judgement made by a reasonable user of the report on compliance about the University's compliance with the requirements of each major federal program as a whole.

In performing an audit in accordance with generally accepted auditing standards, Government Auditing Standards, and the Uniform Guidance, we:

• Exercise professional judgement and maintain professional skepticism throughout the audit.
• Identify and assess the risks of material noncompliance, whether due to fraud or error, and design and perform audit procedures responsive to those risks. Such procedures include examining, on a test basis, evidence regarding the University's compliance with the compliance requirements referred to above and performing such other procedures as we considered necessary in the circumstances.
• Obtain an understanding of the University's internal control over compliance relevant to the audit in order to design audit procedures that are appropriate in the circumstances and to test and report on internal control over compliance in accordance with the Uniform Guidance, but not for the purpose of expressing an opinion on the effectiveness of the University's internal control over compliance. Accordingly, no such opinion is expressed.

We are required to communicate with those charged with governance regarding, among other matters, the planned scope and timing of the audit and any significant deficiencies and material weaknesses in internal control over compliance that we identified during the audit.

Other Matters

The results of our auditing procedures disclosed other instances of noncompliance, which are required to be reported in accordance with the Uniform Guidance and which are described in the accompanying schedule of findings and questioned costs as findings 2022-006 through 2022-016, 2022-018, and 2022-019. Our opinion on each major program is not modified with respect to these matters.

Government Auditing Standards requires the auditor to perform limited procedures on the University's response to the noncompliance findings identified in our compliance audit described in the accompanying schedule of findings and questioned costs. The University's response was not subjected to the other auditing procedures applied in the audit of compliance and, accordingly, we express no opinion on the response.

Report on Internal Control Over Compliance

Our consideration of internal control over compliance was for the limited purpose described in the Auditor's Responsibilities for the Audit of Compliance section above and was not designed to identify all deficiencies in internal control over compliance that might be material weaknesses or

111.