Where To Report Waste

Fraud, Abuse, Or Retaliation

Audit of the Information Systems General and Application Controls at Health Alliance Medical Plans, Inc.

Submitting OIG:

Office of Personnel Management OIG

Date Issued:

Thursday, July 13, 2023

Agency Reviewed / Investigated:

Office of Personnel Management

Submitting OIG-Specific Report Number:

2022-ISAG-036

Component, if applicable:

Federal Employees Health Benefits Program

External entity, if applicable:

Health Alliance Medical Plans, Inc.

Location(s):

Agency-Wide

Type of Report:

Audit

Questioned Costs:

$0

Funds for Better Use:

$0

Number of Recommendations:

17

Report updated under NDAA 5274:

No

View Document:

Attachment	Size
2022-ISAG-036.pdf	1.3 MB

Related Open Recommendations

Recommendation Number	Recommendation Status	Significant Recommendation	Additional Details
1	Open	No
We recommend that HAM and Carle review and update its documented Information Security Program Plan in accordance with its policy and NIST requirements.
2	Open	No
We recommend that HAM ensure [redacted]
4	Open	No
We recommend that HAM ensure [redacted]
5	Open	No
We recommend that HAM ensure [redacted]
6	Open	No
We recommend that HAM ensure [redacted]
7	Open	No
We recommend that HAM ensure [redacted]
8	Open	No
We recommend that HAM ensure [redacted]. Note - this recommendation cannot be implemented until the controls from Recommendation 7 are in place.
9	Open	No
We recommend that HAM develop and then implement [redacted]
10	Open	No
We recommend that HAM [redacted]
12	Open	No
We recommend that HAM [redacted]

Pages