Open Recommendations

Implement system changes to ensure that BHP enrollees with a pending coverage end-date are transferred from BHP to Medicaid upon the end of their 5-year bar.

If SSA does not implement recommendation 3, then it should retain the IRS non-wage income data in its systems beyond 2 years, so it is available for staff to process cases involving fraud or similar fault.

We recommend SSA determine additional actions it can take in response to DDS’ recurring financial management deficiencies.

(U) Rec. A.1.b: The DoD OIG recommended that the Secretaries of the Military Departments test and evaluate the high-altitude electromagnetic pulse survivability of mission-critical systems to ensure that threshold requirements are met; identify vulnerabilities; and develop and implement risk mitigation tactics, techniques, and procedures or materiel solutions. For programs that utilize hardening as a method for high-altitude electromagnetic pulse survivability, ensure the system requirements documents identify a Hardness Maintenance and Hardness Surveillance requirement and that a Hardness Maintenance and Hardness Survivability program is implemented.

(U) Rec. A.1.b: The DoD OIG recommended that the Secretaries of the Military Departments test and evaluate the high-altitude electromagnetic pulse survivability of mission-critical systems to ensure that threshold requirements are met; identify vulnerabilities; and develop and implement risk mitigation tactics, techniques, and procedures or materiel solutions. For programs that utilize hardening as a method for high-altitude electromagnetic pulse survivability, ensure the system requirements documents identify a Hardness Maintenance and Hardness Surveillance requirement and that a Hardness Maintenance and Hardness Survivability program is implemented.

(U) Rec. A.1.c.1: The DoD OIG recommended that the Secretaries of the Military Departments identify legacy chemical, biological, radiological, and nuclear mission-critical systems. Specifically, develop a plan to assess each legacy system's high-altitude electromagnetic pulse survivability limitations.

(U) Rec. A.1.c.2: The DoD OIG recommended that the Secretaries of the Military Departments identify legacy chemical, biological, radiological, and nuclear mission-critical systems. Specifically, to the extent practicable, coordinate and implement a standardized assessment plan with the Office of the Assistant Secretary of Defense for Nuclear, Chemical, and Biological Programs.

(U) Rec. A.1.c.3: The DoD OIG recommended that the Secretaries of the Military Departments identify legacy chemical, biological, radiological, and nuclear mission-critical systems. Specifically, for those legacy systems assessed as inadequate, develop materiel solutions or tactics, techniques, and procedures to mitigate the risks as directed by DoD Instruction 3150.09 and provide resource shortfalls and recommended priorities to the Office of the Assistant Secretary of Defense for Nuclear, Chemical, and Biological Defense Programs.

(U) Rec. B.1: The DoD OIG recommended that the Director of the Test Resource Management Center develop a plan to improve electromagnetic pulse test facility capabilities in coordination with the Services and electromagnetic pulse testing facilities to ensure testing gaps are accounted for and addressed to meet the requirements of MIL-STD-2169D.

We recommend that the Centers for Medicare & Medicaid Services provide States with matched T-MSIS enrollment data that identify Medicaid beneficiaries who were concurrently enrolled in a Medicaid managed care program in two States.

We recommend that the Centers for Medicare & Medicaid Services assist States with utilizing the data as needed to reduce future capitation payments made on behalf of beneficiaries concurrently enrolled in two States.

We recommend that the Centers for Medicare & Medicaid Services: direct the MACs to recover the $331,448 from the CAHs for 12,156 claims for which the health care practitioners had not reassigned their billing rights to the CAHs and $83,412 in cost-sharing overcharges to Medicare beneficiaries that are within the 4-year reopening period;

We recommend that the Centers for Medicare & Medicaid Services direct the MACs to recover the $575,990 from the health care practitioners for 7,857 claims for which health care practitioners had reassigned their billing rights to the CAHs and $197,909 in cost-sharing overcharges to Medicare beneficiaries that are within the 4-year reopening period.

We recommend that the Centers for Medicare & Medicaid Services coordinate with the MACs to develop and implement claim system edits or alternative means to prevent and detect overpayments for professional service payments.

CLA recommends that the National Institutes of Health management implement the recommendations below to enhance cybersecurity controls over its grant program. 1. Assess its grant award programs to determine which grants should require additional cybersecurity protections due to research potentially including sensitive and confidential data or NIH intellectual property or both.

2. Based on results of NIH's risk assessment of grant applicants, include in the funding opportunity announcements or grant terms and conditions or both the cybersecurity controls that should be implemented.

3. Strengthen the NIHGPS to establish clear and measurable standards for cybersecurity protections.

4. Strengthen its pre-award process to identify and address how cybersecurity risk will be assessed.

5. Strengthen its post-award process to confirm that cybersecurity protections have been implemented to adequately safeguard sensitive and confidential data.  

(U) Rec. 1: The DoD OIG recommended that the Commander of the United States Africa Command modify United State Africa Command Instruction 3200.21, "United States Africa Command Joint Targeting Instruction," June 1, 2020, to include the requirement to maintain specific documents for target development and targeting operations based on the procedures used to develop the target.

CMS should clarify that States should review their Medicaid managed care plans' MLR reports to verify the accuracy of reported data elements.

CMS should provide additional guidance to States regarding Medicaid managed care plans' reporting of non-claims costs in MLR reports.

CMS should design an annual MLR reporting template for States to provide to their Medicaid managed care plans.

CMS should clarify that States should verify the completeness of their Medicaid managed care plans' MLR reports.

We recommend that the Chief of Border Patrol develop and implement a comprehensive policy for use of different pathways for expedited processing during times of increased apprehension activity. The policy should require: x Issuing A-numbers for all migrants released into the United States to ensure DHS and other Federal agencies can track migrants throughout the immigration process; and x Ensuring processing pathways comply with existing law and policy.