Open Recommendations

(U) Rec. B.1: The DoD OIG recommended that the Director of the Test Resource Management Center develop a plan to improve electromagnetic pulse test facility capabilities in coordination with the Services and electromagnetic pulse testing facilities to ensure testing gaps are accounted for and addressed to meet the requirements of MIL-STD-2169D.

We recommend that the Centers for Medicare & Medicaid Services provide States with matched T-MSIS enrollment data that identify Medicaid beneficiaries who were concurrently enrolled in a Medicaid managed care program in two States.

We recommend that the Centers for Medicare & Medicaid Services assist States with utilizing the data as needed to reduce future capitation payments made on behalf of beneficiaries concurrently enrolled in two States.

We recommend that the Centers for Medicare & Medicaid Services: direct the MACs to recover the $331,448 from the CAHs for 12,156 claims for which the health care practitioners had not reassigned their billing rights to the CAHs and $83,412 in cost-sharing overcharges to Medicare beneficiaries that are within the 4-year reopening period;

We recommend that the Centers for Medicare & Medicaid Services direct the MACs to recover the $575,990 from the health care practitioners for 7,857 claims for which health care practitioners had reassigned their billing rights to the CAHs and $197,909 in cost-sharing overcharges to Medicare beneficiaries that are within the 4-year reopening period.

We recommend that the Centers for Medicare & Medicaid Services coordinate with the MACs to develop and implement claim system edits or alternative means to prevent and detect overpayments for professional service payments.

CLA recommends that the National Institutes of Health management implement the recommendations below to enhance cybersecurity controls over its grant program. 1. Assess its grant award programs to determine which grants should require additional cybersecurity protections due to research potentially including sensitive and confidential data or NIH intellectual property or both.

2. Based on results of NIH's risk assessment of grant applicants, include in the funding opportunity announcements or grant terms and conditions or both the cybersecurity controls that should be implemented.

3. Strengthen the NIHGPS to establish clear and measurable standards for cybersecurity protections.

4. Strengthen its pre-award process to identify and address how cybersecurity risk will be assessed.

5. Strengthen its post-award process to confirm that cybersecurity protections have been implemented to adequately safeguard sensitive and confidential data.  

(U) Rec. 1: The DoD OIG recommended that the Commander of the United States Africa Command modify United State Africa Command Instruction 3200.21, "United States Africa Command Joint Targeting Instruction," June 1, 2020, to include the requirement to maintain specific documents for target development and targeting operations based on the procedures used to develop the target.

CMS should clarify that States should review their Medicaid managed care plans' MLR reports to verify the accuracy of reported data elements.

CMS should provide additional guidance to States regarding Medicaid managed care plans' reporting of non-claims costs in MLR reports.

CMS should design an annual MLR reporting template for States to provide to their Medicaid managed care plans.

CMS should clarify that States should verify the completeness of their Medicaid managed care plans' MLR reports.

We recommend that the Chief of Border Patrol develop and implement a comprehensive policy for use of different pathways for expedited processing during times of increased apprehension activity. The policy should require: x Issuing A-numbers for all migrants released into the United States to ensure DHS and other Federal agencies can track migrants throughout the immigration process; and x Ensuring processing pathways comply with existing law and policy.

The Director, Collection Policy, Small Business/Self-Employed Division, should monitor the average processing time of CDP hearing requests and, if warranted, outline and make recommendations to revise procedures and/or develop automation tools to ensure the timely input of the transaction code.

The Global Engagement Center should clarify and codify the roles and responsibilities of the Policy, Plans, and Operations Division and the Interagency and International Coordination Cell in the Foreign Affairs Manual.

The Global Engagement Center should approve a plan to implement its Functional Bureau Strategy, update its major programs to include key priorities, and assess its execution by conducting regular reviews with its staff, in accordance with Department standards.

The Global Engagement Center should appoint an evaluation coordinator with decision-making authority to conduct evaluations appropriate to its portfolio, in accordance with Department standards.

The Global Engagement Center should review risks to its strategic objectives, implement processes for identifying and responding to risk, and communicate risk response guidance to staff in accordance with Department standards.

The Global Engagement Center should comply with federal and Department standards with respect to pre-award design and approval processes for its federal assistance programs.

The Global Engagement Center should complete the closeout process for awards currently overdue and implement procedures for the timely close out of future awards.

The Global Engagement Center should comply with Department contracting officer’s representative program standards.