Open Recommendations

Conduct a business impact assessment within every two years to assess mission essential functions and incorporate the results into strategy and mitigation planning activities.

Develop and implement role-based training with those who hold supply chain risk management roles and responsibilities to detect counterfeit system components.

Based on the results of this audit, exercise reasonable diligence to identify, report, and return any overpayments in accordance with the 60-day rule and identify any of those returned overpayments as having been made in accordance with this recommendation.

We recommend that the Chief Financial Officer and Assistant Secretary for Administration establish a Department-wide framework that includes written procedures and a quality assurance process to ensure prompt processing, independent and objective reviewing, thorough reporting, and tracking the status of H referrals from OIG.

We recommend that the Chief Financial Officer and Assistant Secretary for Administration enforce the reporting requirement on providing to OIG the H referral response as required in DAO 207-10. If the suspense date cannot be met, report its progress to and request an extension from OIG before the suspense date.

CMS should conduct additional outreach to beneficiaries to increase awareness about Medicare coverage for the treatment of opioid use disorder.

CMS should take steps to increase the number of providers and opioid treatment programs for Medicare beneficiaries with opioid use disorder.

CMS should assist SAMHSA by providing data about the number of Medicare beneficiaries receiving buprenorphine in office-based settings and the geographic areas where Medicare beneficiaries remain underserved.

CMS should take steps to increase the utilization of behavioral therapy among beneficiaries receiving medication to treat opioid use disorder.

CMS should create an action plan and take steps to address disparities in the treatment of opioid use disorder.

CMS should collect data on the use of telehealth in opioid treatment programs.

Design and implement an effective accountability system that includes clear expectations of goals, performance measures, estimated target dates, and monitoring to hold OIT leadership accountable for improving AmeriCorps’ information security program to an effective level. (New

Develop, document, and communicate an overall SCRM strategy, implementation plan, and related policies and procedures to guide and govern supply chain risk management activities. If AmeriCorps intends to limit its IT purchases to GSA vendors, it should so state, and indicate who, if anyone, must approve exceptions. (New)

FHFA’s Office of Technology and Information Management (OTIM) should request an assessment to be completed by December 1, 2022, and that assessment will be used to determine if OTIM has sufficient resources (staff, technology, etc.) to update, test, and execute the contingency plan requirements.

Direct the Health Information Management program office in coordination with the Office of Community Care and facility chiefs of staff to ensure facilities are conducting post payment audits of billed acupuncture and chiropractic services to verify non VA providers are properly supporting their claims and to develop processes for corrective actions based on audit results.

Direct the Health Information Management program office, in coordination with the Office of Community Care and facility chiefs of staff, to ensure facilities are conducting postpayment audits of billed evaluation and management services to verify non VA providers are properly supporting their claims, including a focus on providers who frequently bill high level evaluation and management services and/or submit charges during periods when global surgery packages are in effect, and develop processes for corrective actions based on audit results.

We recommend that the Centers for Medicare & Medicaid Services expand the IRF transfer payment policy to apply to early discharges to home health care. If this expanded policy had been in place, Medicare could have saved $993,134,059 in 2017 and 2018.

We recommend that MCC's Chief Information Officer develop and document supply chain policies, procedures and strategies

The Bureau of Consular Affairs should clearly define the ConsularOne modernization program and Consular Systems Modernization, including its components, projects, supporting contracts, and the associated total cost of those contracts for both efforts.

The Bureau of Consular Affairs should require the Office of Consular Systems and Technology to implement an internal communication and collaboration plan.

The Bureau of Consular Affairs should perform annual security controls assessments for the Office of Consular Systems and Technologys information systems in accordance with Department standards.

Use Treasury’s DNP analysis to systemically flag COVID-19 EIDL and Emergency EIDL grant recipients who were found in Treasury’s DNP system and not previously reported by OIG. Review the applications and determine whether they are deemed ineligible. If the applicant is deemed ineligible, recover any disbursed funds, and flag the application as ineligible.

For all COVID-19 EIDLs and Emergency EIDL grants identified and flagged as potentially ineligible above, include those transactions in SBA’s 2021 improper payments estimation process.

In order to mitigate risks to the Station's structural integrity, ensure the risks associated with cracks and leaks in the Service Module Transfer Tunnel are identified and mitigated prior to agreeing to an ISS life extension.

The Chief Administrative Officer review jurisdiction-level fleet policies and standardize jurisdictional best practices across the AOC where appropriate;