Secretary of Finance and Administration Cabinet of the Commonwealth of Kentucky

A significant deficiency in internal control over compliance is a deficiency, or a combination of deficiencies, in internal control over compliance with a type of compliance requirement of a federal program that is less severe than a material weakness in internal control over compliance, yet important enough to merit attention by those charged with governance. We consider the deficiencies in internal control over compliance described in the accompanying schedule of findings and questioned costs as items 2023-012 – 2023-017 and 2023-019 – 2023-032 to be significant deficiencies.

Our audit was not designed for the purpose of expressing an opinion on the effectiveness of internal control over compliance. Accordingly, no such opinion is expressed.

Government Auditing Standards requires the auditor to perform limited procedures on the University's response to internal control over compliance findings identified in our audit described in the accompanying schedule of findings and questioned costs. The University's response was not subjected to the other auditing procedures applied in the audit of compliance and, accordingly, we express no opinion on the response.

The purpose of this report on internal control over compliance is solely to describe the scope of our testing of internal control over compliance and the results of that testing based on the requirements of the Uniform Guidance. Accordingly, this report is not suitable for any other purpose.

Clifton Lawson Allen LLP

CliftonLarsonAllen LLP

King of Prussia, Pennsylvania

May 1, 2025

(98)