections 200.318-200.327. ICEDC needs to ensure that policy includes the need for suspension and debarment checks to be done prior to entering into a covered transaction. CLA also recommends emphasizing the importance of the procurement standards and established policy to all authorized purchasers within ICEDC. Views of responsible officials: There is no disagreement with the audit finding.

Criteria or specific requirement: 2 CFR Part 200 sections 200.318-327 outline the required general procurement standards, competition, and methods of procurement to be followed. These elements must be incorporated into an organization’s procurement policies and must be followed to ensure procurements are supported and covered transactions are only entered into with entities that are not federally suspended or debarred. Condition: ICEDC’s procurement policy is not in compliance with Uniform Guidance. For the sampled procurement transactions, documentation was not retained for determining that vendors were single source, as required by Uniform Guidance. In addition, documentation was not retained showing selected entities were checked for suspension and debarment prior to entering into the covered transactions. Questioned costs: None. Context: As the ICEDC procurement policy did not specify a micro purchase threshold, CLA tested all procurement transactions charged to the major program that exceeded Uniform Guidance's micro purchase threshold of $10,000 (a total of 3 procurement). The transactions were found to be out of compliance with federal procurement requirements, as documentation was not retained detailing the history of the procurement; determination process of contractors as single source, including the rationale for the method of procurement; determination of contract type; basis for contractor selection; and the basis for the contract price. Documentation should be retained to evidence that an adequate number of quotes were reviewed, that price analysis was performed, and the rationale that a procurement should be considered a noncompetitive procurement. In addition, documentation was not retained showing that the procured vendors were checked for federal suspension and debarment prior to entering into the covered transactions. Cause: Due to improper policy in place and lack of knowledge about federal procurement, suspension and debarment, and documentation requirements. Effect: Noncompliant policies and documentation can lead to selecting vendors that are federally suspended or debarred and could result in procurement of goods and services that are unideal for the federal program. Repeat Finding: No. Recommendation: CLA recommends ICEDC to update the procurement policy to be compliance in with Uniform Guidance and to include more rigorous documentation as required by 2 CFR sections 200.318-200.327. ICEDC needs to ensure that policy includes the need for suspension and debarment checks to be done prior to entering into a covered transaction. CLA also recommends emphasizing the importance of the procurement standards and established policy to all authorized purchasers within ICEDC. Views of responsible officials: There is no disagreement with the audit finding.

Finding 2023-006: Procurement Information on the Federal Program: 97.024 - Emergency Food and Shelter National Board Program Type of Finding: Material Weakness in Internal Control over Compliance and Material Noncompliance Criteria: According to 2 CFR §200.303, the non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non- Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in Standards for Internal Control in the Federal Government issued by the Comptroller General of the United States or the internal Control Integrated Framework, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Additionally, according to 2 CFR §200.318 Procurement standards, the non-Federal entity must maintain records sufficient to detail the history of procurement. These records will include, but are not necessarily limited to, the following: Rationale for the method of procurement, selection of contract type, contractor selection or rejection, and the basis for the contract price. Title 2, Subtitle A Chapter II Part 200 Subpart D 200.319 Procurement Standards. All procurement transactions for the acquisition of property or services required under a Federal award must be conducted in a manner providing full and open competition consistent with the standards of this section and §200.320. The non-Federal entity must have written procedures for procurement transactions. These procedures must ensure that all solicitations incorporate a clear and accurate description of the technical requirements for the material, product, or service to be procured. Such description must not, in competitive procurements, contain features which unduly restrict competition. The description may include a statement of the qualitative nature of the material, product or service to be procured and, when necessary, must set forth those minimum essential characteristics and standards to which it must conform if it is to satisfy its intended use. Noncompetitive procurements can only be awarded in accordance with §200.320(c). According to 2 CFR §200.320 Procurement Standards, there are specific circumstances in which noncompetitive procurement can be used. Noncompetitive procurement can only be awarded if one or more of the following circumstances apply: 1. The acquisition of property or services, the aggregate dollar amount of which does not exceed the micro-purchase threshold, 2. The item is available only from a single source; 3. The public exigency or emergency for the requirement will not permit a delay resulting from publicizing a competitive solicitation; 4. The Federal awarding agency or pass-through entity expressly authorizes a noncompetitive procurement in response to a written request from the non-Federal entity; or 5. After solicitation of a number of sources, competition is determined inadequate. Condition: During our testing over procurement, we determined that SAMU did not clearly document the rationale for the method of procurement, selection of contract type, contractor selection or rejection, and the basis for the contract price. In addition, we noted that while SAMU does have a procurement policy in place, the policy does not include requirements for re-procuring long-term contracts that continuously re-new. Cause: Management did not have effective internal controls in place to ensure that procurement requirements were adequately documented and retained. Effect or Potential Effect: Procurement records were insufficient to meet the requirements noted in the Criteria section above, as well as SAMU's internal procurement policy. Questioned Costs: $75,000 Context: 2 of 4 samples selected for testing did not have adequate documentation for the rationale related to the method of procurement, selection of contract type, contractor selection or rejection, and the basis for the contract price. The sample is representative of the population. Identification as a Repeat Finding, if Applicable: 2022-006 Recommendation: We recommend SAMU retain sufficient procurement documentation to meet the requirements noted in the Criteria section above.

Questioned Costs: $88,135 Criteria: In accordance with 2 CFR § 200.403–.405, costs charged to federal awards must be allowable, allocable, and supported by valid documentation. Additionally, under 2 CFR § 200.318–.320, all contracts must be awarded with clear terms and timeframes and must be executed prior to the provision of goods or services. For subawards, 2 CFR § 200.331 requires that subrecipient agreements be in writing and include all legally required terms and conditions. Payments made outside the terms of a written, active contract — particularly beyond expiration dates — may be deemed unallowable due to lack of legal obligation and documentation. Condition: Of the ten contracts selected for testing, seven were expired at the time payments were made. In total, the Organization paid $88,135 for services rendered beyond the contract end dates, including payments to one subrecipient and multiple consultants or contractors. The Organization indicated that all payments were budgeted within the approved federal grant agreements; however, these payments were not supported by amendments, extensions, or new agreements authorizing continued work or compensation. Additionally, in four additional instances, one selected for testing, contracts specified hourly or deliverable rates and defined service periods but contained inaccurate or inconsistent total compensation amounts. One of four contracts made payments under these agreements that exceeded the stated contract total. Overall, the discrepancies created ambiguity about the authorized funding limit and raise concerns about enforceability and allowability of the costs under federal award terms. Cause: The Organization did not have sufficient procedures in place to monitor contract expiration dates or to ensure that updated agreements were executed before authorizing payments. In these cases, services continued based on verbal agreements or historical practice rather than a valid, enforceable contract. Effect: As a result, $88,135 in costs were incurred and charged to the federal grant without a valid contractual basis. Even though the costs were budgeted, the lack of a valid, active contract invalidates the legal obligation required for allowability under 2 CFR § 200.403 and § 200.405. Therefore, the costs are questioned pending resolution with the federal awarding agency. Furthermore, the absence of executed agreements represents a significant internal control deficiency and increases the risk of unauthorized or disputed expenditures. The inconsistencies in contractual rates expose the Organization to the risk of paying amounts not clearly authorized by written agreements and may result in questioned or disallowed costs, especially if contract limits are exceeded. Weaknesses in contract drafting and review also constitute a significant deficiency in internal control over compliance. Identification of Repeat Finding: ☐ Yes  ☑ No Recommendation: We recommend that the Organization: • Develop and implement a contract tracking system to monitor start and end dates. • Require that all contracts, extensions, and amendments be executed before services are rendered or payments are issued. • Provide training to program and procurement staff on federal procurement standards and contract management. • Review existing contracts to ensure compliance and take corrective action for any others that may have expired. • Work with the awarding agency to determine whether any portion of the $88,135 must be refunded.

2023-001 – Procurement and Suspension and Debarment Finding Type: Material Noncompliance; Material Weakness in Internal Control over Compliance Program: Rural Communities Opioid Response – Planning/Rural Health Outreach and Rural Network Development Program (AL# 93.912); U.S. Department of Health and Human Services; Direct award; all grant numbers. Criteria: Non-federal entities must follow the procurement standards set out at 2 CFR sections 200.318 through 200.326. They must use their own documented procurement procedures, which reflect applicable state and local laws and regulations, provided that the procurements conform to applicable federal statutes and the procurement requirements identified in 2 CFR Part 200. Condition: The Organization's procurement policies were not complete and the Organization did not follow the federal procurement standards which provides specific guidance including process and documentation requirements necessary to be in compliance as required by the 2 CFR sections 200.318 through 200.326. Cause: The Organization’s procurement policies do not include the federal procurement requirements noted at 2 CFR section 200.318 through 200.326. Additionally, the Organization did not maintain the required procurement documentation, provide for full and open competition, or provide support for limitation of such competition. Effect: Future procurement arrangements may not meet the federal guidelines necessary for projects funded by federal sources. The Organization may have to pay back funds received for a project where federal funds were used for the procurement of products or services, but the required federal process was not met. Recommendation: The Organization should update their procurement policy to include all requirements as noted in 2 CFR sections 200.318-200.326 and ensure that all future agreements follow the required processes. View of Responsible Officials: Management agrees with the finding and plans to update their procurement policy. Repeat Finding - 2022-001

2023-001 – Procurement and Suspension and Debarment Finding Type: Material Noncompliance; Material Weakness in Internal Control over Compliance Program: Rural Communities Opioid Response – Planning/Rural Health Outreach and Rural Network Development Program (AL# 93.912); U.S. Department of Health and Human Services; Direct award; all grant numbers. Criteria: Non-federal entities must follow the procurement standards set out at 2 CFR sections 200.318 through 200.326. They must use their own documented procurement procedures, which reflect applicable state and local laws and regulations, provided that the procurements conform to applicable federal statutes and the procurement requirements identified in 2 CFR Part 200. Condition: The Organization's procurement policies were not complete and the Organization did not follow the federal procurement standards which provides specific guidance including process and documentation requirements necessary to be in compliance as required by the 2 CFR sections 200.318 through 200.326. Cause: The Organization’s procurement policies do not include the federal procurement requirements noted at 2 CFR section 200.318 through 200.326. Additionally, the Organization did not maintain the required procurement documentation, provide for full and open competition, or provide support for limitation of such competition. Effect: Future procurement arrangements may not meet the federal guidelines necessary for projects funded by federal sources. The Organization may have to pay back funds received for a project where federal funds were used for the procurement of products or services, but the required federal process was not met. Recommendation: The Organization should update their procurement policy to include all requirements as noted in 2 CFR sections 200.318-200.326 and ensure that all future agreements follow the required processes. View of Responsible Officials: Management agrees with the finding and plans to update their procurement policy. Repeat Finding - 2022-001

2023-001 – Procurement and Suspension and Debarment Finding Type: Material Noncompliance; Material Weakness in Internal Control over Compliance Program: Rural Communities Opioid Response – Planning/Rural Health Outreach and Rural Network Development Program (AL# 93.912); U.S. Department of Health and Human Services; Direct award; all grant numbers. Criteria: Non-federal entities must follow the procurement standards set out at 2 CFR sections 200.318 through 200.326. They must use their own documented procurement procedures, which reflect applicable state and local laws and regulations, provided that the procurements conform to applicable federal statutes and the procurement requirements identified in 2 CFR Part 200. Condition: The Organization's procurement policies were not complete and the Organization did not follow the federal procurement standards which provides specific guidance including process and documentation requirements necessary to be in compliance as required by the 2 CFR sections 200.318 through 200.326. Cause: The Organization’s procurement policies do not include the federal procurement requirements noted at 2 CFR section 200.318 through 200.326. Additionally, the Organization did not maintain the required procurement documentation, provide for full and open competition, or provide support for limitation of such competition. Effect: Future procurement arrangements may not meet the federal guidelines necessary for projects funded by federal sources. The Organization may have to pay back funds received for a project where federal funds were used for the procurement of products or services, but the required federal process was not met. Recommendation: The Organization should update their procurement policy to include all requirements as noted in 2 CFR sections 200.318-200.326 and ensure that all future agreements follow the required processes. View of Responsible Officials: Management agrees with the finding and plans to update their procurement policy. Repeat Finding - 2022-001

2023-001 – Procurement and Suspension and Debarment Finding Type: Material Noncompliance; Material Weakness in Internal Control over Compliance Program: Rural Communities Opioid Response – Planning/Rural Health Outreach and Rural Network Development Program (AL# 93.912); U.S. Department of Health and Human Services; Direct award; all grant numbers. Criteria: Non-federal entities must follow the procurement standards set out at 2 CFR sections 200.318 through 200.326. They must use their own documented procurement procedures, which reflect applicable state and local laws and regulations, provided that the procurements conform to applicable federal statutes and the procurement requirements identified in 2 CFR Part 200. Condition: The Organization's procurement policies were not complete and the Organization did not follow the federal procurement standards which provides specific guidance including process and documentation requirements necessary to be in compliance as required by the 2 CFR sections 200.318 through 200.326. Cause: The Organization’s procurement policies do not include the federal procurement requirements noted at 2 CFR section 200.318 through 200.326. Additionally, the Organization did not maintain the required procurement documentation, provide for full and open competition, or provide support for limitation of such competition. Effect: Future procurement arrangements may not meet the federal guidelines necessary for projects funded by federal sources. The Organization may have to pay back funds received for a project where federal funds were used for the procurement of products or services, but the required federal process was not met. Recommendation: The Organization should update their procurement policy to include all requirements as noted in 2 CFR sections 200.318-200.326 and ensure that all future agreements follow the required processes. View of Responsible Officials: Management agrees with the finding and plans to update their procurement policy. Repeat Finding - 2022-001

2023-001 – Procurement and Suspension and Debarment Finding Type: Material Noncompliance; Material Weakness in Internal Control over Compliance Program: Rural Communities Opioid Response – Planning/Rural Health Outreach and Rural Network Development Program (AL# 93.912); U.S. Department of Health and Human Services; Direct award; all grant numbers. Criteria: Non-federal entities must follow the procurement standards set out at 2 CFR sections 200.318 through 200.326. They must use their own documented procurement procedures, which reflect applicable state and local laws and regulations, provided that the procurements conform to applicable federal statutes and the procurement requirements identified in 2 CFR Part 200. Condition: The Organization's procurement policies were not complete and the Organization did not follow the federal procurement standards which provides specific guidance including process and documentation requirements necessary to be in compliance as required by the 2 CFR sections 200.318 through 200.326. Cause: The Organization’s procurement policies do not include the federal procurement requirements noted at 2 CFR section 200.318 through 200.326. Additionally, the Organization did not maintain the required procurement documentation, provide for full and open competition, or provide support for limitation of such competition. Effect: Future procurement arrangements may not meet the federal guidelines necessary for projects funded by federal sources. The Organization may have to pay back funds received for a project where federal funds were used for the procurement of products or services, but the required federal process was not met. Recommendation: The Organization should update their procurement policy to include all requirements as noted in 2 CFR sections 200.318-200.326 and ensure that all future agreements follow the required processes. View of Responsible Officials: Management agrees with the finding and plans to update their procurement policy. Repeat Finding - 2022-001

Finding 2023-001: Procurement Policy and Related Contract Program: 66.958 Water Infrastructure Finance and Innovation Federal Agency: U.S. Environmental Protection Agency Award No: WIFIA-N18147WI Award Year: 2023 This finding is a repeat finding of 2022-001 Criteria: 2 CFR section 200.318 - General Procurement Standards, requires non-Federal entities to have and use documented procurement procedures, consistent with State, local and tribal laws and regulations and the standards of this section, for the acquisition of property or services required under a Federal award or subaward. The non-Federal entity's documented procurement procedures must conform to the procurement standards identified in §§ 200.317 through 200.327. Condition: We reviewed the water utility's procurement policy and service contracts with costs reimbursed during 2023, noting they did not contain necessary federal language related to conflicts of interest and debarment and suspension. Cause: The water utility has not received federal funding in the past and did not update their procurement policy when they sought federal funding for the Great Lakes Water Supply project. Additionally, service contracts were entered into prior to receiving federal funds. Effect: Without adequate control of contract language the water utility could enter into contracts related to the Great Lakes Water Supply project that do not qualify for federal reimbursement. Questioned Costs: None noted. Recommendation: We recommend the water utility review its procurement policy and make necessary updates to be in compliance with federal standards. Additionally, we recommend the utility enter into contract addendums related to contracts previously executed without required federal language. Management Response: Waukesha Water utility management has worked closely with WIFIA to craft contracts that include all necessary language prior to releasing RFPs for construction contracts. WIFIA was presented all service contracts to review prior to reimbursements received in fiscal year 2023. The finance department is working to update the procurement policy to ensure necessary federal language is included. The finance department will also work with service contractors to execute contract addendums.

Federal Awards Finding 2023-004: Noncompliance with Federal Award Program Requirements Criteria or Specific Requirement The Uniform Guidance states that the auditee is responsible for “maintaining internal control over Federal programs that provides reasonable assurance that the auditee is managing Federal awards in compliance with laws, regulations, and the provisions of contracts or grant agreements that could have a material effect on each of its Federal programs.” Specifically, this Finding applies to the following Compliance Requirements outlined in the 2023 Compliance Supplement: 1. Activities Allowed or Unallowed & Allowable Costs/Cost Principles 2. Procurement, Suspension & Debarment Finding/Condition We noted the following deficiencies: 1. The Rancheria was unable to provide supporting documentation for the allocation of expenditures reported for federal award programs. 2. The Rancheria was unable to provide actual time records for employees, supporting payroll expenditures claimed as expenditures for federal award programs. 3. The Rancheria was unable to provide documentation to show that it complied with the procurement standards required in 2 CFR 200.318. Additionally, the Rancheria does not have a procurement policy which complies with those standards. Context 1. 4 of 31 transactions tested 2. 2 of 31 transactions tested 3. 1 of 31 transactions tested Effect The Rancheria has possibly misstated federal expenditures between federal programs. Cause The Rancheria has not implemented a grant management system or procurement policy which is in compliances with 2 CFR 200.318. Recommendation The Rancheria should implement a grant management system, and also develop a process for capturing the correct allocation of expenditures for programs. Additionally the Rancheria should adopt and implement a new procurement policy.

Federal Awards Finding 2023-004: Noncompliance with Federal Award Program Requirements Criteria or Specific Requirement The Uniform Guidance states that the auditee is responsible for “maintaining internal control over Federal programs that provides reasonable assurance that the auditee is managing Federal awards in compliance with laws, regulations, and the provisions of contracts or grant agreements that could have a material effect on each of its Federal programs.” Specifically, this Finding applies to the following Compliance Requirements outlined in the 2023 Compliance Supplement: 1. Activities Allowed or Unallowed & Allowable Costs/Cost Principles 2. Procurement, Suspension & Debarment Finding/Condition We noted the following deficiencies: 1. The Rancheria was unable to provide supporting documentation for the allocation of expenditures reported for federal award programs. 2. The Rancheria was unable to provide actual time records for employees, supporting payroll expenditures claimed as expenditures for federal award programs. 3. The Rancheria was unable to provide documentation to show that it complied with the procurement standards required in 2 CFR 200.318. Additionally, the Rancheria does not have a procurement policy which complies with those standards. Context 1. 4 of 31 transactions tested 2. 2 of 31 transactions tested 3. 1 of 31 transactions tested Effect The Rancheria has possibly misstated federal expenditures between federal programs. Cause The Rancheria has not implemented a grant management system or procurement policy which is in compliances with 2 CFR 200.318. Recommendation The Rancheria should implement a grant management system, and also develop a process for capturing the correct allocation of expenditures for programs. Additionally the Rancheria should adopt and implement a new procurement policy.

Finding 2023–001 Department of Treasury Federal Assistance Listing No. 21.027 Coronavirus State and Local Fiscal Recovery Funds Significant Deficiency and Noncompliance over Procurement and Suspension and Debarment Repeat Finding: Yes Condition: During our testing and review of the Organization’s procurement policy, we were unable to obtain documentation to support the Organization’s basis for sole source contracts. Additionally, documentation was not available to support the inquiries around suspension and disbarment. Criteria: The Uniform Guidance and 45 CF Part 75 require that non-federal entities receiving federal awards establish and maintain internal controls designed to reasonably ensure compliance with federal laws, regulations, and program compliance requirements. The characteristics of internal controls are presented in the context of the components of internal controls discussed in the Internal Control-Integrated Framework (COSO Report), published by the Committee of Sponsoring Organizations of the Treadway Commission. The COSO Report provides a framework for organizations to design, implement, and evaluate controls that will facilitate compliance with the requirements of federal laws, regulations, and program compliance requirements. Per 2 CFR 200.320 General procurement stands: (a) Noncompetitive procurement. There are specific circumstances in which noncompetitive procurement can be used. Noncompetitive procurement can only be awarded if one or more of the following circumstances apply: (1) The acquisition of property or services, the aggregate dollar amount of which does not exceed the micro-purchase threshold; (2) The item is available only from a single source; (3) The public exigency or emergency for the requirement will not permit a delay resulting from publicizing a competitive solicitation; (4) The federal awarding agency or pass-through entity expressly authorizes a noncompetitive procurement in response to a written request from the non-federal entity; or (5) After solicitation of a number of sources, competition is determined inadequate. Per 2 CFR 200.318 General procurement stands: (b) The non-federal entity must use its own documented procurement procedures which reflect applicable state, local, and tribal laws and regulations, provided that the procurements conform to applicable federal law and the standards identified in this part. Per Uniform Guidance, non-federal entities are prohibited from contracting with or making subawards under covered transactions to parties that are suspended or debarred. “Covered transactions” include contracts for goods and services awarded under a non-procurement transaction (e.g., grant or cooperative agreement) that are expected to equal or exceed $25,000 or meet certain other criteria as specified in 2 CFR section 180.220. All non-procurement transactions entered into by a pass-through entity (i.e., subawards to subrecipients), irrespective of award amount, are considered covered transactions, unless they are exempt as provided in 2 CFR section 180.215. When a non-federal entity enters into a covered transaction with an entity at a lower tier, the non-federal entity must verify that the entity, as defined in 2 CFR section 180.995 and agency adopting regulations, is not suspended or debarred or otherwise excluded from participating in the transaction. This verification may be accomplished by (1) checking the System for Award Management (SAM) Exclusions maintained by the General Services Administration (GSA) and available at SAM.gov Home (2) collecting a certification from the entity, or (3) adding a clause or condition to the covered transaction with that entity (2 CFR section 180.300). Cause: The Organization did not apply the required procurement policy relative to sole source contracts in accordance with Uniform Guidance. Management also did not complete a review of vendors/contractors to verify they are not suspended, debarred, or otherwise excluded before contracting. Effect: The Organization does not have adequate documentation to support its sole source procurement and is not in compliance with federal guidelines. Questioned Costs: Unknown Recommendation: We recommend the Organization update and follow their controls to identify vendors that should go through the procurement process. We also recommend the Organization follow their process to verify that entities are not suspended, debarred, or otherwise excluded annually at time of award and to document those procedures. Views of Responsible Officials: Management agrees with the finding. Refer to the Corrective Action Plan.

Finding: 2023-001 Program Title: Congressionally Funded Community Projects Assistance Listing: 84.215K Contract Grant Number: S215K230172 Federal Award Years: July 1, 2023 to May 31, 2025 Federal Agency: U.S. Department of Education Type of Finding: Material Noncompliance Criteria: 2 CFR sections 200.318 through 200.326 establishes the procurement standards applicable to Non- Federal Entities applicable to federal awards. When acquisitions exceed the simplified acquisition threshold of $250,000, the non-federal entity must use one of the following procurement methods: the sealed bid method, the competitive proposals method, or the noncompetitive proposals method based on the criteria outlined in 2 CFR section 200.320. Condition: Based on procedures performed, SC&C identified acquisitions in excess of the simplified acquisition threshold that were not selected using an appropriate procurement method. Cause: The Organization was unaware of the compliance requirement. Also, the Organization did not follow its written procurement policy. Effect: $324,000 of costs are questioned costs as a result of failing to meet procurement requirements. This is considered material to the Congressionally Funded Community Projects. Repeat Finding: No Recommendation: We recommend the Organization establish and implement written policies and procedures to establish to ensure compliance with the compliance requirements and terms and conditions of the federal award. Views of Responsible Officials: Management agrees with the recommendations to establish and implement written policies and procedures to conform with the compliance requirements and terms and conditions of the federal award.

Information on Federal Programs: 93.083 – Centers for Disease Control and Prevention: Prevention of Disease, Disability, and Death through Immunization & Control of Respiratory & Related Diseases. Criteria or Specific Requirements: According to 2 CFR §200.303, the non-Federal entity must: establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in Standards for Internal Control in the Federal Government, issued by the Comptroller General of the United States, or the Internal Control Integrated Framework, issued by COSO. Additionally, according to 2 CFR §200.320, the non-Federal entity must have and use documented procurement procedures, consistent with the standards of this section and §200.318 and §200.319. Condition: During the testing of the procurement compliance requirement related to the major programs, it was determined that ATS did not have a documented procurement policy in place for procurement of property or services required under a Federal award. Cause: Management did not have internal control procedures in place to ensure that procurement requirements were adequately followed, documented and retained when Federal awards were obtained. Effect: Failure to have and use documented procurement policies and procedures could have resulted in noncompliance with the Criteria or Specific Requirements section above. Perspective: While ATS did not have documented procurement policies and procedures compliant with 2 CFR §200.320, ATS did establish a documented selection criteria policy for contractors under its Federal program. With this policy ATS created a selection subcommittee to review, evaluate and select contractors. The subcommittee evaluated the applications received and chose the contractors based on several selection criteria. Each contractor’s application was sent for review and approval by prime awardee. Within a random sample of 4 procurement contracts, 4 were selected based on the selection criteria policy established. Questioned Costs: Questioned costs were not identified. Repeat Finding: Not applicable. Recommendation: ATS should update its procurement policy to include requirements for procurement of property or services required under a Federal award or subaward to ensure compliance with the Uniform Guidance.

Criteria or Specific Requirement OMB’s Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (UG) requires that grant recipients follow procurement procedures for the acquisition of property or services under a federal award. Grantees are required to comply with certain procurement standards as defined in 2 CFR 200.318. These standards include the requirement that the grantee must use its own documented procurement procedures provided that they conform to applicable federal law. In addition, the grantee must maintain records sufficient to detail the history of procurement. Condition and Context During planning procedures for our audit, we concluded that the prior year finding over procurement was not yet remediated. Based on our procedures, there was no supporting documentation retained for those transactions subject to procurement and approvals were given verbally between the requestor and the Executive Director. Cause The Organization did not have adequate controls or policies in place to maintain formal evidence of procurement and to ensure the Organization’s procurement policy was adhered to. Effect or Potential Effect Due to the weakness in internal controls and compliance finding noted above, there is a risk that contracts may be awarded to vendors in a manner that is not consistent with Federal procurement requirements and the Organization’s procurement policy. No questioned costs are reported as vendors subject to procurement policies are below $25,000. Recommendation The Organization should address the weaknesses in internal controls noted above in order to ensure that federal procurements are conducted in accordance with federal requirements and supporting documentation is maintained to support such conclusion. The Organization should ensure that prior to entering into transactions, a review is performed over vendor selection and all required documentation is retained. Views of Responsible Official Management’s corrective action plan is included at the end of this report after the Schedule of Prior Year Findings.

Criteria or Specific Requirement OMB’s Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (UG) requires that grant recipients follow procurement procedures for the acquisition of property or services under a federal award. Grantees are required to comply with certain procurement standards as defined in 2 CFR 200.318. These standards include the requirement that the grantee must use its own documented procurement procedures provided that they conform to applicable federal law. In addition, the grantee must maintain records sufficient to detail the history of procurement. Condition and Context During planning procedures for our audit, we concluded that the prior year finding over procurement was not yet remediated. Based on our procedures, there was no supporting documentation retained for those transactions subject to procurement and approvals were given verbally between the requestor and the Executive Director. Cause The Organization did not have adequate controls or policies in place to maintain formal evidence of procurement and to ensure the Organization’s procurement policy was adhered to. Effect or Potential Effect Due to the weakness in internal controls and compliance finding noted above, there is a risk that contracts may be awarded to vendors in a manner that is not consistent with Federal procurement requirements and the Organization’s procurement policy. No questioned costs are reported as vendors subject to procurement policies are below $25,000. Recommendation The Organization should address the weaknesses in internal controls noted above in order to ensure that federal procurements are conducted in accordance with federal requirements and supporting documentation is maintained to support such conclusion. The Organization should ensure that prior to entering into transactions, a review is performed over vendor selection and all required documentation is retained. Views of Responsible Official Management’s corrective action plan is included at the end of this report after the Schedule of Prior Year Findings.

Uniform Guidance requires written policies for the requirements outlined in 2 CFR 200.302(b)(7), 2 CFR 200.318(c)(1), 2 CFR 200.318(c)(2), 2 CFR 200.320(b)(2), and 2 CFR 200.319(d). The Village does not have written policies in place for the requirements outlined in the Code of Federal Regulations sections referenced above.

Criteria: The Uniform Guidance requires written policies and procedures documenting how the organization determines and complies with the applicable compliance requirements. Condition: BREC does not currently maintain written policies and procedures for determining and documenting the applicable compliance requirements in accordance with 2 CFR 200.318-326. Questioned Costs: None. Cause: Written policies and procedures for the applicable compliance requirements have not been developed. Effect: Written policies and procedures over the applicable compliance requirements are not available to guide staff responsible for federal expenditures. Recommendation: We recommend that BREC develop written policies and procedures for determining and documenting the applicable compliance requirements under the Uniform Guidance. Repeat Finding: No. View of Responsible Official: While BREC currently does not have any federal expenses identified as unallowable costs applicable to this finding, a written SOP was recently developed for determining allowable costs and procurement requirements in accordance with the applicable CFR to guide key finance staff with responsibility for federally eligible expenditures.

United States Department of the Treasury Reference Number: 2023-012 Program: 21.027 Coronavirus State and Local Fiscal Recovery Funds (SLFRF) Federal Award Number: None Assigned Type of Finding: Noncompliance and Significant Deficiency in Internal Controls over Compliance Compliance Requirement: Procurement Condition: During our audit of procurement transactions related to the SLFRF, we noted one instance where the Town acquired precast restrooms at a cost of $339,500, for a park project without a competitive bidding process, as required by federal regulations and the Town’s Purchasing Policy. Criteria: Under 2 CFR §200.318-§200.326, non-federal entities must follow documented procurement procedures that reflect applicable state, local, and tribal laws and regulations, provided those procedures conform to federal standards. The Town has adopted procurement policies requiring competitive bidding for purchases of equipment, materials, or professional services, with an estimated total cost exceeding $25,000 for an individual item/service or an overall contract exceeding $50,000. The policy also requires the documentation of vendor selection and justification. Cause: The Town did not consistently enforce its procurement policies due to turnover in key positions during the year. Effect: The Town was not in compliance with the Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) at 2 CFR §200.318-§200.326 and with its own procurement policies. The lack of competitive bidding for purchases, where it is required increases the risk that the Town may not receive the best prices or terms for the goods and services it purchases. Recommendation: We recommend that the Finance Department enhance its processes and oversight surrounding federal and Town procurement requirements. Views of Responsible Town Officials and Planned Corrective Actions: See corrective action plan. Responsible Positions: Town Manager and Director of Finance

2 CFR 200 outlines the following policies required for a County spending Coronavirus State and Local Fiscal Recovery Funds: • 2 CFR 200.302(b)(7) for determining the allowability of costs in accordance with Subpart E-Cost Principles; • 2 CFR 200.430 for allowability of compensation costs; 2 CFR 200.464(a)(2) for reimbursement of relocation costs; • 2 CFR 200.318(c)(1) for employee conflicts of interest; • 2 CFR 200.318(c)(2) for organizational conflicts of interest; • 2 CFR 200.320(b)(2) for selection and awarding of contracts for competitive proposals; • 2 CFR 200.319(d) for minimum evaluation criteria for bids and proposals. During testing we noted that the County did not have sufficient written policies addressing the above requirements. Failure to adopt and implement policies could lead to noncompliance with federal requirements. We recommend the County approve and implement the above policies to ensure compliance with federal requirements.

2 CFR 200 outlines the following policies required for a County spending Coronavirus State and Local Fiscal Recovery Funds: • 2 CFR 200.302(b)(7) for determining the allowability of costs in accordance with Subpart E-Cost Principles; • 2 CFR 200.430 for allowability of compensation costs; 2 CFR 200.464(a)(2) for reimbursement of relocation costs; • 2 CFR 200.318(c)(1) for employee conflicts of interest; • 2 CFR 200.318(c)(2) for organizational conflicts of interest; • 2 CFR 200.320(b)(2) for selection and awarding of contracts for competitive proposals; • 2 CFR 200.319(d) for minimum evaluation criteria for bids and proposals. During testing we noted that the County did not have sufficient written policies addressing the above requirements. Failure to adopt and implement policies could lead to noncompliance with federal requirements. We recommend the County approve and implement the above policies to ensure compliance with federal requirements.

2 CFR 200 outlines the following policies required for a County spending Coronavirus State and Local Fiscal Recovery Funds: • 2 CFR 200.302(b)(7) for determining the allowability of costs in accordance with Subpart E-Cost Principles; • 2 CFR 200.430 for allowability of compensation costs; 2 CFR 200.464(a)(2) for reimbursement of relocation costs; • 2 CFR 200.318(c)(1) for employee conflicts of interest; • 2 CFR 200.318(c)(2) for organizational conflicts of interest; • 2 CFR 200.320(b)(2) for selection and awarding of contracts for competitive proposals; • 2 CFR 200.319(d) for minimum evaluation criteria for bids and proposals. During testing we noted that the County did not have sufficient written policies addressing the above requirements. Failure to adopt and implement policies could lead to noncompliance with federal requirements. We recommend the County approve and implement the above policies to ensure compliance with federal requirements.

2 CFR 200 outlines the following policies required for a County spending Coronavirus State and Local Fiscal Recovery Funds: • 2 CFR 200.302(b)(7) for determining the allowability of costs in accordance with Subpart E-Cost Principles; • 2 CFR 200.430 for allowability of compensation costs; 2 CFR 200.464(a)(2) for reimbursement of relocation costs; • 2 CFR 200.318(c)(1) for employee conflicts of interest; • 2 CFR 200.318(c)(2) for organizational conflicts of interest; • 2 CFR 200.320(b)(2) for selection and awarding of contracts for competitive proposals; • 2 CFR 200.319(d) for minimum evaluation criteria for bids and proposals. During testing we noted that the County did not have sufficient written policies addressing the above requirements. Failure to adopt and implement policies could lead to noncompliance with federal requirements. We recommend the County approve and implement the above policies to ensure compliance with federal requirements.

Assistance Listing, Federal Agency, and Program Name 21.027 U.S. Department of the Treasury Coronavirus State and Local Fiscal Recovery Funds Federal Award Identification Number and Year MH 1251 2023 Pass through Entity The Ohio Department of Mental Health and Addiction Services Finding Type Significant deficiency Repeat Finding No Criteria Per 2 CFR 200.320, an entity must have written procurement procedures that address the procurement methods outlined throughout 2 CFR 200.318, 200.319, and 200.320. Condition Controls in place were not adequate to ensure the policy included appropriate procurement thresholds and methods. Questioned Costs N/A If questioned costs are not determinable, description of why known questioned costs were undetermined or otherwise could not be reported N/A Identification of How Questioned Costs Were Computed N/A Context ProMedica did not include all requirements outlined throughout 2 CFR 200.318, 200.319, and 200.320 for procurement methods in their written policy. Cause and Effect ProMedica has written procurement procedures in place, however these policies did not include all requirements outlined throughout 2 CFR 200.318, 200.319, and 200.320. This lack of controls could lead to noncompliance with the Uniform Guidance requirement to have written policies. Recommendation Management should implement controls to ensure all procurement policies align with the guidance in 2 CFR 200.318, 200.319, and 200.320. Views of Responsible Officials and Planned Corrective Actions Management understands the importance of adhering to procurement thresholds and methods. Procurement policies and grant policies will be updated to include federal thresholds and methods to reflect federal Uniform Guidance.

FINDING 2023-004 Subject: Drinking Water State Revolving Fund (DWSRF) Cluster - Procurement and Suspension and Debarment Federal Agency: Environmental Protection Agency Federal Program: Drinking Water State Revolving Fund Assistance Listings Number: 66.468 Federal Award Number and Year (or Other Identifying Number): DW23150901 Pass-Through Entity: Indiana Finance Authority Compliance Requirement: Procurement and Suspension and Debarment Audit Findings: Material Weakness, Modified Opinion Condition and Context An effective internal control system was not designed or implemented at the City to ensure compliance with requirements related to the grant agreement and the Procurement and Suspension and Debarment compliance requirement. Procurement - Policy The City had not established a purchasing policy that reflected applicable state laws and regulations, including procedures to avoid the acquisition of unnecessary or duplicative items and procedures to ensure that all solicitations incorporate a clear and accurate description of the technical requirements for the material, product, or service to be procured. Additionally, the City did not maintain a policy that prohibits the use of statutorily or administratively imposed state, local, or tribal geographical preferences in evaluation of bids or proposals. INDIANA STATE BOARD OF ACCOUNTS 22 CITY OF LOGANSPORT SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Procurement - Small Purchases The City expended federal funds to pay 12 separate vendors to provide goods and services for the duration of the City's Lead Service Line Replacement project. A population of 5 vendors had aggregated expenditures for the audit period that were less than the simplified acquisition threshold of $150,000 but exceeded the $10,000 micro-purchase threshold. All 5 vendors were tested; for 2 of the 5 vendors, the City was unable to provide any documentation that the procurement method used was appropriate or that the procurement provided full and open competition or rationale to support the determination to limit competition. The history of the procurement, including rationale for the method of procurement, selection of the vendor, and the basis for the price, was not adequately documented. Suspension and Debarment Prior to entering into subawards and covered transactions with award funds, recipients are required to verify that vendors are not suspended, debarred, or otherwise excluded. "Covered transactions" include, but are not limited to, contracts for goods and services awarded under a nonprocurement transaction (i.e., grant agreement) that are expected to equal or exceed $25,000. The verification is to be done by checking the Excluded Parties List System (EPLS), collecting a certification from that person, or adding a clause or condition to the covered transaction with that person. Due to the agreement with the Indiana Finance Authority (IFA), the City was not required to perform testing over suspension and debarment for a majority of the vendors used; however, several drawdowns from the State Revolving Funds (SRF) program were used to reimburse the City for payments made to specific vendors. The vendors paid directly by the City were not included in the IFA's procedures for checking suspension and debarment, therefore, the City was obligated to meet the requirement. The City did not maintain a set of procedures for checking suspension and debarment status of vendors for expenditures related to the SRF awards. A total of two vendors paid directly by the City exceeded the suspension and debarment threshold of $25,000 and were subject to testing. No documentation to show that suspension and debarment was verified prior to entering into the contract could be provided for either vendor. The lack of internal controls and noncompliance was a systemic issue throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." INDIANA STATE BOARD OF ACCOUNTS 23 CITY OF LOGANSPORT SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) 2 CFR 200.320 states in part: "The non-Federal entity must have and use documented procurement procedures, consistent with the standards of this section and §§ 200.317, 200.318, and 200.319 for any of the following methods of procurement used for the acquisition of property or services required under a Federal award or sub-award. (a) Informal procurement methods. When the value of the procurement for property or services under a Federal award does not exceed the simplified acquisition threshold (SAT), as defined in § 200.1, or a lower threshold established by a non-Federal entity, formal procurement methods are not required. The non-Federal entity may use informal procurement methods to expedite the completion of its transactions and minimize the associated administrative burden and cost. The informal methods used for procurement of property or services at or below the SAT include: . . . (2) Small purchases– (i) Small purchase procedures. The acquisition of property or services, the aggregate dollar amount of which is higher than the micro-purchase threshold but does not exceed the simplified acquisition threshold. If small purchase procedures are used, price or rate quotations must be obtained from an adequate number of qualified sources as determined appropriate by the non-Federal entity. . . ." 2 CFR 180.300 states: "When you enter into a covered transaction with another person at the next lower tier, you must verify that the person with whom you intend to do business is not excluded or disqualified. You do this by: (a) Checking the SAM.gov Exclusions; or (b) Collecting a certification from that person; or (c) Adding a clause or condition to the covered transaction with that person." 2 CFR 200.214 states: "Non-Federal entities are subject to the non-procurement debarment and suspension regulations implementing Executive Orders 12549 and 12689, 2 CFR part 180. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities." 2 CFR 200.318(a) states: "The non-Federal entity must have and use documented procurement procedures, consistent with State, local, and tribal laws and regulations and the standards of this section, for the acquisition of property or services required under a Federal award or subaward. The nonfederal entity's documented procurement procedures must conform to the procurement standards identified in §§ 200.317 through 200.327." INDIANA STATE BOARD OF ACCOUNTS 24 CITY OF LOGANSPORT SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) 2 CFR 200.318(d) states: "The non-Federal entity's procedures must avoid acquisition of unnecessary or duplicative items. Consideration should be given to consolidating or breaking out procurements to obtain a more economical purchase. Where appropriate, an analysis will be made of lease versus purchase alternatives, and any other appropriate analysis to determine the most economical approach." 2 CFR 200.319(c) states: "The non-Federal entity must conduct procurements in a manner that prohibits the use of statutorily or administratively imposed state, local, or tribal geographical preferences in the evaluation of bids or proposals, except in those cases where applicable Federal statutes expressly mandate or encourage geographic preference. Nothing in this section preempts state licensing laws. When contracting for architectural and engineering (A/E) services, geographic location may be a selection criterion provided its application leaves an appropriate number of qualified firms, given the nature and size of the project, to compete for the contract." 2 CFR 200.319(d) states: "The non-Federal entity must have written procedures for procurement transactions. These procedures must ensure that all solicitations: (1) Incorporate a clear and accurate description of the technical requirements for the material, product, or service to be procured. Such description must not, in competitive procurements, contain features which unduly restrict competition. The description may include a statement of the qualitative nature of the material, product or service to be procured and, when necessary, must set forth those minimum essential characteristics and standards to which it must conform if it is to satisfy its intended use. Detailed product specifications should be avoided if at all possible. When it is impractical or uneconomical to make a clear and accurate description of the technical requirements, a 'brand name or equivalent' description may be used as a means to define the performance or other salient requirements of procurement. The specific features of the named brand which must be met by offers must be clearly stated; and (2) Identify all requirements which the offerors must fulfill and all other factors to be used in evaluating bids or proposals." Cause The City did not maintain a procurement policy that would demonstrate the appropriate procedures to be followed when procuring with federal funding and were not aware of the need to follow federal guidelines for procurement or suspension and debarment for expenditures associated with the SRF awards. Effect Without a proper system of internal controls in place that operated effectively, noncompliance remained undetected. As a result, proper procurement procedures were not adhered to for all vendors. Without following the required methods for procurement, the City could be overpaying for services or providing federal funds to an entity that is suspended or debarred. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funds to the City. INDIANA STATE BOARD OF ACCOUNTS 25 CITY OF LOGANSPORT SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Questioned Costs There were no questioned costs identified. Recommendation We recommended that the City's management establish a proper system of internal controls to ensure expenditures made from federal awards use the appropriate procurement method and retain the documentation to support the procurement methods used in order to ensure compliance with the terms and conditions of the federal award and ensure that vendors paid from federal funds are neither suspended nor debarred. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

2023-002 The Town did not have adequate internal controls for ensuring compliance with federal suspension, debarment and procurement requirements, and it did not comply with federal suspension and debarment requirements. Assistance Listing Number and Title: 97.047 Building Resilient Infrastructure and Communities Federal Grantor Name: Department of Homeland Security Federal Award/Contract Number: EMS-2018-PC-001 Pass-through Entity Name: Washington State Military Department Pass-through Award/Contract Number: PDMC-PL-10-WA-2017-003 Known Questioned Cost Amount: $0 Prior Year Audit Finding: N/A Background During fiscal year 2023, the Town spent $642,325 of the Building Resilient Infrastructure and Communities (BRIC) program. The objective of the program is to make federal funds available to local communities for hazard mitigation activities. The Town used the program funds to upgrade and relocate an existing watermain. Federal regulations require recipients to establish and maintain internal controls that ensure compliance with program requirements. These controls include understanding program requirements and monitoring the effectiveness of established controls. Suspension and debarment Federal requirements prohibit recipients from contracting with or purchasing from parties suspended or debarred from doing business with the federal government. Whenever the Town enters into contracts or purchases goods and services that it expects to equal or exceed $25,000, paid all or in part with federal funds, it must 20 Office of the Washington State Auditor sao.wa.gov verify the contractors are not suspended, debarred or otherwise excluded from participating in federal programs. The Town may verify this by obtaining a written certification from the contractor, adding a clause or condition into the contract that states the contractor is not suspended or debarred, or checking for exclusion records in the U.S. General Services Administration’s System for Award Management at SAM.gov. The Town must verify this before entering into the contract, and must maintain documentation demonstrating compliance with this federal requirement. Procurement Federal regulations require recipients to follow their own documented procurement procedures, which must conform to the Uniform Guidance procurement standards found in 2 CFR 200.318-327. The procedures must reflect the most restrictive of federal, state or local procurement thresholds and methods when using federal funds. Additionally, federal regulations require recipients to maintain written standards of conduct that cover conflicts of interest and govern the actions of employees involved in selecting, awarding or administrating contracts procured with federal funds. Description of Condition Suspension and Debarment Our audit found the Town did not have internal controls to verify two of the three contractors that it paid more than $25,000 in federal funds were not suspended or debarred from participating in federal programs. We consider this deficiency in internal controls to be a material weakness that led to material noncompliance. Procurement Our audit found the Town’s internal controls were ineffective for ensuring compliance with federal procurement requirements. Although the Town has a procurement policy, it does not conform with federal requirements. Specifically, the Town’s procurement policy does not include methods for procuring architectural and engineering services, public works projects and more, and the thresholds in the policy do not conform with the most restrictive requirements. Further, the Town did not have standards of conduct policies or procedures over conflicts of interest for officers or agents who award contracts, as federal regulations require. We consider this deficiency in internal controls to be a significant deficiency. 21 Office of the Washington State Auditor sao.wa.gov Cause of Condition Suspension and Debarment The Town experienced turnover among key staff, and current staff could not locate documentation to demonstrate compliance with federal suspension and debarment requirements. Procurement The Town does not regularly manage federal funds and as a result, staff were unaware of the requirement to have written standards of conduct and procurement policies or procedures that conform to federal procurement standards. Effect of Condition Suspension and Debarment The Town did not obtain a written certification from the contractors, insert a clause into the contracts, or check for exclusion records at SAM.gov to verify contractors it paid $98,103 using federal funds were not suspended or debarred before contracting with them. Without adequate internal controls, the Town increases its risk of awarding federal funds to contractors that are excluded from participating in federal programs. Any payments the Town made to an ineligible party would be unallowable, and the awarding agency could potentially recover them. We subsequently verified the contractors were not suspended or debarred. Therefore, we are not questioning costs. Procurement Without written policies and procedures that conform to federal procurement standards, the Town is at an increased risk of not complying with the most restrictive of federal, state or local procurement requirements when using federal funds to procure contractors. Although the Town’s procurement policy did not conform to federal procurement standards and it did not have a standards of conduct policy in place, we found the Town complied with federal requirements for soliciting and awarding the architectural and engineering services and public works contracts we tested. 22 Office of the Washington State Auditor sao.wa.gov Recommendation Suspension and Debarment We recommend the Town strengthen its internal controls to verify all contractors it pays $25,000, all or in part with federal funds, are not suspended or debarred from participating in federal programs and maintain documentation demonstrating compliance with this requirement. Procurement We recommend the Town update its procurement policies and procedures and develop written standards of conduct procedures that conform to federal procurement standards in Uniform Guidance (2 CFR 200.318-327). Town’s Response The Town of Coupeville acknowledges SAO’s recommendation regarding the need to strengthen internal controls regarding federal procurement, as well as to update the procurement policy to ensure full compliance with the Uniform Guidance including conflict of interest and ethics sections. In response, the Town is updating procurement contracts with suspension and debarment verbiage and aligning policy with the requirements outlined in the Uniform Guidance (2 CFR 200) ensuring that all procurement processes are conducted in accordance with federal regulations and standards of conduct. The Town further ensures all authorized purchasers within the Town of Coupeville will receive ongoing training in procurement policies particularly when engaging in grant activities. The Town of Coupeville would like to thank the State Auditor’s Office for its thorough review and the valuable recommendations provided in the recent audit report. We appreciate the time and effort the audit team took to identify areas where our internal controls and processes can be improved. We take these findings seriously and will continue to take proactive steps to enhance our processes and ensure accountability regarding our use of federal funds. Auditor’s Remarks We appreciate the Town's commitment to resolve this finding and thank the Town for its cooperation and assistance during the audit. We will review the corrective action taken during our next regular audit. 23 Office of the Washington State Auditor sao.wa.gov Applicable Laws and Regulations Title 2 U.S. Code of Federal Regulations (CFR) Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance), section 516, Audit findings, establishes reporting requirements for audit findings. Title 2 CFR Part 200, Uniform Guidance, section 303, Internal controls, describes the requirements for auditees to maintain internal controls over federal programs and comply with federal program requirements. The American Institute of Certified Public Accountants defines significant deficiencies and material weaknesses in its Codification of Statements on Auditing Standards, section 935, Compliance Audits, paragraph 11. Title 2 CFR Part 180, OMB Guidelines to Agencies on Governmentwide Debarment and Suspension (Nonprocurement), establishes nonprocurement debarment and suspension regulations implementing Executive Orders 12549 and 12689. Title 2 CFR Part 200, Uniform Guidance, section 318, General procurement standards, establishes requirements for written procedures.

Identification as a Repeat Finding: N/A Finding: Blue Mountain Land Trust did not have a written procurement policy that complies with the procurement standards established in 2 CFR sections 200.318 through 200.326 in place during the year. Criteria: Non-Federal entities other than States must follow the procurement standards set out at 2 CFR sections 200.318 through 200.326. They must use their own documented procurement procedures, which reflect applicable State and local laws and regulations, provided that the procurements conform to applicable Federal statutes and the procurement requirements identified in 2 CFR 200. Condition and context: Blue Mountain Land Trust maintains a practice of soliciting bids for services from at least three contractors, but it has not established a written policy that contemplates all required elements under 2 CFR sections 200.318 through 200.326. Sample size and population: Sampling was not applicable to this finding. Effect: The result of the finding is that Blue Mountain Land Trust is not in compliance with federal procurement standards during the compliance year. Recommendation: Formalize written procurement procedures in compliance with required standards. Question Costs: None Management Response and Corrective Action Plan: See Corrective Action Plan Contact Person: Amanda Martino, Executive Director

Finding 2023-002: Material Weakness - Lack of Documentation on Sole Source Contracts and Verification of Vendors Federal grantor: Department of Commerce Condition: The Chamber contract with a vendor on a sole-source basis and did not document justification for the use of a sole source vendor. In addition, the Chamber did not verify that the vendor was not on the list of vendors suspended or debarred from federal contracting before contracting with the vendor. Criteria: Entities are required to follow the procurement standards in 2 CFR sections 200.318 through 200.327, including ensuring that the procurement method used for the contracts are appropriate based on the dollar amount and conditions specified in 2 CFR section 200.320 and noncompetitive procurements. Entities also must comply with 2 CFR Part 1326 that prohibits entities that have been debarred, suspended or voluntarily excluded from participating in Federal procurement. Cause: The Chamber’s Procurement Policy allows for a sole source vendor but requires staff to document sole source procurements prior to initial purchase. It appears staff did not follow its policy. The Policy also contains a requirement to verify or receive vendor certification that they are not debarred, suspended, ineligible or voluntarily excluded from Federal procurements, but this procedure was not followed. Effect: The Department of Commerce may impose additional conditions on the receipt of a subsequent tranche of future award funds, if any, or take other available remedies as set forth in 2 C.F.C. section 200.339. Recommendation: We recommend the Chamber review policies with staff to ensure procurement requirements are followed, and that staff are familiar with federal procurement requirements. Views of Responsible Officials and Planned Corrective Actions: The Chamber agrees with this finding and is in the process of implementing changes to their procurement process.

Federal Agency: U.S. Department of Health and Human Services Federal Program Name: Health Center Cluster Assistance Listing Number: 93.224/93.527 Federal Award Identification Number: H80CS12856 Award Periods: March 1, 2023 – February 29, 2024 Type of Finding: Significant Deficiency in Internal Control Over Compliance Criteria: 2 CFR sections 200.212 and 200.318(h); 2 CFR section 180.300; 48 CFR section 52.209-6 outlines that the non-Federal entity must verify that the agency in which it is entering into a contract is not suspended or debarred or otherwise excluded from participating in the transaction. Condition: As a result of the lack of a suspension and debarment policy, the organization did not document that Sam.gov was checked prior to entering into a contract with a vendor. Questioned costs: None. Context: Five (5) of five (5) vendors selected for testing did not have evidence prior to contracting of a check for suspension and debarment. However, subsequent review showed evidence the vendors were not suspended and debarred. Cause: Employee turnover. Effect: Possible noncompliance with 2 CFR section 200.320(c)(1) - (3). Repeat finding: No. Recommendation: We recommend that the organization retain documentation that Sam.gov was used to verify that a vendor was not suspended, debarred, or otherwise excluded from participating in the transaction prior to contract. The organization can keep screenshots that Sam.gov was checked or a PDF print out of the web page which includes the date verified. Views of responsible officials: There is no disagreement with the audit finding.

The Town did not have adequate internal controls for ensuring compliance with federal procurement requirements. Assistance Listing Number and Title: 10.760 – Waste and water Disposal Systems for Rural Communities Federal Grantor Name: U.S. Department of Agriculture Federal Award/Contract Number: N/A Pass-through Entity Name: N/A Pass-through Award/Contract Number: N/A Known Questioned Cost Amount: $0 Prior Year Audit Finding: No Description of Condition In fiscal year 2023, the Town spent $2,584,843 in loan and grant funds from the Water and Waste Disposal Systems for Rural Communities program. This program is intended to assist rural communities obtain safe drinking water and adequate waste disposal facilities. The Town used these funds primarily for a water line project. Federal regulations require recipients to establish and maintain internal controls that ensure compliance with program requirements. These controls include understanding program requirements and monitoring the effectiveness of established controls. Federal regulations for procurements standards in 2 CFR § 200.318 require award recipients to have written standards of conduct that cover conflicts of interest and expectations for their employees who are involved in selecting, awarding and administrating contracts and purchases. Our audit found the Town’s internal controls were ineffective for ensuring compliance with federal procurement requirements. Specifically, the Town did not establish written standards of conduct covering these required elements: • Officers, employees and agents may not participate in selecting, awarding or administrating a contract supported by a federal award if they have a real or apparent conflict of interest. • Officers, employees and agents may neither solicit nor accept gratuities, favors or anything of monetary value from contractors or parties to subcontracts. • Disciplinary actions for violating these standards We consider this deficiency in internal controls to be a significant deficiency. Cause of Condition The Town became aware of the requirement to have written standards of conduct covering selection and administration of contracts involving federal funds during the audits of fiscal years 2020 and 2021 which we conducted during calendar year 2023. Therefore, the Town was unable to adopt such policies to be compliant in year 2023. Effect of Condition Without written standards of conduct, the Town is at a greater risk of noncompliance with these requirements when using federal funds to procure contractors. Although the Town did not have policies in place, we verified that no one involved with selecting and administrating the contract had a real or apparent conflict of interest with the contract. Recommendation We recommend the Town develop written standards of conduct policies that conform to Uniform Guidance. Town’s Response Town of Twisp has since been working to draft updated federal award/purchasing/reporting policy, not only to address processes for procurement, but to establish federal purchasing policy in compliance with the recommendation of the recent audit findings including discipline for non-adherence to the policy. This Policy was adopted in October of 2024 and will alleviate any further issues with Federal procurement requirements. Auditor’s Remarks We appreciate the Town’s commitment to resolving the issues noted and we will follow up during the next audit Applicable Laws and Regulations Title 2 U.S. Code of Federal Regulations (CFR) Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance), section 516, Audit findings, establishes reporting requirements for audit findings. Title 2 CFR Part 200, Uniform Guidance, section 303, Internal controls, describes the requirements for auditees to maintain internal controls over federal programs and comply with federal program requirements. The American Institute of Certified Public Accountants defines significant deficiencies and material weaknesses in its Codification of Statements on Auditing Standards, section 935, Compliance Audits, paragraph 11.

Federal Department of Treasury Federal Program Name: Coronavirus State and Local Fiscal Recovery Funds (ARPA) Assistance Listing Number: 21.027 Federal Award Identification Number and Year: 1505-0271; 2021 Pass-Through Agency : N/A Pass-Through Number(s) : N/A Award Period: March 3, 2021 – December 31, 2024 Type of Finding: • Material Weakness in Internal Control over Compliance • Other Matters Criteria or specific requirement: Uniform Grant Guidance (2 CFR 200.318) requires the non-federal entity to maintain records sufficient to detail the history of procurement. Additionally, federal guidelines require the entity to have procedures documented to verify the vendor of a covered transaction (over $25,000) is not debarred, suspended, or otherwise excluded from participating in the transaction, prior to entering into a covered transaction. Condition: Certain purchases were not adequately documented supporting the lack of traditional procurement processes being required. Additionally, the County did not complete suspension and debarment procedures for covered transactions. Questioned costs : None. Context : In the testing of 4 of 7 procurement transactions, the County did not maintain appropriate documentation to support the history of procurement, which should include the rationale for the method of procurement, selection of contract type, contractor selection or rejection, and the basis for the contract price. Additionally, in the testing of 5 of 5 covered transactions, the County did not complete the required suspension and debarment procedures prior to purchase. Cause: Timing of implementation of new controls occurred after some transactions had already been procured. Effect: Lack of internal control procedures can lead to noncompliance with grant requirements. Repeat finding : This is a repeat of prior year finding 2022-006. Recommendation: We recommend ensuring procurement procedures are complete and in accordance with Uniform Grant Guidance for any federal purchases, and available for all departments. These procedures should include verifying vendors or contractors are not suspended or debarred from doing business, prior to contracting with them, and maintaining documentation of this. The County should consider adding a Federal Procurement Checklist that covers the applicable Uniform Guidance requirements that should be completed when making purchases and retained with other procurement documents. Views of responsible officials: There is no disagreement with the audit finding.

2023 – 003 Procurement and Suspension and Debarment Federal Agency: U.S. Department Treasury Federal Program Name: Coronavirus State and Local Fiscal Recovery Fund Assistance Listing Number: 21.027 Federal Award Identification Number and Year: SLFRP3738 11/30/2021 Award Period: March 3, 2021 through December 31, 2024 Type of Finding: • Significant Deficiency in Internal Control over Compliance • Other Matter Criteria or specific requirement: Uniform Grant Guidance (2 CFR 200.303) requires non-federal entities receiving Federal awards establish and maintain internal controls designed to reasonably ensure compliance with Federal laws, regulations, and program compliance requirements. Uniform Grant Guidance (2 CFR 200.318, 2 CFR 200.319, 2 CFR 200.324, 2 CFR 180.220, and 2 CFR 200.320,) requires a non-federal entity to maintain records sufficient to detail the history of procurement, the providing of full and open competition, the performing of cost or price analysis, and prohibits the non-federal entity to contract or make subawards to parties that are suspended or debarred (covered transactions over $25,000). These records will include the rationale for the method of procurement, selection of contract type, contractor selection or rejection, the basis for the contract price, how full and open competition was provided, the cost or price analysis performed, and verification the vendor is not suspended or debarred through the SAMs exclusion list, collecting of certification from the entity, or by adding a clause or condition to the covered transaction with the entity. Procurement methods used must be appropriate based on the dollar amount and conditions specified. Condition: Procurement methods for certain federal award purchases were not adequately documented or appropriately selected in accordance with the County’s procurement policy. In addition, the County did not maintain records the vendor was not suspended or debarred prior to entering into the transactions. Questioned costs: Unknown Context: 6 of 6 tested for procurement documentation and 6 of 6 tested for suspension and debarment documentation. Cause: With new federal funding opportunities due to the pandemic, and new guidance related to those grants, proper documentation was not retained. County policies have not been updated yet. Effect: May result in a disallowed cost if grant requirements are not followed. Repeat Finding: This is a repeat finding. Prior year finding number was 2022-003. Recommendation: We recommend the County carefully review federal procurement requirements for proper documentation needed. The County should consider use of a Federal procurement checklist. Views of responsible officials: There is no disagreement with the audit finding.

Federal Department of Treasury Federal Program Name: Coronavirus State and Local Fiscal Recovery Funds (ARPA) Assistance Listing Number: 21.027 Federal Award Identification Number and Year: 1505-0271; 2021 Pass-Through Agency : N/A Pass-Through Number(s) : N/A Award Period: March 3, 2021 – December 31, 2024 Type of Finding: • Material Weakness in Internal Control over Compliance • Other Matters Criteria or specific requirement: Uniform Grant Guidance (2 CFR 200.318) requires the non-federal entity to maintain records sufficient to detail the history of procurement. Additionally, federal guidelines require the entity to have procedures documented to verify the vendor of a covered transaction (over $25,000) is not debarred, suspended, or otherwise excluded from participating in the transaction, prior to entering into a covered transaction. Condition: Certain purchases were not adequately documented supporting the lack of traditional procurement processes being required. Additionally, the County did not complete suspension and debarment procedures for covered transactions. Questioned costs : None. Context : In the testing of 4 of 7 procurement transactions, the County did not maintain appropriate documentation to support the history of procurement, which should include the rationale for the method of procurement, selection of contract type, contractor selection or rejection, and the basis for the contract price. Additionally, in the testing of 5 of 5 covered transactions, the County did not complete the required suspension and debarment procedures prior to purchase. Cause: Timing of implementation of new controls occurred after some transactions had already been procured. Effect: Lack of internal control procedures can lead to noncompliance with grant requirements. Repeat finding : This is a repeat of prior year finding 2022-006. Recommendation: We recommend ensuring procurement procedures are complete and in accordance with Uniform Grant Guidance for any federal purchases, and available for all departments. These procedures should include verifying vendors or contractors are not suspended or debarred from doing business, prior to contracting with them, and maintaining documentation of this. The County should consider adding a Federal Procurement Checklist that covers the applicable Uniform Guidance requirements that should be completed when making purchases and retained with other procurement documents. Views of responsible officials: There is no disagreement with the audit finding.

2023 – 003 Procurement and Suspension and Debarment Federal Agency: U.S. Department Treasury Federal Program Name: Coronavirus State and Local Fiscal Recovery Fund Assistance Listing Number: 21.027 Federal Award Identification Number and Year: SLFRP3738 11/30/2021 Award Period: March 3, 2021 through December 31, 2024 Type of Finding: • Significant Deficiency in Internal Control over Compliance • Other Matter Criteria or specific requirement: Uniform Grant Guidance (2 CFR 200.303) requires non-federal entities receiving Federal awards establish and maintain internal controls designed to reasonably ensure compliance with Federal laws, regulations, and program compliance requirements. Uniform Grant Guidance (2 CFR 200.318, 2 CFR 200.319, 2 CFR 200.324, 2 CFR 180.220, and 2 CFR 200.320,) requires a non-federal entity to maintain records sufficient to detail the history of procurement, the providing of full and open competition, the performing of cost or price analysis, and prohibits the non-federal entity to contract or make subawards to parties that are suspended or debarred (covered transactions over $25,000). These records will include the rationale for the method of procurement, selection of contract type, contractor selection or rejection, the basis for the contract price, how full and open competition was provided, the cost or price analysis performed, and verification the vendor is not suspended or debarred through the SAMs exclusion list, collecting of certification from the entity, or by adding a clause or condition to the covered transaction with the entity. Procurement methods used must be appropriate based on the dollar amount and conditions specified. Condition: Procurement methods for certain federal award purchases were not adequately documented or appropriately selected in accordance with the County’s procurement policy. In addition, the County did not maintain records the vendor was not suspended or debarred prior to entering into the transactions. Questioned costs: Unknown Context: 6 of 6 tested for procurement documentation and 6 of 6 tested for suspension and debarment documentation. Cause: With new federal funding opportunities due to the pandemic, and new guidance related to those grants, proper documentation was not retained. County policies have not been updated yet. Effect: May result in a disallowed cost if grant requirements are not followed. Repeat Finding: This is a repeat finding. Prior year finding number was 2022-003. Recommendation: We recommend the County carefully review federal procurement requirements for proper documentation needed. The County should consider use of a Federal procurement checklist. Views of responsible officials: There is no disagreement with the audit finding.

Finding 2023-003 Significant deficiency in internal controls over compliance related to procurement. Federal Agency: U.S. Department of Commerce Program Title: Pacific Fisheries Data Program Assistance Listing Number: 11.437 Award Numbers: NOAA-NMFS-AK-2023-2007663 Award Period: October 1, 2022 to September 30, 2027 Criteria 2 U.S. Code of Federal Regulations (CFR) Part 200 Uniform Administrative Requirements, Procurement Standards require that awardees use documented procurement procedures for the acquisition of property or services required under a Federal award or subaward. Condition/Context for Evaluation IPHC's internal controls over procurement do not include the controls and procedures required by 2 CFR 200.318(a) Questioned Costs Not applicable. Cause IPHC has not yet modified its procurement policies with the requirements of the 2 CFR Part 200 Subpart D Procurement Standards. Effect or Potential Effect As a result, IPHC cannot be certain that procurements were conducted in accordance with the 2 CFR Part 200 Subpart D Procurement Standards. Repeat Finding Not applicable. Recommendation We recommend that IPHC update its procurement policy to include all procurement requirements of 2 CFR Part 200 Subpart D. Views of Responsible Officials of Auditee Management concurs with the finding and has provided the accompanying corrective action plan.

Signficiant Deficiency - Internal Controls over Procurement Department of Treasury - Direct Program- COVID 19 Coronavirus State and Local Fiscal Recovery Funds - ALN 21.027 - Program Year 2023 Criteria - Coronavirus State and Local Fiscal Recovery Fund (CSLFRF) award funds may be used to enter into contracts to procure goods and services necessary to implement one or more of the eligible purposes outline in 42 sections 802(c) and 803(c) and the Treasury's Interim and Final Rules. Recipients are expected to have procurement standards outline in the Uniform Guidance as set out in 2 CFR sections 200.318 through 200.326. Condition- The County did not obtain the supporting documentation from the Medical Examiner's Office at the time of the purchases to support that the procurement standards as outline in Uniform Guidance had been followed. Cause/Effect - The State of Florida Medical Examiner does have procurement policies in place that state that the County's Medical Examiner shall follow the procurement standards as outline in the Uniform Guidance. The County Medical Examiner follows the procurement policies of the State of Florida Medical Examiner. However, the County did not obtain documentation from the County Medical Examiner to support the procurement policies and Uniform Guidance had been followed as of the time of the purchase. Questioned Costs- None Auditor's Recommendation - We recommend the County obtain all documentation to support compliance with procurement under Uniform Guidance prior to the purchase of goods or services. Management Response - See Correction Plan Letter

Finding 2023-003 Significant deficiency in internal controls over compliance related to procurement. Federal Agency: U.S. Department of Commerce Program Title: Pacific Fisheries Data Program Assistance Listing Number: 11.437 Award Numbers: NOAA-NMFS-AK-2023-2007663 Award Period: October 1, 2022 to September 30, 2027 Criteria 2 U.S. Code of Federal Regulations (CFR) Part 200 Uniform Administrative Requirements, Procurement Standards require that awardees use documented procurement procedures for the acquisition of property or services required under a Federal award or subaward. Condition/Context for Evaluation IPHC's internal controls over procurement do not include the controls and procedures required by 2 CFR 200.318(a) Questioned Costs Not applicable. Cause IPHC has not yet modified its procurement policies with the requirements of the 2 CFR Part 200 Subpart D Procurement Standards. Effect or Potential Effect As a result, IPHC cannot be certain that procurements were conducted in accordance with the 2 CFR Part 200 Subpart D Procurement Standards. Repeat Finding Not applicable. Recommendation We recommend that IPHC update its procurement policy to include all procurement requirements of 2 CFR Part 200 Subpart D. Views of Responsible Officials of Auditee Management concurs with the finding and has provided the accompanying corrective action plan.

2023-002 Compliance with Procurement, Suspension and Debarment Requirement Information on the Federal Program: U.S. Department of State Assistance Listing Number: 19.517 Assistance Listing Name: Overseas Refugee Assistance for Africa Grant Award Number: Direct Award Number Award Period SPRMCO23CA0016 November 21, 2022 through July 31, 2024 Criteria or Specific Requirement: In accordance with 2 CFR §200.318(a), General Procurement Standards, the non-federal entity must use its own documented procurement procedures which reflect applicable State, local, and tribal laws and regulations, provided that the procurements conform to applicable federal law and the standards identified in General Procurement Standards. Additionally, §200.318(i) states that the non-federal entity must maintain records sufficient to detail the history of the procurement. These records are required to include, but are not necessarily limited to the following: rationale for the method of procurement, selection of contract type, contractor selection or rejection, and the basis for the contract price. In accordance with §200.213 and §180.300, Suspension and Debarment, non-federal entities cannot enter into awards, subawards, or contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in federal assistance programs or activities. Non-federal entities must either check for exclusions in the System for Award Management (SAM); collect a certification from the entity, or add a clause or condition to the covered transaction with the entity prior to entering into a covered transaction with a non-federal entity. In addition, in accordance with §180.415(b), non-federal entities cannot renew or extend covered transactions (other than no-cost time extension) with any excluded person, or under which an excluded person is a principal, unless the non-federal entity obtains an exception under §180.135. Condition: During our testing of the procurement, suspension and debarment compliance requirements, we identified one procurement sample out of a total of six procurement samples tested wherein management was unable to provide evidence that the suspension and debarment check was performed prior to entering into contract with the vendor. Management has subsequently determined that the vendor was not suspended or debarred. Questioned Costs: There are no known or likely questioned costs. Context: This is a condition based on testing of CRS’s compliance with specified requirements. The prevalence of the finding is detailed in the condition section above. The samples were selected using a non-statistical method. Cause: CRS country office personnel did not adhere to CRS’s documented policies and procedures for ensuring proper suspension and debarment validations were performed prior to entering a covered transaction. Effect: Failure to timely verify that a vendor is not suspended or debarred could result in transactions involving unreasonable costs or result in unintentionally entering into a contract with an entity that is barred from performing work for the Federal government. Repeat Finding: This is a repeat of finding 2022-003. Recommendation: We recommend that management ensure that suspension and debarment regulations are followed. Views of Responsible Officials: Management notes that the total comprehensive checks executed against major watchlists (including SAM.gov) in CRS totaled 24,513 (unaudited) in FY 2023 alone. While management agrees with BDO's assessment of the samples, it should be noted that CRS is strongly committed to compliance with applicable suspension and debarment regulations. Please see Appendix B for Management’s Corrective Action Plan.

U.S. Department of the Treasury Federal Financial Assistance Listing 21.027 COVID‐19 – Coronavirus State and Local Fiscal Recovery Funds Procurement, Suspension, and Debarment Material Weakness in Internal Control over Compliance Criteria: Non‐federal entities other than states, including those operating federal programs as subrecipients of states, must follow the procurement standards set out at 2 CFR sections 200.318 through 200.326. They must use their own documented procurement procedures, which reflect applicable state and local laws and regulations, provided that the procurements conform to applicable federal statutes and the procurement requirements identified in 2 CFR Part 200. Condition: We noted that while the City does have a purchasing policy, elements as required by Uniform Guidance are absent from the policy. In addition, elements that are required to be included in contracts with vendors who are paid using federal monies were missing from the contracts. Cause: The City had not had single audits performed until recently as a result of the increase in funding due to the COVID‐19 pandemic. Because of this, they had not updated their purchasing policy to be compliance with Uniform Guidance. Effect: While our testing noted no instances of noncompliance, the absence of internal controls over compliance as it relates to having a Uniform Guidance compliant policy, could lead the City to enter into covered transactions that are not compliant with federal regulations. Questioned Costs: None reported. Context/Sampling: Sampling was not used to test the policy. Repeat Finding from Prior Year(s): No Recommendation: The City should review the applicable provisions of the CFR to ensure their written procurement policy is compliant with Uniform Guidance requirements. Views of Responsible Officials: Management agrees with the finding.

Finding 2023-002 Significant Deficiency in Internal Control over Compliance and Noncompliance – Procurement, Suspension, and Debarment Standards. Identification of federal program: 84.356 Alaska Native Educational Program. Criteria or specific requirement: § 200.318(a) The non-Federal entity must have and use documented procurement procedures, consistent with State, local, and tribal laws and regulations and the standards of this section, for the acquisition of property or services required under a Federal award or subaward. The non-Federal entity’s documented procurement procedures must conform to the procurement standards identified in 200.317 through 200.327. § 200.318(i) The non-Federal entity must maintain records sufficient to detail the history of procurement. These records will include, but are not limited to, the following: Rationale for the method of procurement, selection of contract type, contractor selection or rejection, and the basis for the contract price. Condition: It was noted that Chugachmiut has documented procurement policies consistent with the Uniform Guidance, however Chugachmiut did not maintain evidence that they followed their own documented procurement policy for procurements greater than the micro-purchase threshold. Cause: Chugachmiut does not have an administrative review process to ensure that the procurement documentation supporting purchases greater than the micropurchase threshold are maintained in accordance with Chugachmiut’s procurement policies. Effect or potential effect: Chugachmiut is out of compliance with Uniform Guidance procurement standards. Questioned Costs: None Context: For this program, it was noted during the auditor’s review of certain contracts exceeding the micro-purchase threshold that procurement was not followed for a purchase charged to this federal program. It was noted that the contract was documented as a sole source contract; however it was not evident that the contract met the criteria to be appropriately considered as such. Management has since performed an internal review of their procurement policies and has made certain changes in roles and responsibilities to ensure that procurement standards are appropriately followed. Identification of Repeat Finding: Not applicable. Recommendations: We recommend that as a part of Chugachmiut’s internal control structure over compliance with Uniform Guidance, that Chugachmiut prepare a checklist, reflective of Chugachmiut’s approved procurement policies, to be completed before procurements can be awarded and all documents supporting that checklist be filed together. Views of Responsible Officials: See Corrective Action Plan

Reference Number: 2023-001 Compliance Requirement: Procurement and Suspension/Debarment Type of Finding: Compliance Internal Control Impact: None Compliance Impact: Material Noncompliance AL Number and Title: 84.425 - COVID-19 Education Stabilization Fund Federal Awarding Agency: U. S. Department of Education Federal Award Number: None Pass-through Entity: Alabama Department of Education Pass-through Award Number: None Questioned Costs: $1,029,533.57 Items purchased were not competitively bid in accordance with Procurement and Suspension/Debarment requirements. Finding The U.S. Code of Federal Regulations Title 2, Part 200.318, of the Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) states that non-Federal entities must have and use its own documented procurement procedures which reflect State and local laws and regulations provided that the procurements conform to applicable Federal law and the standards identified within that section. The Code of Alabama 1975, Title 39, which is a State law, requires the construction, installation, repair, renovation of public buildings in excess of $50,000.00 that are paid, in whole or part, with public funds to be bid under the provisions of the Public Works Law. In addition, the Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) 2CFR 200.320, states that when the aggregate dollar amount is higher than the simplified acquisition threshold ($250,000.00), the Uniform Guidance requires one of the two “formal procurement methods”, sealed bids or formal request for proposals should be used. The Blount County Board of Education (the “Board”) entered a Public Works contract in November 2021 for the purchase and installation of HVAC units at multiple local schools totaling $1,576,971.00 of which $1,029,533.57 of COVID-19 Education Stabilization Funds were expended during the audit period, The Board did not obtain bids on the project in accordance with the State of Alabama Public Works Law. The Board used a purchasing consortium contract which is not allowed under the Public Works Law or the procurement guidelines contained in the Uniform Guidance for purchases greater than the simplified acquisition threshold. As a result, the Board did not comply with Uniform Guidance procurement requirements for these purchases. Recommendation: The Board should ensure compliance with the Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) 2 CFR 200.318 and CFR 200.320 and the Code of Alabama 1975, Title 39. Views of Responsible Officials of the Auditee The Board agrees with the finding.

Reference Number: 2023-001 Compliance Requirement: Procurement and Suspension/Debarment Type of Finding: Compliance Internal Control Impact: None Compliance Impact: Material Noncompliance AL Number and Title: 84.425 - COVID-19 Education Stabilization Fund Federal Awarding Agency: U. S. Department of Education Federal Award Number: None Pass-through Entity: Alabama Department of Education Pass-through Award Number: None Questioned Costs: $1,029,533.57 Items purchased were not competitively bid in accordance with Procurement and Suspension/Debarment requirements. Finding The U.S. Code of Federal Regulations Title 2, Part 200.318, of the Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) states that non-Federal entities must have and use its own documented procurement procedures which reflect State and local laws and regulations provided that the procurements conform to applicable Federal law and the standards identified within that section. The Code of Alabama 1975, Title 39, which is a State law, requires the construction, installation, repair, renovation of public buildings in excess of $50,000.00 that are paid, in whole or part, with public funds to be bid under the provisions of the Public Works Law. In addition, the Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) 2CFR 200.320, states that when the aggregate dollar amount is higher than the simplified acquisition threshold ($250,000.00), the Uniform Guidance requires one of the two “formal procurement methods”, sealed bids or formal request for proposals should be used. The Blount County Board of Education (the “Board”) entered a Public Works contract in November 2021 for the purchase and installation of HVAC units at multiple local schools totaling $1,576,971.00 of which $1,029,533.57 of COVID-19 Education Stabilization Funds were expended during the audit period, The Board did not obtain bids on the project in accordance with the State of Alabama Public Works Law. The Board used a purchasing consortium contract which is not allowed under the Public Works Law or the procurement guidelines contained in the Uniform Guidance for purchases greater than the simplified acquisition threshold. As a result, the Board did not comply with Uniform Guidance procurement requirements for these purchases. Recommendation: The Board should ensure compliance with the Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) 2 CFR 200.318 and CFR 200.320 and the Code of Alabama 1975, Title 39. Views of Responsible Officials of the Auditee The Board agrees with the finding.