Open Recommendations

Ensure that an enterprisewide software inventory is conducted and maintained.

HUD OCIO should implement procedures to ensure that information in cybersecurity risk registers is obtained accurately, consistently, and in a reproducible format and is used to a. quantify and aggregate security risks, b. normalize cybersecurity risk information across organizational units, and c. prioritize operational risk response (derived from metric 5).

HUD OCIO and the HUD Chief Risk Officer should coordinate to implement procedures to monitor the effectiveness of cybersecurity risk responses to ensure that risk tolerances are maintained at an appropriate level (derived from metric 5).

HUD OCIO and the Office of Administration should implement procedures to ensure proper validation of media sanitization in accordance with HUD Media Protection Procedures 2.0 (February 2022) and form HUD 1067A, Certification of Sanitization (derived from metric 36).

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

Fully establish a process to collect and analyze customer feedback.

Explore alternative means of collections for PPP loans with an outstanding balance of $100,000 or less.

Conduct an initial and periodic cost benefit analysis on PPP purchase guarantees with comprehensive estimates to sufficiently assess whether the cost of collecting loans of $100,000 or less is more than the recovery amount and pursue collections based on results of the analysis.

We recommend that Humana, Inc. refund to the Federal Government the $34,414,828 of estimated overpayments.

We recommend that Humana, Inc. identify, for the high-risk diagnoses included in this report, similar instances of noncompliance that occurred before or after our audit period and refund any resulting overpayments to the Federal Government.

We recommend that Humana, Inc. examine its existing compliance procedures to identify areas where improvements can be made to ensure that diagnosis codes that are at high risk for being miscoded comply with Federal requirements (when submitted to CMS for use in CMS's risk adjustment program) and take the necessary steps to enhance those procedures.

Establish a timeliness goal for resolution of Numident death alerts.

Establish management controls to periodically ensure Numident death alerts are resolved in a timely manner.

Consider working with the States to expand access to electronic vital records.

Update quality control reviews to include comparison of SSNAP inputs to an applicant-submitted Form SS-5 and evidentiary documents, and provide feedback to the technicians who made input errors (such as race and ethnicity) or did not use the appropriate evidentiary documents.

Revise enumeration policy to include clear instructions for when Form SSA-5002 is required and how to properly document the form.

Retain enumeration notices in the Online Retrieval System for individuals with assigned SSNs.

Create and implement automated tools to assist staff in navigating through enumeration evidentiary document requirements.

Complete the privacy assessments for the WorkTrack application.

Take the necessary and progressive steps needed to hold the contractor accountable for obtaining a staffing level of at least 85 percent of the contractually obligated amount, including the medical department.

Ensure each detainee receives both an intake dental screening as well as an initial dental screening.

Evaluate and amend the dental referral process to ensure a timely response for dental pain cases, including timely evaluation of quarantined patients by dentists.

Ensure required documentation is promptly added to detainee medical files and that the documentation includes: notes from intake dental screening and follow-up dental evaluation(s);records of medication administration; and • lab test results.

Ensure cabinets with controlled substances are locked when not in use and that only personnel needing access to the controlled substances have access.

Ensure our other medical observations are addressed, including that: • detainees have access to water and restrooms while they are in the medical waiting area; • appropriate testing is provided for all asthma patients; • medical evaluations match complaints submitted by detainees; • appropriate medication is provided to detainees with high cholesterol; and • expired medication is disposed of according to the disposition schedule and in a timely manner.