Recommendations Tracker
HHS-OIG provides independent and objective oversight that promotes economy, efficiency, and effectiveness in HHS programs and operations. To drive this positive change, we produce reports and identify recommendations for improvement. We have developed this public-facing page for tracking all of our open recommendations.
Use the Top Unimplemented View below to read OIG's Top Unimplemented Recommendations. In OIG’s view, these top recommendations for HHS programs, if implemented, would have the greatest impact in terms of cost savings, program effectiveness and efficiency, and public health and safety. Learn more
Summary of All Recommendations
Updated Monthly · Last updated on April 15, 2026
1,094
Unimplemented
recommendations
3,367
Implemented and Closed
recommendations since FY 2017
Views
OIG Recommendations Grouped by Report
Showing 341–360 of 1,385 reports, containing 4,461 recommendations
Sorted by latest release date
-
Florida Did Not Ensure That Some Providers Complied With Requirements For Determining Eligibility For Its Projects for Assistance in Transition From Homelessness Program
23-A-02-079.01We recommend that the Florida Department of Children and Families instruct PATH providers to disenroll from the PATH program the consumers identified in our report as ineligible to receive PATH services.- Status
- Closed Implemented
- Responsible Agency
- SAMHSA
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 12/20/2023
- Legislative Related
- No
23-A-02-079.02We recommend that the Florida Department of Children and Families, instruct PATH providers to review consumers' case files to determine if consumers are eligible and disenroll ineligible consumers from the PATH program.- Status
- Closed Implemented
- Responsible Agency
- SAMHSA
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 01/17/2024
- Legislative Related
- No
23-A-02-079.03We recommend that the Florida Department of Children and Families strengthen its oversight of the PATH program to ensure that PATH services are only provided to eligible consumers.- Status
- Closed Implemented
- Responsible Agency
- SAMHSA
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 12/20/2023
- Legislative Related
- No
-
Maryland MMIS and E&E System Security Controls Were Partially Effective and Improvements Are Needed
23-A-18-078.01We recommend that the Maryland Department of Health remediate the seven control findings OIG identified.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 12/17/2024
- Legislative Related
- No
23-A-18-078.02We recommend that the Maryland Department of Health assess the effectiveness of all required NIST SP 800-53 controls according to the organization's defined frequency.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 06/20/2024
- Legislative Related
- No
23-A-18-078.03We recommend that the Maryland Department of Health assess at least annually and if necessary, adjust baseline configurations for its MMIS and E&E public servers.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 06/20/2024
- Legislative Related
- No
23-A-18-078.04We recommend that the Maryland Department of Health perform periodic phishing exercises and enhance employee and contractor cybersecurity awareness training based on the results of the phishing exercises, if needed.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 12/17/2024
- Legislative Related
- No
-
Vermont Complied With Regulations When Implementing Programs Under SAMHSA's Opioid Response Grants, but Claimed Unallowable Expenditures
23-A-01-077.01We recommend that the Vermont Department of Health, Division of Substance Use Programs refund $282,643 to the Federal Government.- Status
- Closed Implemented
- Responsible Agency
- SAMHSA
- Response
- Concur
- Potential Savings
- $282,643
- Last Update Received
- -
- Closed Date
- 11/04/2024
- Legislative Related
- No
23-A-01-077.02We recommend that the Vermont Department of Health, Division of Substance Use Programs require subrecipients to provide and retain supporting documentation for invoices submitted for reimbursement under Federal grants as recommended in Bulletin No. 5.- Status
- Closed Implemented
- Responsible Agency
- SAMHSA
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 05/20/2024
- Legislative Related
- No
23-A-01-077.03We recommend that the Vermont Department of Health, Division of Substance Use Programs conduct a periodic review of supporting documentation (i.e., invoices, payroll registers, and time and effort reports) for subrecipient expenditures submitted to DSU for reimbursement.- Status
- Open Unimplemented
- Responsible Agency
- SAMHSA
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- 11/26/2025
- Next Update Expected
- 05/26/2026
- Legislative Related
- No
23-A-01-077.04We recommend that the Vermont Department of Health, Division of Substance Use Programs provide training to State employees responsible for conducting pre-award risk assessments of potential subrecipients of Federal grant funds.- Status
- Closed Implemented
- Responsible Agency
- SAMHSA
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 05/20/2024
- Legislative Related
- No
23-A-01-077.05We recommend that the Vermont Department of Health, Division of Substance Use Programs conduct annual site visits as required within the terms and conditions of the grant award that include program and fiscal reviews.- Status
- Closed Implemented
- Responsible Agency
- SAMHSA
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 05/20/2024
- Legislative Related
- No
-
The Centers for Medicare & Medicaid Services Should Improve Preventative and Detective Controls To More Effectively Mitigate the Risk of Compromise
23-A-18-076.01We recommend that the Centers for Medicare & Medicaid Services remediate the seven security control findings OIG identified.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- 03/28/2024
- Next Update Expected
- 10/05/2024
- Legislative Related
- No
23-A-18-076.02We recommend that the Centers for Medicare & Medicaid Services update security controls to align with the most current NIST SP 800-53 requirements.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- 03/29/2024
- Next Update Expected
- 10/05/2024
- Legislative Related
- No
23-A-18-076.03We recommend that the Centers for Medicare & Medicaid Services enhance policies and procedures to periodically identify and assess whether security controls are in place and operating effectively in accordance with the most current NIST SP 800-53 controls and remediate weak controls timely.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- 03/29/2024
- Next Update Expected
- 10/05/2024
- Legislative Related
- No
-
The Office of Refugee Resettlement Needs To Improve Its Oversight Related to the Placement and Transfer of Unaccompanied Children
23-A-06-074.01We recommend that the Office of Refugee Resettlement strengthen oversight of initial placements by addressing challenges with bed space capacity and intake specialist staffing during influx periods to ensure a placement is made within 24 hours of each referral and Intakes Placement Checklists are completed for children with special needs or concerns.- Status
- Closed Implemented
- Responsible Agency
- ACF
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 12/01/2023
- Legislative Related
- No
23-A-06-074.02We recommend that the Office of Refugee Resettlement strengthen oversight of transfers between care provider facilities by requiring that all transfer documentation be maintained in the UC Portal and by developing procedures for tracking and reviewing that documentation.- Status
- Closed Implemented
- Responsible Agency
- ACF
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 07/15/2025
- Legislative Related
- No
23-A-06-074.03We recommend that the Office of Refugee Resettlement review restrictive setting placement denials and take action as needed to ensure that, in the future when transfer is recommended, children will be able to obtain an appropriate placement.- Status
- Closed Implemented
- Responsible Agency
- ACF
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 12/01/2023
- Legislative Related
- No
23-A-06-074.04We recommend that the Office of Refugee Resettlement assess needs to expand the Office of Refugee Resettlement's network capacity to serve the needs of children with mental health and behavioral issues.- Status
- Closed Implemented
- Responsible Agency
- ACF
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 12/01/2023
- Legislative Related
- No
-
Seventeen of Thirty Selected Health Centers Did Not Use or May Not Have Used Their HRSA COVID-19 Supplemental Grant Funding in Accordance With Federal Requirements
23-A-02-073.01We recommend that the Health Resources and Services Administration require the 10 health centers identified in our report as having charged unallowable COVID-19 supplemental grant funding costs to refund $787,152 (less any amounts health centers voluntarily refunded as a result of our audit) to the Federal Government.- Status
- Closed Implemented
- Responsible Agency
- HRSA
- Response
- Partial Concur
- Potential Savings
- $787,152
- Last Update Received
- -
- Closed Date
- 12/09/2024
- Legislative Related
- No
23-A-02-073.02We recommend that the Health Resources and Services Administration work with the 13 health centers identified in our report that may not have properly allocated COVID-19 supplemental grant funding costs to determine what portion of the $15,056,835 is allocable to their COVID-19 supplemental grant funding and require the health centers to refund the improperly allocated funds to the Federal Government.- Status
- Closed Implemented
- Responsible Agency
- HRSA
- Response
- Partial Concur
- Potential Savings
- $15,056,835
- Last Update Received
- -
- Closed Date
- 12/09/2024
- Legislative Related
- No
23-A-02-073.03We recommend that the Health Resources and Services Administration assist the 17 health centers identified in our report as having charged unallowable costs or potentially improperly allocated costs to implement HRSA's guidance for developing and maintaining financial management systems and internal controls that ensure that only allowable, allocable, and documented costs are charged to their HRSA supplemental grant funding.- Status
- Closed Implemented
- Responsible Agency
- HRSA
- Response
- Partial Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 07/02/2024
- Legislative Related
- No
-
Montana Generally Complied With Requirements for Telehealth Services During the COVID-19 Pandemic
23-A-07-072.01We recommend that the Montana Department of Public Health and Human Services develop and implement edits in its claim payment system so that the State agency pays only telehealth claims whose HCPCS codes denote the associated services as eligible to be performed via telehealth.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- 09/03/2025
- Next Update Expected
- 03/03/2026
- Legislative Related
- No
-
The Risk of Misuse and Diversion of Buprenorphine for Opioid Use Disorder Appears to Be Low in Medicare Part D
23-E-02-028.01CMS should monitor the use of buprenorphine and share information, as appropriate, with Departmental partners.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Partial Concur
- Potential Savings
- -
- Last Update Received
- 11/20/2025
- Next Update Expected
- 12/17/2026
- Legislative Related
- No
23-E-02-028.02CMS should inform providers about buprenorphine use and the low risk of diversion to encourage providers to treat more Part D enrollees who have opioid use disorder.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 05/15/2024
- Legislative Related
- No
23-E-02-028.03CMS should take steps to inform providers about the availability of buprenorphine combination products in Part D, which can minimize the risk of misuse and diversion.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 05/15/2024
- Legislative Related
- No
23-E-02-028.04CMS should follow up on the prescribers with concerning patterns identified in this report.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 01/24/2024
- Legislative Related
- No
-
Massachusetts MMIS and E&E System Security Controls Were Generally Effective, but Some Improvements Are Needed
23-A-18-071.01We recommend that the Massachusetts Department of Health and Human Services remediate the three security control findings OIG identified.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 05/05/2025
- Legislative Related
- No
23-A-18-071.02We recommend that the Massachusetts Department of Health and Human Services assess the effectiveness of all required NIST SP 800-53 controls according to the organization's defined frequency.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 05/05/2025
- Legislative Related
- No
23-A-18-071.03We recommend that the Massachusetts Department of Health and Human Services assess and adjust if necessary, vulnerability management procedures to ensure any pertinent publicly disclosed computer security vulnerabilities are assessed for risk and remediated promptly, if necessary.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 12/17/2024
- Legislative Related
- No
-
State Agencies Can Improve Their Reporting of Children Missing From Foster Care to Law Enforcement for Entry Into the National Crime Information Center Database as Required by Federal Statute
23-A-07-070.01We recommend that the Administration for Children and Families work with State agencies to ensure compliance with Federal requirements to report missing children episodes to law enforcement for entry into the NCIC database in a timely manner.- Status
- Closed Implemented
- Responsible Agency
- ACF
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 08/23/2024
- Legislative Related
- No
-
Review of the Department of Health and Human Services' Compliance with the Federal Information Security Modernization Act of 2014 for Fiscal Year 2022
23-A-18-069.01To strengthen HHS' enterprise-wide cybersecurity program, based on our reviews across the Department, we recommend that HHS continue to work with the OpDivs to implement automated CDM solutions to increase awareness and improve mitigation efforts across all of HHS.- Status
- Closed Unimplemented
- Responsible Agency
- OS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 04/08/2024
- Legislative Related
- No
23-A-18-069.02To strengthen HHS' enterprise-wide cybersecurity program, based on our reviews across the Department, we recommend that HHS continue to advance the SCRM program to implement defined standards across HHS.- Status
- Closed Unimplemented
- Responsible Agency
- OS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 11/27/2023
- Legislative Related
- No
23-A-18-069.03To strengthen HHS' enterprise-wide cybersecurity program, based on our reviews across the Department, we recommend that HHS continue to work with the OpDivs to ensure privileged users' logical access contains strong authentication mechanisms; and to confirm that OpDivs are periodically performing sufficient monitoring over privileged user access.- Status
- Closed Unimplemented
- Responsible Agency
- OS
- Response
- Non-Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 11/27/2023
- Legislative Related
- No
23-A-18-069.04To strengthen HHS' enterprise-wide cybersecurity program, based on our reviews across the Department, we recommend that HHS confirm that the OpDivs contingency plan testing is being performed within the timeframe required by HHS policy.- Status
- Closed Superseded
- Responsible Agency
- OS
- Response
- Non-Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 05/23/2025
- Legislative Related
- No
23-A-18-069.05We recommend that the HHS OCIO work with the OpDivs to ensure that all OpDivs implement the capability to deny access to mobile devices, such as smartphones and tablets, from connecting to the network if the device's software is outdated.- Status
- Closed Implemented
- Responsible Agency
- OS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 04/08/2024
- Legislative Related
- No
23-A-18-069.06We recommend that the HHS OCIO work with the OpDivs to implement oversight sufficient to ensure that Information Security Continuous Monitoring (ISCM) policies and procedures are consistently implemented in accordance with NIST standards for all systems.- Status
- Closed Implemented
- Responsible Agency
- OS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 11/27/2023
- Legislative Related
- No
23-A-18-069.07We recommend that the HHS OCIO work with the OpDivs to ensure that all OpDivs remediate weaknesses identified during controls assessments and review/perform risk assessments within the timeframe established by HHS policy.- Status
- Closed Superseded
- Responsible Agency
- OS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 06/17/2025
- Legislative Related
- No
23-A-18-069.08We recommend that the HHS OCIO work with the OpDivs to ensure that all OpDivs complete its discovery of all information systems and maintain an up- to-date inventory of systems, software, and licenses.- Status
- Closed Superseded
- Responsible Agency
- OS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 05/23/2025
- Legislative Related
- No
23-A-18-069.09We recommend that the HHS OCIO work with the OpDivs to ensure that SCAs are conducted within the appropriate timeframe as defined by policy for all systems.- Status
- Closed Implemented
- Responsible Agency
- OS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 11/27/2023
- Legislative Related
- No
23-A-18-069.10We recommend that the HHS OCIO work with the OpDivs to ensure that all OpDiv's SCRM policies and procedures are being consistently implemented across the organization and ensure their execution.- Status
- Closed Superseded
- Responsible Agency
- OS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 06/17/2025
- Legislative Related
- No
23-A-18-069.11We recommend that the HHS OCIO work with the OpDivs to ensure that all OpDivs finalize and implement draft policies and procedures to include the review of suppliers or contractors for risks to the organization's systems and system components.- Status
- Closed Superseded
- Responsible Agency
- OS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 05/23/2025
- Legislative Related
- No
23-A-18-069.12We recommend that the HHS OCIO work with the OpDivs to ensure that OpDivs define and implement policy for data exfiltration, enhanced network defenses, e-mail authentication, and DNS infrastructure tampering mitigation. Further, ensure the OpDiv enforces implementation of data encryption in transit and at rest in accordance with HHS policy, NIST standards, and OMB guidance.- Status
- Closed Unimplemented
- Responsible Agency
- OS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 11/27/2023
- Legislative Related
- No
23-A-18-069.13We recommend that the HHS OCIO work with the OpDivs to ensure that all OpDivs implement the requirement to resolve high and critical vulnerabilities within 30 and 15 days respectively and create POA&Ms to monitor and resolve the weakness in a timely manner.- Status
- Closed Implemented
- Responsible Agency
- OS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 09/06/2023
- Legislative Related
- No
23-A-18-069.14We recommend that the HHS OCIO work with the OpDivs to ensure that all OpDivs implement its policies and procedures to perform periodic BIAs and contingency plan testing within the timeframe required by HHS policy.- Status
- Closed Superseded
- Responsible Agency
- OS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 05/23/2025
- Legislative Related
- No
23-A-18-069.15We recommend that the HHS OCIO work with the OpDivs to ensure the timely completion of PIAs for all systems to identify privacy and compliance risk with federal regulations or laws, tracking implementation of privacy controls, identifying instances where the Agency collects or handles PII and/or PHI subject to the Privacy Act of 1974.- Status
- Closed Implemented
- Responsible Agency
- OS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 09/06/2023
- Legislative Related
- No
23-A-18-069.16We recommend that the HHS OCIO work with the OpDivs to ensure that secure configuration settings are being maintained as defined by existing policy.- Status
- Closed Superseded
- Responsible Agency
- OS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 05/23/2025
- Legislative Related
- No
23-A-18-069.17We recommend that the HHS OCIO work with the OpDivs to ensure that all operational systems have multifactor or an alternative strong authentication mechanism (PIV or an Identity Assurance Level (IAL)3/Authenticator Assurance Level (AAL) 3 credential) for both privileged and non-privileged users.- Status
- Closed Unimplemented
- Responsible Agency
- OS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 05/23/2025
- Legislative Related
- No
23-A-18-069.18We recommend that the HHS OCIO work with the OpDivs to ensure that policies and procedures for identity and access management are being consistently implemented and proper safeguards (i.e., logging, monitoring, review of privileged user activity) are developed across the Department to ensure their execution.- Status
- Closed Implemented
- Responsible Agency
- OS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 11/27/2023
- Legislative Related
- No
23-A-18-069.19We recommend that the HHS OCIO work with the OpDivs to ensure that all OpDivs enforce its policies and procedures established to review users' activities periodically.- Status
- Closed Unimplemented
- Responsible Agency
- OS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 11/27/2023
- Legislative Related
- No
23-A-18-069.20We recommend that the HHS OCIO work with the OpDivs to implement oversight procedures sufficient to ensure that all personnel complete role-based training in a timely manner.- Status
- Closed Implemented
- Responsible Agency
- OS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 11/27/2023
- Legislative Related
- No
23-A-18-069.21We recommend that the HHS OCIO work with the OpDivs to ensure that operational systems have valid and current Authorization to Operate (ATO) and that security controls are assessed annually as per HHS policy.- Status
- Closed Superseded
- Responsible Agency
- OS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 05/23/2025
- Legislative Related
- No
23-A-18-069.22We recommend that the HHS OCIO work with the OpDivs to implement oversight sufficient to ensure that all OpDivs review pre-defined privileged users' activities periodically and document the review and any follow-up activities for all systems.- Status
- Closed Unimplemented
- Responsible Agency
- OS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 11/27/2023
- Legislative Related
- No
23-A-18-069.23We recommend that the HHS OCIO work with the OpDivs to consistently implement the requirement to assign risk designations, re-signing access agreements, and training for all systems so that OpDivs can restrict privileges for users based on risk designations.- Status
- Closed Implemented
- Responsible Agency
- OS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 11/27/2023
- Legislative Related
- No
23-A-18-069.24We recommend that the HHS OCIO work with the OpDivs to ensure that data encryption methods to protect data determined to be PII or sensitive are implemented across the organization for all systems.- Status
- Closed Implemented
- Responsible Agency
- OS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 11/27/2023
- Legislative Related
- No
-
The Office of Refugee Resettlement Needs To Improve Its Practices for Background Checks During Influxes
23-A-06-067.01We recommend that the Office of Refugee Resettlement ensure that all ICFs and EISs currently in operation have conducted the required background checks on current employees whose checks were not conducted or take action to ensure that these employees do not have direct access to children while any results of the checks are pending.- Status
- Closed Implemented
- Responsible Agency
- ACF
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 11/16/2023
- Legislative Related
- No
23-A-06-067.02We recommend that the Office of Refugee Resettlement clarify and reissue guidance for background checks at EISs so that it is clear which checks are required, who is responsible for conducting the checks, and which checks must be conducted prior to hire.- Status
- Closed Implemented
- Responsible Agency
- ACF
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 11/16/2023
- Legislative Related
- No
23-A-06-067.03We recommend that the Office of Refugee Resettlement include a review of compliance by ICFs and EISs with all background check requirements and facility access as a part of ORR's routine site visit monitoring.- Status
- Closed Implemented
- Responsible Agency
- ACF
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 03/21/2024
- Legislative Related
- No
23-A-06-067.04We recommend that the Office of Refugee Resettlement ensure that future awards and subawards for services that involve contact with children (e.g., transportation) include detailed information on background check requirements and specify that background checks must be conducted prior to hire.- Status
- Closed Implemented
- Responsible Agency
- ACF
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 11/16/2023
- Legislative Related
- No
23-A-06-067.05We recommend that the Office of Refugee Resettlement re-evaluate the need for waivers of background checks and explore alternative means of obtaining required checks.- Status
- Closed Implemented
- Responsible Agency
- ACF
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 11/16/2023
- Legislative Related
- No
23-A-06-067.06We recommend that the Office of Refugee Resettlement re-evaluate the use of public records checks in lieu of, or prior to receiving the results of, FBI fingerprint and CA/N checks, and require a DOJ sex offender registry check in addition to a public records check if ORR determines there is a need to use public records checks.- Status
- Closed Implemented
- Responsible Agency
- ACF
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 11/16/2023
- Legislative Related
- No
23-A-06-067.07We recommend that the Office of Refugee Resettlement reiterate to EISs the importance of ensuring that access to a site is secure and that access badges are collected and deactivated for individuals who no longer require access to EISs.- Status
- Closed Implemented
- Responsible Agency
- ACF
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 11/16/2023
- Legislative Related
- No
-
Medicare Improperly Paid Providers for Some Psychotherapy Services, Including Those Provided via Telehealth, During the First Year of the COVID-19 Public Health Emergency
23-A-09-068.01We recommend that the Centers for Medicare & Medicaid Services work with the MACs to recover $35,560 in improper payments made to providers for the 128 sampled enrollee days that did not meet Medicare requirements.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- $35,560
- Last Update Received
- -
- Closed Date
- 08/26/2024
- Legislative Related
- No
23-A-09-068.02We recommend that the Centers for Medicare & Medicaid Services work with the MACs to based upon the results of this audit, notify appropriate providers (i.e., those for whom CMS determines this audit constitutes credible information of potential overpayments) so that the providers can exercise reasonable diligence to identify, report, and return any overpayments in accordance with the 60-day rule and identify any of those returned overpayments as having been made in accordance with this recommendation.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 08/10/2023
- Legislative Related
- No
23-A-09-068.03Now that CMS has reinstituted most program integrity measures, we also recommend that CMS take the following steps, which if in effect during the audit period could have saved Medicare an estimated $579,667,510 during that period: Conduct medical reviews of psychotherapy services, including services provided via telehealth, to verify that the services are documented and billed in accordance with Medicare requirements.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- $579,631,950
- Last Update Received
- -
- Closed Date
- 09/30/2024
- Legislative Related
- No
23-A-09-068.04Now that CMS has reinstituted most program integrity measures, we also recommend that CMS take the following steps, which if in effect during the audit period could have saved Medicare an estimated $579,667,510 during that period: Implement system edits for psychotherapy services, including services provided via telehealth, to prevent payments for services that were billed incorrectly.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Non-Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 02/02/2024
- Legislative Related
- No
23-A-09-068.05Now that CMS has reinstituted most program integrity measures, we also recommend that CMS take the following steps, which if in effect during the audit period could have saved Medicare an estimated $579,667,510 during that period: Strengthen educational efforts to make providers aware of educational materials on how to meet Medicare requirements and guidance for psychotherapy services, including services provided via telehealth.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 09/30/2024
- Legislative Related
- No
23-A-09-068.06Now that CMS has reinstituted most program integrity measures, we also recommend that CMS work with the MACs to take the following steps, which if in effect during the audit period could have saved Medicare an estimated $579,667,510 during that period: Review MAC jurisdictions' LCD requirements for psychotherapy services to identify which provisions effectively promote program integrity, and consider additional steps that CMS could undertake to ensure appropriate coverage and payment for psychotherapy services across all jurisdictions.- Status
- Closed Acceptable Alternative
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 09/29/2025
- Legislative Related
- No
-
Medicare Could Have Saved Up To $128 Million Over 5 Years if CMS Had Implemented Controls To Address Duplicate Payments for Services Provided to Individuals With Medicare and Veterans Health Administration Benefits
23-A-09-066.01We recommend that the Centers for Medicare & Medicaid Services establish a comprehensive data-sharing agreement with VHA for the ongoing sharing of data.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- 08/16/2024
- Next Update Expected
- 02/16/2025
- Legislative Related
- No
23-A-09-066.02We recommend that the Centers for Medicare & Medicaid Services establish an interagency process to integrate VHA enrollment, claims, and payment data into the CMS IDR to identify potential fraud, waste, and abuse under the Medicare program.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- 04/05/2024
- Next Update Expected
- 10/06/2024
- Legislative Related
- No
23-A-09-066.03We recommend that the Centers for Medicare & Medicaid Services establish an internal process (such as system edits) to address duplicate payments made by Medicare for medical services authorized and paid for by VHA, which could have saved Medicare up to $128 million during our audit period.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- $127,981,462
- Last Update Received
- 08/16/2024
- Next Update Expected
- 02/16/2025
- Legislative Related
- No
23-A-09-066.04We recommend that the Centers for Medicare & Medicaid Services issue guidance to providers on not billing Medicare for a medical service that was authorized by VHA.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 08/16/2024
- Legislative Related
- No
-
Crow/Northern Cheyenne Hospital—an IHS-Operated Health Facility—Did Not Timely Conduct Required Background Checks of Staff and Supervise Certain Staff
23-A-02-065.01We recommend that Crow/Northern Cheyenne Hospital, Billings Area Office, and Indian Health Service Headquarters work together to take action to complete background investigations for staff members identified in this report as not having a satisfactory background investigation and adjudicate the investigations that were still pending adjudication.- Status
- Open Unimplemented
- Responsible Agency
- IHS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- 06/05/2025
- Next Update Expected
- 12/10/2025
- Legislative Related
- No
23-A-02-065.02We recommend that Crow/Northern Cheyenne Hospital, Billings Area Office, and Indian Health Service Headquarters work together to update standard operating procedures for background investigations to address the deficiencies we identified in this report.- Status
- Closed Implemented
- Responsible Agency
- IHS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 06/10/2025
- Legislative Related
- No
23-A-02-065.03We recommend that Crow/Northern Cheyenne Hospital, Billings Area Office, and Indian Health Service Headquarters work together to establish a monitoring system to ensure all elements of required background investigations in accordance with Federal requirements are completed within required timeframes.- Status
- Open Unimplemented
- Responsible Agency
- IHS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- 06/05/2025
- Next Update Expected
- 12/10/2025
- Legislative Related
- No
23-A-02-065.04We recommend that Crow/Northern Cheyenne Hospital, Billings Area Office, and Indian Health Service Headquarters work together to determine which staff members in contact with Indian children currently have a pending background investigation and take immediate action to ensure that there is adequate documented evidence that these staff members meet IHS sight and supervision requirements when children are in their care.- Status
- Open Unimplemented
- Responsible Agency
- IHS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- 06/05/2025
- Next Update Expected
- 12/10/2025
- Legislative Related
- No
23-A-02-065.05We recommend that Crow/Northern Cheyenne Hospital, Billings Area Office, and Indian Health Service Headquarters work together to update standard operating procedures for provisional staff supervision to address the deficiencies we identified in this report.- Status
- Open Unimplemented
- Responsible Agency
- IHS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- 06/05/2025
- Next Update Expected
- 12/10/2025
- Legislative Related
- No
23-A-02-065.06We recommend that Crow/Northern Cheyenne Hospital, Billings Area Office, and Indian Health Service Headquarters work together to establish a monitoring system to ensure that the Hospital meets sight and supervision requirements for staff with pending background investigations and documents that they are met.- Status
- Open Unimplemented
- Responsible Agency
- IHS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- 06/05/2025
- Next Update Expected
- 12/10/2025
- Legislative Related
- No
-
CMS Did Not Accurately Report on Care Compare One or More Deficiencies Related to Health, Fire Safety, and Emergency Preparedness for an Estimated Two-Thirds of Nursing Homes
23-A-09-064.01We recommend that the Centers for Medicare & Medicaid Services correct the inaccurately reported deficiencies that we identified for the sampled nursing homes.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Non-Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 02/12/2024
- Legislative Related
- No
23-A-09-064.02We recommend that the Centers for Medicare & Medicaid Services evaluate whether additional modifications are needed to existing programming in CASPER that prevented the entry of 2 different inspections that were performed on the same date.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Non-Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 06/26/2023
- Legislative Related
- No
23-A-09-064.03We recommend that the Centers for Medicare & Medicaid Services ensure that any future revisions to the list of deficiencies that is used to describe deficiencies reported on Care Compare are accurate.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Non-Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 06/26/2023
- Legislative Related
- No
23-A-09-064.04We recommend that the Centers for Medicare & Medicaid Services correct existing programming in ASPEN that prevented the 56 emergency preparedness deficiencies from being reported on Care Compare.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Non-Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 02/12/2024
- Legislative Related
- No
23-A-09-064.05We recommend that the Centers for Medicare & Medicaid Services strengthen its processes for reviewing inspection results reported on Care Compare by requiring State survey agencies to verify that deficiencies shown in ASPEN are also shown in CASPER when they are preparing to conduct an inspection.- Status
- Closed Acceptable Alternative
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 02/12/2024
- Legislative Related
- No
23-A-09-064.06We recommend that the Centers for Medicare & Medicaid Services strengthen its processes for reviewing inspection results reported on Care Compare by providing technical assistance and additional training to State survey agencies that are not following procedures in the State Operations Manual and ASPEN Central Office Procedures Guide for reporting deficiencies in ASPEN.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 02/12/2024
- Legislative Related
- No
23-A-09-064.07We recommend that the Centers for Medicare & Medicaid Services strengthen its processes for reviewing inspection results reported on Care Compare by including in its manual quality assurance check a verification that nursing home inspection results are accurately reported.- Status
- Closed Acceptable Alternative
- Responsible Agency
- CMS
- Response
- Non-Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 02/12/2024
- Legislative Related
- No
-
Medicare Advantage Compliance Audit of Specific Diagnosis Codes That HumanaChoice (Contract H6609) Submitted to CMS
23-A-05-063.01We recommend that HumanaChoice refund to the Federal Government the $480,295 of net overpayments.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- $480,295
- Last Update Received
- 09/12/2025
- Next Update Expected
- 03/12/2026
- Legislative Related
- No
23-A-05-063.02We recommend that HumanaChoice identify, for the high-risk diagnoses included in this report, similar instances of noncompliance that occurred before or after our audit period and refund any resulting overpayments to the Federal Government.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- 09/12/2025
- Next Update Expected
- 03/12/2026
- Legislative Related
- No
23-A-05-063.03We recommend that HumanaChoice examine its existing compliance procedures to identify areas where improvements can be made to ensure that diagnosis codes that are at high risk for being miscoded comply with Federal requirements and take the necessary steps to enhance those procedures.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- 09/12/2025
- Next Update Expected
- 03/12/2026
- Legislative Related
- No
-
Rhode Island Medicaid Fraud Control Unit: 2022 Inspection
22-E-07-040.01Assess whether the Office of the Attorney General's case management system can be modified to fully meet the Unit's needs, and if appropriate, seek approval to implement its own case management system.- Status
- Closed Implemented
- Responsible Agency
- MFCU
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 02/08/2024
- Legislative Related
- No
22-E-07-040.02Establish policies and/or procedures to ensure that case files are maintained in an effective manner.- Status
- Closed Implemented
- Responsible Agency
- MFCU
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 02/08/2024
- Legislative Related
- No
22-E-07-040.03Develop a plan to ensure that case files include documentation of periodic supervisory reviews and update the Unit's policies and procedures manual to describe the Unit's current practices for periodic supervisory reviews.- Status
- Closed Implemented
- Responsible Agency
- MFCU
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 02/08/2024
- Legislative Related
- No
22-E-07-040.04Update its policies and procedures manual to reflect current practices.- Status
- Closed Implemented
- Responsible Agency
- MFCU
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 02/08/2024
- Legislative Related
- No
22-E-07-040.05Assess the duties of the Supervisor of Investigations, and if warranted, develop a plan to reduce his nonmanagerial duties.- Status
- Closed Implemented
- Responsible Agency
- MFCU
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 12/01/2023
- Legislative Related
- No
22-E-07-040.06Take steps to ensure that convictions and adverse actions are reported to Federal partners within the appropriate timeframes.- Status
- Closed Implemented
- Responsible Agency
- MFCU
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 02/08/2024
- Legislative Related
- No
22-E-07-040.07Take steps to track and verify that Unit staff meet requirements in its training plan.- Status
- Closed Implemented
- Responsible Agency
- MFCU
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 12/01/2023
- Legislative Related
- No
-
Medicare Advantage Compliance Audit of Specific Diagnosis Codes That Cigna-HealthSpring Life & Health Insurance Company, Inc. (Contract H4513) Submitted to CMS
23-A-07-062.01We recommend that Cigna-HealthSpring Life & Health Insurance Company, Inc. refund to the Federal Government the $468,372 of overpayments.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- $468,372
- Last Update Received
- 09/15/2025
- Next Update Expected
- 03/15/2026
- Legislative Related
- No
23-A-07-062.02We recommend that Cigna-HealthSpring Life & Health Insurance Company, Inc. identify, for the high-risk diagnoses included in this report, similar instances of noncompliance that occurred before or after our audit period and refund any resulting overpayments to the Federal Government.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- 09/15/2025
- Next Update Expected
- 03/15/2026
- Legislative Related
- No
23-A-07-062.03We recommend that Cigna-HealthSpring Life & Health Insurance Company, Inc. continue its examination of its existing compliance procedures to identify areas where improvements can be made to ensure that diagnosis codes that are at high risk for being miscoded comply with Federal requirements (when submitted to CMS for use in CMS's risk adjustment program) and take the necessary steps to enhance those procedures.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- 09/15/2025
- Next Update Expected
- 03/15/2026
- Legislative Related
- No
-
Medicare Advantage Compliance Audit of Specific Diagnosis Codes That MCS Advantage, Inc. (Contract H5577) Submitted to CMS
23-A-02-061.01We recommend that MCS Advantage, Inc. refund to the Federal Government the $220,577 of net overpayments.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- $220,577
- Last Update Received
- 09/23/2025
- Next Update Expected
- 03/23/2026
- Legislative Related
- No
23-A-02-061.02We recommend that MCS Advantage, Inc. identify, for the high-risk diagnoses included in this report, similar instances of noncompliance that occurred before or after our audit period and refund any resulting overpayments to the Federal Government.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- 09/23/2025
- Next Update Expected
- 03/23/2026
- Legislative Related
- No
23-A-02-061.03We recommend that MCS Advantage, Inc. continue its examination of its existing compliance procedures to identify areas where improvements can be made to ensure that diagnosis codes that are at high risk for being miscoded comply with Federal requirements (when submitted to CMS for use in CMS's risk adjustment program) and take the necessary steps to enhance those procedures.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- 09/23/2025
- Next Update Expected
- 03/23/2026
- Legislative Related
- No