Open Recommendations

Instruct the Maine Commission to evaluate compliance of LearningWorks procedures on internal controls for time recordkeeping for donated personnel time at its service sites to provide reasonable assurance that charges are accurate, allowable, and allocable; and necessary.

Provide training to the Maine Commission staff and offer training to LearningWorks and other subgrantees concerning acceptable valuation and documentation of in-kind match costs.

Require the Maine Commission to develop and implement oversight or quality control of all fiscal monitoring performed by its staff.

Coordinate with the Maine Commission to develop guidance explaining and illustrating what constitutes acceptable documentation to support in-kind contributions;

Rec. 1: The DoD OIG recommended that the Director of the Federal Voting Assistance Program develop and implement agreements, such as memorandums of understanding, with all external stakeholder agencies to enhance outreach and ensure a collaborative and efficient effort to support Uniformed and Overseas Citizen Absentee Voter Act voters and their eligible family members, including those in deployed, dispersed, and tenant organizations.

CMS should Review States’ managed care payment data in T-MSIS and ensure that States have corrective action plans to improve data completeness and quality, as appropriate.

CMS should make public its reviews of States’ managed care payment data.

CMS should clarify and expand its initiative on payment data.

Use the fully defined ISA to: a. Assess enterprise, business process, and information system level risks;b. Formally define enterprise, business process, and information system level risk tolerance and appetite levels necessary for prioritizing and guiding risk management decisions;c. Conduct an organization wide security and privacy risk assessment; and,d. Conduct a supply chain risk assessment.

Using the results of recommendations one (1) and two (2)above:a. Collaborate with the DNFSB’s Cybersecurity Team to establish performance metrics in service level agreements to measure, report on, and monitor the risks related to contractor systems and services being monitored by IT Operations;b. Utilize guidance from the National Institute of Standards in Technology (NIST) Special Publication (SP) 800-55 (Rev. 1) – Performance Measurement Guide for Information Security to establish performance metrics to more effectively manage and optimize all domains of the DNFSB information security program;c. Implement a centralized view of risk across the organization; and,d. Implement formal procedures for prioritizing…

Implement automated mechanisms (e.g. machine-based, or user-based enforcement) to support the management of privileged accounts, including for the automatic removal/disabling of temporary, emergency, and inactive accounts, as appropriate.

Develop and implement a plan to address the challenges presented by the Unit’s organizational structure.

Establish minimum criteria for referrals of patient abuse and neglect to be sent to the MFCU.

Establish a process to coordinate on cases and improve collaboration with Federal partners.

Take steps to ensure that Unit staff report all convictions and adverse actions to Federal partners within the appropriate timeframes.

Take steps to ensure that newly hired investigators complete new employee trainings.

Take steps to ensure that supervisory reviews of case files are conducted and documented in accordance with Unit policy.

We recommend EEOC ensure that emailed policy memos are promptly updated in the appropriate EEOC Directives Transmittal Order.

We recommend EEOC management update its policies and procedures to include all required safeguards and internal controls to be compliant with the Government Charge Card Abuse Prevention Act of 2012. In addition, EEOC should create a monitoring control to review the policy when changes or updates are made to federal law or Office of Management and Budget or General Services Administration guidance.

Integrate metrics for measuring the effectiveness of information system contingency plans with information on the effectiveness of related plans, such as organization and business process continuity, disaster recovery, incident management, insider threat implementation, and occupant emergency plans, as appropriate, to deliver persistent situational awareness across the organization.

Standardize documentation required in alien files that Customs and Border Protection needs to include for transfer of aliens from Customs and Border Protection to Immigration and Customs Enforcement, Enforcement and Removal Operations custody that will apply to all field offices.

We recommend that North Mississippi Medical Center refund to the Medicare program the estimated $67,038 in overpayments for claims that it incorrectly billed.

We recommend that North Mississippi based upon the results of this audit, exercise reasonable diligence to identify, report, and return any overpayments in accordance with the 60-day rule,18 and identify any of those returned overpayments as having been made in accordance with this recommendation

We recommend that North Mississippi Medical Center educate its staff on properly billing for polysomnography services.

We recommend that North Mississippi Medical Center revise policies and procedures to ensure that claims are coded correctly and that sleep technicians have the required credentials before billing claims for polysomnography services to ensure full compliance with Medicare requirements.