Finding No: 2025-006 – Internal control deficiencies over accounting for federal funds received Federal Programs ALN 97.036, Disaster Grants - Public Assistance (Presidentially Declared Disasters) ALN 21.027, Coronavirus State and Local Fiscal Recovery Funds Name of Federal Agency ALN 21.027, Coronavirus State and Local Fiscal Recovery Funds Category U.S. Department of Treasury U.S. Department of Homeland Security Compliance Requirement Activities Allowed/Unallowed, Allowable Costs/Cost Principles, Period of Performance, Project Accounting. Criteria 2 CFR Part 200 Subpart D Subsection 200.302 states the following: The recipient's and subrecipient's financial management system must provide for the following: 1. Identification of all Federal awards received and expended and the Federal programs under which they were received. Federal program and Federal award identification must include, as applicable, the Assistance Listings title and number, Federal award identification number, year the Federal award was issued, and name of the Federal agency or pass-through entity. 2. Accurate, current, and complete disclosure of the financial results of each Federal award or program in accordance with the reporting requirements in §§ 200.328 and 200.329. When a federal agency or pass-through entity requires reporting on an accrual basis from a recipient or subrecipient that maintains its records other than on an accrual basis, the recipient or subrecipient must not be required to establish an accrual accounting system. This recipient or subrecipient may develop accrual data for its reports based on an analysis of the documentation on hand. Puerto Rico Ports Authority (A Component Unit of the Commonwealth of Puerto Rico) Schedule of Findings and Questioned Costs – (Continued) Year Ended June 30, 2025 - 102 - Part III – Federal Award Findings and Questioned Costs – (continued) Finding No: 2025-006 – Internal control deficiencies over accounting for federal funds received Criteria – (continued) 3. Maintaining records that sufficiently identify the amount, source, and expenditure of Federal funds for Federal awards. These records must contain information necessary to identify Federal awards, authorizations, financial obligations, unobligated balances, as well as assets, expenditures, income, and interest. All records must be supported by source documentation. 4. Effective control over and accountability for all funds, property, and assets. The recipient or subrecipient must safeguard all assets and ensure they are used solely for authorized purposes. See § 200.303. 5. Comparison of expenditures with budget amounts for each Federal award. 6. Written procedures to implement the requirements of § 200.305. 7. Written procedures for determining the allowability of costs in accordance with subpart E and the terms and conditions of the Federal award. In addition, the 2 CFR Compliance Supplement states the following under Special Test and Provisions – Project Accounting: For large projects, the recipient is required to make an accounting to Federal Emergency Management Agency (FEMA) of eligible costs. Similarly, the subrecipient must make an accounting to the recipient. In submitting the accounting, the entity is required to certify that reported costs were incurred in performance of eligible work, that the approved work was completed, that the project is in compliance with the provisions of the FEMA-State Agreement, all grant conditions were met, and that payments for that project were made in accordance with the applicable payment provisions. For improved and alternate projects, if the total cost of the projects does not equal or exceed the approved eligible costs, then the auditor should expect to see an adjustment to reduce eligible costs (44 CFR section 206.205). For Small Projects, FEMA does not adjust estimated costs to the actual incurred amount. The Subrecipient must certify that they completed the approved SOW, and the Recipient must certify that they made all payments in accordance with the FEMA-State/Territory/Tribe agreement. This is typically completed on a Small Project Completion Certification. Puerto Rico Ports Authority (A Component Unit of the Commonwealth of Puerto Rico) Schedule of Findings and Questioned Costs – (Continued) Year Ended June 30, 2025 - 103 - Part III – Federal Award Findings and Questioned Costs – (continued) Finding No: 2025-006 – Internal control deficiencies over accounting for federal funds received Condition During our procedures over the Authority’s funds received from FEMA we noticed the following: 1. Return of interest earned on FEMA-related funds totaling approximately $211,853 was not timely recorded in the general ledger and was subsequently recorded through a post-closing entry dated January 26, 2026. 2. Management initially misclassified approximately $6 million received under the Coronavirus State and Local Fiscal Recovery Funds as state funds rather than federal awards. As a result, the amount was originally excluded from the Schedule of Expenditures of Federal Awards (the Schedule). Cause The condition was caused by the Authority's lack of personnel on the federal funds management office which has been present during prior audit periods, the early retirement program established under Act No. 80 of August 3, 2020 – “Law for Incentivized Retirement Program and Justice for Our Servants” (Act No. 80), and the resignation of some personnel from their occupied position and left the Authority willingly as stated in finding 2025-004 are the main causes for the condition. Effect Inadequate accounting and controls over federal funds can cause incorrect revenue recognition as capital advances are recognized as revenue when used appropriately and not when received. In addition, this can cause amounts to be included on the Schedule incorrectly as some of the activities received as capital advances have not actually occurred. It also creates risk of allocating funds in the incorrect federal awards as some of these have similar uses and assistance listing numbers. Also, the Authority could be subject to penalties or sanctions from the Federal Grantor. Puerto Rico Ports Authority (A Component Unit of the Commonwealth of Puerto Rico) Schedule of Findings and Questioned Costs – (Continued) Year Ended June 30, 2025 - 104 - Part III – Federal Award Findings and Questioned Costs – (continued) Finding No: 2025-006 – Internal control deficiencies over accounting for federal funds received Context The Authority recognized as federal award revenue of $6 million approximately, as contributions from the Commonwealth of Puerto Rico and therefore were originally not included in the Schedule. Also, $211,853 on the bank accounts where FEMA funds were deposited had to be returned since the funds cannot be deposited in an interest-bearing account. Journal entry recognizing this return was subsequently recorded through a post-closing entry dated January 26, 2026. Identification of repeat finding This is a repeat finding from the immediate previous audit, Finding 2025-006 Questioned costs None as adjustments were made during the audit to correct the misstatement. Recommendation We recommend the Authority’s Federal Funds Management Office (FFMO) and finance department coordinate with the external consultant who handles federal funds received from FEMA to better identify and classify funds received. In addition, we recommend the Authority to address the FFMO personnel limitations by hiring additional personnel for the Authority, re-shifting task between current personnel or by relaying on outsourced third party providers. Views of responsible officials and planned corrective actions We agreed with the auditors’ finding and recommendation. See further details regarding this matter within the Corrective Action Plan provided on pages 108-114.