Open Recommendations

Take appropriate action (for example, conduct additional training, update policy and user guides, send emergency messages) to ensure employees process earnings adjustments in accordance with policy.

Delete all disclaimed SEI for Tax Years 2012 through 2019 that remain in the ESF unless the earnings were reported with a name that clearly differs from that on the earnings record to which they were originally posted.

CMS should pursue one or more payment changes that could further realize savings from biosimilars for Part B and enrollees.

Develop policies and procedures to implement the District of Columbia OIG's expanded law enforcement authority and ensure that Unit investigators receive training on the new authorities.

Build upon its efforts with the District's Medicaid agency to increase fraud referrals from the MCOs.

Ensure that supervisory reviews of case files are conducted and documented in accordance with Unit policy.

Ensure that all convictions and adverse actions are reported to Federal partners within the appropriate timeframes.

We recommend the Executive Associate Director for Management and Administration ensure COs issue COR appointment letters to CORs who do not have them and reissue outdated COR appointment letters.

We recommend the Executive Associate Director for Management and Administration develop and implement procedures to ensure contracting staff issue COR appointment letters and maintain them in contract files.

We recommend the Executive Associate Director for Enforcement and Removal Operations develop and implement guidance to ensure that Enforcement and Removal Operations develops QASPs for contracts that include specific methods for monitoring contractor compliance with contract terms and develop procedures to ensure CORs use the QASPs as part of their oversight activities.

We recommend the Executive Associate Director for Enforcement and Removal Operations evaluate the workload for CORs and determine if sufficient resources are allocated to adequately oversee contracts and, based on the evaluation, develop, and implement a plan to more effectively manage or obtain additional personnel resources.

We recommend the Executive Associate Director for Management and Administration recover any monies, including the $408,875 identified in this report, determined to have been paid toward inaccurate charges or costs not supported by documentation.

We recommend the Executive Associate Director for Management and Administration recover any monies, including the $408,875 identified in this report, determined to have been paid toward inaccurate charges or costs not supported by documentation.

We recommend the Executive Associate Directors for Enforcement and Removal Operations and Management and Administration determine the reasonableness of the amount and frequency of standby bus charges.

The Peace Corps develops a strategy and structure that integrates information security into the agency’s business operations. This should include an established responsibility for assessing information security risks in all agency programs and operations and providing this analysis to senior leadership, including the ERM Council, for decision-making.

The Peace Corps include the CISO at the ERM Council meetings to provide insights on cybersecurity risks.

The Peace Corps further define and implement the ERM program to ensure information security risks are communicated and monitored at the system, business process, and entity levels.

The Peace Corps improve its incident response process to ensure incidents are properly defined, promptly identified, and effectively remediated.

The Peace Corps consistently improve and implement its inventory management process to ensure information system, hardware, and software inventories are accurate, complete, and up to date.

The Peace Corps improve its vulnerability and patch management processes by consistent and timely remediation of critical and high vulnerabilities as well as patching.

The Peace Corps complete and fully implement an identity credential and access management program.

Review and recover the questioned CFAP payments of $1,286,786 resulting from inaccurate and/or unsupported producer certifications.

This recommendation contains sensitive information that should not be made public. Therefore, we are not including the wording for this recommendation.

This recommendation contains sensitive information that should not be made public. Therefore, we are not including the wording for this recommendation.

This recommendation contains sensitive information that should not be made public. Therefore, we are not including the wording for this recommendation.