Federal Reports

This summary report provides an overview of the results of our audit of the information security controls over Virginia's Medicaid Management Information System (MMIS). It does not include specific details of the vulnerabilities that we identified because of the sensitive nature of the information. We determined that Virginia did not adequately secure its Medicaid data and information systems in accordance with Federal requirements. Virginia had adopted a security program for its MMIS, but numerous significant system vulnerabilities remained. We have provided more detailed information and recommendations to Virginia so that it can address the issues we identified. The findings listed in this summary report reflect a point in time regarding system security and may have changed since we reviewed these systems.

The Office of the Inspector General previously conducted an evaluation of Kingston Fossil Plant (KIF) (Evaluation Report 2015-15329, dated March 10, 2016) to identify operational and cultural strengths and areas for improvement that could impact KIF's organizational effectiveness. Our final report identified several operational and cultural areas for improvement, along with recommendations for addressing those issues. We subsequently received KIF's management decision on June 20, 2016. The objective of this follow-up evaluation was to assess management's actions to address areas for improvement from our initial organizational effectiveness review. In summary, we determined the actions taken by KIF appear to address most areas for improvement identified during our initial organizational effectiveness evaluation. Some concerns remain related to the administration of discipline and unresolved conflict in one group. However, in general, individuals reported seeing positive changes at KIF.