Corrective Action Plans

Browse how organizations respond to audit findings

Total CAPs
64,113
In database
Filtered Results
14,150
Matching current filters
Showing Page
32 of 566
25 per page

Filters

Clear
Action Taken/Planned: Management acknowledges the deficiencies identified in subrecipient monitoring controls during FY25. These deficiencies occurred during a period of substantial growth in the College's sponsored programs portfolio, organizational restructuring, staffing constraints, and continue...
Action Taken/Planned: Management acknowledges the deficiencies identified in subrecipient monitoring controls during FY25. These deficiencies occurred during a period of substantial growth in the College's sponsored programs portfolio, organizational restructuring, staffing constraints, and continued refinement of grants administration processes. In response, the College implemented a comprehensive transformation of its grants management framework during FY26. Corrective actions include establishment of the Unified Grants Hub, creation of a dedicated Subaward Manager position, addition of specialized post-award personnel, establishment of a Grants Management Task Force, implementation of formalized subrecipient monitoring procedures and documentation requirements, expansion of grants management training, enhanced coordination among Finance, Research Administration, Compliance, Budget, and Treasury functions, and deployment of Power BI reporting tools to strengthen oversight and compliance monitoring. Anticipated Completion Date/Date Completed: The majority of corrective actions were implemented during FY2026. The Unified Grants Hub, staffing enhancements, Grants Management Task Force, and enhanced monitoring procedures were operational as of June 30, 2026. Ongoing monitoring and compliance reviews will continue thereafter.
Finding: 2025-003 Condition Found: During testing of a statistically valid sample of 19 patient accounts that received sliding fee discounts, 2 patient files did not contain eligibility documentation to support that the patients qualified for the sliding fee discount at the time the discount was app...
Finding: 2025-003 Condition Found: During testing of a statistically valid sample of 19 patient accounts that received sliding fee discounts, 2 patient files did not contain eligibility documentation to support that the patients qualified for the sliding fee discount at the time the discount was applied Individual(s) Responsible for Corrective Action: Chief Executive Officer, Fractional CFO, Billing Team Planned Corrective Action: The Organization revised its sliding fee discount policies, implemented centralized documentation tracking, and enhanced staff training related to eligibility determination and documentation requirements. Monitoring procedures, including periodic supervisory review, were established to ensure compliance. Anticipated Completion Date: Implemented and in progress. Due to the timing of the prior year’s audit completion, the Organization did not have time to complete a full monitoring cycle prior to audit testing.
Finding: 2025-002 Condition Found: The FAC filing for the fiscal year ended March 31, 2025, was submitted late. Individual(s) Responsible for Corrective Action: Chief Executive Officer, Fractional CFO, Board of Directors Planned Corrective Action: Management agrees with the finding. Due to the timin...
Finding: 2025-002 Condition Found: The FAC filing for the fiscal year ended March 31, 2025, was submitted late. Individual(s) Responsible for Corrective Action: Chief Executive Officer, Fractional CFO, Board of Directors Planned Corrective Action: Management agrees with the finding. Due to the timing of prior year audit completion and associated late filing, the Organization did not have sufficient time within the current audit period to fully implement and demonstrate the effectiveness of corrective actions related to audit timeliness. As a result, this finding has reoccurred. The Organization has strengthened oversight by formalizing a compliance calendar, assigning clear ownership of Single Audit and Federal Audit Clearinghouse deadlines, and incorporating milestone tracking into finance operations and executive oversight processes. In addition, continued fractional CFO support provides enhanced accountability and monitoring of financial reporting timelines. These actions build upon prior year corrective efforts and are designed to ensure timely and compliant filings going forward. Anticipated Completion Date: FY2026 filing cycle.
DJFS will begin to use project numbers to allow for an additional check of all amounts reported. DJFS is also going to provide federal grant information to the Auditor’s office as soon as they complete their final report in order to give the Auditor’s office adequate time to review the information w...
DJFS will begin to use project numbers to allow for an additional check of all amounts reported. DJFS is also going to provide federal grant information to the Auditor’s office as soon as they complete their final report in order to give the Auditor’s office adequate time to review the information with MUNIS and will afford the Auditor’s office more time to compile the SEFA and have a secondary review to avoid any computational or clerical errors.
FS 2025-001 Internal Controls at the Central Office Internal Control Impact: Significant Deficiency Repeat of Prior Year Finding: FS 2024-001, FS 2023-001 Description: The School District's accounting procedures at the Central Office are not sufficient to ensure prevention or timely detection of err...
FS 2025-001 Internal Controls at the Central Office Internal Control Impact: Significant Deficiency Repeat of Prior Year Finding: FS 2024-001, FS 2023-001 Description: The School District's accounting procedures at the Central Office are not sufficient to ensure prevention or timely detection of errors in key financial processes, specifically those related to journal entries, cash management, capital asset tracking, and payroll processing. Corrective Action Plans: Journal Entries - All journal entries will be printed out, which show the preparer, reviewer and filed in numerical order beginning with FY26. Cash and Cash Equivalents - All bank balances are reconciled to the financial statements and are signed and dated by both preparer and reviewer. Monthly School Bookkeeper meetings are being held to ensure that all school level accounts are reconciled as well. Capital Assets - A complete physical inventory including bus titles will be completed in August of 2026. Employee Compensation - SHBP invoices starting with January 2026 have been reconciled to payroll and benefit records prior to payment and any corrections needed have been submitted to SHBP. Estimated Completion Date: January 1, 2026 Contact Person: Chris Johnson, Director of Financial Services Telephone: 478-994-2031 Email: chrisJohnson@mcschools.org
NONCOMPLIANCE WITH GRANT TERMS AND CONDITIONS, COMMUNITY DEVELOPMENT BLOCK GRANTS/STATES PROGRAM AND NON-ENTITLEMENT GRANTS IN HAWAII, AL No. 14.228, GRANT No. MT-CDBG-CV-22-05, YEAR ENDED JUNE 30, 2025 Name of contact person: County Commissioners Corrective Action: The county will work with all fut...
NONCOMPLIANCE WITH GRANT TERMS AND CONDITIONS, COMMUNITY DEVELOPMENT BLOCK GRANTS/STATES PROGRAM AND NON-ENTITLEMENT GRANTS IN HAWAII, AL No. 14.228, GRANT No. MT-CDBG-CV-22-05, YEAR ENDED JUNE 30, 2025 Name of contact person: County Commissioners Corrective Action: The county will work with all future entities on grants by ensuring every entity is not debarred, suspended, proposed for debarment, declared ineligible, or voluntarily excluded from participation in the contract by any government or agency or otherwise ineligible for participation in Federal assistance programs. The county will request written verification that any entity is eligible to participate and receive grant funding. The county will also use state and federal resources to ensure each entity can participate. Proposed Completion Date: Immediately
1. Employee overseeing the deposits and disbursements has been removed from the position. 2. Write a cash management policy and procedures for receipt and disbursement of funds as well as a monitoring process for receipts (federal funds, grants) that need to be disbursed in a timely manner for Board...
1. Employee overseeing the deposits and disbursements has been removed from the position. 2. Write a cash management policy and procedures for receipt and disbursement of funds as well as a monitoring process for receipts (federal funds, grants) that need to be disbursed in a timely manner for Board approval.
Federal Award Finding 2025-003 - Material Weakness, Material Noncompliance - Special Tests and Provisions, Mortgage Reserve Fund, Equipment Replacement Reserve Fund, and Special Escrows Finding: During the audit period, Henry C. Nevins Home, Inc. did not make all required deposits into the reserve f...
Federal Award Finding 2025-003 - Material Weakness, Material Noncompliance - Special Tests and Provisions, Mortgage Reserve Fund, Equipment Replacement Reserve Fund, and Special Escrows Finding: During the audit period, Henry C. Nevins Home, Inc. did not make all required deposits into the reserve for replacement fund in accordance with the terms of the applicable HUD Regulatory Agreement. The required monthly reserve deposits were either not made or were made in amounts less than those required. Recommendation: We recommend that Henry C. Nevins Home, Inc., in coordination with the court-appointed receiver and HUD, establish procedures to ensure that reserve for replacement deposits are made timely and in accordance with the HUD Regulatory Agreement, or that appropriate waivers or modifications are obtained from HUD where compliance is not currently feasible. Action Taken: Management acknowledges the audit finding related to the failure to make required deposits into the reserve for replacement fund in accordance with the HUD Regulatory Agreement. As disclosed in the notes to the financial statements, during the audit period the Organization was subject to a court-appointed receivership effective September 12, 2025 and is in default under its HUD-insured mortgages. As part of the receivership, control over substantially all cash management and financial decision-making activities was assumed by the court-appointed receiver. Management believes that the conditions giving rise to this finding are directly related to liquidity constraints. Given the complexities of the receivership and regulatory environment, a specific timeline for remediation is not able to be determined. As a result of the loan default, the mortgage was assigned to the U.S. Department of Housing and Urban Development. Since the appointment of the Receiver, responsibility for cash management, financial oversight, and debt service planning has transitioned to the Receiver. The Receiver and the Organization are actively evaluating available options to address the loan default which includes marketing the Organization for a sale. Interim corrective actions include enhanced cashflow monitoring, prioritization of expenses required to continue operations, and ongoing communication with HUD regarding the sale process. Management believes that these actions will address the conditions identified and result in the satisfaction of the HUD loan. Responsible Person: Paul Valentine, Receiver Target Completion Date: September 30, 2026 Status: In process
Federal Award Finding 2025-002 - Material Weakness, Material Noncompliance - Special Tests and Provisions, Mortgage Status and Reserve for Replacements Finding: During the fiscal year, the Organization experienced ongoing financial distress and declining liquidity, which adversely affected its abili...
Federal Award Finding 2025-002 - Material Weakness, Material Noncompliance - Special Tests and Provisions, Mortgage Status and Reserve for Replacements Finding: During the fiscal year, the Organization experienced ongoing financial distress and declining liquidity, which adversely affected its ability to meet financial obligations as they became due. As a result, mortgage payments, including required principal, interest, mortgage insurance premiums, and escrow deposits, were not made in accordance with the loan and regulatory agreements. As of December 31, 2025, delinquent amounts totaled approximately $978 thousand. Recommendation: The Receiver and the Organization should work with HUD to develop and implement a formal workout or resolution plan, including enhanced cash-flow monitoring and debt service planning, to address the loan default and restore compliance with HUD debt service requirements. Action Taken: Management acknowledges the finding related to the failure to make required debt service payments under the HUD Section 232 and Section 241(a) insured mortgage loan agreements. The Organization experienced significant financial distress and constrained liquidity during the fiscal year, which limited its ability to remit required principal, interest, mortgage insurance premium, and escrow payments as they became due. As a result of the loan default, the mortgage was assigned to the U.S. Department of Housing and Urban Development. With the appointment of a Receiver over the Organization, responsibility for cash management, financial oversight, and debt service planning has transitioned to the Receiver. The Receiver is marketing the facility towards a sale in order to satisfy the outstanding loan balance with HUD. Interim corrective actions include enhanced cash-flow monitoring, prioritization of operational suppliers, and ongoing communication with HUD regarding the project's financial condition and sale status. Management believes that these actions will support progress towards stabilization and marketability of the Organization. Responsible Person: Paul Valentine, Receiver Target Completion Date: September 30, 2026 Status: In process
Finding (2025-001): TransCen did not consistently ensure that FFATA reporting requirements for applicable federal subawards were completed accurately and/or within required timeframes. Corrective Action: TransCen has established procedures to support FFATA compliance. Corrective actions focus on rei...
Finding (2025-001): TransCen did not consistently ensure that FFATA reporting requirements for applicable federal subawards were completed accurately and/or within required timeframes. Corrective Action: TransCen has established procedures to support FFATA compliance. Corrective actions focus on reinforcing consistent application of these procedures and strengthening oversight. • Responsibility & Oversight: Grants and Contracts Manager will serve as FFATA Compliance Coordinator. Accounting will perform a secondary review to confirm timely and accurate reporting. • Standardized Procedures: Existing procedures will be formalized to include identification of reportable subawards, required data elements, and reporting deadlines. • Checklist & Tracking: A FFATA checklist will be used during subaward issuance, and a centralized tracking log will monitor reporting status, due dates, and completion. • Training: Staff involved in grants administration will receive targeted FFATA training and periodic refreshers. • Ongoing Monitoring: Management will perform quarterly reviews of subawards to ensure compliance and address any exceptions in a timely manner. Implementation Timeline: Effective immediately, fully implemented by August 1, 2026 Responsible Official: Ann Deschamps, Mid Atlantic ADA Director Management Oversight: Laura Owens, President
Finding 2025-001 Corrective Action Plan: Management acknowledges the reporting lapse identified and notes that all required semi-annual reports have since been submitted as of the report date. The delay appears to have been an isolated oversight rather than a systemic breakdown in compliance. To enh...
Finding 2025-001 Corrective Action Plan: Management acknowledges the reporting lapse identified and notes that all required semi-annual reports have since been submitted as of the report date. The delay appears to have been an isolated oversight rather than a systemic breakdown in compliance. To enhance controls over grant reporting and prevent recurrence, the Organization has implemented the following corrective actions: Established a formal grant reporting calendar that includes all required reporting deadlines for each federal award. Assigned clear responsibility for report preparation and submission to specific personnel within the finance function. Implemented a secondary review process whereby management monitors upcoming deadlines and confirms timely submission of reports. Incorporated periodic compliance check-ins to ensure adherence to grant reporting requirements throughout the year. Management believes these measures strengthen oversight and will ensure timely preparation and submission of all required reports going forward. Anticipated Completion Date: December 31, 2026
Finding 1225238 (2025-001)
Material Weakness 2025
2025-001 – FosterHub did not have a process to determine if vendors were suspended or debarred from receiving federal funds Auditor’s Recommendation: It is recommended that FosterHub develop and implement a suspension and debarment procedure to review the eligibility of vendors before entering into ...
2025-001 – FosterHub did not have a process to determine if vendors were suspended or debarred from receiving federal funds Auditor’s Recommendation: It is recommended that FosterHub develop and implement a suspension and debarment procedure to review the eligibility of vendors before entering into contracts. Training should be provided to all relevant staff to ensure awareness and compliance with federal requirements. Additionally, periodic monitoring and internal audits should be conducted to ensure adherence to the established procedures. Views of Responsible Officials and Planned Corrective Actions:Management acknowledges the finding and agrees with the recommendation. FosterHub has already developed and implemented a formal suspension and debarment procedure in early 2026. Training sessions have been conducted for all procurement staff to ensure understanding and compliance with the new procedure. Furthermore, periodic reviews will be instituted to monitor adherence to these requirements and to prevent the recurrence of this issue.
Management has strengthened internal controls over payroll processing and timecard approvals. Effective January 1, 2026, prior to processing each payroll, the Organization downloads a complete file of timesheet hours by employee, hour type, and cost center and compares the data against the contractu...
Management has strengthened internal controls over payroll processing and timecard approvals. Effective January 1, 2026, prior to processing each payroll, the Organization downloads a complete file of timesheet hours by employee, hour type, and cost center and compares the data against the contractual allocation plan. Any exception or deviation identified through this review is routed to the responsible supervisor for resolution before payroll is processed. Supervisors are responsible for correcting and approving timecard errors or documenting confirmation that the timesheet accurately reflects the work performed. This process is designed to ensure that timecards are reviewed, approved, and retained in support of payroll costs charged to federal awards. Management will continue to evaluate this control and implement enhancements as needed as part of its ongoing commitment to continuous quality improvement.
Finding 2025-003 a. Name of Contact Person Responsible for Corrective Action: Jeff Jones, Business Manager b. Corrective Action Planned: Additional Training has been provided during professional development sessions to keep in the forefront the importance of preventing conflicts of interest as well ...
Finding 2025-003 a. Name of Contact Person Responsible for Corrective Action: Jeff Jones, Business Manager b. Corrective Action Planned: Additional Training has been provided during professional development sessions to keep in the forefront the importance of preventing conflicts of interest as well as possible nepotism as defined by Miss. Code Ann. § 25-1-53 and Miss. Code Ann. § 25-4-105(1). New hires are required to disclose possible conflicts of interest during the application process. Department heads making recommendations for hire are required to disclose if they are related to the person they are recommending for hire. c. Anticipated Completion Date: Training was provided in February, 2026, after disclosures were added to the employment applications in the human resource software asking the applicant to disclose if they are aware if they are related to anyone currently working in the district. As soon as the violation was identified, the Office of Child Nutrition at the Mississippi Department of Education was notified
Views of Responsible Officials: ACYPL concurs with the finding and is in the process of updating its Procurement Policy to reflect the current guidelines. The Procurement Policy will be reviewed and approved by the Board of Trustees at their July 27, 2026 meeting and implemented immediately.
Views of Responsible Officials: ACYPL concurs with the finding and is in the process of updating its Procurement Policy to reflect the current guidelines. The Procurement Policy will be reviewed and approved by the Board of Trustees at their July 27, 2026 meeting and implemented immediately.
EOHHS will establish an audit cycle to this service that will ensure the billing requirements for all bundled services are clear and that it is also clear that the unbundling of the rates is not allowed and may cause recoups for the services billed. Based on the results of the audit, systemic billin...
EOHHS will establish an audit cycle to this service that will ensure the billing requirements for all bundled services are clear and that it is also clear that the unbundling of the rates is not allowed and may cause recoups for the services billed. Based on the results of the audit, systemic billing error issues will be reviewed with Gainwell and evaluated for edits to correct the issues. EOHHS will also engage with Gainwell and BHDDH to implement enhanced technical assistance to ensure compliance. Anticipated Completion Date: December 31, 2026 Contact Persons: David McMahon, Assistant Director of Financial Contracts, Executive Office of Health and Human Services david.g.mcmahon@ohhs.ri.gov Hector Rivera, Interdepartmental Project Manager, Executive Office of Health and Human Services hector.l.rivera@ohhs.ri.gov
2025-068a: EOHHS will establish a systemwide audit cycle of this service to ensure the providers are appropriately billing. 2025-068b: EOHHS is actively reassessing the current MMIS system configuration and operational processes. In collaboration with Gainwell Technologies, a dedicated project is un...
2025-068a: EOHHS will establish a systemwide audit cycle of this service to ensure the providers are appropriately billing. 2025-068b: EOHHS is actively reassessing the current MMIS system configuration and operational processes. In collaboration with Gainwell Technologies, a dedicated project is underway to strengthen controls and implement guardrails designed to prevent this from occurring in the future. Several potential solutions are currently being evaluated and developed, with the goal of enhancing the system, oversight, and compliance. 2025-068c: EOHHS is actively reassessing the current provider Billing Manual to ensure the billing requirements for all bundled services is clear and that it is also clear that the unbundling of the rates is not allowed and may cause recoups for the services billed. 2025-068d: EOHHS will establish a systemwide audit cycle of this service to ensure the providers are appropriately billing. Anticipated Completion Date: November 30, 2026 Contact Persons: David McMahon, Assistant Director of Financial Contracts, Executive Office of Health and Human Services david.g.mcmahon@ohhs.ri.gov Hector Rivera, Interdepartmental Project Manager, Executive Office of Health and Human Services hector.l.rivera@ohhs.ri.gov
A file exchange process has been implemented where Gainwell pulls a monthly TPL report for each MCO which is shared with EOHHS to share with the MCO’s. EOHHS is unable to force the MCO’s to use the shared TPL data, we can only suggest they use it. At this point in time, the accuracy of the State’s T...
A file exchange process has been implemented where Gainwell pulls a monthly TPL report for each MCO which is shared with EOHHS to share with the MCO’s. EOHHS is unable to force the MCO’s to use the shared TPL data, we can only suggest they use it. At this point in time, the accuracy of the State’s TPL data is not good enough to reject encounter claims from the MCO’s. EOHHS continues to work on improving the TPL process specifically cleaning up the TPL data in the MMIS and eligibility system today. Future system enhancements include a direct TPL vendor and new TPL module which should improve TPL accuracy. Anticipated Completion Date: July 31, 2028 Contact Person: Jeffrey Schmeltz, Chief, Family Health Systems, Executive Office of Health and Human Services jeffrey.schmeltz@ohhs.ri.gov
EOHHS is in agreement with these findings and is in the process of working with Gainwell and its managed care partners to address these discrepancies. The providers that were not properly subjected to EOHHS’s enrollment processes were out of network providers within one of the managed care plans’ na...
EOHHS is in agreement with these findings and is in the process of working with Gainwell and its managed care partners to address these discrepancies. The providers that were not properly subjected to EOHHS’s enrollment processes were out of network providers within one of the managed care plans’ national network provider management system. These providers have been incorrectly included in provider network data as this managed care plan is in the process of end-dating these providers, which will resolve this discrepancy. EOHHS has reorganized Provider Enrollment oversight functions under the Office of Program Integrity (OPI) in alignment with federal standards, and as such will continue to audit and monitor enrollment files to ensure compliance with state and federal requirements. OPI is formalizing a process to swiftly terminate providers who have lost their licensure, as well as randomly auditing enrollment files to ensure proper licensure. Additionally, EOHHS will begin collecting DCYF licensure data as required. Anticipated Completion Date: December 31, 2026 Contact Persons: Nicholas James, Implementation Director of Policy and Programs, Executive Office of Health and Human Services nicholas.james@ohhs.ri.gov Rob Tingle, Chief of Program Analytics, Executive Office of Health and Human Services robert.tingle@ohhs.ri.gov
EOHHS understands that the audit findings primarily resulted from three items: 1. Lack of management oversight of the AlloCAP system’s functionality and its effect on financial reporting. 2. The use of incorrect FMAPs on sister agencies’ quarterly administrative claiming reports submitted to Medicai...
EOHHS understands that the audit findings primarily resulted from three items: 1. Lack of management oversight of the AlloCAP system’s functionality and its effect on financial reporting. 2. The use of incorrect FMAPs on sister agencies’ quarterly administrative claiming reports submitted to Medicaid Finance, and Medicaid’s subsequent lack of review of these reports. 3. No segregation of duties in the Assistant Director Financial and Contract Management position within the EOHHS Central Management finance team. Several actions have been taken to enhance oversight of the AlloCAP system functionality and improve the overall cost allocation process, including hiring an Administrator, Financial Management position. This position has been cross trained and is completing the quarterly AlloCAP activities with review completed by the Assistant Director Financial and Contract Management position. Management’s additional correction action plans for each of these are below. 1. Finance will request a SOC I Type II report from its AlloCAP vendor. The report(s) will be shared with CFOs at all agencies using the AlloCAP system for Medicaid allocations for their review. 2. Finance has already implemented controls to rectify this finding. The items below were implemented during SFY 2026. a. Additional training for sister agencies on the administrative claiming reporting process. Trainings were held on February 4th and April 15th, 2026, and included the importance of the correct FMAP and a list of FMAPs by CMS-64 line item. b. Office hours with Medicaid administrative claiming agencies prior to the submission of quarterly expenditure reports. This allows agencies to ask questions and troubleshoot possible issues prior to report submission. c. Medicaid Finance review of all agency-submitted quarterly expenditure reports. This includes checking that: i. the reported federal amounts tie to the quarterly draw down amount. If there is a variance, the variance must be explained and documented for future reconciliation; ii. FMAPs are used and align with CMS-64 line item FMAPs; iii. The reported federal amounts do not exceed CMS-64 line item budgets (when applicable). d. Training additional Medicaid Finance staff on the review of agency submitted reports and data entry to separate staff duties and allow for double-checking of staff work. Finance will continue to refine improvements and implement processes to ensure reporting accuracy, including drafting relevant SOPs. Additionally, Medicaid Finance retained a contractor that has worked with other states to review the CMS-64 claiming process to suggest further areas of improvement and automation. 3. EOHHS will continue to explore options for improving controls over AlloCAP system functionality and cost allocation work. 4. Finance staff across EOHHS and Medicaid teams will detail additional controls and recommendations for implementation. Anticipated Completion Date: September 1, 2026 Contact Persons: Dezeree Hodish, Associate Director, Financial Management, Executive Office of Health and Human Services dezeree.hodish@ohhs.ri.gov Victoria Pavao, Assistant Director, Financial and Contract Management, Executive Office of Health and Human Services victoria.pavao@ohhs.ri.gov
2025-032a: MMIS system access is controlled via an electronic system called GainwellNow. An MMIS access request form must be completed by the requestor, signed by that individual and their supervisor, and then sent to the Systems Group staff members who are responsible for approving or denying acces...
2025-032a: MMIS system access is controlled via an electronic system called GainwellNow. An MMIS access request form must be completed by the requestor, signed by that individual and their supervisor, and then sent to the Systems Group staff members who are responsible for approving or denying access requests. The Systems Group will sign the request form and approve the request within GainwellNow and the requestor will be granted access. The GainwellNow system also generates and sends email notifications to the Systems Group Administrators notifying them of a pending access request if the requestor enters it into GainwellNow directly. From there, the same approval/denial process occurs. If an individual has not logged into MMIS for 30 days, then they require a password reset in order to regain access. Those password reset requests create system generated emails that are sent to the Systems Group Admins for approval or denial. After 60 days of inactivity, the individual is locked out and cannot access the MMIS without requesting and obtaining approval of the password reset. If someone leaves state employment, then the Systems Group Admins submit an access deletion request into GainwellNow, deleting the account completely. Gainwell Technologies also sends monthly access reports to the Systems Group for review and confirmation that account deletion requests were completed as submitted. Additionally, Gainwell sends monthly “New or Deleted Users” reports to the Systems group for review. For IT security, the Systems Group receives and reviews the following reports: · RI-CDM-ASQC-Security-Report · RI-CSHARP-ASQC-Security-Report · RI-Java-ASQC-Security Report · RI-XIX-DR Exercise Scope · RI-XIX-DR Executive Summary Report 2025-032b: The Arc-Ampe (formerly called MARS-E) third party assessment is underway. Security scanning and testing is complete, and security controls have been evaluated. Final report is due by 6/30/2026. Remediation of legitimate vulnerabilities is underway and defects are tracked on the RIBridges POAM. 2025-032c: EOHHS/Medicaid will work collaboratively with ETSS and their vendors to proactively assess critical risk areas planned for the review year. 2025-032d: For RIBridges, SOC engagements occur every other year. A third-party Attestation of the Arc-Ampe controls occurs annually. The state can evaluate the results of this year’s upcoming SOC audit to determine if an increased frequency of the SOC is needed. Anticipated Completion Dates: 2025-032a: EOHHS believes this item to be complete and will defer to OAG for resolution of this finding. 2025-032b: High findings – 30 days, moderate findings – 90 days, low findings – 365 days. July 31, 2027. 2025-032c: Ongoing 2025-032d: December 31, 2026 Contact Persons: Hector Rivera, Interdepartmental Project Manager, Executive Office of Health and Human Services hector.l.rivera@ohhs.ri.gov Deb Merrill, Security Officer, ETSS, Department of Administration deb.merrill@doit.ri.gov Brian Tichenor, Medicaid Systems Manager, Executive Office of Health and Human Services brian.tichenor@ohhs.ri.gov
DCYF will continue to work with Public Consulting Group to ensure that eligibility quality control reviews are performed in a timely manner. Anticipated Completion Date: Ongoing Contact Person: Kimberly Reynolds, Associate Director of Financial Management, Department of Children, Youth and Families ...
DCYF will continue to work with Public Consulting Group to ensure that eligibility quality control reviews are performed in a timely manner. Anticipated Completion Date: Ongoing Contact Person: Kimberly Reynolds, Associate Director of Financial Management, Department of Children, Youth and Families kim.reynolds@dcyf.ri.gov
Management agrees with the finding regarding health and safety requirements for timely unannounced monitoring visits. While several providers identified in the audit did receive a monitoring visit within 60 days of the annual due date, the Licensing Department experienced delays in completing some m...
Management agrees with the finding regarding health and safety requirements for timely unannounced monitoring visits. While several providers identified in the audit did receive a monitoring visit within 60 days of the annual due date, the Licensing Department experienced delays in completing some monitoring visits due to staff shortages and employee leave. To address the backlog and prioritize oversight activities, The Department has implemented a team-based prioritization approach rather than individual caseload management. This approach allows the unit to prioritize providers with the greatest need for monitoring and ensure that available resources are directed toward the highest-risk areas. The Department is actively working to increase staffing capacity within the unit. The Department is currently onboarding four new staff members to address existing vacancies and has recently received two additional FTE positions to further support monitoring activities. The unit continues to manage the impact of two staff members being out on extended medical leave with undetermined return dates; however, despite these staffing challenges, the unit has completed 423 monitoring visits since January 1, 2026. The Department will continue to monitor progress toward eliminating the backlog, strengthening system processes, and ensuring timely completion and documentation of required unannounced monitoring visits. DHS has also implemented enhanced monitoring capabilities within RISES. The system now generates automated notifications to the Licensing Department at established intervals before monitoring visits are due for both child care centers and family child care programs. These automated reminders strengthen monitoring workflows, improve oversight of upcoming monitoring requirements, and support the timely completion of unannounced visits. In addition, RISES has strengthened the Department's ability to consistently track provider compliance, document corrective actions, and identify providers requiring increased oversight. These enhanced monitoring tools have improved accountability by providing greater visibility into provider compliance and enabling licensing staff to more effectively prioritize regulatory activities based on risk. Management does not concur with the findings related to corrective action plans and inspections but has implemented various enhancements to support streamlined processes in these areas since the audit time period. As discussed during the audit, several factors affect the timing and applicability of required inspections and do not necessarily indicate provider noncompliance. For example, radon testing may only be conducted during specific times of the year. Providers may make timely efforts to schedule testing but be unable to obtain an inspection due to limited inspector availability or because the request falls outside the allowable testing window. In these circumstances, DHS does not consider the provider to be out of compliance. Similarly, fire inspections must be completed by the State Fire Marshal's Office. In recent years, staffing challenges have affected the ability to complete inspections within standard timeframes, despite providers' efforts to obtain them. When a provider has a history of compliant fire inspections, the Licensing Department accepts documentation demonstrating the provider's attempt to schedule the required inspection and may proceed with license renewal while awaiting the inspection. Additionally, lead inspections are not required for facilities constructed after the applicable regulatory date and are not required for school-age programs. During the audit process, DHS identified several providers flagged for inspection concerns that appeared to fall into one or both of these exempt categories. To strengthen compliance monitoring, RISES now generates automated notifications beginning 90 days before inspection expiration dates. DHS has already observed improved provider responsiveness in renewing required inspections and will continue to use RISES to proactively monitor inspection status and work with providers to maintain current inspection documentation. Regarding corrective action plans, under the previous licensing system, providers submitted corrective action plans and supporting documentation directly to the assigned licensor. This is typically through email. As a result, documentation was often maintained outside of the licensing system and may not have been consistently reflected in the inspection record. If the corrective action or follow-up information was not documented within the system or the inspection status was not updated, the report could continue to appear as pending, even when the provider had submitted the required information. To address this limitation, DHS intentionally designed the RISES system to centralize the corrective action process. Following an inspection, the report is issued to the provider through RISES, where the provider is required to submit a corrective action plan directly within the system. The corrective action plan is then routed to DHS for review and approval, creating a documented workflow and improving the consistency and completeness of recordkeeping. If a provider does not submit a corrective action plan, DHS is able to identify the outstanding item within RISES and determine whether a follow-up inspection is warranted to verify that the noncompliance has been addressed. Currently, DHS prioritizes follow-up for high-risk noncompliance, including issues related to facilities, background checks, staff-to-child ratios and supervision, and infant and toddler care. Anticipated Completion Date: This corrective action has since been completed through the implementation of the 2026 requirement that all regulated providers utilize RISES. Contact Person: Nicole Chiello, Associate Director, Office of Child Care, Department of Human Services nicole.chiello@dhs.ri.gov
Management concurs with the findings related to controls over child care eligibility determinations and provider payments. Management notes that the number and scope of findings identified in the current audit have been substantially reduced compared to prior Single Audits, reflecting continued prog...
Management concurs with the findings related to controls over child care eligibility determinations and provider payments. Management notes that the number and scope of findings identified in the current audit have been substantially reduced compared to prior Single Audits, reflecting continued progress in strengthening internal controls. The Office of Child Care remains committed to enhancing eligibility determination processes and related internal controls, including ensuring that required eligibility documentation is consistently maintained in the electronic case record. Corrective actions to address the remaining findings, along with the anticipated completion dates, are outlined below. [See Corrective Action Plans for table.] In addition to the corrective actions outlined above, the Department is strengthening supervisory oversight through implementation of routine pre-authorization quality reviews and standardized supervisory monitoring practices. Supervisors will utilize these tools as part of ongoing quality assurance activities to verify that required eligibility documentation is complete prior to authorization, identify recurring error trends, and provide targeted coaching, training, and process improvements to strengthen program integrity and reduce future eligibility errors. Management agrees with the recommendation to evaluate modifications to the existing eligibility system to support eligibility determinations under the CCAP Child Care Staff program. The Department previously assessed the feasibility of modifying RIBridges to accommodate eligibility determinations for the CCAP Child Care Educators and Child Care Staff pilot program. At that time, implementation was not feasible due to competing system development priorities, limited vendor development capacity, and the pilot status of the program. Since the period covered by the audit, the Department has implemented a requirement that participants in the pilot program also apply for the traditional CCAP program. This change has strengthened documentation requirements and helped mitigate risks associated with incomplete eligibility documentation. While these interim measures have improved program administration, the Department recognizes that administering eligibility determinations outside of the primary eligibility system is not a sustainable long-term approach. Accordingly, the Department is reassessing the future administration of the pilot program and evaluating options to incorporate eligibility determinations into RIBridges or, alternatively, to develop the functionality within RISES and integrate it with RIBridges. The Department will determine the most appropriate path forward based on program needs, system capabilities, and available resources to ensure a sustainable and well-controlled eligibility process. Additionally, the Department has strengthened controls over provider payments for the CCAP Child Care Staff pilot program since the audit period. Prior to each payment, the CCAP program team reviews the copayment workbook to identify and resolve discrepancies between pilot program payments and traditional CCAP benefits. In addition, the CCAP Finance team performs a formal review of each payment workbook before payments are processed. The vendor supporting the pilot has also enhanced its payment file process by implementing an additional level of financial review by the project team prior to submission and incorporating safeguards to identify attendance records that may have been previously paid, reducing the risk of duplicate payments. The Department has established procedures to recover identified overpayments, including both one-time recoveries through withholding from future pilot payments, where appropriate, and a formal recoupment process for providers who are no longer participating in the pilot program. These enhanced controls are intended to strengthen payment accuracy and support effective stewardship of program funds. Anticipated Completion Dates: See table above Contact Person: Nicole Chiello, Associate Director, Office of Child Care, Department of Human Services nicole.chiello@dhs.ri.gov
During the audit period, responsibility for FFATA reporting transitioned among multiple staff due to staffing changes, which contributed to untimely reporting. To strengthen internal controls and ensure continuity of operations, DHS will cross-train multiple employees on FFATA reporting requirements...
During the audit period, responsibility for FFATA reporting transitioned among multiple staff due to staffing changes, which contributed to untimely reporting. To strengthen internal controls and ensure continuity of operations, DHS will cross-train multiple employees on FFATA reporting requirements and reporting procedures. In addition, DHS will establish a standardized reporting calendar, designate primary and backup staff responsible for FFATA submissions, and implement a supervisory review process to verify that all required subaward reports are submitted timely and in accordance with federal reporting requirements. These actions are intended to strengthen monitoring controls, reduce the risk of reporting delays, and ensure ongoing compliance with FFATA reporting requirements. Anticipated Completion Date: July 31, 2026 Contact Person: Ben Quattrucci, Assistant Director, Financial Contract Management, Department of Human Services benjamin.a.quattrucci@dhs.ri.gov
« 1 30 31 33 34 566 »