Corrective Action Plans

Browse how organizations respond to audit findings

Total CAPs
58,854
In database
Filtered Results
55,700
Matching current filters
Showing Page
631 of 2228
25 per page

Filters

Clear
EOHHS has met expectations on aligning the FSR and FDCR reports, has updated files to Milliman, and continues to monitor compliance. EOHHS is currently in a maintenance phase and will continue monthly oversight going forward. Anticipated Completion Date: Current and Ongoing Contact Person: Steven...
EOHHS has met expectations on aligning the FSR and FDCR reports, has updated files to Milliman, and continues to monitor compliance. EOHHS is currently in a maintenance phase and will continue monthly oversight going forward. Anticipated Completion Date: Current and Ongoing Contact Person: Steven Corvese, Plan Analyst, Executive Office of Health and Human Services steven.corvese@ohhs.ri.gov
Finding 558299 (2024-059)
Significant Deficiency 2024
The findings can be grouped into several areas as shown below. The responses are included below each grouping. Each response is included in each category. 1. Licensing a. “Licensing for providers of behavioral healthcare services and home and community-based services to members with developmenta...
The findings can be grouped into several areas as shown below. The responses are included below each grouping. Each response is included in each category. 1. Licensing a. “Licensing for providers of behavioral healthcare services and home and community-based services to members with developmental disabilities are, by statute, the responsibility of the Department of Behavioral Healthcare, Developmental Disabilities, and Hospitals (BHDDH). BHDDH, in conjunction with evaluations of provider health and safety standards, relicenses providers biennially. Inconsistent with most Medicaid providers, EOHHS, as the Medicaid agency, does not receive annual licensing data from BHDDH resulting in a weakness in control for this segment of providers.” b. “Licensing for providers of residential services (inclusive of psychiatric services) to children in the State’s custody is, by statute, the responsibility of the Department of Children, Youth, and Families (DCYF). DCYF, in conjunction with evaluations of provider health and safety standards, relicenses providers annually. Inconsistent with most Medicaid providers, EOHHS, as the Medicaid agency, does not receive annual licensing data from DCYF resulting in a weakness in control for this segment of providers. c. 4 out of 60 providers sampled noted instances where providers remained active during fiscal 2024 after provider licenses had expired, evidencing a deficiency in internal control relating to timely provider deactivation if provider licensure is not evidenced. No claims were paid to these providers thus noncompliance was not noted.” EOHHS’ Division of Medicaid Compliance is actively working with BHDDH, DCYF, and RIDOH to address the licensing concerns by strengthening the communication of end dates between each agency’s licensing division and Medicaid’s Division of Medicaid Compliance. Anticipated Completion Date: Ongoing. Anticipated June 2025. Contact Persons: Emily Tumber, Implementation Director of Policy and Programs, Executive Office of Health and Human Services emily.tumber@ohhs.ri.gov Nicholas James, Implementation Director of Policy and Programs, Executive Office of Health and Human Services nicholas.james@ohhs.ri.gov 2. Systems a. “Encounter data submitted by managed care organizations is not currently validated for provider enrollment upon acceptance. This deficiency in internal controls over provider eligibility prevents the detection of claiming submitted by unenrolled providers. Our testing noted 4 managed care providers that were not enrolled in the Medicaid Program as required by federal regulations resulting in noncompliance with provider eligibility requirements (questioned costs - $3,371). All 4 providers were out-of-state providers required to be enrolled under federal regulations based on the volume of services billed to RI Medicaid. Implementing this additional edit when processing encounter data would improve controls over compliance. b. For claims representing care furnished to a beneficiary by an out-of-state furnishing provider, the SMA may pay a claim, in limited circumstances, to a furnishing provider that is not enrolled in the reimbursing state’s Medicaid plan. In these circumstances, the State is required to meet several requirements including verification that the provider is enrolled in good standing in Medicare or another state’s Medicaid program. The State is not currently performing such validation for out-of-state providers with limited claiming. c. The State did not have documentation supporting review of the SSA Death Master file for 19 out of the 60 providers we tested. a. EOHHS conducted research on these cases and completed a system upgrade to remedy the issue on 5/1/2024. b. EOHHS conducted research on these cases and completed a system upgrade to remedy the issue on 5/1/2024. c. EOHHS implemented new Provider Screening Tool in February 2025 which will provide dated documentation following the automated search for various screening requirements, including Death Master File. This documentation will be uploaded to the provider file. This will eliminate the manual process of searching for providers individually through the Death Master File and relying on an individual recording the date. Anticipated Completion Date: Ongoing Contact Person: Kimberly Tebow, Senior Medical Care Specialist, Executive Office of Health and Human Services kimberly.tebow@ohhs.ri.gov 3. Provider Surveys a. Federal regulations require the Medicaid agency to execute provider agreements with nursing facility providers and intermediate care facilities for individuals with intellectual disabilities (ICF/IID) upon receiving notification from the State survey and certification unit that the provider has been certified in substantial compliance with federal health and safety regulations. The State Medicaid agency lacked documentation of a finalized provider agreements and approval letters to providers in 6 out of 18 providers reviewed. In respect to the State’s only ICF/IID facility, the State Medicaid agency was not monitoring the RI Department of Health’s (RIDOH) certification process and had no documentation from RIDOH regarding the facility’s health and safety certification. All providers were recertified by RIDOH and compliant with program health and safety requirements. EOHHS/Medicaid implemented tracking protocol for all surveys received by the RIDOH to ensure completeness and timely response. Revisions to the internal standard operating procedure for the review and approval of these surveys are under review. This was completed on February 1, 2024. Regarding the monitoring of RIDOH’s certification process, EOHHS will collaboratively work with RIDOH to implement a monitoring program. Anticipated Completion Date: June 2026 for the monitoring program. Contact Person: Patricia Arruda, Chief of Strategic Planning, Monitoring & Evaluation, Executive Office of Health and Human Services patricia.arruda@ohhs.ri.gov
View Audit 355126 Questioned Costs: $1
2024-058a: EOHHS amended its contracts with the Health Plans (Amendment 11, August 2023), to include the following language in "New Section 2.16.06 Periodic Financial Audit": Effective for the rating year beginning July 1, 2023, and every third year thereafter, EOHHS will contract with an external f...
2024-058a: EOHHS amended its contracts with the Health Plans (Amendment 11, August 2023), to include the following language in "New Section 2.16.06 Periodic Financial Audit": Effective for the rating year beginning July 1, 2023, and every third year thereafter, EOHHS will contract with an external firm to conduct an independent audit of plan submitted Financial Data Cost Reporting (FDCR). EOHHS is currently developing an RFP (request for proposals) with an estimated completion date of SFY 2026. It is EOHHS’ intention to conduct/complete the first audit in SFY 2026 followed by FY 2029, FY 2032, and so forth, but such completion is determinant on the quality of proposals received and funding available. The focus of the audit will be to ensure that supporting documentation is available for all FDCR inputs. Anticipated Completion Date: June 30, 2025 2024-058b: All MCOs are monitored weekly to review error reports and resubmissions and monthly for alignment with FSR/FDCR reports. Amendment 11 with the Managed Care Organizations included the additional requirement, noted at Sections 2.16.04 and 2.16.06 for plans to submit audited financial reports specific to the Medicaid contract and implementing the periodic financial audit report requirement. It is EOHHS’ intention to conduct/complete the first audit in SFY 2026 followed by FY 2029, FY 2032, and so forth, but such completion is determinant on the quality of proposals received and funding available. The focus of the audit will be to ensure that supporting documentation is available for all FDCR inputs. Anticipated Completion Date: Current and Ongoing Contact Persons: Lynn Doherty, Managed Care Compliance Officer, Executive Office of Health and Human Services lynn.doherty@ohhs.ri.gov Storm Lawrence, Chief of Strategic Planning, Monitoring & Evaluation, Executive Office of Health and Human Services storm.lawrence@ohhs.ri.gov Steven Corvese, Plan Analyst, Executive Office of Health and Human Services steven.corvese@ohhs.ri.gov
Finding 558288 (2024-057)
Significant Deficiency 2024
EOHHS: The EOHHS Finance team created a Medicaid Administrative Claiming Reporting training presentation and trained all sister agencies with expectations for administrative claiming. The training included the following topics: administrative claiming background; completing required CMS-64 quarterl...
EOHHS: The EOHHS Finance team created a Medicaid Administrative Claiming Reporting training presentation and trained all sister agencies with expectations for administrative claiming. The training included the following topics: administrative claiming background; completing required CMS-64 quarterly reporting for EOHHS which include timelines and supporting documentation; and frequently asked questions. The team also created a draft manual and shared this manual with the Medicaid admin claiming agencies. Additionally, EOHHS hired an additional FTE in the Medicaid Finance team during Autumn 2024 to support Medicaid Administrative Claiming of all agencies; however, this FTE was unable to commence work due to being placed in a three-day rule as acting Medicaid CFO. The FTE will resume full-time work in the new position in mid-May 2025. The goal of this position will be to work with the EOHHS Medicaid and Central Management teams to develop processes to address the audit findings. The Medicaid Finance team also has worked closely with the Medicaid program’s Division of Executive Administrative and Support Services to develop cross-training and draft SOPs related to the CMS-64. BHDDH: BHDDH concurs with this finding. Since the finding, BHDDH has refined their internal processes related to administrative claiming adding an additional staff member to doublecheck the Medicaid administrative claiming reporting to reduce the likelihood of future errors. The team members also conduct a reconciliation after the Medicaid cost allocation plan is processed. As of SFY 25 Q2 all time tracking is done internally for increased accuracy and more timely journal entries. Anticipated Completion Date: Ongoing Contact Persons: Dezeree Hodish, Associate Director (Financial Management), Executive Office of Health and Human Services dezeree.hodish@ohhs.ri.gov Deborah Mazzone, Deputy Finance Director, Department of Behavioral Healthcare, Developmental Disabilities and Hospitals deborah.l.mazzone@bhddh.ri.gov
View Audit 355126 Questioned Costs: $1
2024-056a: During SFY 2024, several system fixes were deployed to address the findings noted in 2024-056. Specifically, in September 2024, a system fix was put in place to ensure children with verified SSNs were appropriately evaluated for Medicaid/CHIP coverage and excluded from Cover All Kids. R...
2024-056a: During SFY 2024, several system fixes were deployed to address the findings noted in 2024-056. Specifically, in September 2024, a system fix was put in place to ensure children with verified SSNs were appropriately evaluated for Medicaid/CHIP coverage and excluded from Cover All Kids. RI Bridges appropriately determines eligibility for CHIP when TPL data is not present. Once TPL information is known to the system, existing eligibility rules will only evaluate for Medicaid, not CHIP. The TPL exceptions noted by the OAG show a discrepancy between TPL data in the MMIS and the information sent to RI Bridges via the TPL loopback file. EOHHS will work with their vendor to determine the root cause of the discrepancy and establish a corrective action plan if appropriate. Rhode Island did not participate in the February 2024 PARIS interstate match due to a file issue that has since been addressed in April 2024. The May and August 2024 PARIS matches were suspended at the Federal level for all States due to an outstanding computer matching agreement between the DoD and HHS/ACF. Enhancements to existing PARIS Interstate match logic are scheduled to run as planned for fall/winter 2025. Income/Wage Validation: EOHHS completed implementation of an interface on 3/5/24 between The Work Number (TWN) and RI Bridges. Contract and budget actions for TWN services were not completed until fall 2024. The system requirements that Equifax initially communicated to the State and our Integrated Eligibility System implementation partner were incomplete and the original integration configured in fall 2024 did not successfully pass testing. A system modification to correct the original specifications was originally scheduled for February 2025 but was delayed due to the 12/13/24 RI Bridges cyber event. Target date for TWN implementation is July 2025. Anticipated Completion Date: July 1, 2025 for income/wage validation. Contact Person: Anthony Salvo, Implementation Director of Policy and Programs, Executive Office of Health and Human Services anthony.salvo@ohhs.ri.gov 2024-056b: The Center for Staff Development and Learning (CSDL) the lead for training at the Rhode Island Department of Human Services (RIDHS) will work towards correction by using a blended approach to learning using formal (classroom or virtual learning sessions) and on the job learning activities. will conduct the following: a. The CSDL Team will continue to include in its Ex Parte Learning Series review of where the system performs an Ex Parte review to determine Medicaid eligibility for age outs ages 19, 26, and 65. In addition, included in the Medicaid Refresher, currently in development, a review will be done of updating income and verification procedures that includes end date and employment segments when household members lost employment. b. The Operations staff supervisors will schedule processing labs that will require the participants to process live cases with guidance from a supervisor. Anticipated Completion Date: The trainings and refresher learnings are ongoing. Processing labs are scheduled as need for this specific topic, we anticipate that processing labs will be scheduled and completed between July – September of 2025. The Medicaid Refresher Learning Series will be released in July. This training will also be ongoing. Contact Person: Zulma Valenzuela, Assistant Director of Administrative Services, Center for Staff Development and Learning, Department of Human Services zulma.valenzuela@dhs.ri.gov 2024-056c: As noted in prior year responses, CMS will not pursue recoveries associated with questioned costs given that recoveries based on eligibility errors can only be pursued when identified by programs operating under CMS’ Payment Error Rate Measurement program per section 1903(u) of the Social Security Act and regulations at 42 CFR Part 431, Subpart Q. This limits CMS’s ability to recover on most of the SSA eligibility findings. While CMS will pursue the internal control deficiencies noted by the SSA, CMS will not pursue recoveries associated with the questioned costs. Anticipated Completion Date: Not Applicable Contact Person: Anthony Salvo, Implementation Director of Policy and Programs, Executive Office of Health and Human Services anthony.salvo@ohhs.ri.gov
View Audit 355126 Questioned Costs: $1
Management agrees with the findings, with some concerns noted in the corrective actions below. These corrective action steps are separated by specific health and safety finding. Background Checks: DHS will prioritize an emergency reopening of the regulations for both family and child care center r...
Management agrees with the findings, with some concerns noted in the corrective actions below. These corrective action steps are separated by specific health and safety finding. Background Checks: DHS will prioritize an emergency reopening of the regulations for both family and child care center regulations to require all providers and staff who work with children to enroll in the workforce registry no later than one month after promulgation. This will allow DHS staff to access employee files in real time to ensure that all staff have appropriate and current comprehensive background checks in their digital files. Until this regulation goes into effect, DHS will implement an immediate policy that all staff who work with children have their staff files audited as part of on-site monitoring visits. Previously, DHS looked only at those staff who were new since this last visit. However, this led to expired background checks being found during the audit. These expired checks also counted as not being able to demonstrate completion of the background check. DHS does want to acknowledge that during this audit, all staff were required to show evidence of a comprehensive background check. This included staff who did not have access to children and/or were not in the building when children were present. This does not align with regulation 218-RICR-70-00-1.12.A.1 which states, “All individuals working or engaging directly with children who are employed or act as a volunteer in the program, must complete all requirements of a comprehensive background check as outlined here: https://dhs.ri.gov/programs-and-services/child-care/child-care-providers/background-checks.” While the auditing team was informed of this, those staff not working with children who were on a payroll sheet were included as a finding against the Department. DHS will send out communication to the field alerting them that the lack of background checks is not tolerated. Staff who do not have these checks on file will be sent home until a background check is received (a practice that already exists, but typically the licensor is not looking at all files for every visit). For center providers, any staff or provider who is found to not have this information will be told to leave the program until this evidence is found. This may result in programs needing to temporarily close due to staff ratio issues. For family child care providers, this will involve a file audit of all received background checks, as well as a visit to ensure that there are no additional or new household members who have not completed this check. Any provider who has not submitted or completed an updated background check will be required to close until received. Any provider who is found to have household members who have not been listed and/or completed appropriate background checks will be closed due to failure to adhere to regulations. Immunizations: DHS recognizes and supports the importance of ensuring children are receiving timely vaccinations. However, DHS also recognizes that providers are only able to gather this data directly from families. Families who do not provide updated immunizations may be excluded from care if they do not provide these records. DHS will communicate with providers that no child should be enrolled without this documentation and that failure to provide updates to this documentation can result in dismissal from the program. DHS does not know if any of the children identified in this finding had medical or religious exemptions for their immunizations but would challenge that this finding could be skewed if this additional information was not ascertained by the auditing team. DHS will continue to partner with the Rhode Island Department of Health to ensure that programs are actively monitored and surveyed regarding immunization documentation. Emergency Preparedness Plan: DHS has been working with providers to ensure they have documented the required components of an emergency preparedness plan as required by federal funding agencies. DHS is requiring providers to include the DHS emergency plan form as part of renewal (for already existing providers) or as part of initial licensure. Absence of this form does not mean that the criteria is not being met. DHS did not train the auditors on what these required areas were and cannot speak to how this was monitored. However, DHS will continue to work with our providers to ensure that these criteria are met as part of the requirements in RISES. DHS has also created a training with The Center for Early Learning Professionals that reviews how to complete this plan and implement through practice. Unallowable Items In Cribs: This audit found that 30% of providers were found to have unallowable items in cribs. For the purposes of this audit, this finding included cribs that did not have children sleeping in them. Per the regulations for both Family and Child Care Centers, “No items are placed in the crib with an Infant except for a pacifier.” (218-RICR-70-00-2.3.3.C.1.k and 218-RICR-70-00-1.10.C.i respectively) DHS requests that only those providers who were found to have children in cribs with items be included in the finding. DHS has worked with The Center for Early Learning Professionals to develop individual trainings related to safe sleep. Providers who are found to be noncompliant regarding safe sleep practices are referred to those trainings with additional monitoring visits occurring to ensure changes have been made. As a result of this audit, DHS will inform providers that any safe sleep violations may result in a probationary status with additional licensing action possible if the continued noncompliance with safe sleep is observed. Toxic Substances unlabeled and accessible: DHS continues to monitor for this in both Family Child Care and Center-based programs. Typically, these are addressed and corrected onsite. Repeated noncompliance in this area can lead to probationary status. DHS will be reviewing the probationary process and use Technical Assistance with our federal funders to evaluate how other states address probation and other licensing actions. The goal is to solidify the current processes to ensure that there is an appropriate escalation review for repeated noncompliance that starts with probation and possibly lead to suspension of license. This will be communicated regularly to all providers. Developmental history: Per regulations, developmental histories are required only for programs serving infants and toddlers. Per Family Child Care regulation (218-RICR-70-00-2.3.6.F.7.a) and Child Care Center regulation (218-RICR-70-00-1.13.F.8.a), only files for infants and toddlers must contain developmental histories. DHS is unable to confirm whether or not this finding is related to this age group or if this finding occurred because age groups beyond that were assessed for compliance. Without this clarification, DHS would contest that this finding is accurate. DHS continues to support the provider community - both Family Child Care and Center providers - ensuring that they have gathered as much information as possible on the children they are enrolling in care. DHS will continue to audit files while on site to ensure that infants and toddlers have these documents completed. In the new RISES system, new providers who identify the desire to be licensed for either age group are required to submit examples of these forms as part of the initial application. For current providers, those serving these age groups will not be able to submit their first renewal in the system without uploading examples of these completed forms. Anticipated Completion Date: Background Checks: DHS will meet with policy staff immediately to discuss the emergency promulgation of new regulations. DHS will also immediately send out an email to the provider community regarding the outcomes of this audit and the responses that DHS intends to implement. Monitoring of programs, including for compliance of this regulation, will be ongoing. All other findings will be addressed in an ongoing fashion. Contact Person: Nicole Chiello, Assistant Director, Office of Child Care, Department of Human Services nicole.chiello@dhs.ri.gov
Management agrees with the finding regarding inaccurate calculations. Management disagrees with the finding regarding information about DCYF children in the system. The Office of Child Care (OCC) is continually reviewing available training materials related to CCAP eligibility and case processing ...
Management agrees with the finding regarding inaccurate calculations. Management disagrees with the finding regarding information about DCYF children in the system. The Office of Child Care (OCC) is continually reviewing available training materials related to CCAP eligibility and case processing and has identified certain gaps where additional training/clarification, and more frequent communication to processing staff is needed – specifically in income calculation/input of paystubs, confirming asset declarations, and confirming need hours. OCC is working with the DHS training department to create a CCAP-specific training to provide in-depth coverage of program requirements. OCC continues to present at quarterly meetings to highlight error findings and the critical importance of accurate documentation. In addition, the CCAP administrator works continuously with field staff and Deloitte through weekly theme meetings to identify areas where system changes can improve accuracy of eligibility determinations. OCC is currently reviewing the grace period/short-term approval policy, how it is applied to specific cases, and how it is implemented in RIBridges. The finding has been escalated from the CCAP administrator to the assistant director of the Office of Child Care to ensure continued collaboration from all facets of the eligibility work to continue to improve errors in determination. Anticipated Completion Date: Ongoing – will continue to see a decline in errors in eligibility approval. Contact Person: Nicole Chiello, Assistant Director, Office of Child Care, Department of Human Services nicole.chiello@dhs.ri.gov
View Audit 355126 Questioned Costs: $1
Finding 558271 (2024-053)
Significant Deficiency 2024
2024-053a: The State (EOHHS) receives quarterly user access reports from the MMIS fiscal agent. Anyone identified on the reports that have not logged in for a period of 60 days will have their access terminated. Terminating the users access locks them out and prevents access the system without fir...
2024-053a: The State (EOHHS) receives quarterly user access reports from the MMIS fiscal agent. Anyone identified on the reports that have not logged in for a period of 60 days will have their access terminated. Terminating the users access locks them out and prevents access the system without first requesting a password reset, which is reviewed and approved/denied by EOHHS systems group. In addition, when a user leaves state service or moves to another agency, their access is terminated immediately. An SOP will be implemented with offboarding procedures to assist in timely removal of access. Access is maintained and controlled within the GainwellNow system. Email notifications of pending requests for access are sent to Hector Rivera and Kim Tebow (both EOHHS), who must then review the request and attached form and either grant or deny access. An FTE will be added to the EOHHS/Medicaid Systems team to standardize all user access policies and procedures. Oversight of all IT security activities performed by the MMIS contractor is the responsibility of the EOHHS/Medicaid Project/Contract Manager assigned to the vendor. This individual is supported by the ETSS AIM assigned to support EOHHS/Medicaid. A SOC audit is completed yearly and provides documentation for penetration and vulnerability testing. Anticipated Completion Date: Current and Ongoing Contact Persons: Brian Tichenor, Medicaid Systems Manager, Executive Office of Health and Human Services brian.tichenor@ohhs.ri.gov Hector Rivera, Interdepartmental Project Manager, Executive Office of Health and Human Services hector.l.rivera@ohhs.ri.gov Kimberly Tebow, Senior Medical Care Specialist, Executive Office of Health and Human Services kimberly.tebow@ohhs.ri.gov 2024-053b: The 2025 MARS-E Assessment is underway and will be completed by 4/30/2025. The results will be reviewed to assure the items in the previous MARS-E assessment have been addressed as expected by the state. Documentation lacking to evaluate security controls; Complete pending MARS-E Assessment Continued use of unsupported applications in need of update or patching; major upgrade of the end of life frameworks is planned for SFY2026 start. This expensive upgrade structurally supports most of the modernization platforms that the state is considering. Start SFY 2026; Completion SFY 2027 Lack of contractor tracking of exceptions and risk assessments; Exceptions for vulnerabilities are tracked in JIRA. Risk assessments are performed in all security tests and periodically on security controls. CISO approves all vulnerability exceptions. Complete pending MARS-E Assessment Contractor only sharing partial vulnerability scanning results; Raw report results are provided in Sharepoint in support of the risk assessment process. Complete pending MARS-E Assessment Lack of a robust triage process for security vulnerabilities; Complete pending MARS-E Assessment Inadequate consideration of IT security vulnerabilities with industry best practices. Security vulnerability assessments are performed using the CMS method of impact X probability. The method has been reviewed by state and MARS-E assessor. Complete pending MARS-E Assessment Anticipated Completion Dates: See above Contact Person: Deb Merrill, Security Officer, Enterprise Technology System Services, Department of Administration deb.merrill@doit.ri.gov 2024-053c: The State (EOHHS) collaborates with system vendors (MMIS/Gainwell and Deloitte/RI Bridges) Maintenance & Operations (M&O) and Security teams to ensure annual risk assessment/vulnerability best practices and lessons learned are integrated into annual planning and scope of work for future FYs. Anticipated Completion Date: Current and Ongoing Contact Persons: Brian Tichenor, Medicaid Systems Manager, Executive Office of Health and Human Services brian.tichenor@ohhs.ri.gov Hector Rivera, Interdepartmental Project Manager, Executive Office of Health and Human Services hector.l.rivera@ohhs.ri.gov 2024-053d: Our controls for User Access are in place. Depending on the access requested by the type of user and the program being administered, access are provided accordingly. Anticipated Completion Date: Current and Ongoing Contact Persons: Saurabh Gosai, Director – Technology, Strategy and Innovation, Department Human Services saurabh.u.gosai@dhs.ri.gov Sherri Kennedy, Chief - Human Services Policy and Systems Specialist, Department of Human Services sherri.kennedy@dhs.ri.gov
Finding 558266 (2024-052)
Significant Deficiency 2024
DHS has a policy for subrecipient monitoring, which includes documentation required to be submitted by a subrecipient. The documentation is based on assessing the risk of each subrecipient. There is no requirement in the Uniform Grant Guidance in regard to supporting documentation requirements. T...
DHS has a policy for subrecipient monitoring, which includes documentation required to be submitted by a subrecipient. The documentation is based on assessing the risk of each subrecipient. There is no requirement in the Uniform Grant Guidance in regard to supporting documentation requirements. The invoice needs to be certified by an authorized agent and the expense needs to have been reasonably incurred. DHS ensures compliance in numerous ways, including monthly programmatic meetings, site visits, review of single audits and past performance. Additionally, DHS contracts include a budget narrative and allows for DHS to require additional documentation for audit purposes. If requested, DHS would have been able to produce more documentation to satisfy the allowability of costs. Anticipated Completion Date: Not Applicable Contact Person: Ben Quattrucci, Associate Director Financial Contract Management, Department of Human Services benjamin.a.quattrucci@dhs.ri.gov
View Audit 355126 Questioned Costs: $1
Finding 558261 (2024-051)
Significant Deficiency 2024
DHS management has implemented new procedures in SFY25 and anticipates this will not be a finding for the next Single Audit. Preparers of reports have been instructed to do a lookback for any additional entries from prior quarters not previously reported. Each report is now saved with the supporti...
DHS management has implemented new procedures in SFY25 and anticipates this will not be a finding for the next Single Audit. Preparers of reports have been instructed to do a lookback for any additional entries from prior quarters not previously reported. Each report is now saved with the supporting documentation on a shared drive. Additionally, DHS will document the process of quarterly federal financial reporting. Regarding Federal Funding Accountability and Transparency Act (FFATA) reporting, DHS has started to track reporting by capturing contract execution dates to ensure timeliness. Anticipated Completion Date: June 30, 2025 Contact Person: Ben Quattrucci, Associate Director Financial Contract Management, Department of Human Services benjamin.a.quattrucci@dhs.ri.gov
System changes to modify the time schedule that RIBridges interfaces with SWICA for processing tasks has already been submitted (RIB-141767). Currently, the interface occurs twice yearly. This will increase the frequency to quarterly. Anticipated Completion Date: October 31, 2025 Contact Person:...
System changes to modify the time schedule that RIBridges interfaces with SWICA for processing tasks has already been submitted (RIB-141767). Currently, the interface occurs twice yearly. This will increase the frequency to quarterly. Anticipated Completion Date: October 31, 2025 Contact Person: Donna Rook, Administrator, Family and Adult Services, Department of Human Services donna.m.rook@dhs.ri.gov
View Audit 355126 Questioned Costs: $1
DHS continues its prior actions of training addressing eligibility, standing agenda on meetings, and quarterly meetings. At this time, DHS has completed the solicitation to hire a contractor to identify problematic processes, through the Business Processing Excellence Reengineering project. (BPER). ...
DHS continues its prior actions of training addressing eligibility, standing agenda on meetings, and quarterly meetings. At this time, DHS has completed the solicitation to hire a contractor to identify problematic processes, through the Business Processing Excellence Reengineering project. (BPER). The scope of work includes evaluating the eligibility to determine the deficiencies and to propose solutions. Anticipated Completion Date: Ongoing Contact Person: Donna Rook, Administrator, Family and Adult Services, Department of Human Servicesdonna.m.rook@dhs.ri.gov
View Audit 355126 Questioned Costs: $1
Finding 558255 (2024-048)
Significant Deficiency 2024
RIDOH agrees with the finding and recommendations and will develop and implement enhanced internal controls over Uniform Grant Spreadsheets (UGSs) to assure that correct cumulative financial information is used to complete all Federal Financial Reports (FFRs). The UGS internal controls will include...
RIDOH agrees with the finding and recommendations and will develop and implement enhanced internal controls over Uniform Grant Spreadsheets (UGSs) to assure that correct cumulative financial information is used to complete all Federal Financial Reports (FFRs). The UGS internal controls will include (but are not limited to): • Mandatory refresher training for all staff that complete and/or review UGSs, with focus on areas of potential errors and correct entry of UGS data in the Monthly Federal Grants Tracking spreadsheet used for drawdowns and indirect billing. • Required recording of federal revenue each month in the UGSs – this step previously has been optional. • A rotating schedule of monthly in-depth reviews of UGSs to assure that data entry aligns with RIFANS transaction reports, transactions are recorded so natural accounts align with correct expenditure categories, the appropriate indirect cost rate is entered, and formulas for computation of indirect costs are not corrupted. Reviews will be conducted by supervisors of staff completing UGSs, and results will be reported to the Deputy CFO/Federal Grants Manager. • Review cumulative RIFANS expenditure and revenue transaction records back to the start of the federal award against information recorded in UGSs to assure the tracking spreadsheets are complete and correct before FFRs are completed, signed, and submitted to federal funders. In the past, it was RIDOH’s practice to continue using the same RIFANS account number for multiple project periods of grants (multiple FAINs) for the federal programs, which complicated reconciliation of expenditure and revenue data due to overlapping periods at the start of a new FAIN and the closeout of an ending FAIN. RIDOH now requires a new RIFANS account number for all new FAINs, which will ease the analysis of cumulative transactions. Anticipated Completion Date: June 30, 2025 for UGS internal controls. Review of cumulative RIFANS transactions for FFRs will be implemented by April 30, 2025. Contact Persons: Alisha Colella, Chief Financial Officer, Department of Health alisha.colella@health.ri.gov Carla Lundquist, Deputy CFO / Federal Grants Manager, Department of Health carla.lundquist@health.ri.gov
Finding 558251 (2024-047)
Significant Deficiency 2024
RIDE monitors 193 subrecipients – this process is overseen largely by one individual. This individual also monitored COVID era funds such as ESSER. With those programs having passed, more time can be re-allocated to subrecipient monitoring. RIDE does review risk scores for sub-recipient monitorin...
RIDE monitors 193 subrecipients – this process is overseen largely by one individual. This individual also monitored COVID era funds such as ESSER. With those programs having passed, more time can be re-allocated to subrecipient monitoring. RIDE does review risk scores for sub-recipient monitoring and considers risk as a basis for onsite visits/monitoring. RIDE disagrees that a higher risk assessment was not given for non-completion of the annual survey; we don’t disagree that a site visit was not performed, but that’s due to resource constraints. RIDE will work on documenting these reviews more formally than the current process, while also documenting decisions for either performing a site visit, or not performing a site visit. Anticipated Completion Date: Ongoing Contact Persons: Brandon Bohl, Finance Director, Department of Elementary and Secondary Education brandon.bohl@ride.ri.gov Crystal Martin, Senior Finance Director, Department of Elementary and Secondary Education crystal.martin@ride.ri.gov
Finding 558248 (2024-046)
Significant Deficiency 2024
RIDOH agrees with the finding and recommendation. Corrective action plan: • In gathering time sheets for the requested audit samples, RIDOH found that some Master Time Sheet Coordinators (staff responsible for receiving signed time sheets, populating the Master Time Sheet spreadsheets sent weekly f...
RIDOH agrees with the finding and recommendation. Corrective action plan: • In gathering time sheets for the requested audit samples, RIDOH found that some Master Time Sheet Coordinators (staff responsible for receiving signed time sheets, populating the Master Time Sheet spreadsheets sent weekly from/to HR/Payroll, and saving time sheets to the Time Sheet Repository in Teams) were saving documents locally instead of in the central Teams site. RIDOH is providing training and increased oversight of the non-compliant Time Sheet Coordinators and is conducting ongoing checks of the time sheets uploaded to Teams weekly to assure the time sheets are saved properly. • Instructions have been provided and will be reiterated Department-wide that all time sheets must be signed and dated by both the employee and supervisors, and signatures without dates are not acceptable. • RIDOH will adjust the questioned costs for ELC and DWSRF to appropriate non-federal funds. • RIDOH has been working to move staff that use the general category codes (i.e., EH Management & Leadership) to non-federal funding sources as much as possible and will begin requiring staff on federal funds to record their hours for each federal grant separately. This is a complicated process and will be fully implemented once Time and Effort reporting is transferred to Workday (the ERP). Anticipated Completion Date: The first three bullets above will be completed by June 30, 2025. Transition of Time and Effort reporting to Workday has been delayed, and the new target implementation date has not been announced. Contact Persons: Alisha Colella, Chief Financial Officer, Department of Health alisha.colella@health.ri.gov Carla Lundquist, Deputy CFO / Federal Grants Manager, Department of Health carla.lundquist@health.ri.gov
View Audit 355126 Questioned Costs: $1
RIDOH agrees with the finding and recommendations and will develop and implement enhanced internal controls over Uniform Grant Spreadsheets (UGSs) to assure that all indirect cost billings and drawdowns of federal funds are appropriate and accurate. The UGS internal controls will include (but are n...
RIDOH agrees with the finding and recommendations and will develop and implement enhanced internal controls over Uniform Grant Spreadsheets (UGSs) to assure that all indirect cost billings and drawdowns of federal funds are appropriate and accurate. The UGS internal controls will include (but are not limited to): • Mandatory refresher training for all staff that complete and/or review UGSs, with focus on areas of potential errors and correct entry of UGS data in the Monthly Federal Grants Tracking spreadsheet used for drawdowns and indirect billing. • Providing a crosswalk of expenditure categories and natural accounts to grants management staff to assure appropriate and consistent assignment of transactions to categories subject to/not subject to indirect costs. • A rotating schedule of monthly in-depth reviews of UGSs to assure that data entry aligns with RIFANS transaction reports, transactions are recorded so natural accounts align with correct expenditure categories, the appropriate indirect cost rate is entered, and formulas for computation of indirect costs are not corrupted. Reviews will be conducted by supervisors of staff completing UGSs, and results will be reported to the Deputy CFO/Federal Grants Manager. • Review of the Monthly Federal Grants Tracking spreadsheets each month before indirect cost billing and federal drawdowns are completed, to assure that expenditures reported align with RIFANS reports and indirect billings and drawdown requests are appropriate. RIDOH credited the ELC Enhancing Detection federal award for the unallowable indirect costs on 3/14/2025 (J25075GMC530). The credit was calculated using RIFANS transaction data from 7/1/2020 through 3/13/2025, not from the UGSs. The UGSs for this award and others are being re-built from the start of the award using RIFANS data in new, less complicated templates to assure correct charging and reporting going forward. Anticipated Completion Date: July 31, 2025 Contact Persons: Alisha Colella, Chief Financial Officer, Department of Health alisha.colella@health.ri.gov Carla Lundquist, Deputy CFO / Federal Grants Manager, Department of Health carla.lundquist@health.ri.gov
View Audit 355126 Questioned Costs: $1
2024-044a: Management agrees with this finding and will communicate the requirements for subrecipient monitoring and specifically the review of single audit reports to our agency partners for implementation. 2024-044b: Management agrees with this finding and will communicate the requirements for su...
2024-044a: Management agrees with this finding and will communicate the requirements for subrecipient monitoring and specifically the review of single audit reports to our agency partners for implementation. 2024-044b: Management agrees with this finding and will communicate the requirements for subrecipient monitoring and specifically the review of single audit reports to our agency partners for implementation. 2024-044c: Management agrees with this finding and will communicate the requirements for subrecipient monitoring; specifically, the documentation of expenses, and meeting notes. Anticipated Completion Date: Completed April 23, 2025 Contact Persons: Paul L. Dion, Director, Pandemic Recovery Office, Department of Administration paul.l.dion@doa.ri.gov Brianna Ruggiero, Chief of Staff, Pandemic Recovery Office, Department of Administration brianna.ruggiero@doa.ri.gov
View Audit 355126 Questioned Costs: $1
Finding 558243 (2024-043)
Significant Deficiency 2024
2024-043a: Office of Performance Management will develop internal policies to explain how Grant reporting requirements are met and will adjust accordingly to comply with the FHWA guidance, as it becomes available. 2024-043b: Office of Performance Management will adopt a standard approval form to si...
2024-043a: Office of Performance Management will develop internal policies to explain how Grant reporting requirements are met and will adjust accordingly to comply with the FHWA guidance, as it becomes available. 2024-043b: Office of Performance Management will adopt a standard approval form to sign off on the required grant submissions. Anticipated Completion Date: December 31, 2025 Contact Person: Anastasia Wachter, Principal Economic and Policy Analyst, Department of Transportation anastasia.wachter@dot.ri.gov
Quonset Development Corporation (QDC) disputes the finding, asserting that since the MARAD grant funding was provided on a reimbursement basis, QDC did not have custody of Federal funds at any point. QDC was required to meet rigorous documentation standards for reimbursement prior to the release of...
Quonset Development Corporation (QDC) disputes the finding, asserting that since the MARAD grant funding was provided on a reimbursement basis, QDC did not have custody of Federal funds at any point. QDC was required to meet rigorous documentation standards for reimbursement prior to the release of any funds. QDC has created written policies and procedures specifically referencing Uniform Guidance in the case we receive Federal funding in the future. These policies will be implemented after the Board of Directors approves such policies at the April 2025 meeting. Anticipated Completion Date: Ongoing Contact Person: Patricia Testa, Chief Financial Officer, Quonset Development Corporation ptesta@quonset.com
Finding 558239 (2024-041)
Significant Deficiency 2024
The Contracts office does not currently have ID/IQ procurement policies and procedures. Contracts will develop ID/IQ Procurement Procedures and submit them to FHWA for review and approval. Anticipated Completion Date: December 31, 2025 Contact Persons: Everett Sammartino, Contracts and Specs Admi...
The Contracts office does not currently have ID/IQ procurement policies and procedures. Contracts will develop ID/IQ Procurement Procedures and submit them to FHWA for review and approval. Anticipated Completion Date: December 31, 2025 Contact Persons: Everett Sammartino, Contracts and Specs Administrator, Department of Transportation everett.sammartino@dot.ri.gov Gary Garzone, Contracts and Specs Assistant Administrator, Department of Transportation gary.garzone@dot.ri.gov
Finding 558236 (2024-040)
Significant Deficiency 2024
Consultants and Sub-Consultants currently submit the Certification of Final Indirect Costs form to the Department of Administration Office of Internal Audit along with supporting documents to establish their Indirect Cost Rate. The Contracts office will request Consultants and Sub-Consultants inclu...
Consultants and Sub-Consultants currently submit the Certification of Final Indirect Costs form to the Department of Administration Office of Internal Audit along with supporting documents to establish their Indirect Cost Rate. The Contracts office will request Consultants and Sub-Consultants include the form with their Fee Proposal. Anticipated Completion Date: April 30, 2025 Contact Persons: Everett Sammartino, Contracts and Specs Administrator, Department of Transportation everett.sammartino@dot.ri.gov Kimberly McDougal, Contracts and Specs Assistant Administrator, Department of Transportation kimberly.mcdougal@dot.ri.gov
UI Administrative staff meet with ETSS staff on a weekly basis to review and prioritize pending projects. The project related to the programming changes that are necessary to incorporate the 15% penalty, on fraud overpayments, is on the list, however, due to the complexity of the programming requir...
UI Administrative staff meet with ETSS staff on a weekly basis to review and prioritize pending projects. The project related to the programming changes that are necessary to incorporate the 15% penalty, on fraud overpayments, is on the list, however, due to the complexity of the programming required as well as other competing obligations previously prioritized, this work has not yet started. Therefore, we anticipate this project will be implemented by next fall. Discussions regarding the non-relief of charges will begin when programming for the 15% project is complete. Anticipated Completion Date: September 30, 2026 Contact Person: Philip D’Ambra, Director of Income Support, Department of Labor and Training philip.l.dambra@dlt.ri.gov
View Audit 355126 Questioned Costs: $1
Finding: 1 of 60 individuals had a return-to-work date submitted by the employer, however, the claimant received three payments after that date. DLT did not investigate any potential overpayment. (Questioned costs - $2,139) We do not concur with this finding. Per ETA guidance, specifically UIPL ...
Finding: 1 of 60 individuals had a return-to-work date submitted by the employer, however, the claimant received three payments after that date. DLT did not investigate any potential overpayment. (Questioned costs - $2,139) We do not concur with this finding. Per ETA guidance, specifically UIPL 01-16, because this claim was in payment status, we have to continue to make timely weekly payments (after proper certification), and an overpayment cannot be deemed recoverable until an official ineligibility determination is rendered. Unemployment Insurance Program Letter 01-16 states “in order to be eligible to receive administrative grants, a state must do the following in context of identifying and establishing improper payments…continue to make timely UC payments (if due) and wait to commence recovery of overpayments until an official determination of ineligibility is made…” In addition to the above requirement, data that State Workforce Agencies gather from crossmatch sources such as IB4, wage record /benefit, SDNH and NDNH wage/benefit have to be verified prior to initiating a decision disqualifying benefits. The actual cross match itself simply produces possible cases to investigate. The investigation is then initiated when the department sends out a request for wages form (720). When the form is returned by the employer the department can then use the verified information to render a disqualifying decision. A crossmatch itself is not enough to render a working and collecting determination based on wage record data as the claimant may have had actual earning within the quarter. The date identified on a NDNH crossmatch also is not enough to render a disqualification. This information needs to be verified. From: Unemployment Insurance 401 Handbook ETA 227 – OVERPAYMENT DETECTION AND RECOVERY ACTIVITIES E. Definitions 4. Cases Investigated. The number of cases emanating from a state-initiated overpayment detection process for which an investigation regarding a potential overpayment has been concluded. Example: during a wage/benefit crossmatch process, a state agency produces a printout identifying all benefit payments matched against wages in the same quarter. After the printout is screened, requests are sent to employers to identify which weeks in the quarter were worked. When an employer reply indicates overlap with weeks for which benefits were paid, claims are investigated to determine if they were overpaid. This was a continued claim that was effective 8/13/23 and the claimant certified weekly through 2/17/24. The RTW date listen on the ledger was autogenerated on 2/27/24. At this time the claimant had exhausted their balance of credits, all benefits had been paid. The date listed as the return-to-work date from the NDNH crossmatch stated 1/30/24. Since this date had the potential to affect benefits the department initiated it’s investigation and did send a 720 form to the employer to obtain the proper wage information. Since the requested information was not returned by the employer, the department lacked the proper information necessary to render a disqualification based on ETA guidelines. Finding: 1 of 60 was not registered within EmployRI and staff were unable to locate any records of the claimant. (Questioned costs - $10,829) The agency concurs with the above finding that includes state UC questioned costs of $10,829. This exception was caused by a programming (IT system) error. A nightly job is run that is sent to Workforce Development (Geosol) which then registers claimant’s with EmployRI. An issue was discovered on claims where the effective date of the claim was 56 days prior to the first payment being issued. These claimants were not populated on the nightly transfer to Workforce. ETSS has confirmed that this programming error has been fixed. We acknowledge the Auditor’s recommendations and offer the following response. We feel the findings, while relevant, are de minimis in scope, when compared to the workload volumes processed. Our current unemployment systems (Tax and Benefits) are aged and distressed. Due to their age and technology constraints, any changes or modifications needed, cannot be easily or quickly implemented. As such a larger burden is placed on staff to handle manually. DLT ‘s limited technology resources combined with having limited staffing resources also hinder our efficiency. We have limited staff resources to manually address our workload volumes, as well as the sheer number of forms involved in making proper determinations. In addition to this, the law requires benefit payments to be made timely based on available information until verifiable evidence is found that justifies a disqualification. Therefore, until we can implement a more modernized tax and benefits system, we acknowledge that similar findings such as these may persist. We will continue to utilize the resources we currently have and strive to be more efficient. We hope that by providing additional staff training and by strengthening our relationship with Workforce Development, this improved efficiency will be realized. We are in the process of evaluating whether or not an amendment to our work search requirement, is needed. In doing so, we will evaluate whether any changes are necessary to either; our internal policy, the guidance provided on the claimant’s benefit rights, the guidance displayed on DLT’s website and to regulation 1.18 Filing of Claims for Unemployment Insurance Benefits. Any necessary modifications will be made. Anticipated Completion Date: December 31, 2025 Contact Person: Philip D’Ambra, Director of Income Support, Department of Labor and Training philip.l.dambra@dlt.ri.gov
View Audit 355126 Questioned Costs: $1
Finding 558223 (2024-037)
Significant Deficiency 2024
RIDE is currently evaluating third-party consultants in order to have the following services performed: • A cybersecurity assessment performed of the overall agency using the NIST Framework • A cybersecurity assessment of our internal applications including CNP Connect & Accelegrants • An updated bu...
RIDE is currently evaluating third-party consultants in order to have the following services performed: • A cybersecurity assessment performed of the overall agency using the NIST Framework • A cybersecurity assessment of our internal applications including CNP Connect & Accelegrants • An updated business continuity plan • A Vendor Risk Assessment Program Development Through the above deliverables from the selected consultant, RIDE will be able to have a better understanding of gaps in IT/ Cybersecurity throughout the agency, as well as the applications cited by the Auditor General. Anticipated Completion Date: December 31, 2025 Contact Person: Brandon Bohl, Finance Director, Department of Elementary and Secondary Educationbrandon.bohl@ride.ri.gov
Finding 558218 (2024-036)
Significant Deficiency 2024
RIDE’s Office of School Health & Wellness will develop a guidance document for LEAs regarding Paid Lunch Equity calculations and send communication at least annually to ensure LEAs have complied with 7 CFR Sec. 210.14(e). Anticipated Completion Date: June 30, 2026 Contact Persons: Brandon Bohl, Fi...
RIDE’s Office of School Health & Wellness will develop a guidance document for LEAs regarding Paid Lunch Equity calculations and send communication at least annually to ensure LEAs have complied with 7 CFR Sec. 210.14(e). Anticipated Completion Date: June 30, 2026 Contact Persons: Brandon Bohl, Finance Director, Department of Elementary and Secondary Education brandon.bohl@ride.ri.gov Rosemary Reilly-Chammat, Director – Office of School Health & Wellness, Department of Elementary and Secondary Education rosemary.reilly-chammat@ride.ri.gov Jennifer Goodwin, School Health Specialist, Department of Elementary and Secondary Education jennifer.goodwin@ride.ri.gov
« 1 629 630 632 633 2228 »