Open Recommendations

We recommend that the State agency refund $27,612,780 to the Federal Government

We recommend that the State agency determine whether settlements and judgments received after September 30, 2016, were reported, and refund the Federal share of any recoveries not reported in their entirety

We recommend that the State agency implement policies to ensure that all settlements and judgments are reported properly

We recommend that the State agency redetermine, if necessary, the current Medicaid eligibility of the sampled beneficiaries who did not meet or may not have met Federal and State eligibility requirements.

We recommend that the State agency ensure that information is maintained in case files to support that eligibility determinations were performed in accordance with Federal and State requirements.

We recommend that the State agency ensure that eligibility determinations are performed only for individuals who apply for Medicaid.

We recommend that the State agency ensure that annual redeterminations are performed as required and properly terminate Medicaid coverage for beneficiaries, if necessary.

We recommend that the State agency ensure that caseworkers properly verify all eligibility requirements.

We recommend that the Federal Protective Service Director: Initiate collection actions to recover $1,768,768 in unsupported costs representing overtime payments determined to be ineligible for payment.

(U) Rec. 1.a: The DoD OIG recommended that the [Redacted] develop and implement a plan to correct the systemic weaknesses at the facilities, data centers, and laboratories that manage ballistic missile defense system technical information related to using multifactor authentication.

(U) Rec. 1.a: The DoD OIG recommended that the [Redacted] develop and implement a plan to correct the systemic weaknesses at the facilities, data centers, and laboratories that manage ballistic missile defense system technical information related to using multifactor authentication.

(U) Rec. 1.b: The DoD OIG recommended that the [Redacted] develop and implement a plan to correct the systemic weaknesses at the facilities, data centers, and laboratories that manage ballistic missile defense system technical information related to mitigating vulnerabilities in a timely manner.(2019 & 2020 High Priority)

(U) Rec. 1.b: The DoD OIG recommended that the [Redacted] develop and implement a plan to correct the systemic weaknesses at the facilities, data centers, and laboratories that manage ballistic missile defense system technical information related to mitigating vulnerabilities in a timely manner. (2019 & 2020 High Priority)

(U) Rec. 1.c: The DoD OIG recommended that the [Redacted] develop and implement a plan to correct the systemic weaknesses at the facilities, data centers, and laboratories that manage ballistic missile defense system technical information related to securing server racks.

(U) Rec. 1.c: The DoD OIG recommended that the [Redacted] develop and implement a plan to correct the systemic weaknesses at the facilities, data centers, and laboratories that manage ballistic missile defense system technical information related to securing server racks.

(U) Rec. 1.d: The DoD OIG recommended that the [Redacted] develop and implement a plan to correct the systemic weaknesses at the facilities, data centers, and laboratories that manage ballistic missile defense system technical information related to protecting and monitoring data on removable media. (2019 & 2020 High Priority)

(U) Rec. 1.e: The DoD OIG recommended that the [Redacted] develop and implement a plan to correct the systemic weaknesses at the facilities, data centers, and laboratories that manage ballistic missile defense system technical information related to implementing intrusion detection controls.

(U) Rec. 1.e: The DoD OIG recommended that the [Redacted] develop and implement a plan to correct the systemic weaknesses at the facilities, data centers, and laboratories that manage ballistic missile defense system technical information related to implementing intrusion detection controls.

(U) Rec. 1.f: The DoD OIG recommended that the [Redacted] develop and implement a plan to correct the systemic weaknesses at the facilities, data centers, and laboratories that manage ballistic missile defense system technical information related to requiring and maintaining justifications for accessing networks.

(U) Rec. 1.g: The DoD OIG recommended that the [Redacted] develop and implement a plan to correct the systemic weaknesses at the facilities, data centers, and laboratories that manage ballistic missile defense system technical information related to implementing physical security controls.

(U) Rec. 2.a: The DoD OIG recommended that the [Redacted] enforce the use of multifactor authentication to access systems that process, store, and transmit ballistic missile defense system technical information, or obtain a waiver that exempts the networks from using multifactor authentication.

(U) Rec. 2.i: The DoD OIG recommended that the [Redacted] require written justification as a condition for obtaining access to all networks and systems that process, store, and transmit ballistic missile defense system technical information.

(U) Rec. 2.j: The DoD OIG recommended that the [Redacted] maintain access request forms for all users with access to networks and systems that contain ballistic missile defense system technical information and verify, at least annually, the continued need for access.

(U) Rec. 3.b: The DoD OIG recommended that the Chief Information Officer for the [Redacted] implement intrusion detection capabilities on networks that maintain ballistic missile defense system technical information.

(U) Rec. 4.a: The DoD OIG recommended that the Chief Information Officers for the [Redacted] encrypt ballistic missile defense system technical information stored on removable media.