REPORT DIGEST

ILLINOIS CONSERVATION FOUNDATION

COMPLIANCE EXAMINATION
FOR THE TWO YEARS ENDED JUNE 30, 2025

Release Date:  January 27, 2026

FINDINGS THIS AUDIT: 2

CATEGORY:  NEW -- REPEAT – TOTAL
Category 1:  0 -- 0 -- 0
Category 2:  0 -- 2 -- 2
Category 3:  0 -- 0 -- 0
TOTAL:  0 -- 2 -- 2

FINDINGS LAST AUDIT: 2

State of Illinois, Office of the Auditor
General
FRANK J. MAUTINO, AUDITOR GENERAL

To obtain a copy of the Report contact:
Office of the Auditor General, 400 West
Monroe, Suite 306, Springfield, IL
62704-9849
(217) 782-6046 or TTY (888) 261-2887

This Report Digest and Full Report are also
available on the worldwide web at
www.auditor.illinois.gov

INTRODUCTION

This digest covers the Illinois
Conservation Foundation’s (Foundation)
compliance examination for the two-years
ended June 30, 2025. A separate digest
covering the Foundation’s financial audit
as of and for the year ending June 30, 2025
was released under a separate cover.  In
total, this report contains two findings,
one of which was reported in the Financial
Audit.

SYNOPSIS

• (25-02) The Foundation did not ensure
compliance with the Payment Card Industry
Data Security Standards.

FINDINGS, CONCLUSIONS, AND RECOMMENDATIONS

NONCOMPLIANCE WITH PAYMENT CARD INDUSTRY
DATA SECURITY STANDARDS

The Illinois Conservation Foundation
(Foundation) did not adequately ensure
compliance with the Payment Card Industry
Data Security Standards (PCI DSS).

During testing, we noted the Foundation had
not:

• Matched credit card payment methods to
the appropriate Self-Assessment
Questionnaire (SAQ) and contacted service
providers to obtain relevant information
and guidance as deemed appropriate.

• Completed the required SAQ addressing all
elements of its environment utilized to
store, process, and transmit cardholder
data for in-person credit card
transactions. (Finding 2, pages 11-12)

We recommended the Foundation match the
credit card payment methods to the
appropriate Self-Assessment Questionnaire
(SAQ) and contact service providers to
obtain relevant information and guidance as
deemed appropriate and complete the
required SAQs at least annually.

The Foundation agreed with the
recommendation and indicated it will
continue to complete appropriate SAQs on an
ongoing basis.


AUDITOR’S OPINION

The financial audit report was released
under a separate cover. The auditors stated
the financial statements of the Foundation
as of and for the year ended June 30, 2025,
are fairly stated in all material respects.

ACCOUNTANT’S OPINION

The accountants conducted a State
compliance examination of the Foundation
for the two-years ended June 30, 2025, as
required by the Illinois State Auditing
Act.  The accountants stated the Foundation
complied, in all material respects, with
the requirements described in the report.


This State compliance examination was
conducted by Roth & Company, LLP.

COURTNEY DZIERWA
Division Director

This report is transmitted in accordance
with Section 3-14 of the Illinois State
Auditing Act.

FRANK J. MAUTINO
Auditor General

FJM:vrb