The Centers for Medicare & Medicaid Services Did Not Account for National Security Risks in Its Enterprise Risk Management Processes

Submitting OIG:

Date Issued:

Thursday, July 8, 2021

Agency Reviewed / Investigated:

Submitting OIG-Specific Report Number:

A-18-20-06200

Component, if applicable:

Centers for Medicare & Medicaid Services

Type of Report:

Audit

Questioned Costs:

Funds for Better Use:

Number of Recommendations:

Related Open Recommendations

Recommendation Number	Recommendation Status	Significant Recommendation	Additional Details
270923	Open	No
We recommend that the Centers for Medicare & Medicaid Services, as part of its ERM program, implement a process to assess all of its programs for national security risks in accordance with OMB Circular No. A-123's requirement to include new or emerging risks in the risk profile.