State Compliance Examination For The Two Years Ended June 30, 2025

2025-001 Inadequate Controls Over Eligibility Determinations and Redeterminations — Material Weakness and Material Noncompliance.

2025-002 Inadequate Controls Over Personal Services — Material Weakness and Material Noncompliance.

2025-003 Inadequate Controls Over Accounts Receivable — Material Weakness and Material Noncompliance.

2025-004 Weaknesses in Cybersecurity Programs and Practices — Significant Deficiency and Noncompliance.

2025-005 Failure to Establish the Long-Term Services and Supports Workgroup — Significant Deficiency and Noncompliance.

2025-006 Inadequate Internal Controls Over Required Reporting — Significant Deficiency and Noncompliance.

2025-007 Voucher Processing Weakness — Significant Deficiency and Noncompliance.

2025-008 Inadequate Controls Over State Vehicles — Significant Deficiency and Noncompliance.

2025-009 Noncompliance with the Requirements of the Illinois Insurance Code — Significant Deficiency and Noncompliance.

2025-010 Inadequate Controls Over Agency Workforce Reports — Significant Deficiency and Noncompliance.

2025-011 Inadequate Information Technology General Controls — Significant Deficiency and Noncompliance.

2025-012 Failure to Share Leading Indicators — Significant Deficiency and Noncompliance.

2025-013 Inadequate Controls Over Data Protection — Significant Deficiency and Noncompliance.

Strengthen internal controls to complete certification of applications and redeterminations timely.

Improve timeliness and accuracy of personnel evaluations and ensure HIPAA training and ANCRA documentation are completed.

Strengthen internal controls over accounts receivable processing and certify or offset uncollectible debts where appropriate.

Establish a comprehensive cybersecurity risk assessment and document data classifications and safeguards based on classifications.

Establish the LTSS Disparities Workgroup and perform statutory duties including annual reports.

Publish statutorily required reports on the Department's website, include required information in General Assembly submissions, file reports with the State Library distributions center, and maintain a complete publications population.

Improve voucher processing controls to ensure timely approval and prevent duplicate payments; recover any overpayments.

Maintain accurate vehicle populations and ensure timely vehicle maintenance and inspections.

Collaborate with the Department of Insurance to ensure timely submission of the annual insurance code reports and implement guidance for parity requirements.

Strengthen controls over the Agency Workforce Report preparation and file corrected reports as needed.

Improve IT general controls, including access provisioning and change management, with population completeness.

Share leading indicators with MCOs and care entities and implement guidance for responses to lead indicators.

Improve data protection controls and establish proper data wiping documentation and procedures.