Beta This is a new resource - your feedback will help us improve it.
Recommendations Tracker
HHS-OIG provides independent and objective oversight that promotes economy, efficiency, and effectiveness in HHS programs and operations. To drive positive change, we produce reports and identify recommendations for improvement. We have developed this public-facing page for tracking all of our open recommendations. Learn More
Summary of Recommendations Data
Updated Monthly · Last updated on May 21, 2024
1,299
Unimplemented
recommendations
$281.9B
Potential savingsfrom unimplemented recommendations
2,483
Implemented and Closed
recommendations since FY 2017
OIG Recommendations Grouped by Report
Views
Showing 1–20 of 1,168 reports, containing 3,782 recommendations
Sorted by latest release date
-
California Improperly Claimed $52.7 Million in Federal Medicaid Reimbursement for Capitation Payments Made on Behalf of Noncitizens With Unsatisfactory Immigration Status
24-A-09-076.01We recommend that the California Department of Health Care Services refund to the Federal Government the improperly claimed Federal reimbursement of $52,652,689 for capitation payments made on behalf of noncitizens with UIS.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Not Yet Due
- Potential Savings
- $52,652,689
- Last Update Received
- -
- Next Update Expected
- 11/16/2024
- Legislative Related
- No
24-A-09-076.02We recommend that the California Department of Health Care Services work with CMS to determine the amount of any improperly claimed Federal reimbursement for capitation payments made on behalf of noncitizens with UIS for an agreed-upon period not covered by our audit.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 11/16/2024
- Legislative Related
- No
-
Colorado Did Not Report and Refund the Correct Federal Share of Medicaid-Related Overpayments for Some Cases Identified by the State’s Program Integrity Section
24-A-07-075.01We recommend that the Colorado Department of Health Care Policy and Financing report and refund $385,180 ($673,686 Federal share) (footnote 10) in unreported Medicaid overpayments that were related to paid claims that have been recovered and collected.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Not Yet Due
- Potential Savings
- $673,686
- Last Update Received
- -
- Next Update Expected
- 11/13/2024
- Legislative Related
- No
24-A-07-075.02We recommend that the Colorado Department of Health Care Policy and Financing determine the value of overpayments identified after our audit period that have been recovered and collected but not reported, report them on the Form CMS-64, and refund the Federal share of the recovered overpayments.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 11/13/2024
- Legislative Related
- No
24-A-07-075.03We recommend that the Colorado Department of Health Care Policy and Financing work with CMS to determine the amount of interest, if any, on the Federal share owed by the State agency and report that amount to the Federal Government.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 11/13/2024
- Legislative Related
- No
24-A-07-075.04We recommend that the Colorado Department of Health Care Policy and Financing strengthen policies and procedures to ensure that overpayments are reported correctly and in a timely manner on the Form CMS-64 in accordance with Federal requirements.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 11/13/2024
- Legislative Related
- No
24-A-07-075.05We recommend that the Colorado Department of Health Care Policy and Financing update policies and procedures to ensure that Medicaid overpayments are reported on the Form CMS-64.9C1 if recovered or on the Form CMS-64.9OFWA if not recovered within timeframes specified by Federal requirements.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 11/13/2024
- Legislative Related
- No
-
New York Medical College Claimed Unallowable Grant Costs and Did Not Meet Certain Financial Conflict of Interest Requirements
24-A-04-074.01We recommend that New York Medical College work with NIH to determine the allowability of $7,469,306 in salary and wages, fringe benefits, and related indirect costs that the College charged to its NIH awards during our audit period and refund any identified overpayments.- Status
- Open Unimplemented
- Responsible Agency
- NIH
- Response
- Not Yet Due
- Potential Savings
- $7,469,306
- Last Update Received
- -
- Next Update Expected
- 11/09/2024
- Legislative Related
- No
24-A-04-074.02We recommend that New York Medical College refund $73,515 in unallowable salary costs, cost transfers, and travel costs.- Status
- Open Unimplemented
- Responsible Agency
- NIH
- Response
- Not Yet Due
- Potential Savings
- $73,515
- Last Update Received
- -
- Next Update Expected
- 11/09/2024
- Legislative Related
- No
24-A-04-074.03We recommend that New York Medical College strengthen its internal controls by developing a policy or procedure for monitoring salaries so that they are at or under the NIH salary cap.- Status
- Open Unimplemented
- Responsible Agency
- NIH
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 11/09/2024
- Legislative Related
- No
24-A-04-074.04We recommend that New York Medical College strengthen its internal controls by developing a policy or procedure that requires compensation costs to be reasonable, conform to established College policy, and be consistently applied regardless of the source of the funds and that reasonably reflects the percentage of time actually devoted to its NIH-funded projects.- Status
- Open Unimplemented
- Responsible Agency
- NIH
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 11/09/2024
- Legislative Related
- No
24-A-04-074.05We recommend that New York Medical College strengthen its internal controls by working with NIH to quantify and refund any additional salary increases charged to NIH awards that were not reasonable, did not conform to established College policy, and were not consistently applied regardless of the source of funds.- Status
- Open Unimplemented
- Responsible Agency
- NIH
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 11/09/2024
- Legislative Related
- No
24-A-04-074.06We recommend that New York Medical College strengthen its internal controls completing the timely certification of employee time and effort reports to provide reasonable assurance that the charges are accurate, allowable, and properly allocated.- Status
- Open Unimplemented
- Responsible Agency
- NIH
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 11/09/2024
- Legislative Related
- No
24-A-04-074.07We recommend that New York Medical College strengthen its internal controls by establishing time requirements for employees to sign and supervisors to review effort certification forms.- Status
- Open Unimplemented
- Responsible Agency
- NIH
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 11/09/2024
- Legislative Related
- No
24-A-04-074.08We recommend that New York Medical College strengthen its internal controls by developing a cost transfer policy that includes the documentation requirements contained in NIH GPS 7.5.- Status
- Open Unimplemented
- Responsible Agency
- NIH
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 11/09/2024
- Legislative Related
- No
24-A-04-074.09We recommend that New York Medical College strengthen its internal controls by providing employees training on the specific types of travel expenses that the College considers non-reimbursable, such as alcohol and airline seat selection fees and training on the documentation needed to support travel costs.- Status
- Open Unimplemented
- Responsible Agency
- NIH
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 11/09/2024
- Legislative Related
- No
24-A-04-074.10We recommend that New York Medical College strengthen its internal controls by monitoring key individuals' completion of annual FCOI disclosure forms and completion of required FCOI training.- Status
- Open Unimplemented
- Responsible Agency
- NIH
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 11/09/2024
- Legislative Related
- No
-
State Agencies Could Be Obtaining Hundreds of Millions in Additional Medicaid Rebates Associated With Physician-Administered Drugs
24-A-07-073.01We recommend that the Centers for Medicare & Medicaid Services work with the State agencies to implement internal controls, including policies and procedures, to collect NDCs, in order to facilitate the collection of all rebates for eligible physician-administered drugs.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 11/08/2024
- Legislative Related
- No
24-A-07-073.02We recommend that the Centers for Medicare & Medicaid Services issue finalized guidance regarding multiple-source physician-administered drugs, to clarify and reinforce the requirement that rebates should be collected for all required physician-administered drugs.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 11/08/2024
- Legislative Related
- No
24-A-07-073.03We recommend that the Centers for Medicare & Medicaid Services work with and encourage the State agencies to maximize the amount of physician administered drug rebates that can be obtained when feasible, including invoicing for and obtaining rebates in cases when the rebates may not be required.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 11/08/2024
- Legislative Related
- No
-
New Mexico Should Refund Almost $120 Million to the Federal Government for Medicaid Nursing Facility Level-of-Care Managed Care Capitated Payments
24-A-06-072.01We recommend that the New Mexico Human Services Department recoup $139,232,902 in Community Benefit services capitated payments from its MCOs and refund the $98,582,176 in Federal share to the Federal Government.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Not Yet Due
- Potential Savings
- $98,582,176
- Last Update Received
- -
- Next Update Expected
- 11/07/2024
- Legislative Related
- No
24-A-06-072.02We recommend that the New Mexico Human Services Department recoup the $29,442,388 in NFLOC capitated payments from its MCOs and refund the $20,536,132 Federal share to the Federal Government.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Not Yet Due
- Potential Savings
- $20,536,132
- Last Update Received
- -
- Next Update Expected
- 11/07/2024
- Legislative Related
- No
24-A-06-072.03We recommend that the New Mexico Human Services Department establish policies and procedures to recoup NFLOC capitated payments made to its MCOs based on settings-of-care that are removed after payment and no longer valid.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 11/07/2024
- Legislative Related
- No
-
California Generally Completed Medicaid Eligibility Actions During the Unwinding Period in Accordance With Federal and State Requirements
24-A-09-070.01We recommend that the California Department of Health Care Services redetermine eligibility for the nine sampled enrollees whose eligibility was incorrectly determined and the five sampled enrollees whose eligibility may have been incorrectly determined.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 11/06/2024
- Legislative Related
- No
24-A-09-070.02We recommend that the California Department of Health Care Services provide caseworkers additional training to reduce errors related to: (1) calculating and verifying income, (2) entering income information into the county case management system, and (3) using electronic data sources when verifying enrollees' reported income.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 11/06/2024
- Legislative Related
- No
24-A-09-070.03We recommend that the California Department of Health Care Services revise its guidance to instruct counties to document in case files essential information to support enrollees' continuing eligibility, including: (1) attempts to review enrollees' eligibility on a manual ex parte basis and (2) income and household information provided by the enrollee in person.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 11/06/2024
- Legislative Related
- No
24-A-09-070.04We recommend that the California Department of Health Care Services identify and correct the system issues that prevented the State agency from renewing enrollees' eligibility on an ex parte basis when those enrollees should have been determined eligible and from sending a notice of termination to enrollees.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 11/06/2024
- Legislative Related
- No
-
The Office of Intergovernmental and External Affairs’ Purchase Card Program Did Not Comply With Federal and HHS Requirements
24-A-03-069.01We recommend that the Office of Intergovernmental and External Affairs create and maintain a centralized database to store supporting documentation for all purchase card transactions to align with Program Guide requirements.- Status
- Open Unimplemented
- Responsible Agency
- OS
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 10/25/2024
- Legislative Related
- No
24-A-03-069.02We recommend that the Office of Intergovernmental and External Affairs remind cardholders and AOs of the documentation and reconciliation requirements outlined in Federal and HHS requirements and provide them with a copy of the Program Guide as part of the annual refresher training process.- Status
- Open Unimplemented
- Responsible Agency
- OS
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 10/25/2024
- Legislative Related
- No
24-A-03-069.03We recommend that the Office of Intergovernmental and External Affairs remind AOs to notify the Property Management Office when purchases of accountable property are made by IEA cardholders to ensure accountability and timely updating of the property records in the PMIS.- Status
- Open Unimplemented
- Responsible Agency
- OS
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 10/25/2024
- Legislative Related
- No
24-A-03-069.04We recommend that the Office of Intergovernmental and External Affairs provide to all cardholders and AOs training that encompasses the requirements related to the purchase of sensitive items, including properly completing the HHS-755 and tracking purchases in the PMIS.- Status
- Open Unimplemented
- Responsible Agency
- OS
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 10/25/2024
- Legislative Related
- No
24-A-03-069.05We recommend that the Office of Intergovernmental and External Affairs remind AOs to provide timely notice of separated cardholders to the A/OPC and remind cardholders to contact their AO timely before separating so that all outstanding purchase card transactions can be processed and reconciled before separation from employment as part of the annual refresher training process.- Status
- Open Unimplemented
- Responsible Agency
- OS
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 10/25/2024
- Legislative Related
- No
24-A-03-069.06We recommend that the Office of Intergovernmental and External Affairs work with the HHS A/OPC to create and maintain a centralized database as required by the Program Guide that captures the training certificates of all cardholders and AOs, including certificates for the annual refresher training.- Status
- Open Unimplemented
- Responsible Agency
- OS
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 10/25/2024
- Legislative Related
- No
-
West Virginia Lacked Effective Oversight of Its Opioid Response Grants
24-A-06-067.01We recommend that West Virginia's Bureau of Behavioral Health include requirements in its procedures to maintain documentation used to prepare the annual progress report.- Status
- Open Unimplemented
- Responsible Agency
- SAMHSA
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 10/21/2024
- Legislative Related
- No
24-A-06-067.02We recommend that West Virginia's Bureau of Behavioral Health conduct a periodic review of supporting documentation (e.g., invoices, payroll registers, and time-and-effort reports) for any subrecipient expenditures submitted to BBH.- Status
- Open Unimplemented
- Responsible Agency
- SAMHSA
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 10/21/2024
- Legislative Related
- No
24-A-06-067.03We recommend that West Virginia's Bureau of Behavioral Health revise pre-designed progress reports to capture the necessary data to determine whether program goals are being met.- Status
- Open Unimplemented
- Responsible Agency
- SAMHSA
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 10/21/2024
- Legislative Related
- No
24-A-06-067.04We recommend that West Virginia's Bureau of Behavioral Health provide training to program managers to ensure that advanced payments are being approved as close as administratively feasible to actual disbursements by the subrecipient.- Status
- Open Unimplemented
- Responsible Agency
- SAMHSA
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 10/21/2024
- Legislative Related
- No
24-A-06-067.05We recommend that West Virginia's Bureau of Behavioral Health revise procedures to ensure that subrecipient agreements are finalized and closed out with returned funds recorded in the general ledger prior to filing the Federal financial report.- Status
- Open Unimplemented
- Responsible Agency
- SAMHSA
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 10/21/2024
- Legislative Related
- No
-
Ohio Generally Completed Medicaid Eligibility Actions During the Unwinding Period in Accordance With Federal and State Requirements
24-A-05-066.01We recommend that the Ohio Department of Medicaid take appropriate action with respect to the incorrect Medicaid eligibility determinations identified in our sample.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 10/08/2024
- Legislative Related
- No
24-A-05-066.02We recommend that the Ohio Department of Medicaid provide periodic training to caseworkers about verifying and documenting enrollees' income during the renewal process.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 10/08/2024
- Legislative Related
- No
24-A-05-066.03We recommend that the Ohio Department of Medicaid provide additional training to caseworkers about using current information when conducting enrollee eligibility determinations.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 10/08/2024
- Legislative Related
- No
-
CMS Could Improve Its Procedures for Setting Medicare Clinical Diagnostic Laboratory Test Rates Under the Clinical Laboratory Fee Schedule for Future Public Health Emergencies
24-A-01-065.01We recommend that the Centers for Medicare & Medicaid Services establish procedures to improve communication among all stakeholders involved in setting new CDLT rates during a PHE.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 10/02/2024
- Legislative Related
- No
24-A-01-065.02We recommend that the Centers for Medicare & Medicaid Services improve its procedures, which may require seeking legislative authority, for setting and adjusting rates for new CDLTs during a PHE by providing the MACs with the flexibility needed to set and adjust payment rates that would cover the laboratory costs of providing services when responding to a PHE.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 10/02/2024
- Legislative Related
- No
-
Missouri May Not Have Used All CARES Act Funds for the Older Americans Act Nutrition Services Program in Accordance With Federal and State Requirements
24-A-07-064.01We recommend that the Missouri Department of Health and Senior Services require Area Agencies on Aging (AAAs) to track expenditures for supplemental awards by funding source, when required by Federal guidance, especially in instances of pandemic-related or other disaster relief funding. Specifically, none of the 10 AAAs in Missouri could give us separate accounting records that delineated the CARES Act expenditures to support the charges against the Federal award for these nutrition services.- Status
- Open Unimplemented
- Responsible Agency
- ACL
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 10/02/2024
- Legislative Related
- No
24-A-07-064.02We recommend that the Missouri Department of Health and Senior Services consider implementing additional monitoring activities whenever the State receives large supplemental funding disbursements.- Status
- Open Unimplemented
- Responsible Agency
- ACL
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 10/02/2024
- Legislative Related
- No
-
Fiscal Year 2018 and 2019 Biomedical Advanced Research and Development Authority Appropriations May Not Have Been Used for Their Intended Purpose in Accordance With Federal Requirements
24-A-03-059.01We recommend that the Administration for Strategic Preparedness and Response develop internal written policies and procedures for the JFA process that align with Federal requirements and include the use of allocation methodologies that accurately reflect the benefiting offices' use of the product or service.- Status
- Open Unimplemented
- Responsible Agency
- ASPR
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 09/30/2024
- Legislative Related
- No
24-A-03-059.02We recommend that the Administration for Strategic Preparedness and Response review the FY 2018 and 2019 JFA allocation methodologies along with the methodologies used during subsequent FYs to determine whether the costs were allocated to each office based on appropriate methodologies, and correct any improper allocations to avoid potential Antideficiency Act violations.- Status
- Open Unimplemented
- Responsible Agency
- ASPR
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 09/30/2024
- Legislative Related
- No
24-A-03-059.03We recommend that the Administration for Strategic Preparedness and Response maintain documentation of the work performed by employees whose salaries are paid using BARDA funds to ensure that appropriations are used for their intended purposes in accordance with Federal requirements.- Status
- Open Unimplemented
- Responsible Agency
- ASPR
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 09/30/2024
- Legislative Related
- No
24-A-03-059.04We recommend that the Administration for Strategic Preparedness and Response review the 10 remaining sampled employees that we could not interview to determine whether any salaries were improperly charged to BARDA appropriations and identify potential Antideficiency Act violations.- Status
- Open Unimplemented
- Responsible Agency
- ASPR
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 09/30/2024
- Legislative Related
- No
24-A-03-059.05We recommend that the Administration for Strategic Preparedness and Response report any Antideficiency Act violations identified.- Status
- Open Unimplemented
- Responsible Agency
- ASPR
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 09/30/2024
- Legislative Related
- No
-
Alabama Claimed Federal Medicaid Reimbursement for Millions of Dollars in Targeted Case Management Services That Did Not Comply With Federal and State Requirements
24-A-07-060.01We recommend that the Alabama Medicaid Agency refund to the Federal government $5,039,433 (Federal Share) in overpayments.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Not Yet Due
- Potential Savings
- $5,039,433
- Last Update Received
- -
- Next Update Expected
- 09/30/2024
- Legislative Related
- No
24-A-07-060.02We recommend that the Alabama Medicaid Agency improve TCM program oversight by giving additional guidance to TCM providers regarding: billing of services, to verify that they are allowable and nonduplicative; case manager hiring practices, to verify adherence with the State plan's qualification requirements; target group eligibility screening processes, so that only eligible individuals receive TCM services; and the maintenance of supporting documentation for billed services.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 09/30/2024
- Legislative Related
- No
-
ACF Has Enhanced Some Cybersecurity Controls Over the Unaccompanied Children Portal and Data But Improvements Are Needed
24-A-18-058.01We recommend that the Administration for Children and Families consistently perform user account reviews in accordance with its access control policy.- Status
- Open Unimplemented
- Responsible Agency
- ACF
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 09/28/2024
- Legislative Related
- No
24-A-18-058.02We recommend that the Administration for Children and Families fully implement the 30 required minimum controls identified in the UC Portal system security plan as being in various stages of implementation.- Status
- Open Unimplemented
- Responsible Agency
- ACF
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 09/28/2024
- Legislative Related
- No
-
Concerns Remain About Safeguards To Protect Residents During Facility-Initiated Discharges From Nursing Homes
24-E-01-012.01CMS should provide a standard notice template to help nursing homes provide complete and accurate information to residents facing discharge and Ombudsmen.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Non-Concur
- Potential Savings
- -
- Last Update Received
- 05/10/2024
- Next Update Expected
- 09/28/2024
- Legislative Related
- No
24-E-01-012.02CMS should require nursing homes to systematically document facility-initiated discharges in information available to CMS and States to enhance oversight.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Non-Concur
- Potential Savings
- -
- Last Update Received
- 05/10/2024
- Next Update Expected
- 09/28/2024
- Legislative Related
- No
-
A Lack of Behavioral Health Providers in Medicare and Medicaid Impedes Enrollees’ Access to Care
24-E-02-014.01CMS should take steps to encourage more behavioral health providers to serve Medicare and Medicaid enrollees.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 09/28/2024
- Legislative Related
- No
24-E-02-014.02CMS should explore options to expand Medicare and Medicaid coverage to additional behavioral health providers.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 09/28/2024
- Legislative Related
- No
24-E-02-014.03CMS should use network adequacy standards to drive an increase in behavioral health providers in Medicare Advantage and Medicaid.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 09/28/2024
- Legislative Related
- No
24-E-02-014.04CMS should increase monitoring of Medicare and Medicaid enrollees' use of behavioral health services and identify vulnerabilities.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 09/28/2024
- Legislative Related
- No
-
New Jersey Significantly Improved Its Oversight of Medicaid Adult Partial Care Services Except for Those Provided Using Telehealth During the COVID-19 Public Health Emergency
24-A-02-054.01New Jersey Department of Human Services should work with CMS to refund the recommended disallowance of $94,830,718 from a prior audit.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 09/27/2024
- Legislative Related
- No
24-A-02-054.02New Jersey Department of Human Services should refund $18,826,714 associated with deficiencies identified in the current audit.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Not Yet Due
- Potential Savings
- $18,826,714
- Last Update Received
- -
- Next Update Expected
- 09/27/2024
- Legislative Related
- No
24-A-02-054.03New Jersey Department of Human Services should provide training or guidance to providers to address noncompliance issues it identifies during site visits or audits to ensure Medicaid enrollees receive required services with the necessary amount of care.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 09/27/2024
- Legislative Related
- No
-
IHS Did Not Coordinate Supply Service Center Operations Before and During the COVID-19 Pandemic and Should Consider Upgrading Supply Centers’ Inventory Management Systems and Implementing Policies and Procedures To Enhance Coordination and Alignment
24-A-07-055.01We recommend that Indian Health Service develop and implement policies and procedures that enable the NSSC and the GRSSC to coordinate their operations and communicate directly with one another, align their inventory management systems, and use the same vendors when feasible.- Status
- Open Unimplemented
- Responsible Agency
- IHS
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 09/27/2024
- Legislative Related
- No
24-A-07-055.02We recommend that Indian Health Service consider upgrading the GRSSC's inventory system or implement other strategies to better coordinate the delivery of supplies to all customers.- Status
- Open Unimplemented
- Responsible Agency
- IHS
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 09/27/2024
- Legislative Related
- No
-
Administration for Children and Families Data Hosted in Certain Cloud Information Systems May Be at a High Risk of Compromise
24-A-18-057.01We recommend ACF update and maintain a complete and accurate inventory of information systems hosted in the cloud.- Status
- Open Unimplemented
- Responsible Agency
- ACF
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 09/27/2024
- Legislative Related
- No
24-A-18-057.02We reccomend ACF remediate the 19 security control findings in accordance with NIST SP 800-53.- Status
- Open Unimplemented
- Responsible Agency
- ACF
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 09/27/2024
- Legislative Related
- No
24-A-18-057.03We recommend ACF update its cloud security procedures to include detailed steps for operational staff to effectively implement cloud security baselines in accordance with HHS requirements.- Status
- Open Unimplemented
- Responsible Agency
- ACF
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 09/27/2024
- Legislative Related
- No
24-A-18-057.04We reccomend ACF leverage cloud security assessment tools to identify misconfigurations and weak cybersecurity controls in its cloud infrastructure.- Status
- Open Unimplemented
- Responsible Agency
- ACF
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 09/27/2024
- Legislative Related
- No
24-A-18-057.05We recommend ACF conduct testing of its cloud information systems that includes the emulation of an adversary's tactics and techniques on a defined reoccurring basis.- Status
- Open Unimplemented
- Responsible Agency
- ACF
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 09/27/2024
- Legislative Related
- No
-
Alabama MMIS and E&E System Security Controls Were Adequate, but Some Improvements Are Needed
24-A-18-056.01We reccomend that the Alabama Medicaid Agency remediate the six control findings OIG identified.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 09/27/2024
- Legislative Related
- No
24-A-18-056.02We recommend Alabama evaluate its current vulnerability scanning tools and update if necessary in order to better detect system flaws (e.g., common web server vulnerabilities) in its MMIS and E&E system and software components.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 09/27/2024
- Legislative Related
- No
24-A-18-056.03We recommend Alabama require its developers to follow secure coding standards and best practices, at a minimum, such as those recommended by NIST SP 800-218 or the Open Web Application Security Project (OWASP), when developing web applications.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 09/27/2024
- Legislative Related
- No
24-A-18-056.04We recommend Alabama implement procedures to periodically verify that its developers are adhering to secure coding standards and remediating vulnerabilities before releasing code to production.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 09/27/2024
- Legislative Related
- No
24-A-18-056.05We recommend Alabama perform more robust technical testing of web-facing systems that includes the emulation of an adversary's tactics and techniques on a defined reoccurring basis in order to better assess the effectiveness of NIST 800-53 controls.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Not Yet Due
- Potential Savings
- -
- Last Update Received
- -
- Next Update Expected
- 09/27/2024
- Legislative Related
- No