Federal Reports

We determined that Medicare costs related to the replacement of all recalled or prematurely failed medical devices could not be identified and tracked using only Medicare claim data. Such costs cannot be determined using only claim data because, although Medicare claim forms identify the medical procedures performed, they do not contain a field for reporting medical device-specific information. The lack of information on the claim forms prevents the Centers for Medicare & Medicaid Services (CMS) from being able to fully understand and address the Medicare costs related to recalled or prematurely failed medical devices. In addition, the lack of information impedes the Food and Drug Administration and CMS's ability to identify poorly performing devices as early as possible. This diminishes device recipients' chances of receiving timely followup care.

The National Credit Union Administration Office of Inspector General conducted this self-initiated audit to assess NCUA’s IT examination program. The objective of our audit was to determine whether the IT examination program provides for adequate oversight of federally insured credit union cybersecurity programs to assess whether credit unions are taking sufficient and appropriate measures to protect the confidentiality, availability, and integrity of credit union assets and sensitive credit union information against cyber-attacks.