Open Recommendations

Coordinate with the Detroit Network Distribution Center plant management to review the operating plan for Priority Mail Express, update it as necessary, clearly communicate it to employees, and develop a process to monitor for consistent execution.

We recommend that the Centers for Medicare & Medicaid Services require the States to correct the reported Federal share of collections that were subject to the increased COVID-19 FMAP by recouping $62,504,429 from the 11 States that underreported the Federal share of Medicaid collections and refunding $711,715 to 1 State that overreported the Federal share of Medicaid

We recommend that the Centers for Medicare & Medicaid Services emphasize to States that they should consistently follow their procedures for calculating the Federal share of collections, including during periods of increased FMAPs.

We recommend that the Centers for Medicare & Medicaid Services reinforce with reviewers that they should verify that the increased Federal share for TPL collections was properly supported.

We recommend that the Centers for Medicare & Medicaid Services revise its policies and procedures for reviewing States' reported collections to include review of States' calculations of the Federal share for all collections.

We recommend that the Indiana Family and Social Services Administration refund $39,432,556 (Federal share) to the Federal Government for FFS Medicaid ABA payments that did not comply with Federal and State requirements.

We recommend that the Indiana Family and Social Services Administration provide additional guidance to ABA facilities for documenting ABA, including services that must be provided to support the use of CPT codes 97155 and 97156, State signature requirements, the detail in session notes needed to support ABA provided, and what the State agency considers billable ABA time.

We recommend that the Indiana Family and Social Services Administration periodically perform a statewide postpayment review of Medicaid ABA payments, including reviewing medical records, to educate providers on requirements and to recover payments that did not comply with Federal and State requirements.

We recommend that the Indiana Family and Social Services Administration periodically review its prior authorization contractor's procedures for verifying ABA facilities' compliance with requirements for State diagnostic evaluations and treatment referrals for ABA.

We recommend that the Indiana Family and Social Services Administration exercise reasonable diligence to review and determine whether any of the estimated $53,236,026 (Federal share) in potentially improper ABA payments complied with Federal and State requirements and refund the Federal share of any improper payment amount to the Federal Government.

We recommend the chief operating officer of Federal Student Aid identify compliance audit reporting requirements contained in auditing standards, Department regulations, and OIG audit guidance and determine those reporting requirements necessary for program oversight.

We recommend the chief operating officer of Federal Student Aid ensure that the contractor’s compliance audit acceptability review process includes those reporting requirements that FSA determines are necessary for program oversight.

We recommend the chief operating officer of Federal Student Aid reassess the sampling methodology for the quality control review process for non-flagged and non-deficient audits to ensure the process remains relevant and effective in assessing the acceptability of such audits.

We recommend the chief operating officer of Federal Student Aid update and implement processes for reviewing audit reporting requirements for non-flagged and non-deficient audits to ensure that annual proprietary institution audits meet audit reporting requirements specified in the auditing standards, Department regulations, and OIG audit guidance and which are necessary for program oversight.

We recommend the chief operating officer of Federal Student Aid develop and implement processes at FSA for reviewing audit reporting requirements for flagged and deficient audits to ensure that proprietary institution audits meet audit reporting requirements specified in the auditing standards, Department regulations, and OIG audit guidance and which are necessary for program oversight.

Sensitive

Sensitive

Sensitive

Sensitive

Sensitive

Sensitive

Sensitive

Sensitive

Sensitive

Sensitive

Sensitive

Sensitive

Sensitive

Sensitive

Sensitive

Sensitive

Sensitive

We recommend the Vice President, Enterprise Planning, take steps to improve consistency in the capacity plan.

We recommend the Vice President, Enterprise Planning, evaluate the solar cost assumptions in the capacity planning model and take actions as necessary.

We recommend the Vice President, Enterprise Planning, consider aligning the Power Supply Plan Input Schedule with the Power Supply Plan Inputs listed in procedures.

We recommend the Vice President, Enterprise Planning, ensure Power Supply Plan inputs are approved and submitted by designated input providers for inclusion in the Power Supply Plan.

We recommend the Vice President, Enterprise Planning, review, update, and approve the Standard Programs and Processes in the Power Supply Plan process.

We recommend the Vice President, Communications, reinforce the process for engaging strategic business unit/business unit leaders for communication approval.

USAID/Cambodia verify that KHANA corrected the three instances of material noncompliance detailed on pages 41 to 44 of the audit report.

We recommend that the Department of Health and Human Services Office of the Chief Information Officer enforce existing information security continuous monitoring (ISCM) requirements for detecting, preventing, and reporting the installation of unauthorized software across OpDivs referenced in HHS Policy for Information Security and Privacy Protection (IS2P) and enforce the new ISCM policy once approved.

We recommend that the Department of Health and Human Services Office of the Chief Information Officer enforce HHS's continuous monitoring policy for detecting, preventing, and reporting unauthorized or suspicious network activity across OpDivs.

We recommend that the Department of Health and Human Services Office of the Chief Information Officer update the HHS IS2P to require OpDivs to implement NIST 800-53, Revision 5, CA-8 (2) Red Team Exercises at least every 2 years and RA-10 Threat Hunting yearly for high and moderate Federal Information Processing Standards Publication 199 impact systems.

(U) Rec 1.a: The DoD OIG recommended that the U.S. European Command Chief Information Office Division Chief update inventory records for all classified mobile devices to include information for the six elements required in an accountable property system of record

(U) Rec 1.b: This recommendation is Controlled Unclassified Information

(U) Rec 1.c: This recommendation is Controlled Unclassified Information

(U) Rec 1.d: The DoD OIG recommended that the U.S. European Command Chief Information Office Division Chief immediately revalidate and document the user justification for the devices and recall the device if the user no longer has a valid mission need, revise existing access policies to require detailed written justifications for obtaining classified mobile devices, and establish processes to periodically, at least annually, revalidate the need for continued access to the devices.

(U) Rec 1.e: The DoD OIG recommended that the U.S. European Command Chief Information Office Division Chief take immediate action to

(U) Rec 1.f: This recommendation is Controlled Unclassified Information

(U) Rec 1.g: The DoD OIG recommended that the U.S. European Command Chief Information Office Division Chief revise existing or develop new classified mobile device training programs that include information on all 23 Office of the Secretary of Defense memorandum requirements.

(U) Rec 1.h: The DoD OIG recommended that the U.S. European Command Chief Information Office Division Chief provide all existing classified mobile device users with the updated training that includes all 23 Office of the Secretary of Defense memorandum requirements