Finding: 2022-001 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medicaid Cluster AL # 93.778 Grant Number: XIX-MAP22 Program Name: Foster Care Title IV-E AL # 93.658 Grant Number: 1701NCFOST Program Name: Adoption Assistance AL # 93.659 Grant Number: 1701NCADPT Significant Deficiency Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network without anyone attending to the workstation. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Views of Responsible Officials and Planned Corrective Action: Management concurs with the finding. See Corrective Action Plan.
Finding: 2022-001 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medicaid Cluster AL # 93.778 Grant Number: XIX-MAP22 Program Name: Foster Care Title IV-E AL # 93.658 Grant Number: 1701NCFOST Program Name: Adoption Assistance AL # 93.659 Grant Number: 1701NCADPT Significant Deficiency Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network without anyone attending to the workstation. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Views of Responsible Officials and Planned Corrective Action: Management concurs with the finding. See Corrective Action Plan.
Finding: 2022-001 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medicaid Cluster AL # 93.778 Grant Number: XIX-MAP22 Program Name: Foster Care Title IV-E AL # 93.658 Grant Number: 1701NCFOST Program Name: Adoption Assistance AL # 93.659 Grant Number: 1701NCADPT Significant Deficiency Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network without anyone attending to the workstation. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Views of Responsible Officials and Planned Corrective Action: Management concurs with the finding. See Corrective Action Plan.
Finding: 2022-001 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medicaid Cluster AL # 93.778 Grant Number: XIX-MAP22 Program Name: Foster Care Title IV-E AL # 93.658 Grant Number: 1701NCFOST Program Name: Adoption Assistance AL # 93.659 Grant Number: 1701NCADPT Significant Deficiency Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network without anyone attending to the workstation. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Views of Responsible Officials and Planned Corrective Action: Management concurs with the finding. See Corrective Action Plan.
Finding: 2022-001 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medicaid Cluster AL # 93.778 Grant Number: XIX-MAP22 Program Name: Foster Care Title IV-E AL # 93.658 Grant Number: 1701NCFOST Program Name: Adoption Assistance AL # 93.659 Grant Number: 1701NCADPT Significant Deficiency Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network without anyone attending to the workstation. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Views of Responsible Officials and Planned Corrective Action: Management concurs with the finding. See Corrective Action Plan.
Finding: 2022-001 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medicaid Cluster AL # 93.778 Grant Number: XIX-MAP22 Program Name: Foster Care Title IV-E AL # 93.658 Grant Number: 1701NCFOST Program Name: Adoption Assistance AL # 93.659 Grant Number: 1701NCADPT Significant Deficiency Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network without anyone attending to the workstation. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Views of Responsible Officials and Planned Corrective Action: Management concurs with the finding. See Corrective Action Plan.
Finding: 2022-001 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medicaid Cluster AL # 93.778 Grant Number: XIX-MAP22 Program Name: Foster Care Title IV-E AL # 93.658 Grant Number: 1701NCFOST Program Name: Adoption Assistance AL # 93.659 Grant Number: 1701NCADPT Significant Deficiency Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network without anyone attending to the workstation. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Views of Responsible Officials and Planned Corrective Action: Management concurs with the finding. See Corrective Action Plan.
Finding: 2022-001 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medicaid Cluster AL # 93.778 Grant Number: XIX-MAP22 Program Name: Foster Care Title IV-E AL # 93.658 Grant Number: 1701NCFOST Program Name: Adoption Assistance AL # 93.659 Grant Number: 1701NCADPT Significant Deficiency Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network without anyone attending to the workstation. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Views of Responsible Officials and Planned Corrective Action: Management concurs with the finding. See Corrective Action Plan.
Finding: 2022-001 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medicaid Cluster AL # 93.778 Grant Number: XIX-MAP22 Program Name: Foster Care Title IV-E AL # 93.658 Grant Number: 1701NCFOST Program Name: Adoption Assistance AL # 93.659 Grant Number: 1701NCADPT Significant Deficiency Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network without anyone attending to the workstation. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Views of Responsible Officials and Planned Corrective Action: Management concurs with the finding. See Corrective Action Plan.
Finding: 2022-001 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medicaid Cluster AL # 93.778 Grant Number: XIX-MAP22 Program Name: Foster Care Title IV-E AL # 93.658 Grant Number: 1701NCFOST Program Name: Adoption Assistance AL # 93.659 Grant Number: 1701NCADPT Significant Deficiency Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network without anyone attending to the workstation. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Views of Responsible Officials and Planned Corrective Action: Management concurs with the finding. See Corrective Action Plan.
Finding: 2022-001 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medicaid Cluster AL # 93.778 Grant Number: XIX-MAP22 Program Name: Foster Care Title IV-E AL # 93.658 Grant Number: 1701NCFOST Program Name: Adoption Assistance AL # 93.659 Grant Number: 1701NCADPT Significant Deficiency Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network without anyone attending to the workstation. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Views of Responsible Officials and Planned Corrective Action: Management concurs with the finding. See Corrective Action Plan.
Finding: 2022-001 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medicaid Cluster AL # 93.778 Grant Number: XIX-MAP22 Program Name: Foster Care Title IV-E AL # 93.658 Grant Number: 1701NCFOST Program Name: Adoption Assistance AL # 93.659 Grant Number: 1701NCADPT Significant Deficiency Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network without anyone attending to the workstation. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Views of Responsible Officials and Planned Corrective Action: Management concurs with the finding. See Corrective Action Plan.
Finding: 2022-001 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medicaid Cluster AL # 93.778 Grant Number: XIX-MAP22 Program Name: Foster Care Title IV-E AL # 93.658 Grant Number: 1701NCFOST Program Name: Adoption Assistance AL # 93.659 Grant Number: 1701NCADPT Significant Deficiency Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network without anyone attending to the workstation. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Views of Responsible Officials and Planned Corrective Action: Management concurs with the finding. See Corrective Action Plan.
Finding: 2022-001 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medicaid Cluster AL # 93.778 Grant Number: XIX-MAP22 Program Name: Foster Care Title IV-E AL # 93.658 Grant Number: 1701NCFOST Program Name: Adoption Assistance AL # 93.659 Grant Number: 1701NCADPT Significant Deficiency Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network without anyone attending to the workstation. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Views of Responsible Officials and Planned Corrective Action: Management concurs with the finding. See Corrective Action Plan.
Finding: 2022-001 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medicaid Cluster AL # 93.778 Grant Number: XIX-MAP22 Program Name: Foster Care Title IV-E AL # 93.658 Grant Number: 1701NCFOST Program Name: Adoption Assistance AL # 93.659 Grant Number: 1701NCADPT Significant Deficiency Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network without anyone attending to the workstation. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Views of Responsible Officials and Planned Corrective Action: Management concurs with the finding. See Corrective Action Plan.
Finding: 2022-001 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medicaid Cluster AL # 93.778 Grant Number: XIX-MAP22 Program Name: Foster Care Title IV-E AL # 93.658 Grant Number: 1701NCFOST Program Name: Adoption Assistance AL # 93.659 Grant Number: 1701NCADPT Significant Deficiency Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network without anyone attending to the workstation. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Views of Responsible Officials and Planned Corrective Action: Management concurs with the finding. See Corrective Action Plan.
Finding: 2022-001 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medicaid Cluster AL # 93.778 Grant Number: XIX-MAP22 Program Name: Foster Care Title IV-E AL # 93.658 Grant Number: 1701NCFOST Program Name: Adoption Assistance AL # 93.659 Grant Number: 1701NCADPT Significant Deficiency Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network without anyone attending to the workstation. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Views of Responsible Officials and Planned Corrective Action: Management concurs with the finding. See Corrective Action Plan.
Finding: 2022-001 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medicaid Cluster AL # 93.778 Grant Number: XIX-MAP22 Program Name: Foster Care Title IV-E AL # 93.658 Grant Number: 1701NCFOST Program Name: Adoption Assistance AL # 93.659 Grant Number: 1701NCADPT Significant Deficiency Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network without anyone attending to the workstation. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Views of Responsible Officials and Planned Corrective Action: Management concurs with the finding. See Corrective Action Plan.
Finding: 2022-001 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medicaid Cluster AL # 93.778 Grant Number: XIX-MAP22 Program Name: Foster Care Title IV-E AL # 93.658 Grant Number: 1701NCFOST Program Name: Adoption Assistance AL # 93.659 Grant Number: 1701NCADPT Significant Deficiency Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network without anyone attending to the workstation. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Views of Responsible Officials and Planned Corrective Action: Management concurs with the finding. See Corrective Action Plan.
Finding: 2022-001 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medicaid Cluster AL # 93.778 Grant Number: XIX-MAP22 Program Name: Foster Care Title IV-E AL # 93.658 Grant Number: 1701NCFOST Program Name: Adoption Assistance AL # 93.659 Grant Number: 1701NCADPT Significant Deficiency Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network without anyone attending to the workstation. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Views of Responsible Officials and Planned Corrective Action: Management concurs with the finding. See Corrective Action Plan.
Finding: 2022-001 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medicaid Cluster AL # 93.778 Grant Number: XIX-MAP22 Program Name: Foster Care Title IV-E AL # 93.658 Grant Number: 1701NCFOST Program Name: Adoption Assistance AL # 93.659 Grant Number: 1701NCADPT Significant Deficiency Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network without anyone attending to the workstation. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Views of Responsible Officials and Planned Corrective Action: Management concurs with the finding. See Corrective Action Plan.
Finding: 2022-001 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medicaid Cluster AL # 93.778 Grant Number: XIX-MAP22 Program Name: Foster Care Title IV-E AL # 93.658 Grant Number: 1701NCFOST Program Name: Adoption Assistance AL # 93.659 Grant Number: 1701NCADPT Significant Deficiency Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network without anyone attending to the workstation. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Views of Responsible Officials and Planned Corrective Action: Management concurs with the finding. See Corrective Action Plan.
Finding: 2022-003 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Aging Cluster AL # 93.044, 93.045 Grant Number: 15-16 AANCT3HD; 15-16 AANCT3CM Significant Deficiency Criteria: In accordance with 2 CFR 200, management should have an adequate system of internal control procedures in place to properly review and assess the eligibility of individuals to ensure the accuracy of the benefits being provided is within program requirements. Verification of accuracy of information used in determining eligibility should be performed by management. Evidence of the review should be documented and include authorized signatures. Condition: The County Department of Social Services did not have adequate review controls in place to ensure the proper eligibility determinations were being made and documented. The County did not have evidence of reviews performed over the program tested for the entire period under audit. Context: The County did not have evidence of reviews performed over the program for the entire period under audit. Effect: Casefiles could be missing the required eligibility determination documentation which would allow benefits to be provided to individuals who are not eligible. Cause: Weakness in implementation of controls over second party review procedures performed by management. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Evidence of documentation of reviews should be retained and include electronic signatures of reviewer. Any deficiencies noted during the review should be corrected within a timely manner and documented as such. Name of Contact Person: Karen Harrington, DSS Director Views of Responsible Officials and Planned Corrective Action: Management concurs with this finding. Please refer to the Corrective Action Plan.
Finding: 2022-003 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Aging Cluster AL # 93.044, 93.045 Grant Number: 15-16 AANCT3HD; 15-16 AANCT3CM Significant Deficiency Criteria: In accordance with 2 CFR 200, management should have an adequate system of internal control procedures in place to properly review and assess the eligibility of individuals to ensure the accuracy of the benefits being provided is within program requirements. Verification of accuracy of information used in determining eligibility should be performed by management. Evidence of the review should be documented and include authorized signatures. Condition: The County Department of Social Services did not have adequate review controls in place to ensure the proper eligibility determinations were being made and documented. The County did not have evidence of reviews performed over the program tested for the entire period under audit. Context: The County did not have evidence of reviews performed over the program for the entire period under audit. Effect: Casefiles could be missing the required eligibility determination documentation which would allow benefits to be provided to individuals who are not eligible. Cause: Weakness in implementation of controls over second party review procedures performed by management. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Evidence of documentation of reviews should be retained and include electronic signatures of reviewer. Any deficiencies noted during the review should be corrected within a timely manner and documented as such. Name of Contact Person: Karen Harrington, DSS Director Views of Responsible Officials and Planned Corrective Action: Management concurs with this finding. Please refer to the Corrective Action Plan.
Finding: 2022-003 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Aging Cluster AL # 93.044, 93.045 Grant Number: 15-16 AANCT3HD; 15-16 AANCT3CM Significant Deficiency Criteria: In accordance with 2 CFR 200, management should have an adequate system of internal control procedures in place to properly review and assess the eligibility of individuals to ensure the accuracy of the benefits being provided is within program requirements. Verification of accuracy of information used in determining eligibility should be performed by management. Evidence of the review should be documented and include authorized signatures. Condition: The County Department of Social Services did not have adequate review controls in place to ensure the proper eligibility determinations were being made and documented. The County did not have evidence of reviews performed over the program tested for the entire period under audit. Context: The County did not have evidence of reviews performed over the program for the entire period under audit. Effect: Casefiles could be missing the required eligibility determination documentation which would allow benefits to be provided to individuals who are not eligible. Cause: Weakness in implementation of controls over second party review procedures performed by management. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Evidence of documentation of reviews should be retained and include electronic signatures of reviewer. Any deficiencies noted during the review should be corrected within a timely manner and documented as such. Name of Contact Person: Karen Harrington, DSS Director Views of Responsible Officials and Planned Corrective Action: Management concurs with this finding. Please refer to the Corrective Action Plan.
Finding: 2022-003 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Aging Cluster AL # 93.044, 93.045 Grant Number: 15-16 AANCT3HD; 15-16 AANCT3CM Significant Deficiency Criteria: In accordance with 2 CFR 200, management should have an adequate system of internal control procedures in place to properly review and assess the eligibility of individuals to ensure the accuracy of the benefits being provided is within program requirements. Verification of accuracy of information used in determining eligibility should be performed by management. Evidence of the review should be documented and include authorized signatures. Condition: The County Department of Social Services did not have adequate review controls in place to ensure the proper eligibility determinations were being made and documented. The County did not have evidence of reviews performed over the program tested for the entire period under audit. Context: The County did not have evidence of reviews performed over the program for the entire period under audit. Effect: Casefiles could be missing the required eligibility determination documentation which would allow benefits to be provided to individuals who are not eligible. Cause: Weakness in implementation of controls over second party review procedures performed by management. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Evidence of documentation of reviews should be retained and include electronic signatures of reviewer. Any deficiencies noted during the review should be corrected within a timely manner and documented as such. Name of Contact Person: Karen Harrington, DSS Director Views of Responsible Officials and Planned Corrective Action: Management concurs with this finding. Please refer to the Corrective Action Plan.
Finding: 2022-003 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Aging Cluster AL # 93.044, 93.045 Grant Number: 15-16 AANCT3HD; 15-16 AANCT3CM Significant Deficiency Criteria: In accordance with 2 CFR 200, management should have an adequate system of internal control procedures in place to properly review and assess the eligibility of individuals to ensure the accuracy of the benefits being provided is within program requirements. Verification of accuracy of information used in determining eligibility should be performed by management. Evidence of the review should be documented and include authorized signatures. Condition: The County Department of Social Services did not have adequate review controls in place to ensure the proper eligibility determinations were being made and documented. The County did not have evidence of reviews performed over the program tested for the entire period under audit. Context: The County did not have evidence of reviews performed over the program for the entire period under audit. Effect: Casefiles could be missing the required eligibility determination documentation which would allow benefits to be provided to individuals who are not eligible. Cause: Weakness in implementation of controls over second party review procedures performed by management. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Evidence of documentation of reviews should be retained and include electronic signatures of reviewer. Any deficiencies noted during the review should be corrected within a timely manner and documented as such. Name of Contact Person: Karen Harrington, DSS Director Views of Responsible Officials and Planned Corrective Action: Management concurs with this finding. Please refer to the Corrective Action Plan.
Finding: 2022-001 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medicaid Cluster AL # 93.778 Grant Number: XIX-MAP22 Program Name: Foster Care Title IV-E AL # 93.658 Grant Number: 1701NCFOST Program Name: Adoption Assistance AL # 93.659 Grant Number: 1701NCADPT Significant Deficiency Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network without anyone attending to the workstation. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Views of Responsible Officials and Planned Corrective Action: Management concurs with the finding. See Corrective Action Plan.
Finding: 2022-001 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medicaid Cluster AL # 93.778 Grant Number: XIX-MAP22 Program Name: Foster Care Title IV-E AL # 93.658 Grant Number: 1701NCFOST Program Name: Adoption Assistance AL # 93.659 Grant Number: 1701NCADPT Significant Deficiency Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network without anyone attending to the workstation. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Views of Responsible Officials and Planned Corrective Action: Management concurs with the finding. See Corrective Action Plan.
Finding: 2022-001 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medicaid Cluster AL # 93.778 Grant Number: XIX-MAP22 Program Name: Foster Care Title IV-E AL # 93.658 Grant Number: 1701NCFOST Program Name: Adoption Assistance AL # 93.659 Grant Number: 1701NCADPT Significant Deficiency Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network without anyone attending to the workstation. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Views of Responsible Officials and Planned Corrective Action: Management concurs with the finding. See Corrective Action Plan.
Finding: 2022-001 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medicaid Cluster AL # 93.778 Grant Number: XIX-MAP22 Program Name: Foster Care Title IV-E AL # 93.658 Grant Number: 1701NCFOST Program Name: Adoption Assistance AL # 93.659 Grant Number: 1701NCADPT Significant Deficiency Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network without anyone attending to the workstation. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Views of Responsible Officials and Planned Corrective Action: Management concurs with the finding. See Corrective Action Plan.
Finding: 2022-001 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medicaid Cluster AL # 93.778 Grant Number: XIX-MAP22 Program Name: Foster Care Title IV-E AL # 93.658 Grant Number: 1701NCFOST Program Name: Adoption Assistance AL # 93.659 Grant Number: 1701NCADPT Significant Deficiency Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network without anyone attending to the workstation. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Views of Responsible Officials and Planned Corrective Action: Management concurs with the finding. See Corrective Action Plan.
Finding: 2022-001 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medicaid Cluster AL # 93.778 Grant Number: XIX-MAP22 Program Name: Foster Care Title IV-E AL # 93.658 Grant Number: 1701NCFOST Program Name: Adoption Assistance AL # 93.659 Grant Number: 1701NCADPT Significant Deficiency Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network without anyone attending to the workstation. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Views of Responsible Officials and Planned Corrective Action: Management concurs with the finding. See Corrective Action Plan.
Finding: 2022-001 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medicaid Cluster AL # 93.778 Grant Number: XIX-MAP22 Program Name: Foster Care Title IV-E AL # 93.658 Grant Number: 1701NCFOST Program Name: Adoption Assistance AL # 93.659 Grant Number: 1701NCADPT Significant Deficiency Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network without anyone attending to the workstation. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Views of Responsible Officials and Planned Corrective Action: Management concurs with the finding. See Corrective Action Plan.
Finding: 2022-001 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medicaid Cluster AL # 93.778 Grant Number: XIX-MAP22 Program Name: Foster Care Title IV-E AL # 93.658 Grant Number: 1701NCFOST Program Name: Adoption Assistance AL # 93.659 Grant Number: 1701NCADPT Significant Deficiency Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network without anyone attending to the workstation. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Views of Responsible Officials and Planned Corrective Action: Management concurs with the finding. See Corrective Action Plan.
Finding: 2022-001 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medicaid Cluster AL # 93.778 Grant Number: XIX-MAP22 Program Name: Foster Care Title IV-E AL # 93.658 Grant Number: 1701NCFOST Program Name: Adoption Assistance AL # 93.659 Grant Number: 1701NCADPT Significant Deficiency Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network without anyone attending to the workstation. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Views of Responsible Officials and Planned Corrective Action: Management concurs with the finding. See Corrective Action Plan.
Finding: 2022-001 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medicaid Cluster AL # 93.778 Grant Number: XIX-MAP22 Program Name: Foster Care Title IV-E AL # 93.658 Grant Number: 1701NCFOST Program Name: Adoption Assistance AL # 93.659 Grant Number: 1701NCADPT Significant Deficiency Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network without anyone attending to the workstation. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Views of Responsible Officials and Planned Corrective Action: Management concurs with the finding. See Corrective Action Plan.
Finding: 2022-001 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medicaid Cluster AL # 93.778 Grant Number: XIX-MAP22 Program Name: Foster Care Title IV-E AL # 93.658 Grant Number: 1701NCFOST Program Name: Adoption Assistance AL # 93.659 Grant Number: 1701NCADPT Significant Deficiency Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network without anyone attending to the workstation. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Views of Responsible Officials and Planned Corrective Action: Management concurs with the finding. See Corrective Action Plan.
Finding: 2022-001 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medicaid Cluster AL # 93.778 Grant Number: XIX-MAP22 Program Name: Foster Care Title IV-E AL # 93.658 Grant Number: 1701NCFOST Program Name: Adoption Assistance AL # 93.659 Grant Number: 1701NCADPT Significant Deficiency Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network without anyone attending to the workstation. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Views of Responsible Officials and Planned Corrective Action: Management concurs with the finding. See Corrective Action Plan.
Finding: 2022-001 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medicaid Cluster AL # 93.778 Grant Number: XIX-MAP22 Program Name: Foster Care Title IV-E AL # 93.658 Grant Number: 1701NCFOST Program Name: Adoption Assistance AL # 93.659 Grant Number: 1701NCADPT Significant Deficiency Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network without anyone attending to the workstation. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Views of Responsible Officials and Planned Corrective Action: Management concurs with the finding. See Corrective Action Plan.
Finding: 2022-001 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medicaid Cluster AL # 93.778 Grant Number: XIX-MAP22 Program Name: Foster Care Title IV-E AL # 93.658 Grant Number: 1701NCFOST Program Name: Adoption Assistance AL # 93.659 Grant Number: 1701NCADPT Significant Deficiency Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network without anyone attending to the workstation. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Views of Responsible Officials and Planned Corrective Action: Management concurs with the finding. See Corrective Action Plan.
Finding: 2022-001 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medicaid Cluster AL # 93.778 Grant Number: XIX-MAP22 Program Name: Foster Care Title IV-E AL # 93.658 Grant Number: 1701NCFOST Program Name: Adoption Assistance AL # 93.659 Grant Number: 1701NCADPT Significant Deficiency Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network without anyone attending to the workstation. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Views of Responsible Officials and Planned Corrective Action: Management concurs with the finding. See Corrective Action Plan.
Finding: 2022-001 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medicaid Cluster AL # 93.778 Grant Number: XIX-MAP22 Program Name: Foster Care Title IV-E AL # 93.658 Grant Number: 1701NCFOST Program Name: Adoption Assistance AL # 93.659 Grant Number: 1701NCADPT Significant Deficiency Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network without anyone attending to the workstation. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Views of Responsible Officials and Planned Corrective Action: Management concurs with the finding. See Corrective Action Plan.
Finding: 2022-001 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medicaid Cluster AL # 93.778 Grant Number: XIX-MAP22 Program Name: Foster Care Title IV-E AL # 93.658 Grant Number: 1701NCFOST Program Name: Adoption Assistance AL # 93.659 Grant Number: 1701NCADPT Significant Deficiency Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network without anyone attending to the workstation. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Views of Responsible Officials and Planned Corrective Action: Management concurs with the finding. See Corrective Action Plan.
Finding: 2022-001 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medicaid Cluster AL # 93.778 Grant Number: XIX-MAP22 Program Name: Foster Care Title IV-E AL # 93.658 Grant Number: 1701NCFOST Program Name: Adoption Assistance AL # 93.659 Grant Number: 1701NCADPT Significant Deficiency Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network without anyone attending to the workstation. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Views of Responsible Officials and Planned Corrective Action: Management concurs with the finding. See Corrective Action Plan.
Finding: 2022-001 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medicaid Cluster AL # 93.778 Grant Number: XIX-MAP22 Program Name: Foster Care Title IV-E AL # 93.658 Grant Number: 1701NCFOST Program Name: Adoption Assistance AL # 93.659 Grant Number: 1701NCADPT Significant Deficiency Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network without anyone attending to the workstation. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Views of Responsible Officials and Planned Corrective Action: Management concurs with the finding. See Corrective Action Plan.
Finding: 2022-001 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medicaid Cluster AL # 93.778 Grant Number: XIX-MAP22 Program Name: Foster Care Title IV-E AL # 93.658 Grant Number: 1701NCFOST Program Name: Adoption Assistance AL # 93.659 Grant Number: 1701NCADPT Significant Deficiency Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network without anyone attending to the workstation. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Views of Responsible Officials and Planned Corrective Action: Management concurs with the finding. See Corrective Action Plan.
Finding: 2022-001 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medicaid Cluster AL # 93.778 Grant Number: XIX-MAP22 Program Name: Foster Care Title IV-E AL # 93.658 Grant Number: 1701NCFOST Program Name: Adoption Assistance AL # 93.659 Grant Number: 1701NCADPT Significant Deficiency Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network without anyone attending to the workstation. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Views of Responsible Officials and Planned Corrective Action: Management concurs with the finding. See Corrective Action Plan.
Finding: 2022-001 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Medicaid Cluster AL # 93.778 Grant Number: XIX-MAP22 Program Name: Foster Care Title IV-E AL # 93.658 Grant Number: 1701NCFOST Program Name: Adoption Assistance AL # 93.659 Grant Number: 1701NCADPT Significant Deficiency Criteria: In accordance with the Division of Social Services Fiscal Manual, DSS employees should control physical access to the state network terminals or personal computers that are connected to the state mainframe. Condition: Upon surprise inspection, one unattended workstation of a DSS employee was logged onto the state network without anyone attending to the workstation. Context: While performing testing of internal control over compliance related to the Division of Social Services, we noted the above condition. Effect: Unauthorized access to the state system could be obtained due to the unattended logon to the system throughout the DSS building. Cause: Lack of proper internal controls over data security. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Require the County Data Processing Department to implement procedures to require logout of workstations where access to the state DSS system is granted. The control procedures should include random verification of logout in instances where offices are unattended. Views of Responsible Officials and Planned Corrective Action: Management concurs with the finding. See Corrective Action Plan.
Finding: 2022-003 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Aging Cluster AL # 93.044, 93.045 Grant Number: 15-16 AANCT3HD; 15-16 AANCT3CM Significant Deficiency Criteria: In accordance with 2 CFR 200, management should have an adequate system of internal control procedures in place to properly review and assess the eligibility of individuals to ensure the accuracy of the benefits being provided is within program requirements. Verification of accuracy of information used in determining eligibility should be performed by management. Evidence of the review should be documented and include authorized signatures. Condition: The County Department of Social Services did not have adequate review controls in place to ensure the proper eligibility determinations were being made and documented. The County did not have evidence of reviews performed over the program tested for the entire period under audit. Context: The County did not have evidence of reviews performed over the program for the entire period under audit. Effect: Casefiles could be missing the required eligibility determination documentation which would allow benefits to be provided to individuals who are not eligible. Cause: Weakness in implementation of controls over second party review procedures performed by management. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Evidence of documentation of reviews should be retained and include electronic signatures of reviewer. Any deficiencies noted during the review should be corrected within a timely manner and documented as such. Name of Contact Person: Karen Harrington, DSS Director Views of Responsible Officials and Planned Corrective Action: Management concurs with this finding. Please refer to the Corrective Action Plan.
Finding: 2022-003 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Aging Cluster AL # 93.044, 93.045 Grant Number: 15-16 AANCT3HD; 15-16 AANCT3CM Significant Deficiency Criteria: In accordance with 2 CFR 200, management should have an adequate system of internal control procedures in place to properly review and assess the eligibility of individuals to ensure the accuracy of the benefits being provided is within program requirements. Verification of accuracy of information used in determining eligibility should be performed by management. Evidence of the review should be documented and include authorized signatures. Condition: The County Department of Social Services did not have adequate review controls in place to ensure the proper eligibility determinations were being made and documented. The County did not have evidence of reviews performed over the program tested for the entire period under audit. Context: The County did not have evidence of reviews performed over the program for the entire period under audit. Effect: Casefiles could be missing the required eligibility determination documentation which would allow benefits to be provided to individuals who are not eligible. Cause: Weakness in implementation of controls over second party review procedures performed by management. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Evidence of documentation of reviews should be retained and include electronic signatures of reviewer. Any deficiencies noted during the review should be corrected within a timely manner and documented as such. Name of Contact Person: Karen Harrington, DSS Director Views of Responsible Officials and Planned Corrective Action: Management concurs with this finding. Please refer to the Corrective Action Plan.
Finding: 2022-003 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Aging Cluster AL # 93.044, 93.045 Grant Number: 15-16 AANCT3HD; 15-16 AANCT3CM Significant Deficiency Criteria: In accordance with 2 CFR 200, management should have an adequate system of internal control procedures in place to properly review and assess the eligibility of individuals to ensure the accuracy of the benefits being provided is within program requirements. Verification of accuracy of information used in determining eligibility should be performed by management. Evidence of the review should be documented and include authorized signatures. Condition: The County Department of Social Services did not have adequate review controls in place to ensure the proper eligibility determinations were being made and documented. The County did not have evidence of reviews performed over the program tested for the entire period under audit. Context: The County did not have evidence of reviews performed over the program for the entire period under audit. Effect: Casefiles could be missing the required eligibility determination documentation which would allow benefits to be provided to individuals who are not eligible. Cause: Weakness in implementation of controls over second party review procedures performed by management. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Evidence of documentation of reviews should be retained and include electronic signatures of reviewer. Any deficiencies noted during the review should be corrected within a timely manner and documented as such. Name of Contact Person: Karen Harrington, DSS Director Views of Responsible Officials and Planned Corrective Action: Management concurs with this finding. Please refer to the Corrective Action Plan.
Finding: 2022-003 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Aging Cluster AL # 93.044, 93.045 Grant Number: 15-16 AANCT3HD; 15-16 AANCT3CM Significant Deficiency Criteria: In accordance with 2 CFR 200, management should have an adequate system of internal control procedures in place to properly review and assess the eligibility of individuals to ensure the accuracy of the benefits being provided is within program requirements. Verification of accuracy of information used in determining eligibility should be performed by management. Evidence of the review should be documented and include authorized signatures. Condition: The County Department of Social Services did not have adequate review controls in place to ensure the proper eligibility determinations were being made and documented. The County did not have evidence of reviews performed over the program tested for the entire period under audit. Context: The County did not have evidence of reviews performed over the program for the entire period under audit. Effect: Casefiles could be missing the required eligibility determination documentation which would allow benefits to be provided to individuals who are not eligible. Cause: Weakness in implementation of controls over second party review procedures performed by management. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Evidence of documentation of reviews should be retained and include electronic signatures of reviewer. Any deficiencies noted during the review should be corrected within a timely manner and documented as such. Name of Contact Person: Karen Harrington, DSS Director Views of Responsible Officials and Planned Corrective Action: Management concurs with this finding. Please refer to the Corrective Action Plan.
Finding: 2022-003 U.S. Department of Health & Human Services Passed through the N.C. Dept. of Health and Human Services Program Name: Aging Cluster AL # 93.044, 93.045 Grant Number: 15-16 AANCT3HD; 15-16 AANCT3CM Significant Deficiency Criteria: In accordance with 2 CFR 200, management should have an adequate system of internal control procedures in place to properly review and assess the eligibility of individuals to ensure the accuracy of the benefits being provided is within program requirements. Verification of accuracy of information used in determining eligibility should be performed by management. Evidence of the review should be documented and include authorized signatures. Condition: The County Department of Social Services did not have adequate review controls in place to ensure the proper eligibility determinations were being made and documented. The County did not have evidence of reviews performed over the program tested for the entire period under audit. Context: The County did not have evidence of reviews performed over the program for the entire period under audit. Effect: Casefiles could be missing the required eligibility determination documentation which would allow benefits to be provided to individuals who are not eligible. Cause: Weakness in implementation of controls over second party review procedures performed by management. Questioned Costs: None. The finding represents an internal control issue; therefore, no questioned costs are applicable. Recommendation: Evidence of documentation of reviews should be retained and include electronic signatures of reviewer. Any deficiencies noted during the review should be corrected within a timely manner and documented as such. Name of Contact Person: Karen Harrington, DSS Director Views of Responsible Officials and Planned Corrective Action: Management concurs with this finding. Please refer to the Corrective Action Plan.