Corrective Action Plans

Browse how organizations respond to audit findings

Total CAPs
52,441
In database
Filtered Results
17,428
Matching current filters
Showing Page
416 of 698
25 per page

Filters

Clear
CORRECTIVE ACTION PLAN (Concerning Finding 2023-001) Contact Person Responsible for Corrective Action: Debra Clark, Business Manager Corrective Action: Regional School Unit 1 will take the following actions to address finding 2023-001 Regional School Unit 1 acknowledges that the Davis-Bacon guidelin...
CORRECTIVE ACTION PLAN (Concerning Finding 2023-001) Contact Person Responsible for Corrective Action: Debra Clark, Business Manager Corrective Action: Regional School Unit 1 will take the following actions to address finding 2023-001 Regional School Unit 1 acknowledges that the Davis-Bacon guidelines were not followed properly for a construction contract in fiscal year 2023. This contract was an extension of a fiscal year 2022 contract and a deficiency was issued for that year as well. Regional School Unit 1 now has the proper federal award form and the U.S. Wage and Hour Division payroll form available to be included with new construction contracts moving forward. These forms will be provided with any future construction contracts. The Facilities Director and Business Manager have reviewed the process and we are confident that this will not be an issue in the future.
View Audit 293119 Questioned Costs: $1
The District has defined what constitutes “official written documentation” and where those records are to be maintained. In addition, the District has established a procedure to annually train all attendance and counseling staff regarding the documentation required before removing a student from the...
The District has defined what constitutes “official written documentation” and where those records are to be maintained. In addition, the District has established a procedure to annually train all attendance and counseling staff regarding the documentation required before removing a student from the cohort.
SPECIAL TESTS AND PROVISIONS – ADP RISK ANALYSIS & SYSTEM SECURITY REVIEW Department of Health and Human Resources (DHHR) Assistance Listing Number 93.775, 93.777, COVID-19 93.777, 93.778, ARRA 93.778 The Condition section within prior year finding 2022-037 recognized that the DHHR has policies an...
SPECIAL TESTS AND PROVISIONS – ADP RISK ANALYSIS & SYSTEM SECURITY REVIEW Department of Health and Human Resources (DHHR) Assistance Listing Number 93.775, 93.777, COVID-19 93.777, 93.778, ARRA 93.778 The Condition section within prior year finding 2022-037 recognized that the DHHR has policies and procedures in place for performing periodic risk assessments and security reviews over the Recipient Automated Payment and Information Data System (RAPIDS), which is an internal system; however, the Condition section also proclaimed that the DHHR does not have policies and procedures to perform periodic risk assessments and security reviews over the Medicaid Management Information System (MMIS). The first sentence of the corrective action plan for prior year finding 2022-037 indicates that the MMIS is designed, developed, implemented, and operated by an external service organization. Within the last two paragraphs of the corrective action plan for prior year finding 2022-037, the DHHR opined that it was in compliance with 45 CFR 95.621 since it receives the SOC 1 Type 2 report from the MMIS service organization and since the report documents that the service organization establishes and maintains a program for conducting periodic risk analyses to ensure appropriate, cost effective safeguards are incorporated into new and existing systems or whenever significant system changes occur, as required per 45 CFR 95.621. However, the DHHR also recognized the underlying concern expressed within the finding, in that the DHHR does not include the SOC 1 Type 2 report as part of its own policies and procedures for ADP security over the MMIS. To enhance its controls, the DHHR Bureau for Medical Services (BMS) was going to develop a policy and procedures to document MMIS compliance with 45 CFR 95.621. The procedures were to include but not be limited to a requirement to review and approve the SOC 1 Type 2 report from the MMIS service organization and document the review and approval process (e.g., for such matters as the service organization’s assertions, descriptions of its systems and controls, control objectives, and related controls, and the service auditor’s description of tests of controls and results). Although the DHHR BMS has not developed a comprehensive policy or any written procedures to date, they have developed a form to document internal review of the SOC 1 Type 2 report for such matters as the control environment, systems development and maintenance, logical security, physical access, computer operations, and input controls. The BMS has also discussed this issue with an independent consulting firm that is under contract with the BMS for Medicaid expertise and performs existing services related to information technology and security; modernization and planning for the overall Medicaid Enterprise Systems (MES); organization development, including alignment strategies; project management; and data architecture and governance, which includes managing the availability, usability, integrity, and security of data with comprehensive standards and policies. The BMS and its independent consulting firm will work together to develop a statement of work for an independent review of the existing control environment, if deemed necessary, and any additional services that might need performed in order to ensure the DHHR maintains full compliance with 45 CFR 95.621 and can document compliance for future HHS reviewers, independent auditors, or other authorized officials.
SPECIAL TESTS AND PROVISIONS – FRAUD DETECTION AND REPAYMENT West Virginia Department of Health and Human Resources (DHHR) Assistance Listing Number 93.575, 93.596, COVID-19 93.575 Per 45 CFR 98.68(b)(2), there is no requirement for lead agencies to recoup Child Care and Development Fund overpaym...
SPECIAL TESTS AND PROVISIONS – FRAUD DETECTION AND REPAYMENT West Virginia Department of Health and Human Resources (DHHR) Assistance Listing Number 93.575, 93.596, COVID-19 93.575 Per 45 CFR 98.68(b)(2), there is no requirement for lead agencies to recoup Child Care and Development Fund overpayments, except in instances of fraud as defined by the lead agency. Within the State of West Virginia, the lead agency is the DHHR. As indicated in Section 8.1.6 of the CCDF [State] Plan for West Virginia for Federal fiscal years 2022-2024, the DHHR Office of Inspector General (OIG) is responsible for pursuing fraud and overpayments. As indicated in Section 1.1.2 of the CCDF [State] Plan, the Division of Early Care and Education within the DHHR Bureau for Family Assistance (BFA) administers the CCDF program. Accordingly, the OIG and BFA strive to work as a unified team within the DHHR and State as a whole to identify and prevent fraud or intentional program violations; to identify and recover misspent funds as a result of fraud; and to otherwise fight fraud and ensure program integrity. As the lead agency, and as necessary to ensure program integrity, the DHHR has policies and procedures in place to define fraud and to identify and recover payments resulting from fraud, as the auditors indicated within the condition and recommendation sections of this finding and to track referrals and determinations from beginning to end (i.e., beginning in the year of identification and continuing through resolution or the establishment and enforcement of repayment agreements). The policies and procedures are specifically referenced in Chapter 8 of the BFA’s “Child Care Subsidy Policy and Procedures Manual.” Chapter 8 of the manual is titled, “Improper Payments: Prevention, Identification, Measurement and Recoupment.” Improper Payments Per Chapter 8 of the manual, an improper payment occurs when the funds go to the wrong recipient, the recipient receives the incorrect amount of funds, or the recipient obtains or uses the funds in an improper manner. Improper payments include 1) worker error in determining eligibility, authorizing care, or paying for care; 2) misrepresentation on the part of the parent or provider; and 3) programmatic infractions by parents or providers. 1. Worker Error – Improper payments due to worker error are defined as payments that should not have been made or that were made in an incorrect amount due to an error in determining and verifying eligibility, calculating the benefit, or entering the data into the eligibility system. Repayment of an improper payment due to worker error is not mandatory regardless of the amount. 2. Misrepresentation – Misrepresentation (i.e., fraud) occurs when a specific section of the child care policy is violated as a result of the information not having been reported by the client or provider or reported falsely. Improper payments made as a result of mis-interpretation must be referred to the OIG when the amount exceeds $1,000.00. If the amount does not exceed $1,000.00, the BFA must initiate repayment procedures. A willfully false statement is one that is deliberately given, with the intent that it be accepted as true, with the knowledge that it is false. It is an essential element in a misrepresentation charge that the client or provider knew the statement was false. 3. Programmatic Infraction – There are times when it is difficult to discern whether an improper payment occurred due to willful misrepresentation or is simply the result of a client or provider’s genuine confusion over subsidy program rules and responsibilities. When the case manager believes that improper payments were the result of the client or provider’s failure to understand, it is considered to be a programmatic infraction; it is the BFA’s responsibility to collect the improper payment in this instance, regardless of the amount. If the case manager is in doubt as to whether an improper payment is a programmatic infraction or is the result of misrepresentation by the client or provider, and the improper payment is less than $1,000.00, the case manager discusses the case with the supervisor and the supervisor subsequently consults with the program director; together, they make the decision whether to pursue repayment. Referrals from the Bureau for Family Assistance to the Office of Inspector General If the overpayment is $1,000.00 or greater and is due to misrepresentation by the client or provider, the case manager prepares a memo explaining the circumstances, the time period, and an estimate of the amount involved; indicates the person(s) who can verify the information within the memo; attaches a copy of all applicable documentation including, but not limited to, the payment form and attendance sheets that help support the complaint; states what corrective actions the case manager has taken on the case; and sends a copy of the memo and supporting documents to the Office of Inspector General, Division of Investigations and Fraud Management. Recovery of Improper Payments Resulting from Misrepresentation (i.e., Fraud) The supervisors within the BFA are responsible for negotiating repayment schedules with providers and clients and completing a Child Care Benefit Repayment Agreement to include the amount to be recovered, the period of recovery, the monthly recovery amount, and the procedure for repayment. If the provider or client is active, the case manager attempts to collect the payment in full; if this is not feasible, the case manager requests that the client or provider be asked to repay the amount in monthly installment payments of approximately 10% of the amount due. If a payment is more than 45 days late (15 days past the due date), the entire unpaid balance becomes due and must be paid in full. Failure to repay the requested amount results in case closure for clients or denial of participation in the certificate system for child care providers. Client services will not be reinstated until full payment is received. There are no policies or procedures to pursue repayments or collection beyond that point. There is no method to recoup overpayments from ongoing benefits, and the CCDF is not subject to the Treasury Offset Program, as other Federal programs are. Corrective Action Plan As previously stated, the OIG and BFA strive to work as a unified team within the DHHR to identify and prevent fraud or intentional program violations; to identify and recover misspent funds as a result of fraud; and to otherwise fight fraud and ensure program integrity. In response to the auditor’s recommendation for this finding, the OIG and BFA will revisit existing policies and procedures over fraud detection and repayment and will attempt to enhance the controls related thereto, particularly in relation to ensuring that all efforts concerning fraud detection and repayment are sufficiently documented, thus demonstrating full compliance with 45 CFR 98.60. Maintaining documentation of the decision-making process, the activities performed, and the results of those activities is of paramount importance in achieving that objective. A high level of documentation is necessary to support that the DHHR has policies and procedures in place and is following those policies and procedures. Maintaining adequate records and other documentary evidence will resolve this audit finding, prevent the occurrence of future audit findings, and provide a means to corroborate statements and assurances provided to regulatory agencies and other authorized individuals with regards to the DHHR’s overall compliance with 45 CFR 98.60. It is not enough to perform the activities; there must be an adequate audit trail to show the “who, what, when, where, and how” of the activities performed. As such, the OIG and BFA will also develop and maintain an appropriate system for categorizing their files and organizing their records, reports, and documents in a systematic and orderly manner to ensure, among other purposes, that they can substantiate their efforts when audited, reviewed, or evaluated by internal staff or authorized external organizations.
View Audit 293105 Questioned Costs: $1
ALLOWABILITY AND ELIGIBILITY Department of Health and Human Resources (DHHR) Assistance Listing Number 93.489, 93.575, 93.596, COVID-19 93.575 For the one payment out of 40 whereby the provider requested and was paid for 13 non-traditional days although records indicated that only 11 of the days...
ALLOWABILITY AND ELIGIBILITY Department of Health and Human Resources (DHHR) Assistance Listing Number 93.489, 93.575, 93.596, COVID-19 93.575 For the one payment out of 40 whereby the provider requested and was paid for 13 non-traditional days although records indicated that only 11 of the days were non-traditional, the West Virginia Department of Health and Human Resources, Bureau for Family Assistance (BFA), agrees that the condition resulted in an overpayment of $12.00. The BFA Case Manager entered 13 non-traditional days in the Family and Children Tracking System (FACTS), but the record indicated that only 11 days were non-traditional days. Per WV Child Care Policy and Procedures: 8.3.1. Worker Error Improper payments due to worker error are defined as payments that should not have been made, or that were made in an incorrect amount due to worker error in determining and verifying eligibility, and/or calculation and input of information into the Family and Children’s Tracking System (FACTS). Incorrect amounts include overpayments, underpayments and inappropriate denials of payment. 8.3.1.1. Examples of worker error: A. The child care regulatory specialist enables the “accreditation” box, allowing the provider to receive an extra $4 per day, when the provider has not achieved accreditation, and is not entitled to the enhanced rate. B. The case manager enters an incorrect number of days when entering information from the payment form into FACTS. C. The case manager enters more time on the child care assessment than the client’s work or school schedule supports. D. The case manager fails to verify income, school enrollment, or special needs status. 8.3.1.2. Repayment of an improper payment due to CCR&R worker error is not mandatory regardless of the amount. The BFA Division of Early Care and Education employs Child Care Policy Specialists who visit contracted Resource and Referral Agencies to monitor and audit both electronic and hard records. Training and coaching also takes place during these visits. These visits continued throughout the reporting period. The BFA will evaluate the effectiveness of the current training programs for the use of the FACTS system (and subsequently for the West Virginia People's Access to Help (PATH) system) for CCDF payments. Furthermore, the BFA will follow established policies and procedures to ensure client information is appropriately obtained and maintained and that all data is input accurately. For the payment whereby the $3.00 daily supplement was not included in the calculation or paid, although the documentation in the eligibility system indicated that the child was covered under a CPS Safety Plan, this was not in fact a CPS Safety Plan case. The CPS Safety Plan was being used as a temporary means to address an executive order regarding COVID-19 and grant eligibility to essential workers who would otherwise not have qualified for the child care subsidy assistance due to their monthly income being above the Federal Poverty Level but below 85% of the State Median Income. The payment in question was in March 2023. Via a case assessment on November 1, 2023, this case [and other similar cases] were approved in the eligibility system as formalized Policy Exceptions rather than being selected as part of a CPS Safety Plan.
View Audit 293105 Questioned Costs: $1
TRANSPARENCY ACT REPORTING Department of Health and Human Resources (DHHR) Assistance Listing Number 93.489, 93.575, 93.596, COVID-19 93.575 The DHHR concurs with the Condition section of the finding, in that one report was not submitted timely; however, the DHHR does not agree with the Cause sec...
TRANSPARENCY ACT REPORTING Department of Health and Human Resources (DHHR) Assistance Listing Number 93.489, 93.575, 93.596, COVID-19 93.575 The DHHR concurs with the Condition section of the finding, in that one report was not submitted timely; however, the DHHR does not agree with the Cause section of the finding, which indicates a lack of oversight and adequate review of the FFATA reporting by DHHR Management. The DHHR hereby notes that the report was due on October 31, 2022 but was not submitted until November 1, 2022 (i.e., one day late). Submitting a report one day late is not an indication of a lack of oversight or adequate review of the FFATA reporting requirement. In this case, the report was submitted one day late because the person responsible for submitting the report was working remotely on October 31, 2022 and lost internet connection until November 1, 2022. Although the DHHR strives for perfection, such a condition cannot always be achieved, especially from the perspective of information technology within the rural state of West Virginia. Nonetheless, if the situation repeats in the future, the person responsible for submitting the report will be encouraged to find a location that has an adequate [and secure] internet connection.
ALLOWABILITY AND SPECIAL TESTS AND PROVISIONS – PAYMENT RATE SETTING AND APPLICATION Department of Health and Human Resources (DHHR) Assistance Listing Number 93.658 The West Virginia Department of Health and Human Resources, Bureau for Social Services (BSS), will address the underpayment in qu...
ALLOWABILITY AND SPECIAL TESTS AND PROVISIONS – PAYMENT RATE SETTING AND APPLICATION Department of Health and Human Resources (DHHR) Assistance Listing Number 93.658 The West Virginia Department of Health and Human Resources, Bureau for Social Services (BSS), will address the underpayment in question, which was $268.84. The BSS will also revise its training program for child welfare workers to include information regarding demand payments and pro-rating stays in foster care. To accompany the training, the BSS will also develop a desk guide for all child welfare workers and related staff, which will indicate the common monthly rates and pro-rated daily rates along with a contact person to assist with questions concerning any uncommon rates and other pertinent matters.
INFORMATION TECHNOLOGY GENERAL CONTROLS – WVPATH Department of Health and Human Resources (DHHR) Assistance Listing Number 93.658, 93.659 The DHHR, Office of Management Information Services (OMIS), analyzed this finding and hereby offers more details into the condition and cause of the finding. ...
INFORMATION TECHNOLOGY GENERAL CONTROLS – WVPATH Department of Health and Human Resources (DHHR) Assistance Listing Number 93.658, 93.659 The DHHR, Office of Management Information Services (OMIS), analyzed this finding and hereby offers more details into the condition and cause of the finding. The information technology system in question is named WVPATH, which stands for, “West Virginia People’s Access to Help.” WVPATH is a comprehensive social services/child welfare information system, allowing employees to more efficiently track and view data, streamline services, and ultimately improve the manner by which the State determines eligibility for programs and provides for the delivery of services. With respect to the Foster Care and Adoption programs, the WVPATH system replaced the “Family and Children’s Tracking System” (FACTS). The DHHR transitioned from FACTS to WVPATH in January 2023, which was approximately six months into fiscal year 2023. Fieldwork for the information technology portion of the West Virginia Single Audit began in June 2023. During fieldwork, the auditors inquired about the information technology general controls (ITGCs) within the WVPATH system. In particular, the auditors requested a description of the controls along with a copy of the policies, procedures, system generated listings, screenprints, and other documentation related to information security and access administration, change management, and backup recovery and restoration. Although the OMIS is of the opinion that the State of West Virginia indeed implemented all logical access and change management controls to support effective ITGCs over the WVPATH system, the OMIS did not address the auditor’s request in a timely manner during fieldwork. Therefore, the auditors were unable to determine whether the controls were designed sufficiently, nor were they able to conduct the requisite testing to confirm that the controls were in place and operating effectively during the applicable months of the audit period.   Upon receiving this finding, the OMIS conferred with the State’s third-party software vendor for the WVPATH system; prepared a description of controls; collected the documentation related to information security and access administration, change management, and backup recovery and restoration within the WVPATH system; and submitted the description of controls and related documentation to the auditors. On February 14, 2024, a meeting was held between the auditors, the OMIS, the third-party software vendor, and one of the audit coordinators from the DHHR central finance level. The purpose of the meeting was to discuss this finding and determine whether the documentation collected by the OMIS after fieldwork would have averted the finding in the first place. During the meeting, the auditors indicated that the description of controls is very detailed and appears to support the OMIS’s assertion that the controls are designed sufficiently. However, since the documentation was submitted to the auditors after fieldwork was complete, there was not enough time for the auditors to conduct the requisite testing to determine whether the processes and controls were in place and operating effectively during the applicable months of the audit period. In terms of a corrective action plan for this finding, the OMIS now has a greater understanding of the auditor’s objectives and procedures surrounding ITGCs. During fieldwork for the [forthcoming] West Virginia Single Audit for the year ended June 30, 2024, when the auditors are ready to test the required logical access and change management controls that are required to be in place to support effective ITGCs for the WVPATH system, the OMIS will undoubtedly be prepared to provide the auditors with a description of the controls along with a copy of all documentation related to information security and access administration, change management, and backup recovery and restoration within the WVPATH system.
ELIGIBILITY West Virginia Department of Health and Human Resources (DHHR) Assistance Listing Number 93.568, COVID-19 93.568 The LIHEAP policy staff within the DHHR, Bureau for Family Assistance (BFA), have worked with the Recipient Automated Payment and Information Data System (RAPIDS) team to co...
ELIGIBILITY West Virginia Department of Health and Human Resources (DHHR) Assistance Listing Number 93.568, COVID-19 93.568 The LIHEAP policy staff within the DHHR, Bureau for Family Assistance (BFA), have worked with the Recipient Automated Payment and Information Data System (RAPIDS) team to confirm that the benefit table has been accurately entered into the RAPIDS system for fiscal year 2024. The LIHEAP policy staff will continue to review the work of the RAPIDS team to ensure that the benefit table has been accurately entered prior to the opening of LIHEAP application intake annually.
View Audit 293105 Questioned Costs: $1
SPECIAL TESTS AND PROVISIONS – PENALTY FOR FAILURE TO COMPLY WITH WORK VERFICATION PLAN Department of Health and Human Resources (DHHR) Assistance Listing Number 93.558 For each data element quarter of the calendar year, the new component entry deadline and the participation hours entry deadline...
SPECIAL TESTS AND PROVISIONS – PENALTY FOR FAILURE TO COMPLY WITH WORK VERFICATION PLAN Department of Health and Human Resources (DHHR) Assistance Listing Number 93.558 For each data element quarter of the calendar year, the new component entry deadline and the participation hours entry deadline are established by the West Virginia Department of Health and Human Resources, Bureau for Family Assistance (BFA). For the first data element quarter (January, February, March), the new component entry deadline is April 30, and the participation hours entry deadline is May 5. For the second data element quarter (April, May, June), the new component entry deadline is July 31, and the participation hours entry deadline is August 5. For the third data element quarter (July, August, September), the new component entry deadline is October 31, and the participation hours entry deadline is November 5. For the fourth data element quarter (October, November, December), the new component entry deadline is January 31, and the participation hours entry deadline is February 5. To resolve the condition that led to this finding, the BFA will work with the Recipient Automated Payment and Information Data System (RAPIDS) Data Team. The BFA will request joint meetings with the RAPIDS Data Team to review sample cases and the components and hours related thereto to ensure they have been entered into the data system correctly. The meetings will take place quarterly, within five days after the participation hours entry deadlines, and will be documented accordingly.
SPECIAL TESTS AND PROVISIONS – INCOME ELIGIBILITY AND VERIFICATION SYSTEM Department of Health & Human Resources (DHHR) Assistance Listing Number 93.558, COVID-19 93.558 The Division of Family Support within the West Virginia Department of Health and Human Resources, Bureau for Family Assistance ...
SPECIAL TESTS AND PROVISIONS – INCOME ELIGIBILITY AND VERIFICATION SYSTEM Department of Health & Human Resources (DHHR) Assistance Listing Number 93.558, COVID-19 93.558 The Division of Family Support within the West Virginia Department of Health and Human Resources, Bureau for Family Assistance (BFA), will send the current desk guides to all WV WORKS (TANF) staff, which includes the Data Exchange desk guide and the Viewing Data Exchanges by Exchange Type desk guide. The BFA Division of Family Support will also work with the BFA Division of Professional Development to create a blackboard course for supervisors and community service managers [who supervise WV WORKS (TANF) staff] to assist the supervisors and management in identifying deficiencies regarding the IEVS system.
SPECIAL TESTS AND PROVISIONS – PENALTY FOR REFUSAL TO WORK Department of Health and Human Resources (DHHR) Assistance Listing Number 93.558, COVID-19 93.558 The TANF policy staff within the West Virginia Department of Health and Human Resources, Bureau for Family Assistance, will work with Optum...
SPECIAL TESTS AND PROVISIONS – PENALTY FOR REFUSAL TO WORK Department of Health and Human Resources (DHHR) Assistance Listing Number 93.558, COVID-19 93.558 The TANF policy staff within the West Virginia Department of Health and Human Resources, Bureau for Family Assistance, will work with Optum, the State’s eligibility system vendor, and the Recipient Automated Payment and Information Data System (RAPIDS) team to ensure that the criteria for the population for penalty for refusal to work are interpreted and applied correctly. Policy staff will also conduct monthly reviews of a random sample of cases to which the penalty for refusal to work is applicable in order to ensure that it is being applied appropriately.
INTERNAL CONTROLS OVER SPECIAL TESTS AND PROVISIONS – CHILD SUPPORT NON-COOPERATION, PENALTY FOR REFUSAL TO WORK, AND ADULT CUSTODIAL PARENT OF CHILD UNDER SIX WHEN CHILD CARE NOT AVAILABLE Department of Health & Human Resources (DHHR) Assistance Listing Number 93.558, COVID-19 93.558 In August ...
INTERNAL CONTROLS OVER SPECIAL TESTS AND PROVISIONS – CHILD SUPPORT NON-COOPERATION, PENALTY FOR REFUSAL TO WORK, AND ADULT CUSTODIAL PARENT OF CHILD UNDER SIX WHEN CHILD CARE NOT AVAILABLE Department of Health & Human Resources (DHHR) Assistance Listing Number 93.558, COVID-19 93.558 In August of 2023, the West Virginia Department of Health and Human Resources, Bureau for Family Assistance (BFA), Division of Professional Development, released a mandatory Blackboard course on Sanctions (Course ID: BFA-ITT-WV-400-2023). All staff completed the training by September 21, 2023. The BFA will repeat this mandatory training on an annual basis for all staff that have the capability to impose, approve, or remove a sanction. Reminders and desk guides will also continue to be distributed to field staff. The BFA Policy Unit will also continue its monthly reviews of RAPIDS Management reports regarding 3rd level sanctions that are being sent to the unit for review and approval.
EQUIPMENT AND REAL PROPERTY MANAGEMENT Department of Health and Human Resources (DHHR) Assistance Listing Number 93.323, COVID-19 93.323 Due to the number of administrative and programmatic offices within the DHHR and the fact that those offices are located throughout the State, the DHHR does not ...
EQUIPMENT AND REAL PROPERTY MANAGEMENT Department of Health and Human Resources (DHHR) Assistance Listing Number 93.323, COVID-19 93.323 Due to the number of administrative and programmatic offices within the DHHR and the fact that those offices are located throughout the State, the DHHR does not conduct a mass physical inventory whereby one office or person at the central level views all of the reportable assets under the DHHR’s jurisdiction. Instead, the DHHR Office of Operational Administration compiles inventory reports for each office using the fixed asset module within wvOASIS, which is the statewide accounting system. The inventory reports indicate all tagged and entered assets under each office’s location code within the DHHR. Once the reports are compiled, the Office of Operational Administration sends a report to each applicable office within the DHHR and asks the offices to locate and verify the assets in the report. The lack of documentation indicated by the auditors is due to the fact that some DHHR offices throughout the state do not return the verification to the Office of Operational Management. For the next physical inventory of fixed assets within the DHHR, which will be for the year ended June 30, 2024, the Office of Operational Administration will monitor and regulate each office more stringently and will increase its efforts to ensure that each office completes the verification and returns it to the Office of Operational Administration in a timely manner. For offices that do not respond within a timeframe deemed reasonable by the Office of Operational Administration, they will inform and request assistance from a higher level of authority within the DHHR, such as the Executive Director of Operations.
MAINTENANCE OF EFFORT Department of Education (DOE) Assistance Listing Number 84.425, COVID-19 84.425 The Maintenance of Effort (MOE) calculation is in process. A waiver was requested and approved for the FY 2023 MOE data. The MOE will be completed by March 15, 2024.
MAINTENANCE OF EFFORT Department of Education (DOE) Assistance Listing Number 84.425, COVID-19 84.425 The Maintenance of Effort (MOE) calculation is in process. A waiver was requested and approved for the FY 2023 MOE data. The MOE will be completed by March 15, 2024.
REPORTING Department of Education (DOE) Assistance Listing Number COVID-19 84.425D, 84.425R 84.425U, 84.425V Effective February 2024, the DOE plans to continue to enforce the existing policies and procedures in place along with ensuring all required documentation is retained for review. The DOE ...
REPORTING Department of Education (DOE) Assistance Listing Number COVID-19 84.425D, 84.425R 84.425U, 84.425V Effective February 2024, the DOE plans to continue to enforce the existing policies and procedures in place along with ensuring all required documentation is retained for review. The DOE plans to review the ESSER Reporting Workbook by testing several indicator values i.e. expenditure amounts, demographic data, etc. There will be an approval process put in place once the Local Education Agency (LEA) submits the reports to the state. This approval process will include reviewing the edit checks with the LEA prior to final certification of data. Certification data will include an email from the LEA approving the final copy of the ESSER Reporting Workbook.
SPECIAL TESTS AND PROVISIONS – USING A SERVICER TO DELIVER TITLE IV CREDIT BALANCES TO A CARD OR OTHER ACCESS DEVICE Bluefield State University, Blueridge Community & Technical College, Concord University, Mountwest Community and Technical College, Shepherd University, West Virginia Northern Commun...
SPECIAL TESTS AND PROVISIONS – USING A SERVICER TO DELIVER TITLE IV CREDIT BALANCES TO A CARD OR OTHER ACCESS DEVICE Bluefield State University, Blueridge Community & Technical College, Concord University, Mountwest Community and Technical College, Shepherd University, West Virginia Northern Community College, and West Virginia University at Parkersburg Assistance Listing Number 84.007, 84.033, 84.038, 84.063, 84.268, 84.379, 93.264, 93.342, 93.364 Bluefield State University (BSU) response BSU will submit the URL of their contract with their third-party servicer and cost information to the U.S. Department of Education for their publication in the Cash Management Contracts Database by Friday, February 23, 2024. BSU will also implement a detailed due diligence review over the fees assessed by the third-party servicer of Title IV credit balances. Blueridge Community & Technical College (BRCTC) response We acknowledge that BRCTC did not have internal controls in place to review the contract with our third-party servicer of Title IV credit balances or obtain and review the third-party servicer’s Title IV compliance audit to ensure compliance with federal regulations. By February 2024, documents will be requested and an annual due diligence review will be performed and documented of the third-party servicer contract and compliance audit as well as review of fees assessed by the third-party servicer. Concord University (CU) response CU agrees with this finding and due to changes in personnel, this regulation was not followed. CU will review and document the review of the Cash Management Database annually to ensure the link is posted. CU will review and document the review of other financial institutions charges compared against BankMobile’s fees annually. CU will annually review the servicer’s SOC report. CU will review BankMobile’s report, specifically looking for instances of noncompliance and internal control breaches. This will be documented annually. Mountwest Community and Technical College (MCTC) response Effective February 2024, MCTC will implement a review process to be conducted on an annual or monthly basis, as applicable, of all accounts opened with the Servicer during the specified timeframe. The "Activation & Preferences Report" available to management through the Servicers Administrator portal will be used to provide the data for review by management. The review process will consist of the following: • A request made of the servicer to provide a report of accounts opened with date/time stamp of consent to opening. Frequency: Monthly • Review of "Activation & Preferences Report" validated against Servicer "Accounts Opened" report. Frequency: Monthly • Generate a follow-up email to applicable students confirming the opening of the Servicer Account which will include an attachment of the Servicer "Terms and Conditions" and "Fee Schedules". Frequency: Monthly • Review the Servicers' Client Contract and Profile site for accuracy and completeness of information. Frequency: Annually • Review the Servicers' System and Organization Controls (SOC) and Compliance audits. Frequency: Annually • Management will incorporate as part of its "Due Diligence and Attestation" copies of comparable banking institution fee schedules that are date/time stamped to serve as evidence of review. Shepherd University (SU) response By April 2024, SU will develop and maintain a checklist that will be periodically reviewed and signed off related to this finding, specifically: Annually, SU will be submitting the URL to the Department of Education related to the contracts between SU and BankMobile, reviewing compliance audits and SOC reports for BankMobile, recording areas of risk, and noting ways to mitigate the potential risk moving forward. West Virginia Northern Community College (WVNCC) response Beginning June 2024, during the annual review meeting between WVNCC and BankMobile (the servicer that delivers Title IV credit balances to students), WVNCC will obtain a copy of the BankMobile compliance audit. This will be kept on file within the Business Office for reference if needed. In addition, the budget committee will review annual the fees charged by BankMobile and attempt to compare them to other providers of similar services. West Virginia University at Parkersburg (WVU-P) response WVU-P has submitted a URL to the US Department of Education of our contract and cost information with our third-party servicer. This submission should correct this portion of the finding although it was done after the end of the fiscal year under audit but serves to correct the finding in subsequent periods. WVU-P will ensure compliance with the remaining items noted by creating a written internal control policy requiring the following: • Verification of the required submission of the third-party contract with the Department of Education. • Documentation of a due diligence review of the fees assessed by the third-party servicer. • Obtain a copy of the annual compliance examination of the Title IV Programs. The 2022 report dated June 29, 2023, was received and reviewed by us for compliance with eligibility, systems, and internal controls, disbursements, Return of Title IV funds, and administrative requirements. • Obtain a list of students whose refunds were disbursed by the third-party vendor and cross-reference it with a list of the students processed and sent to the third-party vendor by WVU-P. For those students who elected to open a checking account, WVU-P will review supporting documentation to indicate that the student gave proper consent. These policies and procedures will be effective February 2024.
BANNER INFORMATION TECHNOLOGY GENERAL CONTROLS Blue Ridge Community and Technical College, Bluefield State University, Concord University, Fairmont State University, Mountwest Community and Technical College, New River Community and Technical College, Pierpont Community and Technical College, Sheph...
BANNER INFORMATION TECHNOLOGY GENERAL CONTROLS Blue Ridge Community and Technical College, Bluefield State University, Concord University, Fairmont State University, Mountwest Community and Technical College, New River Community and Technical College, Pierpont Community and Technical College, Shepherd University, West Liberty University, West Virginia Northern Community College, West Virginia State University, and West Virginia University at Parkersburg Assistance Listing Number 84.007, 84.033, 84.038, 84.063, 84.268, 84.379, 93.264, 93.342, 93.364 Effective February 2024, all West Virginia Higher Education institutions will ensure any new, modified or terminated access is defined and maintained to document the requestor, access rights modifications requested and approvals. Segregation of duties will be incorporated for the approval of any request. Processes for communication of terminated employees will be documented to ensure timely removal for any Banner user. Periodically, a review of user access will be performed to ensure access rights are consistent with current employees and job responsibilities. Documentation will be maintained for evidence of this review process. All Banner password settings will be configured to enhance overall security and privileged access will be granted to administrators by a unique identifier to ensure there will be no sharing of default accounts. Also, a formal documented change management process will be implemented to show authorization, testing and production approvals for any patches and releases of Banner application and supporting infrastructure to ensure the changes were properly authorized.
SPECIAL TESTS AND PROVISIONS – VERIFICATION Fairmont State University (FSU) Assistance Listing Number 84.007, 84.033, 84.038, 84.063, 84.268, 84.379, 93.264, 93.342, 93.364 Effective February 2024, controls were put into place to address the additional review of the verification compliance requir...
SPECIAL TESTS AND PROVISIONS – VERIFICATION Fairmont State University (FSU) Assistance Listing Number 84.007, 84.033, 84.038, 84.063, 84.268, 84.379, 93.264, 93.342, 93.364 Effective February 2024, controls were put into place to address the additional review of the verification compliance requirement process once the initial review was completed. A weekly review with a comprehensive monthly review will be implemented to ensure no students are missed through the review process.
SPECIAL TESTS AND PROVISIONS – NOTIFICATION OF CHANGES TO KEY PERSONNEL Division of Highways (the Division) Assistance Listing Number 20.933 Due to staff turnover, WVDOT recipient contact/key personnel had changed for some of the BUILD Transportation Discretionary Federal Grants. The USDOT repr...
SPECIAL TESTS AND PROVISIONS – NOTIFICATION OF CHANGES TO KEY PERSONNEL Division of Highways (the Division) Assistance Listing Number 20.933 Due to staff turnover, WVDOT recipient contact/key personnel had changed for some of the BUILD Transportation Discretionary Federal Grants. The USDOT representatives noted in the federal grants were not notified of these changes. The USDOT will be notified of all recent recipient contact/key personnel changes. Effective February 2024, when there are recipient changes, the USDOT will be notified within 30 days of the occurrence.
REPORTING Division of Highways (the Division) Assistance Listing Number 20.933 Effective January 2024, procedures have been put in place where pre-project performance management and quarterly progress reports on federal award projects will be compiled by WVDOT recipient/key personnel indicated ...
REPORTING Division of Highways (the Division) Assistance Listing Number 20.933 Effective January 2024, procedures have been put in place where pre-project performance management and quarterly progress reports on federal award projects will be compiled by WVDOT recipient/key personnel indicated in the BUILD Transportation Discretionary Federal Grants and submitted to USDOT by the 20th day after each calendar year quarter has closed as required by the grants. Prior reports that were not submitted to the USDOT as identified by the fiscal year 2023 audit will be sent.
REPORTING Workforce West Virginia (WWV) Assistance Listing Number 17.225 WWV updated reporting procedures in April 2023 and provided training to appropriate staff regarding the ETA 9050, 9052, and 9055 reports that did not have proper reviews documented prior to submission. That training is refl...
REPORTING Workforce West Virginia (WWV) Assistance Listing Number 17.225 WWV updated reporting procedures in April 2023 and provided training to appropriate staff regarding the ETA 9050, 9052, and 9055 reports that did not have proper reviews documented prior to submission. That training is reflected in the reports selected after May 2023 that show proper documented reviews prior to submission.
INTERNAL CONTROLS OVER INFORMATION TECHNOLOGY Workforce West Virginia (WWV) Assistance Listing Number 17.225 WWV will create policies and procedures to be effective March 2024 which documents the process for periodic review of administrative access and user access for the ABPS and UI Tax systems...
INTERNAL CONTROLS OVER INFORMATION TECHNOLOGY Workforce West Virginia (WWV) Assistance Listing Number 17.225 WWV will create policies and procedures to be effective March 2024 which documents the process for periodic review of administrative access and user access for the ABPS and UI Tax systems. Appropriate staff will be trained once the policies and procedures are implemented. The wvOASIS SOC audit report for 2023 was completed in September 2023 and WVV is in the process of reviewing the report at this time. Disaster Recovery testing was conducted with WV Office of Technology and the mainframe vendor Ensono October 16-19, 2023.
TRANSPARENCY ACT REPORTING West Virginia Community Development Block Grant Program (CDBG) Assistance Listing Number 14.228 The CDBG program has experienced turnover in staff during the last year. While CDBG knows the FFATA report was submitted, a physical copy of this report could not be provided...
TRANSPARENCY ACT REPORTING West Virginia Community Development Block Grant Program (CDBG) Assistance Listing Number 14.228 The CDBG program has experienced turnover in staff during the last year. While CDBG knows the FFATA report was submitted, a physical copy of this report could not be provided, and it cannot be verified if it was submitted on time. In the FSRS system, only the person who creates the original report can view, edit, and pull the actual report, and since the employee who was responsible for submitting this report is no longer with the agency, it cannot be determined when it was originally submitted. CAD staff have since recreated the report in the FSRS system so there is a copy of the report. To ensure this doesn't happen in the future, CAD staff has completed FFATA training for the personnel involved in the reporting process. CAD staff is creating a calendar with due dates for the programs reporting requirements to ensure the dates are not missed. Once the report is submitted in the FSRS system, staff is required to save a copy of the report in shared files. CAD is also looking to implement a system where a centralized person is responsible for submitting the FSRS reports to ensure all processes are completed and documents saved correctly.
SPECIAL TESTS AND PROVISIONS – ADP SYSTEM FOR SNAP Department of Health and Human Resources (DHHR) Assistance Listing Number 10.551, 10.561, COVID-19 10.561 Management within the DHHR, Bureau for Family Assistance (BFA), appreciates and shares the auditors’ concern with SNAP program integrity as...
SPECIAL TESTS AND PROVISIONS – ADP SYSTEM FOR SNAP Department of Health and Human Resources (DHHR) Assistance Listing Number 10.551, 10.561, COVID-19 10.561 Management within the DHHR, Bureau for Family Assistance (BFA), appreciates and shares the auditors’ concern with SNAP program integrity as it relates to the Recipient Automated Payment and Information Data System (RAPIDS) ADP system. The BFA notes that 7 CFR § 272.10 begins with, “(1) Purpose. All state agencies are required to sufficiently automate their SNAP operations and computerize their systems for obtaining, maintaining, utilizing, and transmitting information concerning SNAP. Sufficient automation levels are those which result in effective programs or in cost effective reductions in errors and improvements in management efficiency, such as decreases in program administrative costs...” Within the RAPIDS ecosystem for SNAP administration, this automation includes data matching measures undertaken, in compliance with related federal rules as specified in 7 CFR § 272.8, 7 CFR § 272.16, etc., to automate the validation of client-provided, worker-input information while mitigating the additional administrative burden of secondary review for all worker interactions with a client’s case. Policy regarding state and federal data matching is laid out in Chapter 6 of the State’s Income Maintenance Manual (IMM) at https://dhhr.wv.gov/bfa/policyplans/Documents/ Binder4.pdf. The primary data exchange system detailed in IMM Chapter 6 that is applicable to SNAP is the Income and Eligibility Verification System (IEVS) required by 7 CFR § 272.8. Systems mandated federally for inclusion in the IEVS include those operated by WorkForce WV, the Internal Revenue Service (IRS), and the U.S. Social Security Administration (SSA). A variety of other sources may also be queried for the purpose of validating client-provided information entered into RAPIDS by a worker, including Veterans Affairs (VA), Beneficiary and Earnings Data Exchange (BENDEX), Beneficiary Earnings and Exchange Record System (BEERS), National Directory of New Hires, and Prisoner Matching with the Department of Corrections as well as the Federal Data Services Hub (FDSH). IMM Chapter 6, page 2 describes the purpose of data matching through the IEVS thusly: Information obtained through IEVS is used for the following purposes: • To verify the eligibility of the assistance group (AG). • To verify the proper amount of benefits. • To determine if the AG received benefits to which it was not entitled. • To obtain information for use in criminal or civil prosecution based on receipt of benefits to which the AG was not entitled. IMM Chapter 6, pages 2-3 further detail the points at which a match with the IEVS must take place: A data exchange in the eligibility system occurs: • When a new case is created; • When a new person is added to a benefit; • When a person’s demographic information is changed; and, • On a periodic basis for all individuals in the eligibility system, depending on the type of benefit being received. Requirements for independent verification of information when automated data matches fail or report a discrepancy with client-provided, worker-input information are spelled out in IMM 6.4.4. The BFA believes that these automations, while perhaps not foolproof, are in keeping with both the word and intent of 7 CFR § 272.10, 7 CFR § 272.8, 7 CFR § 272.16, etc., which aim to automate processes in order to reduce administrative burden and associated costs, such as those that would be associated with a secondary review of all worker interactions with a client’s case. Furthermore, page 4-10.551-9 of the Compliance Supplement 2023, which lays out the suggested audit procedures for this topic, recommends the use of the USDA-FNS SNAP System Integrity Review Tool (SIRT) to ensure that the State’s ADP system is in alignment with USDA-FNS requirements and ensure that automated processes within RAPIDS continue to comport with federal requirements for ADP systems. To our knowledge, the auditors neither utilized that tool to guide their work nor requested verification from the State that the SIRT had been completed and previously employed. To support this response, management advocates a review of the SIRT submitted to FNS on October 26, 2023 in preparation for the go-live stage of the West Virginia People’s Access to Help (WV PATH) Family Assistance pilot program; as there is no significant difference in system functionality between the Family Assistance module of WV PATH and the existing eRAPIDS system, the responses/comments/replies from both FNS and the State that are included in this version of the SIRT generally apply both to eRAPIDS and to PATH. Throughout 2023, the BFA Division of Performance and Quality Improvement continued its ongoing SNAP case reviews, as well as its efforts to report compliance with monthly requirements for expanded supervisor case reviews conducted and tracked through the Rushmore case review system, as mandated in a December 7, 2022 memorandum to supervisors and made available to the auditors last year. Furthermore, the BFA developed additional worker training, including the reinstatement of face-to-face Statewide Payment Accuracy Conferences (held throughout the summer of 2023), with the aim to ensure that client information is accurately captured in RAPIDS so the APD can perform its automated functions with integrity.
« 1 414 415 417 418 698 »