COUNTY OF RIPLEY

FINDING 2024-001 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Suspension and Debarment Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Numbers): SLFRP2971 Compliance Requirement: Procurement and Suspension and Debarment Audit Findings: Material Weakness, Modified Opinion INDIANA STATE BOARD OF ACCOUNTS 13 RIPLEY COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Repeat Finding This is a repeat finding from the immediately prior audit report. The prior audit finding number was 2023-001. Condition and Context An effective internal control system was not in place at the County to ensure compliance with the requirements related to the grant agreement and the Procurement and Suspension and Debarment compliance requirement. Prior to entering into subawards and covered transactions with COVID-19 - Coronavirus State and Local Fiscal Recovery Funds (SLFRF) award funds, recipients are required to verify that such beneficiaries are not suspended, debarred, or otherwise excluded. "Covered transactions" include, but are not limited to, contracts for goods and services awarded under a nonprocurement transaction (i.e., grant agreement) that are expected to equal or exceed $25,000. The verification is to be done by checking the Excluded Parties List System (EPLS), collecting certification from that person, or adding a clause or condition to the covered transaction with that person. Upon inquiry of the County to review the procedures in place for verifying that an entity with which it plans to enter into a covered transaction is not suspended, debarred, or otherwise excluded, the County divulged that it had none for the covered transactions paid in 2024. A population of three covered transactions, totaling $894,427, that equaled or exceeded $25,000 paid from SLFRF funds during the audit period was identified. For each of the three transactions, the County did not verify the suspension and debarment status prior to payment due to the County not having any policies or procedures in place to verify that contractors and subrecipients were neither suspended nor debarred, or otherwise excluded or disqualified from participating in federal assistance programs or activities. The lack of internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 31 CFR 19.300 states: "When you enter into a covered transaction with another person at the next lower tier, you must verify that the person with whom you do business is not excluded or disqualified. You do this by: (a) Checking the EPLS; or (b) Collecting a certification from that person if allowed by this rule; or INDIANA STATE BOARD OF ACCOUNTS 14 RIPLEY COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (c) Adding a clause or condition to the covered transaction with that person." Cause The County worked on designing and implementing policies and procedures to verify that beneficiaries were not suspended or debarred, or otherwise excluded from participating in federal programs, but the policy was not completed until April 2025, so it was not in place for the covered transactions paid in 2024. Effect The County cannot ensure that contractors paid with federal funds are eligible to participate in federal programs. Any program funds the County used to pay contractors that have been suspended or debarred would be unallowable, and the funding agency could potentially recover the funds. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the County establish a proper system of internal controls to ensure that the current policy in place was properly implemented for all beneficiaries that are paid $25,000 or more, all or in part with federal funds, to ensure they are not suspended, debarred, or otherwise excluded from participating in federal programs. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

Finding 2024-002 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): SLFRP2971 Compliance Requirement: Reporting Audit Findings: Material Weakness, Other Matters Repeat Finding This is a repeat finding from the immediately prior audit report. The prior audit finding number was 2023-002. Condition and Context Recipients are required to submit quarterly or annually Project and Expenditure (P&E) reports to the U.S. Department of the Treasury (Treasury). The reporting periods, as well as the respective due dates, are based upon type of recipient and its population, as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. INDIANA STATE BOARD OF ACCOUNTS 15 RIPLEY COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) The County was classified as a county with a population below 250,000 residents that was allocated less than $10 million in COVID-19 - Coronavirus State and Local Fiscal Recovery Funds funding. As such, the P&E report, covering the period April 1, 2023 to March 31, 2024, was required to be submitted to the Treasury by April 30, 2024. The subsequent annual reports are to cover one year from April 1 to March 31 and must be submitted to the Treasury by April 30 of each year. The County submitted the P&E report by April 30, 2024, as required; however, a single employee prepared and submitted the P&E report without a review or oversight process in place to prevent, or detect and correct, errors. The data submitted included amounts that were not supported by the County's records and amounts that should not have been included. Errors identified included the following: • Total Cumulative Obligations were overstated by $382,955. • Total Cumulative Expenditures were understated by $23,963. • Current Period Obligations were overstated by $181,620. • Current Period Expenditures were overstated by $509,200. The lack of internal controls and noncompliance was a systemic issue throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Coronavirus State and Local Fiscal Recovery Funds Compliance and Reporting Guidance, page 10, states in part: ". . . 10. Reporting. All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for compiling and reporting accurate, compliant financial data, in accordance with appropriate accounting standards and principles. . . ." 31 CFR 35.4(c) states in part: "Reporting and requests for other information. During the period of performance, recipients shall provide to the Secretary periodic reports providing detailed accounting of the uses of funds, . . ." INDIANA STATE BOARD OF ACCOUNTS 16 RIPLEY COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Cause A proper system of internal controls, including policies and procedures, was not designed or implemented by management of the County to prevent and detect errors on the P&E report prior to submission. The report due in April 2024 had already been submitted prior to corrective action being implemented for item 2023-002. Effect Without the proper implementation of an effectively designed system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As such, the County did not accurately report current period obligations and cumulative obligations when filing the P&E report for the period April 1, 2023 to March 31, 2024. Noncompliance with the provisions of federal regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the County. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the County design and implement a proper system of internal controls, including policies and procedures that would provide segregation of duties to ensure appropriate reviews, approvals, and oversight of federal reports are taking place. We also recommended the development of policies and procedures to ensure the County provides the Treasury with complete and accurate information for the P&E report. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report. INDIANA STATE BOARD OF ACCOUNTS 17

FINDING 2023-001 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Suspension and Debarment Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): SLFRP2971 Compliance Requirement: Procurement and Suspension and Debarment Audit Findings: Material Weakness, Modified Opinion INDIANA STATE BOARD OF ACCOUNTS 13 RIPLEY COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Repeat Finding This is a repeat finding from the prior audit report. The prior audit finding number was 2022-001. Condition and Context Prior to entering into subawards and covered transactions with State and Local Fiscal Recovery Funds (SLFRF) award funds, recipients are required to verify that such beneficiaries are not suspended, debarred, or otherwise excluded. "Covered transactions" include, but are not limited to, contracts for goods and services awarded under a nonprocurement transaction (i.e., grant agreement) that are expected to equal or exceed $25,000. The verification is to be done by checking the Excluded Parties List System (EPLS), collecting a certification from that person, or adding a clause or condition to the covered transaction with that person. Upon inquiry of the County to review the procedures in place for verifying that an entity with which it plans to enter into a covered transaction is not suspended, debarred, or otherwise excluded, the County divulged that it had none. A population of eight covered transactions, totaling $2,425,309, that equaled or exceeded $25,000 paid from SLFRF funds during the audit period was identified. For each of the eight transactions, the County did not verify the suspension and debarment status prior to payment due to the County not having any policies or procedures in place to verify that beneficiaries were neither suspended nor debarred, or otherwise excluded or disqualified from participating in federal assistance programs or activities. The lack of internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 31 CFR 19.300 states: "When you enter into a covered transaction with another person at the next lower tier, you must verify that the person with whom you intend to do business is not excluded or disqualified. You do this by: (a) Checking the EPLS; or (b) Collecting a certification from that person if allowed by this rule; or (c) Adding a clause or condition to the covered transaction with that person." INDIANA STATE BOARD OF ACCOUNTS 14 RIPLEY COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Cause The County had not designed or implemented policies and procedures to verify that beneficiaries were not suspended or debarred or otherwise excluded from participating in federal programs prior to entering into covered transactions using SLFRF funds. Effect The County cannot ensure that contractors paid with federal funds are eligible to participate in federal programs. Any program funds the County used to pay contractors that have been suspended or debarred would be unallowable, and the funding agency could potentially recover the funds. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the County establish a proper system of internal controls and develop policies and procedures to ensure beneficiaries that are paid $25,000 or more, all or in part with federal funds, are not suspended, debarred, or otherwise excluded prior to entering into any contracts. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2023-002 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): SLFRP2971 Compliance Requirement: Reporting Audit Findings: Material Weakness, Other Matters Condition and Context Recipients are required to submit quarterly or annually Project and Expenditure (P&E) reports to the U.S. Department of the Treasury (Treasury). The reporting periods, as well as the respective due dates are based upon type of recipient and its population, as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. The County was classified as a county with a population below 250,000 residents that was allocated less than $10 million in State and Local Fiscal Recovery Funds funding. As such, the P&E report, covering the period April 1, 2022 to March 31, 2023, was required to be submitted to the Treasury by April 30, 2023. The subsequent annual reports are to cover one year from April 1 to March 31 and must be submitted to the Treasury by April 30 of each year. INDIANA STATE BOARD OF ACCOUNTS 15 RIPLEY COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) The County submitted the P&E report by April 30, 2023, as required; however, a single employee prepared and submitted the P&E report without a review or oversight process in place to prevent, or detect and correct, errors. As a result, the report included projects with current period obligations and cumulative obligations totaling $3,319,955 that had not yet been obligated by the end of the reporting period. The lack of internal controls and noncompliance was a systemic issue throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 31 CFR 35.4(c) states in part: "Reporting and requests for other information. During the period of performance, recipients shall provide to the Secretary periodic reports providing detailed accounting of the uses of funds. . . ." Coronavirus State and Local Fiscal Recovery Funds Compliance and Reporting Guidance, page 10 states in part: ". . . 10. Reporting. All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for compiling and reporting accurate, compliant financial data, in accordance with appropriate accounting standards and principles. . . ." Cause A proper system of internal controls, including policies and procedures, was not designed or implemented by management of the County to prevent and detect errors on the P&E report prior to submission. Effect Without the proper implementation of an effectively designed system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As such, the County did not accurately report current period obligations and cumulative obligations when filing the P&E report for the period April 1, 2022 to March 31, 2023. Noncompliance with the provisions of federal regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the County. INDIANA STATE BOARD OF ACCOUNTS 16 RIPLEY COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the County design and implement a proper system of internal controls, including policies and procedures that would provide segregation of duties to ensure appropriate reviews, approvals, and oversight of federal reports are taking place. We also recommended the development of policies and procedures to ensure the County provides the Treasury with complete and accurate information for the P&E report. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FINDING 2022-001 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Procurement and Suspension and Debarment Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): SLFRP2971 Compliance Requirement: Procurement and Suspension and Debarment Audit Findings: Material Weakness, Modified Opinion Condition and Context An effective internal control system was not in place at the County to ensure compliance with the requirements related to the grant agreement and the Procurement and Suspension and Debarment compliance requirement. Procurement The County's purchasing policy did not reflect applicable state laws and regulations. In addition, the policy did not include procedures to avoid acquisition of unnecessary or duplicative items, or procedures to ensure that all solicitations incorporate a clear and accurate description of the technical requirements for the material, product, or service to be procured. Suspension and Debarment Prior to entering into subawards and covered transactions with State and Local Fiscal Recovery Funds (SLFRF) award funds, recipients are required to verify that such contractors and subrecipients are not suspended, debarred, or otherwise excluded. "Covered transactions" include, but are not limited to, contracts for goods and services awarded under a nonprocurement transaction (i.e., grant agreement) that are expected to equal or exceed $25,000. The verification is to be done by checking the Excluded Parties List System (EPLS), collecting a certification from that person, or adding a clause or condition to the covered transaction with that person. Upon inquiry of the County to review the procedures in place for verifying that an entity with which it plans to enter into a covered transaction is not suspended, debarred, or otherwise excluded, the County divulged that it was unaware of the suspension and debarment requirements related to the SLFRF awards. A population of four covered transactions, totaling $990,897, that equaled or exceeded $25,000 paid from SLFRF funds during the audit period was identified. For each of the four transactions, the County did not verify the suspension and debarment status prior to payment due to the County not having any policies or procedures in place to verify that contractors and subrecipients were neither suspended nor debarred, or otherwise excluded or disqualified from participating in federal assistance programs or activities. The lack of internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.318(a) states: "The non-Federal entity must have and use documented procurement procedures, consistent with State, local, and tribal laws and regulations and the standards of this section, for the acquisition of property or services required under a Federal award or subaward. The non- Federal entity's documented procurement procedures must conform to the procurement standards identified in ?? 200.317 through 200.327." 2 CFR 200.214 states: "Non-federal entities are subject to the non-procurement debarment and suspension regulations implementing Executive Orders 12549 and 12689, 2 CFR part 180. The regulations in 2 CFR part 180 restrict awards, subawards, and contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in Federal assistance programs or activities." 31 CFR 19.300 states: "When you enter into a covered transaction with another person at the next lower tier, you must verify that the person with whom you intend to do business is not excluded or disqualified. You do this by: (a) Checking the EPLS; or (b) Collecting a certification from that person if allowed by this rule; or (c) Adding a clause or condition to the covered transaction with that person." Cause A proper system of internal controls was not designed by management of the County. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the County's management of what should be done to effect internal control, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, vendors and subrecipients to whom payments equal to or in excess of $25,000 were not verified to be not suspended, debarred, or otherwise excluded. Noncompliance with the provisions of Federal regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the County. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the County establish a proper system of internal controls and develop policies and procedures to ensure contractors and subrecipients, as appropriate are not suspended, debarred, or otherwise excluded prior to entering into any contracts or subawards. Additionally, we recommend the County establish documented procurement procedures consistent with state and local laws for the acquisition of property or services required under a federal award or subaward. The nonfederal entity's documented procurement procedures must conform to the procurement standards identified in ?? 200.317 through 200.327. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.