Review of Centers for Medicare & Medicaid Services' Medicaid Information Technology Audit Resolution

DEPARTMENT OF HEALTH &. HUMAN SERVICES Office of Inspector General Washington, D.C. 20201 JUN 3 0 2008 TO: Kerry Weems Acting Administrator Centers for Medicare & Medicaid Services FROM: Daniel R. Levinson~ ;e, ~ Inspector General SUBJECT: Review ofCenters for Medicare & Medicaid Services' Medicaid Information Technology Audit Resolution Process (A-04-06-05039) The attached final report provides the results ofour review ofCenters for Medicare & Medicaid Services'. (CMS) Medicaid information technology (IT) audit resolution process. As part ofthe CMS financial statement audits, the Office ofInspector General (OIG) audits State Medicaid agencies' automated data processing methods and practices. OIG performed a series ofthese audits during fiscal years (FY) 2002 through 2005. These audits assessed the adequacy ofthe general controls over information systems that State Medicaid agencies and fiscal agents use to process Medicaid claims and eligibility data. The objective ofour audit was to determine whether CMS had resolved, in a timely manner, all Medicaid-related IT recommendations from OIG reports issued in FYs 2003,2004, and 2005, as ofJune 30, 2007. CMS resolved 17 ofthe 197 Medicaid-related IT recommendations that OIG made between October 2002 and September 2005 within the 6-month periods following the issuance of the final audit reports, as required by regulations. CMS resolved an additional 124 recommendations after the 6-month periods had ...