Utah
Utah Office of the Legislative Auditor General
Published September 25, 2025

A Performance Audit of the Office of Inspector General of Medicaid Services: Policy Options for Improved Governance and Medicaid Oversight

Learn how the AI-generated research projects were created

Overall Conclusion

The report concludes that Utah’s OIG has not adequately fulfilled its Medicaid oversight mandate and suffers from governance, reporting, and performance weaknesses, with risk-based planning and proactive oversight largely missing; it recommends policy options including structural changes to improve accountability and oversight.

Source Document

Audit Scope

2018 through 2024, with portions of 2025, covering the Office of Inspector General of Medicaid Services (OIG) functions, governance, planning, performance audits, and reporting.

Key Findings Summary

1

The OIG Leadership Has Failed to Adequately Prioritize High-Impact Audits and Therefore Has Been Delinquent in Fulfilling its Duties

2

The OIG Does Not Conduct Annual Planning, Limiting Its Ability to Provide Full Medicaid Coverage

3

The OIG Has Provided Insufficient Oversight of Accountable Care Organizations, In Which Other States Have Found Concerning Practices

View the Findings tab to see all 9 findings

AI-Assisted

Generated by gpt-5-nano

AI Scope Summary

Build on this audit by emphasizing future inquiries into formalizing risk-based annual planning, expanding performance audits of cost drivers and program outcomes, strengthening ongoing oversight of Accountable Care Organizations, improving governance and transparency, and evaluating alternative oversight structures used by other states.

AI-Generated Insight

This systemic performance audit identifies chronic governance, planning, and transparency gaps in Utah's OIG for Medicaid, revealing a reactive, under-resourced oversight model with uneven performance metrics. The findings suggest meaningful reforms—potentially restructuring oversight or increasing external accountability—to strengthen Medicaid governance and protect public funds.

Audit Objectives

1

Evaluate whether the Office of Inspector General of Medicaid Services (OIG) has adequately fulfilled its mandate to provide Medicaid oversight, including risk assessment, performance auditing, and reporting, per Utah Code.

2

Assess the governance, leadership, culture, transparency, and accountability within the OIG, and identify gaps in external reporting, ROI, and cost-avoidance metrics.

3

Compare Utah's OIG structure and practices with selected other states (e.g., Texas and New York) to identify best practices and feasible options for policy changes.

4

Identify policy options for Legislature to improve governance, accountability, and effectiveness of the OIG, including potential structural changes to oversight of audit and program integrity functions.

Audit Findings (9)

1

The OIG Leadership Has Failed to Adequately Prioritize High-Impact Audits and Therefore Has Been Delinquent in Fulfilling its Duties

2

The OIG Does Not Conduct Annual Planning, Limiting Its Ability to Provide Full Medicaid Coverage

3

The OIG Has Provided Insufficient Oversight of Accountable Care Organizations, In Which Other States Have Found Concerning Practices

4

The OIG Has Failed to Improve Its Office Governance and Impact

5

The OIG Has Inconsistent Performance Practices and Some Low Performance Outcomes

6

Certain Elements of the OIG’s External Reporting Have Lacked Accuracy and Transparency

7

The OIG Has Operated Under a Limited Oversight Structure

8

The Legislature Should Consider Policy Options to Improve Accountability of The Office of Inspector General

9

The OIG Does Not Publicly Report Medicaid Recommendations as Directed in Utah Code

Recommendations (10)

1

The office reports good coordination with ACOs. However, coordination is not a replacement for oversight. The Office of Inspector General should provide improved oversight of Accountable Care Organizations. We recommend the office perform ongoing risk assessment and regular auditing of these organizations.

2

The Office of Inspector General publicly report its audit recommendations to Medicaid in its annual report and in its annual update to the Legislature. Doing so will improve recommendation quality and promote Medicaid accountability.

3

Program Integrity should conduct a formal analysis of the factors contributing to its inconsistent and, at times, negative return on investment (ROI). Following this analysis, Program Integrity must develop and implement a detailed action plan to enhance its efforts. Proper analysis, planning, and action should increase financial recoveries, ROI, and the office’s overall value.

4

Program Integrity and Audit should formalize and apply best practices for evaluating performance, including individual personnel performance, to ensure that personnel are held accountable to specific, measurable standards. The OIG should develop a comprehensive performance management policy that links performance to specific, quantifiable goals, which will, in turn, lead to more efficient operations and improve overall program effectiveness.

5

The Audit and Program Integrity functions formalize and consistently implement its external reporting processes, ensuring all statutory requirements are met, and that reported metrics are accurate, complete, and presented with transparent and consistent methodologies.

6

Program Integrity should reconsider the usefulness of the cost avoidance metric. If it chooses to continue, the methodology must be formally documented, published on the OIG’s website, and include a clear, justifiable basis for the projection period. All annual reports should clearly detail the calculations and assumptions used to arrive at the final cost avoidance.

7

The Office of Inspector General should prioritize the office’s work according to the highest overall risk. The office should perform ongoing, holistic, risk-based assessments of the Medicaid program to ensure high impact risks are identified.

8

The Office of Inspector General should continually engage in performance-based auditing of Medicaid by reviewing for cost efficiencies, effectiveness, and outcomes. The office can do this by including performance elements for Medicaid in its annual risk assessment and reporting its results in its annual report. Doing so will add greater value and accountability.

9

The Office of Inspector General should provide additional value-added analyses by providing cost-efficiency, cost-driver, and other timely Medicaid-related information to the Legislature. This information should be included in its annual report to the Legislature. Doing so will ensure the office maximizes its expected Medicaid expertise to the State of Utah.

10

The Office of Inspector General conduct annual planning, considering broad coverage of Medicaid operations. The office should regularly report to the Legislature on its progress toward its annual work plan, including details on audit activities, audits initiated and finalized, and audit findings. Doing so will ensure the office is focused on demonstrating broad coverage and accountability for the entire Medicaid program.