Federal Reports

Home Health VNA (the Agency) (located in Lawrence, Massachusetts) did not comply with Medicare billing requirements for 105 of the 497 home health claims we reviewed. As a result, the Agency received net overpayments of $314,000 for calendar years 2011 and 2012. Specifically, the Agency incorrectly billed Medicare because beneficiaries were not homebound, beneficiaries did not require skilled services, documentation from the certifying physicians was missing or insufficient to support the services the Agency provided, or, in one instance, a claim contained an incorrect payment code. These errors occurred primarily because the Agency did not have adequate controls to prevent the incorrect billing of Medicare claims within selected risk areas.

The Cybersecurity Act of 2015 (Cybersecurity Act) requires the Inspector General of each covered agency to collect and report to Congress information about the covered agency's covered systems within 240 days of the enactment of the Cybersecurity Act. A covered agency is an agency that operates a covered system, which is a Federal computer system that provides access to classified information or personally identifiable information. Reportable areas include logical access controls, multifactor authentication, and information security management practices regarding the covered systems.