Federal Reports

Our audit objective was to determine whether the U.S. Patent and Trademark Office has adequately managed its Active Directory to protect mission critical systems and data. Our review focused on fundamental security practices of Active Directory management and security control implementations of the servers hosting Active Directory .

Three-dimensional conformal radiation therapy (3D-CRT) allows doctors to sculpt radiation beams to the shape of a patient's tumor. Medicare makes a single payment to hospitals for development of a 3D-CRT treatment plan. Automated prepayment edits generally prevent additional payments for separately billed radiation planning services if they are billed on the same date of service as the 3D-CRT treatment plan. However, Medicare billing requirements do not prohibit and system edits do not prevent additional payments if the services are billed on a different date of service (e.g., 1 to 14 days before).

To see our report, click on the link below

We evaluated the process TVA uses to verify the accuracy of payments made to the Department of Labor (DOL) for workers compensation benefits. We determined TVA did not have a formal process to verify the accuracy of payments made for schedule awards. Although TVA’s Sarbanes-Oxley Act (SOX) controls verified certain aspects of the DOL billings, the SOX controls did not include steps to verify the accuracy of the elements in award of compensation letters and, as a result, some errors were not identified. Additionally, we found TVA was not performing a SOX control related to providing a summary of workers' compensation charges to the applicable organizations for review.