February 5, 2020

The OIG conducted an audit of CMC Health Plan (CMC), a Texas Medicaid managed care provider, to assess its effectiveness in storing confidential HHS information. CMC provides Medicaid managed care to its members through the STAR Kids program.

CMC is required to protect and secure confidential HHS system information, such as claims data. The OIG conducted this audit to assess the design and effectiveness, during state fiscal years 2018 and 2019, of selected security controls over confidential HHS information.

The report has numerous recommendations to ensure the integrity of the confidential information. Read the report.