An official website of the United States government
Here's how you know
Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock (
) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
Brought to you by the Council of the Inspectors General on Integrity and Efficiency
The Child Care and Development Fund (CCDF) block grant program is a Federal-State partnership to provide eligible, low income families with help paying for child care at a provider of their choice. Within the CCDF program, OIG has previously identified fraud, found improper payments, and exposed health and safety concerns at child care facilities. In addition, CCDF has been identified as a Federal program that is susceptible to significant improper payments, with an estimated $311 million in improper payments identified for fiscal year (FY) 2015. This report focuses on how States and the Administration for Children and Families (ACF) ensure the integrity of the CCDF block grant program and the results of States' program integrity activities. This work is part of an initiative that OIG is undertaking to address vulnerabilities in grant programs across the Department of Health and Human Services.
We identified internal control weaknesses in the system that increase the risk that Virginia will be unable to prevent or detect unauthorized access and disclosure of personally identifiable information. Specifically, we found that although Virginia classified the Single Sign-on Web System as a sensitive system, it did not ensure that it met the minimum State requirements for a system classified as sensitive. This meant thatVirginia also was not in compliance with the Statewide Longitudinal Data Systems grant requirements. We determined that Virginia has policies and procedures that address reporting and responding to unauthorized access and disclosure of data, but we could not determine whether Virginia effectively implemented the procedures because Virginia has not reported any system breaches in the Virginia Longitudinal Data System or the Single Sign-on Web System.