Open Recommendations

Bureau of the Fiscal Service (Fiscal Service) management should provide logging and monitoring of security related events to include the retention of evidence of reviews performed.

Bureau of the Fiscal Service (Fiscal Service) management should develop a baseline of essential security settings and specifying that baseline as the standard to be observed.

Bureau of the Fiscal Service (Fiscal Service) management should implement corrective actions to address all vulnerabilities associated with the baseline enforcement to include removing the three default user accounts on UNIX servers.

We recommend that the Texas Health Presbyterian Hospital Dallas strengthen controls to ensure full compliance with Medicare requirements, specifically: - ensure all IRF beneficiaries meet Medicare criteria for acute inpatient rehabilitation and all required documentation is included in the medical record: - ensure all inpatient beneficiaries meet Medicare criteria for inpatient hospital services; - ensure procedure and diagnosis codes are supported in the medical records and staff are properly trained; and - ensure HCPCS codes are supported in the medical records and staff are properly trained.

(U) Rec. 2.a: Recommendation is Classified.

(U) Rec. 3: Recommendation is Classified.

This recommendation contains information about IT deficiencies which, if made public, could endanger NARA systems. Please contact the OIG if you need further information.

This recommendation contains information about IT deficiencies which, if made public, could endanger NARA systems. Please contact the OIG if you need further information.

This recommendation contains information about IT deficiencies which, if made public, could endanger NARA systems. Please contact the OIG if you need further information.

This recommendation contains information about IT deficiencies which, if made public, could endanger NARA systems. Please contact the OIG if you need further information.

This recommendation contains information about IT deficiencies which, if made public, could endanger NARA systems. Please contact the OIG if you need further information.

This recommendation contains information about IT deficiencies which, if made public, could endanger NARA systems. Please contact the OIG if you need further information.

This recommendation contains information about IT deficiencies which, if made public, could endanger NARA systems. Please contact the OIG if you need further information.

This recommendation contains information about IT deficiencies which, if made public, could endanger NARA systems. Please contact the OIG if you need further information.

This recommendation contains information about IT deficiencies which, if made public, could endanger NARA systems. Please contact the OIG if you need further information.

Ensures the Agency implements, tests, and monitors standard baseline configurations for all platforms in the NCUA information technology environment in compliance with established NCUA security standards. This includes documenting approved deviations from the configuration baselines with business justifications.

CMS should reassess the risks and benefits of allowing chart reviews that are notlinked to service records to be used as sources of diagnoses for risk adjustment.

CMS should conduct audits that validate diagnoses reported on chart reviews in the Medicare Advantage encounter data

Implement proactive fraud detection procedures sooner, such as a data analytics capability, so that the company can stop fraudulent payments earlier.

Ensure that the HR department develops and implements key controls consistent with fraud prevention standards, including the following: a. Implementing cost effective fraud awareness initiatives to enable plan members to better recognize and report potential fraud. b. Gathering information on fraud schemes including investigation results and emerging fraud trends to better target their fraud monitoring efforts.

Address the problems with the administration and assessment of CHSs identified in the report. (see items 4a. through 4f. on pages 415 and 416)

Ensure that appropriate training on DIOG 4 is provided to emphasize the constitutional implications of certain monitoring situations and to ensure that agents account for these concerns, both in the tasking of CHSs and in the way they document interactions with and tasking of CHSs.

Ensure that adequate procedures are in place for the Office of Intelligence (OI) to obtain all relevant and accurate information, including access to Confidential Human Source (CHS) information, needed to prepare FISA applications and renewal applications. This effort should include revising items 1a. through 1d. on page 415 of report.

Ensure that adequate procedures are in place for the Office of Intelligence (OI) to obtain all relevant and accurate information, including access to Confidential Human Source (CHS) information, needed to prepare FISA applications and renewal applications. This effort should include revising items 1a. through 1d. on page 415 of the report.