Recommendations Tracker
HHS-OIG provides independent and objective oversight that promotes economy, efficiency, and effectiveness in HHS programs and operations. To drive this positive change, we produce reports and identify recommendations for improvement. We have developed this public-facing page for tracking all of our open recommendations.
Use the Top Unimplemented View below to read OIG's Top Unimplemented Recommendations. In OIG’s view, these top recommendations for HHS programs, if implemented, would have the greatest impact in terms of cost savings, program effectiveness and efficiency, and public health and safety. Learn more
Summary of All Recommendations
Updated Monthly · Last updated on Sept. 11, 2026
1,051
Unimplemented
recommendations
3,529
Implemented and Closed
recommendations since FY 2017
Views
OIG Recommendations Grouped by Report
-
Louisiana Faced Compliance and Contracting Challenges in Implementing Opioid Response Grant Programs
22-A-06-050.01We recommend that Louisiana's Office of Behavioral Health develop a process to ensure accurate reporting on the Annual Progress Reports.- Status
- Closed Implemented
- Responsible Agency
- SAMHSA
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 10/26/2022
- Legislative Related
- No
22-A-06-050.02We recommend that Louisiana's Office of Behavioral Health Improve monitoring of subrecipients to ensure that the distribution of naloxone kits is tracked and that distribution requirements are met.- Status
- Closed Implemented
- Responsible Agency
- SAMHSA
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 10/26/2022
- Legislative Related
- No
22-A-06-050.03We recommend that Louisiana's Office of Behavioral Health work with the LGEs and OTPs to identify ways to support clients' access to transportation to obtain treatment and determine how transportation could be addressed in each specific region of the State.- Status
- Closed Implemented
- Responsible Agency
- SAMHSA
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 10/26/2022
- Legislative Related
- No
22-A-06-050.04We recommend that Louisiana's Office of Behavioral Health review the contracting process to determine whether there are ways to expedite the process to provide funds to subrecipients and outside organizations in a timely manner.- Status
- Closed Implemented
- Responsible Agency
- SAMHSA
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 10/26/2022
- Legislative Related
- No
-
Many Medicare Beneficiaries Are Not Receiving Medication to Treat Their Opioid Use Disorder
22-E-02-006.01CMS should conduct additional outreach to beneficiaries to increase awareness about Medicare coverage for the treatment of opioid use disorder.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- 07/08/2025
- Next Update Expected
- 08/06/2026
- Legislative Related
- No
22-E-02-006.02CMS should take steps to increase the number of providers and opioid treatment programs for Medicare beneficiaries with opioid use disorder.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 09/03/2024
- Legislative Related
- No
22-E-02-006.03CMS should assist SAMHSA by providing data about the number of Medicare beneficiaries receiving buprenorphine in office-based settings and the geographic areas where Medicare beneficiaries remain underserved.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 07/25/2023
- Legislative Related
- No
22-E-02-006.04CMS should take steps to increase the utilization of behavioral therapy among beneficiaries receiving medication to treat opioid use disorder.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 08/06/2025
- Legislative Related
- No
22-E-02-006.05CMS should create an action plan and take steps to address disparities in the treatment of opioid use disorder.- Status
- Closed Unimplemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 09/02/2025
- Legislative Related
- No
22-E-02-006.06CMS should collect data on the use of telehealth in opioid treatment programs.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- 09/01/2026
- Next Update Expected
- 07/25/2024
- Legislative Related
- No
-
SAMHSA's Oversight Generally Ensured That the Commission on Accreditation of Rehabilitation Facilities Verified That Opioid Treatment Programs Met Federal Opioid Treatment Standards
22-A-09-002.01We recommend that the Substance Abuse and Mental Health Services Administration update its policies and procedures to require verification that accreditation bodies maintain records that contain sufficient detail to support each accreditation decision.- Status
- Closed Implemented
- Responsible Agency
- SAMHSA
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 05/20/2022
- Legislative Related
- No
-
About Seventy-Nine Percent of Opioid Treatment Program Services Provided to Medicaid Beneficiaries in Colorado Did Not Meet Federal and State Requirements
21-A-07-159.01We recommend that the Colorado Department of Health Care Policy and Financing work with the Colorado Department of Human Services to strengthen its biennial audits of OTPs to ensure that services provided are in accordance with Federal and State requirements.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 02/02/2022
- Legislative Related
- No
21-A-07-159.02We recommend that the Colorado Department of Health Care Policy and Financing work with the Colorado Department of Human Services to provide technical assistance to OTPs to ensure that the providers maintain adequate recordkeeping systems.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 02/02/2022
- Legislative Related
- No
21-A-07-159.03We recommend that the Colorado Department of Health Care Policy and Financing work with the Colorado Department of Human Services to educate OTPs on the deficiencies we identified in this report to increase their awareness of compliance issues regarding Federal and State requirements.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 02/02/2022
- Legislative Related
- No
-
Oklahoma's Oversight of Medicaid Outpatient Services for Opioid Use Disorder Was Generally Effective
21-A-06-140.01We recommend that the Oklahoma Health Care Authority consider whether more of an emphasis on counseling could improve OUD outcomes and, if so, take steps to increase the appropriate use of counseling with OUD drugs in outpatient OUD treatment.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- 12/16/2021
- Next Update Expected
- 06/27/2022
- Legislative Related
- No
21-A-06-140.02We recommend that the Oklahoma Health Care Authority develop policies and procedures to ensure that Medicaid behavioral health services are reviewed on an ongoing basis.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- 12/16/2021
- Next Update Expected
- 06/27/2022
- Legislative Related
- No
-
California Claimed at Least $2 Million in Unallowable Medicaid Reimbursement for a Selected Provider's Opioid Treatment Program Services
21-A-09-054.01We recommend that the California Department of Health Care Services refund $2,416,900 to the Federal Government for unallowable OTP services furnished by the selected provider.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- $2,416,900
- Last Update Received
- -
- Closed Date
- 05/05/2021
- Legislative Related
- No
21-A-09-054.02We recommend that the California Department of Health Care Services ensure that the selected provider complies with Federal and State requirements for providing and claiming reimbursement for OTP services.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 05/17/2023
- Legislative Related
- No
21-A-09-054.03We recommend that the California Department of Health Care Services verify that the selected provider implements corrective action plans that were approved by the State agency.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 06/14/2023
- Legislative Related
- No
21-A-09-054.04We recommend that the California Department of Health Care Services perform postpayment reviews to identify disallowances for OTP services that did not comply with State regulations and State plan requirements.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 01/12/2023
- Legislative Related
- No
21-A-09-054.05We recommend that the California Department of Health Care Services work with the selected provider to improve the quality of care provided to beneficiaries by correcting deficiencies.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 11/22/2023
- Legislative Related
- No
-
Choctaw Nation of Oklahoma Made Progress Toward Meeting Program Goals During the First Year of Its Tribal Opioid Response Grant
21-A-07-052.01We recommend that the Choctaw Nation of Oklahoma refund unallowable costs of $2,405 to the TOR grant.- Status
- Closed Implemented
- Responsible Agency
- SAMHSA
- Response
- Concur
- Potential Savings
- $2,405
- Last Update Received
- -
- Closed Date
- 08/18/2021
- Legislative Related
- No
21-A-07-052.02We recommend that the Choctaw Nation of Oklahoma train staff to identify contract costs that are allowable under Federal regulations.- Status
- Closed Implemented
- Responsible Agency
- SAMHSA
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 08/19/2021
- Legislative Related
- No
21-A-07-052.03We recommend that the Choctaw Nation of Oklahoma strengthen policies and procedures by clarifying responsibilities between and within Tribal departments for the review and approval of costs submitted on contractor invoices.- Status
- Closed Implemented
- Responsible Agency
- SAMHSA
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 08/19/2021
- Legislative Related
- No
21-A-07-052.04We recommend that the Choctaw Nation of Oklahoma establish policies and procedures that give staff members from the finance and program departments access to contractual agreements so that they can determine which costs are allowable under both the contractual agreement and the Federal grant.- Status
- Closed Implemented
- Responsible Agency
- SAMHSA
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 03/22/2022
- Legislative Related
- No
-
Few Patients Received High Amounts of Opioids from IHS-Run Pharmacies
21-E-05-003.01IHS should assess the costs and benefits of updating its EHR system with tools to support more automated monitoring.- Status
- Closed Implemented
- Responsible Agency
- IHS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 12/12/2024
- Legislative Related
- No
21-E-05-003.02IHS should request support from States and from Federal partners to address challenges with State-run PDMPs.- Status
- Closed Implemented
- Responsible Agency
- IHS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 12/12/2024
- Legislative Related
- No
-
FDA's Risk Evaluation and Mitigation Strategies: Uncertain Effectiveness in Addressing the Opioid Crisis
20-E-01-044.01FDA should use the new TIRF Risk Evaluation and Mitigation Strategy (REMS) patient registry to monitor for known areas of risk, such as inappropriate conversions and off-label prescribing.- Status
- Closed Implemented
- Responsible Agency
- FDA
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 04/17/2024
- Legislative Related
- No
20-E-01-044.02FDA should strengthen the Risk Evaluation and Mitigation Strategy (REMS) for opioid analgesics (the successor to ER/LA opioids) by requiring prescriber training.- Status
- Closed Acceptable Alternative
- Responsible Agency
- FDA
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 04/17/2024
- Legislative Related
- No
20-E-01-044.03FDA should enhance its Risk Evaluation and Mitigation Strategy (REMS) assessment review process.- Status
- Closed Implemented
- Responsible Agency
- FDA
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 03/31/2025
- Legislative Related
- No
20-E-01-044.04FDA should seek additional authority to ensure that manufacturers are held accountable when appropriate.- Status
- Closed Implemented
- Responsible Agency
- FDA
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 03/31/2025
- Legislative Related
- No
-
Ohio Did Not Ensure the Accuracy and Completeness of Psychotropic and Opioid Medication Information Recorded in Its Child Welfare Information System for Children in Foster Care
20-A-05-118.01We recommend that the Ohio Department of Job and Family Services improve monitoring to ensure that the county agencies maintain the required documentation in the Ohio SACWIS14 for the medications prescribed for children in its custody.- Status
- Closed Implemented
- Responsible Agency
- ACF
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 09/29/2022
- Legislative Related
- No
20-A-05-118.02We recommend that the Ohio Department of Job and Family Services continue its efforts to obtain access to Medicaid claim data for children in its custody.- Status
- Closed Implemented
- Responsible Agency
- ACF
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 09/29/2022
- Legislative Related
- No
20-A-05-118.03We recommend that the Ohio Department of Job and Family Services implement procedures for the monitoring of opioid medications prescribed for children in its custody.- Status
- Closed Implemented
- Responsible Agency
- ACF
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 09/29/2022
- Legislative Related
- No
20-A-05-118.04We recommend that the Ohio Department of Job and Family Services review and update the medication list in the Ohio SACWIS on a regular schedule, at least once a year and as medications are approved or discontinued, to improve the reliability and relevancy of the list.- Status
- Closed Implemented
- Responsible Agency
- ACF
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 09/29/2022
- Legislative Related
- No
20-A-05-118.05We recommend that the Ohio Department of Job and Family Services provide training and technical assistance to county agency workers who input medical and medication information into the Ohio SACWIS.- Status
- Closed Implemented
- Responsible Agency
- ACF
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 09/29/2022
- Legislative Related
- No
-
Medicare Part D Beneficiaries at Serious Risk of Opioid Misuse or Overdose: A Closer Look
20-E-02-020.01CMS should educate Part D beneficiaries about access to MAT drugs and naloxone.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 03/24/2022
- Legislative Related
- No
-
States' Use of Grant Funding for a Targeted Response to the Opioid Crisis
20-E-BL-012.01SAMHSA should work closely with States and territories during the no-cost extension period to address barriers to timely spending and to ensure that administrative cost caps are not exceeded.- Status
- Closed Implemented
- Responsible Agency
- SAMHSA
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 04/14/2021
- Legislative Related
- No
20-E-BL-012.02SAMHSA should require States that receive grants for OUD treatment to specifically report how many patients are receiving MAT.- Status
- Closed Implemented
- Responsible Agency
- SAMHSA
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 04/14/2021
- Legislative Related
- No
-
SAMHSA's Oversight of Accreditation Bodies for Opioid Treatment Programs Did Not Comply With Some Federal Requirements
20-A-09-071.01We recommend that SAMHSA identify steps it can take and take action to ensure that it meets its goal for the number of OTPs it inspects each year.- Status
- Closed Implemented
- Responsible Agency
- SAMHSA
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 09/21/2020
- Legislative Related
- No
20-A-09-071.02We recommend that SAMHSA review the results of its inspections and take action to address accreditation bodies' noncompliance with survey requirements.- Status
- Closed Implemented
- Responsible Agency
- SAMHSA
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 09/21/2020
- Legislative Related
- No
20-A-09-071.03We recommend that SAMHSA ensure that its compliance officers follow the Compliance Audit Guidance by reviewing alternative patients' charts when parts of a chart are unavailable to determine an OTP's compliance with the Federal opioid treatment standards.- Status
- Closed Implemented
- Responsible Agency
- SAMHSA
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 09/21/2020
- Legislative Related
- No
20-A-09-071.04We recommend that SAMHSA work with the accreditation bodies to standardize the survey reports to include not only surveyor teams' information but also OTPs' compliance with each of the Federal opioid treatment standards.- Status
- Closed Implemented
- Responsible Agency
- SAMHSA
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 09/21/2020
- Legislative Related
- No
20-A-09-071.05We recommend that SAMHSA comply with Federal regulations and the HHS policy for documenting and retaining its evaluations of accreditation elements.- Status
- Closed Implemented
- Responsible Agency
- SAMHSA
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 09/21/2020
- Legislative Related
- No
-
New York Claimed Tens of Millions of Dollars for Opioid Treatment Program Services That Did Not Comply With Medicaid Requirements Intended To Ensure the Quality of Care Provided to Beneficiaries
20-A-02-054.01We recommend that the New York State Department of Health refund $39,329,059 to the Federal Government.- Status
- Open Unimplemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- $39,329,059
- Last Update Received
- 04/13/2026
- Next Update Expected
- 10/13/2026
- Legislative Related
- No
20-A-02-054.02We recommend that the New York State Department of Health ensure that providers comply with Federal and State requirements for providing and claiming reimbursement for OTP services.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 03/17/2025
- Legislative Related
- No
20-A-02-054.03We recommend that the New York State Department of Health implement procedures to detect and prevent duplicate claims for OTP services.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 03/17/2025
- Legislative Related
- No
-
Geographic Disparities Affect Access to Buprenorphine Services for Opioid Use Disorder
20-E-12-006.01SAMHSA should geographically target its efforts to increase the participation of waivered providers in high-need counties.- Status
- Closed Implemented
- Responsible Agency
- SAMHSA
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 04/15/2021
- Legislative Related
- No
-
National Review of Opioid Prescribing in Medicaid Is Not Yet Possible
19-E-05-031.01CMS should work to ensure that individual beneficiaries can be uniquely identified at a national level using T-MSIS.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 09/22/2022
- Legislative Related
- No
19-E-05-031.02CMS should ensure the correct submission of prescriber NPIs.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 08/21/2026
- Legislative Related
- No
19-E-05-031.03CMS should clarify requirements for diagnosis codes.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 07/24/2020
- Legislative Related
- No
-
IHS Needs To Improve Oversight of Its Hospitals' Opioid Prescribing and Dispensing Practices and Consider Centralizing Its Information Technology Functions
19-A-18-114.01We recommend that IHS revise the IHM to include the type of action a provider should take and what documentation to include in the patient's EHR when a UDS is unfavorable.- Status
- Closed Implemented
- Responsible Agency
- IHS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 09/07/2023
- Legislative Related
- No
19-A-18-114.02We recommend that IHS revise the IHM manual to require area offices to submit completed annual reviews to IHS headquarters.- Status
- Closed Implemented
- Responsible Agency
- IHS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 10/30/2024
- Legislative Related
- No
19-A-18-114.03We recommend that IHS increase oversight of IT systems by IHS management, including consideration of centralizing its key IT systems (including RPMS), services, and cybersecurity functions (e.g., patch management, unsupported network equipment and contingency planning) by conducting a cost-benefit analysis and risk assessment of adopting the Cloud First Policy and other means of centralization (e.g., headquarters, area offices). Specifically, determine if a cloud solutions or other modernization approaches are most effective and cost efficient in addressing persistent cybersecurity vulnerabilities and increasing network resiliency.- Status
- Closed Implemented
- Responsible Agency
- IHS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 01/17/2023
- Legislative Related
- No
19-A-18-114.04IHS present findings and cost savings analysis to tribal leadership and the IHS user community to get buy-in for any significant IT enterprise changes.- Status
- Closed Implemented
- Responsible Agency
- IHS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 01/17/2023
- Legislative Related
- No
19-A-18-114.05We recommend that IHS implement a strategic and phased approach to centralization of IT systems, services and cybersecurity functions.- Status
- Closed Implemented
- Responsible Agency
- IHS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 01/17/2023
- Legislative Related
- No
19-A-18-114.06We recommend that IHS work with hospitals to: ensure pain management and related documentation is done in accordance with IHS policies and procedures.- Status
- Closed Implemented
- Responsible Agency
- IHS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 08/03/2022
- Legislative Related
- No
19-A-18-114.07We recommend that IHS work with hospitals to develop policies and procedures to review the EHRs of patients with opioid prescriptions from non-IHS providers and document the results of the review in the EHR, particularly for those patients who had previously violated their COT agreements.- Status
- Closed Implemented
- Responsible Agency
- IHS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 09/07/2023
- Legislative Related
- No
19-A-18-114.08We recommend that IHS work with hospitals to ensure opioid dispensing data are complete, accurate, and submitted in a timely manner to the State PDMP for use by providers and pharmacists.- Status
- Closed Implemented
- Responsible Agency
- IHS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 08/03/2022
- Legislative Related
- No
19-A-18-114.09We recommend that IHS work with hospitals to ensure all opioids are in a locked cabinet, safe, drawer, or other appropriate secure container at all times.- Status
- Closed Implemented
- Responsible Agency
- IHS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 08/03/2022
- Legislative Related
- No
19-A-18-114.10We recommend that IHS work with hospitals to track all opioids prescribed at the hospital in the patient EHRs, including those being filled at an outside pharmacy.- Status
- Closed Implemented
- Responsible Agency
- IHS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 09/07/2023
- Legislative Related
- No
19-A-18-114.11We recommend that IHS work with hospitals to analyze opioid data to make decisions and oversee providers to minimize prescribing practices that exceed daily MME guidelines established by IHS, co-prescribe opioids and benzodiazepines, and use opioids for acute pain.- Status
- Closed Implemented
- Responsible Agency
- IHS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 08/03/2022
- Legislative Related
- No
19-A-18-114.12We recommend that IHS work with hospitals to remediate the IT vulnerabilities identified.- Status
- Open Unimplemented
- Responsible Agency
- IHS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- 02/14/2025
- Next Update Expected
- 08/28/2025
- Legislative Related
- No
19-A-18-114.13We recommend that IHS work with area offices to renegotiate the MOU with Oklahoma and other States that have restrictive MOU language to allow for PDMP self-audits and collection by clinical directors.- Status
- Closed Implemented
- Responsible Agency
- IHS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 08/03/2022
- Legislative Related
- No
19-A-18-114.14We recommend that IHS work with area offices to complete required annual reviews that are consistent in type and level of detail across all IHS hospitals.- Status
- Closed Implemented
- Responsible Agency
- IHS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 09/07/2023
- Legislative Related
- No
19-A-18-114.15We recommend that IHS should assign a centralized team (e.g., headquarters, area office) to: Ensure patches are deployed timely to all IHS end points in accordance with NIST guidance and IHS policies and procedures.- Status
- Closed Implemented
- Responsible Agency
- IHS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 02/28/2025
- Legislative Related
- No
19-A-18-114.16We recommend that IHS should assign a centralized team (e.g., headquarters, area office) to monitor and track end-of-service-life IT equipment that cannot be maintained centrally (e.g., switches or routers). IHS hospitals and area offices should provide a tracking spreadsheet to IHS headquarters on a periodic basis that highlights equipment that is reaching or has reached end of service life and replace such equipment or provide management approved justification for its continued use.- Status
- Closed Implemented
- Responsible Agency
- IHS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 03/21/2025
- Legislative Related
- No
19-A-18-114.17We recommend that IHS should assign a centralized team (e.g., headquarters, area office) to: Securely configure and monitor wireless access points at all IHS hospitals.- Status
- Closed Implemented
- Responsible Agency
- IHS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 02/28/2025
- Legislative Related
- No
19-A-18-114.18We recommend that IHS should ensure that physical IT controls are included in each hospital's risk assessment.- Status
- Closed Implemented
- Responsible Agency
- IHS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 03/21/2025
- Legislative Related
- No
19-A-18-114.19We recommend that IHS should ensure that all devices on IHS's network are scanned for vulnerabilities, scan reports reviewed by appropriate computer personnel, track vulnerability remediation, and ensure that vulnerabilities are remediated in a timely way.- Status
- Closed Implemented
- Responsible Agency
- IHS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 02/28/2025
- Legislative Related
- No
19-A-18-114.20We recommend that IHS should ensure that all hospitals Institute complete and updated contingency plans and test plans in accordance with Federal guidelines.- Status
- Closed Implemented
- Responsible Agency
- IHS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 05/27/2025
- Legislative Related
- No
19-A-18-114.21We recommend that IHS should ensure that all hospitals: Store backup tapes off-site in accordance with Federal guidelines.- Status
- Closed Implemented
- Responsible Agency
- IHS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 02/28/2025
- Legislative Related
- No
19-A-18-114.22We recommend that IHS should ensure that all hospitals: Have a complete risk assessment, to include all IT assets, for all risks, both physical and information security, in accordance with IHS and NIST guidance.- Status
- Open Unimplemented
- Responsible Agency
- IHS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- 02/14/2025
- Next Update Expected
- 08/28/2025
- Legislative Related
- No
-
The Penobscot Indian Nation Did Not Meet All Federal and Tribal Health and Safety Requirements
19-A-01-028.01We recommend that the Penobscot Nation ensure that PNHD is under the medical direction of a physician who performs all of the duties required in the job description and in accordance with Federal and Tribal requirements.- Status
- Closed Implemented
- Responsible Agency
- IHS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 02/08/2022
- Legislative Related
- No
19-A-01-028.02We recommend that the Penobscot Nation develop, approve, and implement written medical policies and procedures, with the advice of the required group of professional medical staff, that include pain-management treatment prioritization requirements for opioid prescription and compliance monitoring; and requirements for timely completion, signature, and review of patient health records.- Status
- Closed Implemented
- Responsible Agency
- IHS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 02/08/2022
- Legislative Related
- No
19-A-01-028.03We recommend that the Penobscot Nation conduct annual program evaluations in accordance with Federal requirements, review the results of the program evaluations, and take corrective actions as appropriate.- Status
- Closed Implemented
- Responsible Agency
- IHS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 02/08/2022
- Legislative Related
- No
19-A-01-028.04We recommend that Penobscot Nation implement Federal and Tribal preemployment screening controls for employees who have not been fully screened prior to employment and for new staff hired at PNHD, including the performance of fingerprinting and FBI background checks for all staff currently working with Indian children, and maintain complete employee personnel files that include current licensing information when applicable.- Status
- Closed Implemented
- Responsible Agency
- IHS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 02/08/2022
- Legislative Related
- No
19-A-01-028.05We recommend that the Penobscot Nation establish a preventative maintenance program for the facility and medical equipment to ensure that it provides a safe, clean, and accessible environment.- Status
- Closed Implemented
- Responsible Agency
- IHS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 02/08/2022
- Legislative Related
- No
19-A-01-028.06We recommend that Penobscot Nation work with the Penobscot Nation's Tribal government to ensure that its emergency preparedness program is reviewed, updated, and tested annually, in accordance with Federal requirements, and review and update PNHD's standard operating procedures in accordance with Tribal requirements.- Status
- Closed Implemented
- Responsible Agency
- IHS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 02/08/2022
- Legislative Related
- No
-
The Passamaquoddy Tribe's Pleasant Point Health Center Did Not Always Meet Federal and Tribal Health and Safety Requirements
18-A-01-139.01We recommend that the Passamaquoddy Tribe at Pleasant Point ensures PPHC is under the medical direction of a physician, in accordance with Federal and Tribal requirements.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 12/16/2024
- Legislative Related
- No
18-A-01-139.02We recommend that the Passamaquoddy Tribe at Pleasant Point establishes clear lines of authority between the health director's administrative duties and the medical staff's duties to provide care by defining job responsibilities as well as policies and procedures that ensure medical complaints are resolved by staff with the appropriate clinical training who can assess and evaluate patient-care decisions and patient-care decisions are prioritized with appropriate input from medical staff during periods of limited funding.- Status
- Closed Implemented
- Responsible Agency
- IHS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 03/29/2021
- Legislative Related
- No
18-A-01-139.03We recommend that the Passamaquoddy Tribe at Pleasant Point develop, approve, and implement with the advice of the required group of professional medical staff written medical policies and procedures that include pain-management treatment prioritization requirements for opioid prescription and compliance monitoring and requirements for timely completion, signature, and review of patient health records.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 12/16/2024
- Legislative Related
- No
18-A-01-139.04We recommend that the Passamaquoddy Tribe at Pleasant Point conduct annual program evaluations in accordance with Federal requirements.- Status
- Closed Unimplemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 02/11/2026
- Legislative Related
- No
18-A-01-139.05We recommend that the Passamaquoddy Tribe at Pleasant Point implement Federal and Tribal preemployment screening controls for employees who have not been fully screened prior to employment and for new staff hired at PPHC, including the performance of fingerprinting and FBI background checks for all staff currently working with Indian children.- Status
- Closed Implemented
- Responsible Agency
- IHS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 02/10/2022
- Legislative Related
- No
18-A-01-139.06We recommend that the Passamaquoddy Tribe at Pleasant Point provide a safe, clean, and accessible environment with a preventative maintenance program for the facility and medical equipment for the provision of health care.- Status
- Closed Implemented
- Responsible Agency
- CMS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 11/08/2022
- Legislative Related
- No
-
Two Indian Health Service Hospitals Had System Security and Physical Controls for Prescription Drug and Opioid Dispensing but Could Still Improve Controls
18-A-18-027.01We recommend that IHS assign specific PINs for each employee at Blackfeet Hospital for restricted areas.- Status
- Closed Implemented
- Responsible Agency
- IHS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 01/13/2023
- Legislative Related
- No
18-A-18-027.02We recommend IHS deem a risk of the lack of continuity of operations to be unacceptable and take immediate action to assess all IHS facilities and ensure each facility has a tested and viable continuity of operations program to respond to and recover from a range of disasters.- Status
- Closed Implemented
- Responsible Agency
- IHS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 01/13/2023
- Legislative Related
- No
18-A-18-027.03We recommend that IHS test all backup mechanisms at Burdick Memorial to ensure patient information is fully recoverable and implement an effective continuity of operations program and disaster recovery plan and procedures in accordance with Federal requirements.- Status
- Closed Implemented
- Responsible Agency
- IHS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 01/13/2023
- Legislative Related
- No
18-A-18-027.04We recommend that IHS develop and implement logical access-control procedures to ensure compliance with the principle of least privilege and conduct periodic privilege-based access reviews to remove unnecessary access to RPMS.- Status
- Closed Implemented
- Responsible Agency
- IHS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 01/13/2023
- Legislative Related
- No
18-A-18-027.05We recommend that IHS perform adequate information security risk assessments at all IHS hospitals in accordance with NIST 800-30.- Status
- Closed Implemented
- Responsible Agency
- IHS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 01/13/2023
- Legislative Related
- No
18-A-18-027.06We recommend that IHS identify all hospitals with unsupported networking equipment and implement a system development life cycle plan to ensure hardware and software replacement before EOL.- Status
- Open Unimplemented
- Responsible Agency
- IHS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- 10/03/2024
- Next Update Expected
- 04/04/2025
- Legislative Related
- No
18-A-18-027.07We recommend that IHS determine if local IHS hospital system administrators are adequately trained to ensure compliance with all flaw remediation and vulnerability management procedures and, if not, develop and implement a training program.- Status
- Closed Implemented
- Responsible Agency
- IHS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 01/13/2023
- Legislative Related
- No
18-A-18-027.08We recommend that IHS ensure that all vulnerabilities identified during vulnerability scanning are remediated in accordance with Federal requirements.- Status
- Closed Implemented
- Responsible Agency
- IHS
- Response
- Concur
- Potential Savings
- -
- Last Update Received
- -
- Closed Date
- 01/13/2023
- Legislative Related
- No