Open Recommendations

We recommend that the Chief Information Officer require the Department to establish additional procedures and controls to assure stakeholders are properly adhering to contingency planning guidance.

OIG recommends that the Bureau of African Affairs establish and implement memoranda of understanding with the Office of Security Cooperation and other partners, as applicable, to describe roles and responsibilities for coordinating, executing, and monitoring Trans-Sahara Counterterrorism Partnership (TSCTP) projects in the countries where TSCTP is implemented, including establishment of a structure for communicating and coordinating in-country.

We recommend that VNA of Central Jersey for the remaining portion of the estimated $2,015,925 overpayment for claims that are outside of the Medicare reopening period, exercise reasonable diligence to identify and return overpayments in accordance with the 60-day rule, and identify any returned overpayments as having been made in accordance with this recommendation

We recommend that VNA of Central Jersey exercise reasonable diligence to identify and return any additional similar overpayments outside of our audit period, in accordance with the 60-day rule, and identify any returned overpayments as having been made in accordance with this recommendation

We recommend that VNA of Central Jersey refund to the Medicare program the portion of the estimated $2,015,925 overpayment for claims incorrectly billed that are within the 4-year reopening period.

Review all loans that had a bank account number changed from that shown on the original application to determine if the changes were legitimate or fraudulent. If not legitimate, work to recover the funds, deobligate any undisbursed funds, and refer to the OIG.

Strengthen data integrity to make it possible to determine if the inaccurate information allowed loans to be made to ineligible entities and to strengthen SBA’s ability to service loans appropriately.

Implement its procurement controls to ensure that it is able to locate and maintain the complete procurement documents for at least 3 years after the closeout of NSP1 and NSP3 in compliance with its own procedures and HUD regulations.

Provide the required documents to support $161,131 in NSP1 and $109,525 in NSP3 funds for expenses for acquisition, rehabilitation, and administration. If the City cannot provide the required documents, it should repay the U.S. Treasury from non-Federal funds.

Obtain technical assistance from HUD to ensure that it is able to manage the programs and comply with program regulations before processing future expenses related to NSP1 and NSP3 projects and activities.

Follow its NSP procedures and HUD regulations to complete and submit its future NSP1 and NSP3 HUD quarterly performance reports and annual single audit reports within the required timeframes until the closeout of the respective programs or until HUD is assured that these reports are consistently submitted on time.

Follow its own procedures and HUD regulations to post the missing 21 NSP1 and 22 NSP3 HUD quarterly performance reports, as of June 30, 2019, on its official website; and, post the future NSP1 and NSP3 HUD quarterly performance reports on its website until the closeout of the respective programs or until HUD is assured that these reports are consistently posted on its website.

Obtain technical assistance from HUD to ensure that the City is able to submit its quarterly performance reports and annual single audit reports on time and post the performance reports on its website to comply with program regulations.

To help ensure the success of the MAP transformation, we recommend NASA’s Assistant Administrator for Procurement document contract assignments to COs, CORs, and program/project managers in a centralized system for inclusion in the Performance Metrics Dashboard.

Consolidate to the enterprise Tenable Nessus system to ensure accessibility of baseline compliance and/or vulnerability assessment capabilities.

Ensure that missing security patches are either applied in accordance with DOT policy or that vulnerable software is otherwise remediated on the affected endpoints. In addition, ensure that missing security patches attributable to specific mission/business requirements are identified, control weaknesses are appropriately documented in POA&Ms, and that the authorizing official is aware of and has accepted risk for the associated weaknesses.

Document and implement a process to identify software end of life dates and require the development of implementation plans to eliminate unsupported software.

Work with FAA to secure a reliable funding stream for background reinvestigations.

Work with the PHMSA CIO to ensure an alternate storage site (including necessary agreements) is described within contingency plans to permit the transfer and resumption of information system operations for essential missions/business functions consistent with recovery time objectives when the primary processing capabilities are unavailable, for those systems in accordance with the requirements of the Cybersecurity Compendium and NIST guidance.

Coordinate with appropriate offices within the Office of Secretary to develop and implement a strategy and solution(s) to ensure that supervisors, contracting officers, and contracting officer representatives enforce personnel onboarding and off boarding procedures, completion of the DOT Rules of Behavior and other IT requirements prior to being granted access to DOT networks, systems, and information, or have existing access revoked upon separation, in accordance with DOT policy.

Strengthen its oversight of the configuration management processes performed by OAs to ensure configuration management plans are developed, kept up-to-date, and document requirements for each system.

Work with OAs to implement oversight to address configuration change weaknesses and to ensure configuration changes to the information systems are properly documented and tracked through implementation, and undergo a post-implementation review to verify procedures are followed.

Ensure that baseline configuration deviations are monitored and deviations are approved to ensure that baseline compliance reports demonstrate a consistent and accurate application of baseline standards.

We recommend that the Massachusetts Executive Office of Health and Human Services refund to the Federal Government $10,518,114 (Federal share) for claims for single-source physician-administered drugs that were ineligible for Federal reimbursement.

We recommend that the Massachusetts Executive Office of Health and Human Services refund to the Federal Government refund $882,892 (Federal share) for claims for top-20 multiple-source physician-administered drugs that were ineligible for Federal reimbursement.

We recommend that the Massachusetts Executive Office of Health and Human Services work with CMS to determine the unallowable portion of $4,154,511 (Federal share) for other claims for covered outpatient physician-administered drugs that were submitted without NDCs or with invalid NDCs and that may have been ineligible for Federal reimbursement and refund that amount, and whether the remaining $782,917 (Federal share) of other physician-administered drug claims could have been invoiced to the manufacturers to receive rebates and, if so, upon receipt of the rebates, refund the Federal share of the manufacturers’ rebates for those claims.

We recommend that the Massachusetts Executive Office of Health and Human Services work with CMS to determine and refund the unallowable portion of Federal reimbursement for physician-administered drugs that were not invoiced for rebates after December 31, 2017.

We recommend that the Massachusetts Executive Office of Health and Human Services strengthen its internal controls to ensure that all physician-administered drugs eligible for rebates are invoiced.

Coordinate with the Office of the Secretary to revise the National Infrastructure Protection Plan and other planning documents toincorporate current and evolving risks as well as mitigation strategies needed to secure the Nation’s election infrastructure.

Assign the staff resources needed to conduct timely cybersecurity and physical assessments to assist states and localities with securing the election infrastructure.

We recommend that the Minnesota Department of Human Services bill for and collect manufacturers’ rebates for pharmacy drugs and for single-source and top-20 multiple-source physician-administered drugs that we calculated to be $5,899,308 (Federal share) and refund the Federal Government

We recommend that the Minnesota Department of Human Services work with CMS to determine whether the non-top-20 multiple-source physician-administered drugs were eligible for rebates that we calculated to be at least $173,780 (Federal share) and, if so, upon receipt of the rebates, refund the Federal share of the rebates collected

We recommend that the Minnesota Department of Human Services work with CMS to ensure that all pharmacy and physician-administered drugs eligible for rebates after our audit period are processed for rebates

We recommend that the Minnesota Department of Human Services work with the contractor to confirm that DRAMS is properly identifying drug rebate eligibility to ensure that all rebate-eligible pharmacy and physician-administered drugs are identified and billed for rebates.

For the 11 MAC jurisdictions with a coverage limitation for the number of facet-joint injection sessions during a rolling 12-month period, we recommend that the Centers for Medicare & Medicaid Services direct the MACs that oversee the 11 jurisdictions to review claims for facet-joint injections after our audit period to identify instances in which Medicare paid physicians for more than 5 injection sessions received by beneficiaries during a rolling 12-month period and recover any improper payments identified.

To address the concerns identified in this report, we recommend that the Senior Advisor for Environmental Management to the Under Secretary for Science direct the Manager of the Office of River Protection/Richland Operations Office to:2. Develop the ability to transfer tank waste from the 200 West Area to the 200 East Area, such as upgrading the cross-site transfer system to ensure that it is operational;

Develop the ability to transfer tank waste from the 200 West Area to the 200 East Area, such as upgrading the cross-site transfer system to ensure that it is operational.

We recommend that Clinical Practices of the University of Pennsylvania based upon the results of this audit, exercise reasonable diligence to identify, report, and return any overpayments in accordance with the 60-day rule and identify any of those returned overpayments as having been made in accordance with this recommendation.

• refund to the Federal Government $1,959,216 in Medicaid payments made and claimed on behalf of beneficiaries for whom services were improperly claimed and reimbursed

• identify and refund to the Federal Government any payments made on behalf of ineligible beneficiaries for whom services after our audit period were claimed and reimbursed past the termination dates of their eligibility

• establish adequate system controls that ensure that eligibility determinations transfer correctly from the CBMS to the MMIS to prevent payments from being made on behalf of ineligible beneficiaries.

We recommend that the U.S. Department of Health and Human Services ensure that HHS and its components fully implement the covered agency responsibilities found in GDA section 759(a).

We recommend that the U.S. Department of Health and Human Services maintain an inventory of all geospatial data assets, per section 759(b) of the GDA.

Develop a unified Strategy Implementation Plan or “Roadmap” that defines detailed action items, milestones, and responsibilities for geospatial data management in support of missions across NASA.

We recommend that the Deputy Secretary of Commerce and the Senior Agency Official for Geospatial Information develop Department-wide procedures to ensure operating units consistently implement the Department’s Policy on Planned Geospatial Acquisitions.

Disallow and recover $603,476 ($231,806 in Federal and $374,861 in match costs) from Sauk-Rapids Rice due to the lack of support for employee's time worked on the grant and $3,192 for other Federal costs claimed because of insufficient match contributions.

Disallow and recover $673,178 ($336,062 in Federal and $337,116 in match) from Guadalupe Alternative Programs due to being unable to verify the accuracy of employees' time worked on the grant because of the lack of time being segregated by project/program codes.

Disallow and recover $11,681 ($5,681 in Federal from Amherst H. Wilder, and $6,000 in match from Sauk-Rapids Rice) due to unsupported costs in its financial management systems

Ensure that its Correctional Services Manual includes policy on the required number of perimeter patrol vehicles at all types of institutions and implement a policy on the circumstances necessitating changes to the required number of perimeter patrol vehicles.

Establish a policy on the required assignment and use of Roving Alarm Notification System (RANS) hand-held radios.