Finding 2022-002 Identification of the federal program: Federal Grantor: U.S. Department of Health and Human Services Assistance Listing No.: 93.067, Global AIDS Award Number: 5 NU2 GGH001943-04-00 and 6 NU2 GGH001943-05-00 Award Year: 2021?2022 Criteria or specific requirement (including statutory, regulatory, or other citation): 2 CFR 200.303 requires that a non-federal entity ?must (a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in ?Standards for Internal Control in the Federal Government? issued by the Comptroller General of the United States and the ?Internal Control Integrated Framework,? issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).? Under the requirements of the Federal Funding Accountability and Transparency Act (Pub. L. No. 109-282) (Transparency Act) that are codified in 2 CFR Part 170, recipients (i.e., direct recipients) of grants or cooperative agreements who make first tier subawards of $30,000 or more are required to register in the Federal Funding Accountability and Transparency Act Subaward Reporting System (FSRS) and report subaward data through FSRS. Condition: VUMC is a prime recipient of funding from the Centers for Disease Control and Prevention related to the Global AIDS grant and made first tier subawards of greater than $30,000. VUMC filed a single report in FSRS for the total of all its subawards instead of filing a separate report for each subaward. Cause: Policies and procedures and internal controls were not in place to ensure compliance with the Transparency Act. Effect or potential effect: VUMC did not comply with the Transparency Act and report all required information in FSRS. Questioned costs: $0 Context: VUMC made first tier subawards to 22 subrecipients totaling $3,885,454 in federal expenditures. Total Global AIDS expenditures totaled $41,208,584. Subaward reports were not independently reported in the FSRS. Identification as a repeat finding, if applicable: 2021-002 Recommendation: We recommend that VUMC implement internal controls and a review process to ensure that subrecipients are appropriately entered into FSRS. Views of responsible officials: VUMC is a prime recipient of funding from the Centers for Disease Control and Prevention related to the Global AIDS grant and made first tier subawards of greater than $30,000. VUMC reported the subaward from VUMC, the prime, to Friends in Global Health, the subrecipient, as a single report in the Federal Funding Accountability and Transparency Act Subaward Reporting System (FSRS) instead of filing a separate report for each subaward. Procedures and internal controls were in place for first tier subawards. VUMC has changed procedures and internal controls to report each Global AIDS subaward separately in FSRS. All subawards have been reported in FY23 in compliance with the Transparency Act.
Finding 2022-002 Identification of the federal program: Federal Grantor: U.S. Department of Health and Human Services Assistance Listing No.: 93.067, Global AIDS Award Number: 5 NU2 GGH001943-04-00 and 6 NU2 GGH001943-05-00 Award Year: 2021?2022 Criteria or specific requirement (including statutory, regulatory, or other citation): 2 CFR 200.303 requires that a non-federal entity ?must (a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in ?Standards for Internal Control in the Federal Government? issued by the Comptroller General of the United States and the ?Internal Control Integrated Framework,? issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).? Under the requirements of the Federal Funding Accountability and Transparency Act (Pub. L. No. 109-282) (Transparency Act) that are codified in 2 CFR Part 170, recipients (i.e., direct recipients) of grants or cooperative agreements who make first tier subawards of $30,000 or more are required to register in the Federal Funding Accountability and Transparency Act Subaward Reporting System (FSRS) and report subaward data through FSRS. Condition: VUMC is a prime recipient of funding from the Centers for Disease Control and Prevention related to the Global AIDS grant and made first tier subawards of greater than $30,000. VUMC filed a single report in FSRS for the total of all its subawards instead of filing a separate report for each subaward. Cause: Policies and procedures and internal controls were not in place to ensure compliance with the Transparency Act. Effect or potential effect: VUMC did not comply with the Transparency Act and report all required information in FSRS. Questioned costs: $0 Context: VUMC made first tier subawards to 22 subrecipients totaling $3,885,454 in federal expenditures. Total Global AIDS expenditures totaled $41,208,584. Subaward reports were not independently reported in the FSRS. Identification as a repeat finding, if applicable: 2021-002 Recommendation: We recommend that VUMC implement internal controls and a review process to ensure that subrecipients are appropriately entered into FSRS. Views of responsible officials: VUMC is a prime recipient of funding from the Centers for Disease Control and Prevention related to the Global AIDS grant and made first tier subawards of greater than $30,000. VUMC reported the subaward from VUMC, the prime, to Friends in Global Health, the subrecipient, as a single report in the Federal Funding Accountability and Transparency Act Subaward Reporting System (FSRS) instead of filing a separate report for each subaward. Procedures and internal controls were in place for first tier subawards. VUMC has changed procedures and internal controls to report each Global AIDS subaward separately in FSRS. All subawards have been reported in FY23 in compliance with the Transparency Act.
Finding 2022-003 Identification of the federal program: Federal Grantor: U.S. Department of Health and Human Services (HHS) Health Resources and Services Administration (HRSA) Assistance Listing: 93.498 COVID-19 Provider Relief Fund and American Rescue Plan (ARP) Rural Distribution Award Year: 2021?2022 Criteria or specific requirement (including statutory, regulatory, or other citation): 2 CFR Section 200.303 of the Uniform Guidance states the following regarding internal control: ?The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in ?Standards for Internal Control in the Federal Government? issued by the Comptroller General of the United States or the ?Internal Control Integrated Framework,? issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).? Condition: Management did not retain supporting documentation over its review and approval of the lost revenue calculation and expenses reported in the HHS portal. Cause: Management represented it performed a review and approval of the lost revenue calculation, COVID-19 expenses, and HHS portal submission of lost revenue; however, adequate supporting documentation to evidence that the internal controls were sufficiently designed and operating effectively was not maintained. Effect or potential effect: A lack of internal controls over the review of the lost revenue calculation, COVID-19 expenses, and the data submitted in the HHS portal could result in a misstatement of the amounts reported in the HHS portal. Questioned costs: $0 Context: VUMC had two submissions to HRSA during FY22, which included expenses and lost revenue. Total federal expenditures for Assistance Listing No. 93.498 totaled $58,653,058 for the year ended June 30, 2022. Identification as a repeat finding, if applicable: 2021-003 Recommendation: Management should implement internal controls over the review and approval of the data used to calculate lost revenue and expenses and the report of lost revenue in the HHS portal. Views of responsible officials: All expenditures included by VUMC Management (Management) in its submissions in the Department of Health and Human Services (HHS) portal were verified against HHS guidance to ensure allowability. Management understands that additional audit evidence must be retained at a detailed enough level to allow the auditor to meet their reperformance standard. Management believes that our control risk is mitigated by the fact that our lost revenues far exceed any provider relief funding received. However, should management need to report any future eligible expenses in the HHS portal, we will retain additional audit evidence to enable auditor reperformance of the controls regarding allowability of expenditures. Management also established appropriate review and approval controls surrounding the performance and review of the lost revenue analytic and the subsequent reporting of lost revenue in the HHS portal. Management retained documentation to support execution of this control; however, management understands that additional audit evidence supporting the reviews was not available to the auditor to evidence execution of this control. Management will retain additional audit evidence to allow the auditor to reperform execution of this control for future HHS portal submissions.
Finding 2022-001 Identification of the federal program: Federal Grantor: United States Department of Health and Human Services, Health Resources and Services Administration (HRSA) Assistance Listing No.: 93.461, COVID-19 HRSA COVID-19 Claims Reimbursement for the Uninsured Program and the COVID-19 Coverage Assistance Fund Pass-Through Award Period of Performance: 07/01/2021?06/30/2022 Criteria or specific requirement (including statutory, regulatory, or other citation): Section 200.303 of the Uniform Guidance states the following regarding internal control: ?The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in ?Standards for Internal Control in the Federal Government? issued by the Comptroller General of the United States or the ?Internal Control Integrated Framework,? issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).? Health and Human Services (HHS) ? Health Resources and Services and Administrative (HRSA) issued Terms and Conditions for Participation in the HRSA COVID-19 Claims Reimbursement to Health Care Providers and Facilities for Testing, Treatment, and Vaccine Administration for the Uninsured Program (T&Cs) outlining requirements that recipients of funding from the HRSA COVID-19 Uninsured Program must comply with, including the following sections: Testing Services, Treatment Services and Vaccine Administration, and General Provisions in FY2020 Consolidated Appropriations. Per the HRSA T&Cs and further clarified in the HRSA FAQs for COVID-19 Claims Reimbursement to Health Care Providers and Facilities for Testing, Treatment, and Vaccine Administration, the FAQ states the following: ?If a provider tests for COVID-19 as part of pre-operative or other medical treatment unrelated to COVID-19, is the test eligible for reimbursement? For the HRSA COVID-19 Uninsured Program, COVID-19 testing is eligible for reimbursement if one of the following diagnoses codes is included in any position on the claim: ? Z03.818 ? Encounter for observation for suspected exposure to other biological agents ruled out (possible exposure to COVID-19) ? Z11.59 ? Encounter for screening for other viral diseases (asymptomatic) ? Z20.828 ? Contact with and (suspected) exposure to other viral communicable (confirmed exposure to COVID-19) ? Z11.52 ? Encounter for screening for COVID-19 (asymptomatic) ? Z20.822 ? Contact with and (suspected) exposure to COVID-19 ? Z86.16 ? Personal history of COVID-19 Related treatment visits and services are not eligible for reimbursement given the primary reason for treatment is not COVID-19.? Condition: Vanderbilt University Medical Center (VUMC) did not retain audit evidence to support the report logic that was developed to extract patients from the patient billing systems that were identified as having an allowable COVID-19 testing and treatment diagnosis code and eligible for reimbursement under this federal program. In addition, supporting documentation was not retained to validate who had access to modify and run the script, what changes were made to the script and how any changes to the script were tested and implemented during the fiscal year based on changes to HRSA guidance, and how management validated the completeness and accuracy of the data extracted by the script. For certain emergency department, physician office visits, and inpatient claims that included COVID-19 testing, but COVID-19 was not the primary reason for the related treatment visit and services, VUMC erroneously billed the HRSA COVID-19 Uninsured Program for the entire encounter, which was not in compliance with the HRSA COVID-19 Uninsured Program regulations. Cause: Management did not develop and maintain effective internal control over report writing, program changes, and user access. VUMC did not have internal controls in place to ensure claims billed to the HRSA COVID-19 Uninsured Program were in accordance with HRSA Uninsured Program regulations. Effect or potential effect: The key report used to identify eligible federal program participants could be inaccurate or incomplete. VUMC did not have internal controls in place to formally document its compliance with the HRSA COVID 19 Uninsured Program?s allowability and eligibility requirements. Outpatient encounters that included a COVID-19 testing diagnosis code, where the primary treatment diagnosis code was not COVID-19 related, were not reviewed for allowability and eligibility prior to submission to HRSA to verify treatment costs were allowable under the HRSA COVID-19 Uninsured Program. Questioned costs: $336,536 Context: Management performed an analysis over claims submitted to HRSA related to services with dates of service from July 1, 2021 through June 30, 2022, indicating that 1,013 patient accounts totaling $336,536 related to certain claims where COVID-19 was not the primary diagnosis were inappropriately billed to HRSA. The $336,536 was refunded to HRSA in August 2022. Total federal expenditures for Assistance Listing 93.461 totaled $5,809,048 for the year ended June 30, 2022. Identification as a repeat finding, if applicable: 2021-001 Recommendation: The Uninsured Program ended in 2022; therefore, the development of internal controls is not required. However, if the program were to continue, VUMC should implement sufficiently precise internal controls to review changes to the HRSA COVID-19 Uninsured Program to ensure it is administering the program in compliance with the HRSA COVID-19 Uninsured Program regulations. In addition, internal controls should be implemented to ensure claims submitted to the HRSA COVID-19 Uninsured Program meet the allowability criteria established by the HRSA COVID-19 Uninsured Program regulations before claims are submitted to HRSA for reimbursement. VUMC should retain evidence of internal controls related to access and change management over the report. Management should implement a quality review process of eligible claims identified on a monthly basis to ensure that patients identified meet the required eligibility requirements. Views of responsible officials: Management agrees with this finding and performed a review of claims submitted to the HRSA COVID-19 Uninsured Program identifying payments for ineligible services and refunded the entire overpayment amount. In March 2022, HRSA announced the discontinuance of the HRSA COVID-19 Uninsured Program, and therefore, remediation of internal controls is no longer applicable.
Finding 2022-002 Identification of the federal program: Federal Grantor: U.S. Department of Health and Human Services Assistance Listing No.: 93.067, Global AIDS Award Number: 5 NU2 GGH001943-04-00 and 6 NU2 GGH001943-05-00 Award Year: 2021?2022 Criteria or specific requirement (including statutory, regulatory, or other citation): 2 CFR 200.303 requires that a non-federal entity ?must (a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in ?Standards for Internal Control in the Federal Government? issued by the Comptroller General of the United States and the ?Internal Control Integrated Framework,? issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).? Under the requirements of the Federal Funding Accountability and Transparency Act (Pub. L. No. 109-282) (Transparency Act) that are codified in 2 CFR Part 170, recipients (i.e., direct recipients) of grants or cooperative agreements who make first tier subawards of $30,000 or more are required to register in the Federal Funding Accountability and Transparency Act Subaward Reporting System (FSRS) and report subaward data through FSRS. Condition: VUMC is a prime recipient of funding from the Centers for Disease Control and Prevention related to the Global AIDS grant and made first tier subawards of greater than $30,000. VUMC filed a single report in FSRS for the total of all its subawards instead of filing a separate report for each subaward. Cause: Policies and procedures and internal controls were not in place to ensure compliance with the Transparency Act. Effect or potential effect: VUMC did not comply with the Transparency Act and report all required information in FSRS. Questioned costs: $0 Context: VUMC made first tier subawards to 22 subrecipients totaling $3,885,454 in federal expenditures. Total Global AIDS expenditures totaled $41,208,584. Subaward reports were not independently reported in the FSRS. Identification as a repeat finding, if applicable: 2021-002 Recommendation: We recommend that VUMC implement internal controls and a review process to ensure that subrecipients are appropriately entered into FSRS. Views of responsible officials: VUMC is a prime recipient of funding from the Centers for Disease Control and Prevention related to the Global AIDS grant and made first tier subawards of greater than $30,000. VUMC reported the subaward from VUMC, the prime, to Friends in Global Health, the subrecipient, as a single report in the Federal Funding Accountability and Transparency Act Subaward Reporting System (FSRS) instead of filing a separate report for each subaward. Procedures and internal controls were in place for first tier subawards. VUMC has changed procedures and internal controls to report each Global AIDS subaward separately in FSRS. All subawards have been reported in FY23 in compliance with the Transparency Act.
Finding 2022-002 Identification of the federal program: Federal Grantor: U.S. Department of Health and Human Services Assistance Listing No.: 93.067, Global AIDS Award Number: 5 NU2 GGH001943-04-00 and 6 NU2 GGH001943-05-00 Award Year: 2021?2022 Criteria or specific requirement (including statutory, regulatory, or other citation): 2 CFR 200.303 requires that a non-federal entity ?must (a) establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in ?Standards for Internal Control in the Federal Government? issued by the Comptroller General of the United States and the ?Internal Control Integrated Framework,? issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).? Under the requirements of the Federal Funding Accountability and Transparency Act (Pub. L. No. 109-282) (Transparency Act) that are codified in 2 CFR Part 170, recipients (i.e., direct recipients) of grants or cooperative agreements who make first tier subawards of $30,000 or more are required to register in the Federal Funding Accountability and Transparency Act Subaward Reporting System (FSRS) and report subaward data through FSRS. Condition: VUMC is a prime recipient of funding from the Centers for Disease Control and Prevention related to the Global AIDS grant and made first tier subawards of greater than $30,000. VUMC filed a single report in FSRS for the total of all its subawards instead of filing a separate report for each subaward. Cause: Policies and procedures and internal controls were not in place to ensure compliance with the Transparency Act. Effect or potential effect: VUMC did not comply with the Transparency Act and report all required information in FSRS. Questioned costs: $0 Context: VUMC made first tier subawards to 22 subrecipients totaling $3,885,454 in federal expenditures. Total Global AIDS expenditures totaled $41,208,584. Subaward reports were not independently reported in the FSRS. Identification as a repeat finding, if applicable: 2021-002 Recommendation: We recommend that VUMC implement internal controls and a review process to ensure that subrecipients are appropriately entered into FSRS. Views of responsible officials: VUMC is a prime recipient of funding from the Centers for Disease Control and Prevention related to the Global AIDS grant and made first tier subawards of greater than $30,000. VUMC reported the subaward from VUMC, the prime, to Friends in Global Health, the subrecipient, as a single report in the Federal Funding Accountability and Transparency Act Subaward Reporting System (FSRS) instead of filing a separate report for each subaward. Procedures and internal controls were in place for first tier subawards. VUMC has changed procedures and internal controls to report each Global AIDS subaward separately in FSRS. All subawards have been reported in FY23 in compliance with the Transparency Act.
Finding 2022-003 Identification of the federal program: Federal Grantor: U.S. Department of Health and Human Services (HHS) Health Resources and Services Administration (HRSA) Assistance Listing: 93.498 COVID-19 Provider Relief Fund and American Rescue Plan (ARP) Rural Distribution Award Year: 2021?2022 Criteria or specific requirement (including statutory, regulatory, or other citation): 2 CFR Section 200.303 of the Uniform Guidance states the following regarding internal control: ?The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in ?Standards for Internal Control in the Federal Government? issued by the Comptroller General of the United States or the ?Internal Control Integrated Framework,? issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).? Condition: Management did not retain supporting documentation over its review and approval of the lost revenue calculation and expenses reported in the HHS portal. Cause: Management represented it performed a review and approval of the lost revenue calculation, COVID-19 expenses, and HHS portal submission of lost revenue; however, adequate supporting documentation to evidence that the internal controls were sufficiently designed and operating effectively was not maintained. Effect or potential effect: A lack of internal controls over the review of the lost revenue calculation, COVID-19 expenses, and the data submitted in the HHS portal could result in a misstatement of the amounts reported in the HHS portal. Questioned costs: $0 Context: VUMC had two submissions to HRSA during FY22, which included expenses and lost revenue. Total federal expenditures for Assistance Listing No. 93.498 totaled $58,653,058 for the year ended June 30, 2022. Identification as a repeat finding, if applicable: 2021-003 Recommendation: Management should implement internal controls over the review and approval of the data used to calculate lost revenue and expenses and the report of lost revenue in the HHS portal. Views of responsible officials: All expenditures included by VUMC Management (Management) in its submissions in the Department of Health and Human Services (HHS) portal were verified against HHS guidance to ensure allowability. Management understands that additional audit evidence must be retained at a detailed enough level to allow the auditor to meet their reperformance standard. Management believes that our control risk is mitigated by the fact that our lost revenues far exceed any provider relief funding received. However, should management need to report any future eligible expenses in the HHS portal, we will retain additional audit evidence to enable auditor reperformance of the controls regarding allowability of expenditures. Management also established appropriate review and approval controls surrounding the performance and review of the lost revenue analytic and the subsequent reporting of lost revenue in the HHS portal. Management retained documentation to support execution of this control; however, management understands that additional audit evidence supporting the reviews was not available to the auditor to evidence execution of this control. Management will retain additional audit evidence to allow the auditor to reperform execution of this control for future HHS portal submissions.
Finding 2022-001 Identification of the federal program: Federal Grantor: United States Department of Health and Human Services, Health Resources and Services Administration (HRSA) Assistance Listing No.: 93.461, COVID-19 HRSA COVID-19 Claims Reimbursement for the Uninsured Program and the COVID-19 Coverage Assistance Fund Pass-Through Award Period of Performance: 07/01/2021?06/30/2022 Criteria or specific requirement (including statutory, regulatory, or other citation): Section 200.303 of the Uniform Guidance states the following regarding internal control: ?The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in ?Standards for Internal Control in the Federal Government? issued by the Comptroller General of the United States or the ?Internal Control Integrated Framework,? issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).? Health and Human Services (HHS) ? Health Resources and Services and Administrative (HRSA) issued Terms and Conditions for Participation in the HRSA COVID-19 Claims Reimbursement to Health Care Providers and Facilities for Testing, Treatment, and Vaccine Administration for the Uninsured Program (T&Cs) outlining requirements that recipients of funding from the HRSA COVID-19 Uninsured Program must comply with, including the following sections: Testing Services, Treatment Services and Vaccine Administration, and General Provisions in FY2020 Consolidated Appropriations. Per the HRSA T&Cs and further clarified in the HRSA FAQs for COVID-19 Claims Reimbursement to Health Care Providers and Facilities for Testing, Treatment, and Vaccine Administration, the FAQ states the following: ?If a provider tests for COVID-19 as part of pre-operative or other medical treatment unrelated to COVID-19, is the test eligible for reimbursement? For the HRSA COVID-19 Uninsured Program, COVID-19 testing is eligible for reimbursement if one of the following diagnoses codes is included in any position on the claim: ? Z03.818 ? Encounter for observation for suspected exposure to other biological agents ruled out (possible exposure to COVID-19) ? Z11.59 ? Encounter for screening for other viral diseases (asymptomatic) ? Z20.828 ? Contact with and (suspected) exposure to other viral communicable (confirmed exposure to COVID-19) ? Z11.52 ? Encounter for screening for COVID-19 (asymptomatic) ? Z20.822 ? Contact with and (suspected) exposure to COVID-19 ? Z86.16 ? Personal history of COVID-19 Related treatment visits and services are not eligible for reimbursement given the primary reason for treatment is not COVID-19.? Condition: Vanderbilt University Medical Center (VUMC) did not retain audit evidence to support the report logic that was developed to extract patients from the patient billing systems that were identified as having an allowable COVID-19 testing and treatment diagnosis code and eligible for reimbursement under this federal program. In addition, supporting documentation was not retained to validate who had access to modify and run the script, what changes were made to the script and how any changes to the script were tested and implemented during the fiscal year based on changes to HRSA guidance, and how management validated the completeness and accuracy of the data extracted by the script. For certain emergency department, physician office visits, and inpatient claims that included COVID-19 testing, but COVID-19 was not the primary reason for the related treatment visit and services, VUMC erroneously billed the HRSA COVID-19 Uninsured Program for the entire encounter, which was not in compliance with the HRSA COVID-19 Uninsured Program regulations. Cause: Management did not develop and maintain effective internal control over report writing, program changes, and user access. VUMC did not have internal controls in place to ensure claims billed to the HRSA COVID-19 Uninsured Program were in accordance with HRSA Uninsured Program regulations. Effect or potential effect: The key report used to identify eligible federal program participants could be inaccurate or incomplete. VUMC did not have internal controls in place to formally document its compliance with the HRSA COVID 19 Uninsured Program?s allowability and eligibility requirements. Outpatient encounters that included a COVID-19 testing diagnosis code, where the primary treatment diagnosis code was not COVID-19 related, were not reviewed for allowability and eligibility prior to submission to HRSA to verify treatment costs were allowable under the HRSA COVID-19 Uninsured Program. Questioned costs: $336,536 Context: Management performed an analysis over claims submitted to HRSA related to services with dates of service from July 1, 2021 through June 30, 2022, indicating that 1,013 patient accounts totaling $336,536 related to certain claims where COVID-19 was not the primary diagnosis were inappropriately billed to HRSA. The $336,536 was refunded to HRSA in August 2022. Total federal expenditures for Assistance Listing 93.461 totaled $5,809,048 for the year ended June 30, 2022. Identification as a repeat finding, if applicable: 2021-001 Recommendation: The Uninsured Program ended in 2022; therefore, the development of internal controls is not required. However, if the program were to continue, VUMC should implement sufficiently precise internal controls to review changes to the HRSA COVID-19 Uninsured Program to ensure it is administering the program in compliance with the HRSA COVID-19 Uninsured Program regulations. In addition, internal controls should be implemented to ensure claims submitted to the HRSA COVID-19 Uninsured Program meet the allowability criteria established by the HRSA COVID-19 Uninsured Program regulations before claims are submitted to HRSA for reimbursement. VUMC should retain evidence of internal controls related to access and change management over the report. Management should implement a quality review process of eligible claims identified on a monthly basis to ensure that patients identified meet the required eligibility requirements. Views of responsible officials: Management agrees with this finding and performed a review of claims submitted to the HRSA COVID-19 Uninsured Program identifying payments for ineligible services and refunded the entire overpayment amount. In March 2022, HRSA announced the discontinuance of the HRSA COVID-19 Uninsured Program, and therefore, remediation of internal controls is no longer applicable.