FACEbook

Saturday, November 30, 2013

IRS Program Allows Employees to Access IRS Data on Personal Smartphones

    The Internal Revenue Service is conducting a pilot program allowing IRS employees to use personal smart phones to access government email accounts and other work related information.  The program is known as Bring Your Own Device (BYOD), and the Treasury Inspector General for Tax Administration (TIGTA) has raised concerns about the security and cost-effectiveness of the program in a recent report:
TIGTA expressed concern that the IRS allows BYOD devices access to resources on the IRS network in addition to e-mail access. This increases the risk that privacy and taxpayer data could be compromised. TIGTA also raised concerns about allowing devices based on the Android operating system to participate in the BYOD pilot, because these devices are more subject to malware than the Apple devices tested in earlier phases. 
“A Bring Your Own Device program could provide significant benefits and even potential cost savings,” said J. Russell George, Treasury Inspector General for Tax Administration. “However, the IRS must conduct a thorough, realistic cost-benefit analysis before such a program’s benefit can be appropriately ascertained.”
Among the recommendations made by TIGTA are restricting the program to email access only, and delaying Android-device access completely until a risk assessment addressing security concerns is conducted.  The IRS agreed with all of TIGTA's recommendations except the Android device delay.  TIGTA remains unsatisfied with the IRS's response to the findings in the report:
TIGTA believes that some of the corrective actions proposed by the IRS are inadequate because they are contingent on BYOD expansion or additional funding. The relevant controls should be put in place for the existing BYOD effort, which does not have a clear end date and which is being used by hundreds of employees and devices within the production environment.

Note: A version of this article first appeared at The Weekly Standard. 

Monday, November 25, 2013

National Intelligence 'R' Us

    I performed a public service today for the Office of the Director of National Intelligence.  This tweet appeared this morning:


    Unfortunately, "KRNS"stands for "KNOWLEDGE REPRESENTATION IN NEURAL SYSTEMS", not "reputation," as seen at the link.  I helpfully pointed this out via a tweet of my own:


    A few minutes later:



    Hopefully this incident will not inflict lasting damage on the agency's representation, er, reputation.

HHS Plans to Spend Up to $7B to Find Ways to Reduce Costs Under Obamacare

    The Department of Health and Human Services revealed on Wednesday a plan to spend up to $7 billion to find ways to reduce spending under the Affordable Care Act while maintaining or improving the quality of health care.  The solicitation for bids for this wide-ranging project appeared today on the Federal Business Opportunities website:
The purpose is to develop a Research, Measurement, Assessment, Design, and Analysis (RMADA) IDIQ [Indefinite Delivery, Indefinite Quantity] to respond to expanded needs of the Patient Protection and Affordable Care ACT (ACA) and Health Care reform ACT (HCERA). The work awarded under the RMADA will involve the design, implementation and evaluation of a broad range of research and/or payment and service delivery models to test their potential for reducing expenditures for Medicare, Medicaid, CHIP, and uninsured beneficiaries while maintaining or improving quality of care.
     While the contract is to be an IDIQ contract, meaning that the quantity of work is variable and therefore the price to be paid is not fixed, documents accompanying the contract indicate the maximum is set at $7 billion over the life of the contract:


    While HHS has contracted out such research and modeling work before, the documents suggest that the implementation of the Affordable Care Act has added a new element to this type of project:
The need for analyses based on real time claims and utilization data is a unique factor that distinguishes today’s evaluation of models as opposed to prior demonstrations... Furthermore, because Innovation Center models often include collaboration among multiple payers and other entities, the current evaluation approaches will need to account for the need to gather, coordinate, and analyze private payer and other private data sources. In addition, evaluations involving other entities, such as payers, should plan to examine the role of CMS as a convener and how the model is received by both participating and non-participating affected parties.
    Interested parties have until January 14, 2014 to respond.


Note: A version of this article first appeared at The Weekly Standard.

White House Responds to Criticism of Restrictions on Press... With A White House Photo of Photographers

    On Thursday, a scathing article by Ron Fournier entitled "Obama’s Image Machine: Monopolistic Propaganda Funded by You" ran at National Journal taking the White House to task for shutting out press photographers from presidential events in favor of official White House photos taken by White House photographer Pete Souza.  The article, which received wide play on Thursday, included numerous examples of the superior access Souza has over the press photographers, such as this:


    The frustration is exemplified in the opening anecdote in Fournier's piece:
New York Times photographer Doug Mills strode into Jay Carney's office Oct. 29 with a pile of pictures taken exclusively by President Obama's official photographer at events the White House press corps was forbidden to cover. "This one," Mills said, sliding one picture after another off his stack and onto the press secretary's desk. "This one, too – and this one and this one and … ." 
The red-faced photographer, joined by colleagues on the White House Correspondents' Association board, finished his 10-minute presentation with a flourish that made Carney, a former Moscow correspondent for Time, wince. 
"You guys," Mills said, "are just like Tass."
    Late on Thursday, the White House, as if in response to the criticism, released a photo by Pete Souza -- a photo of photojournalists covering the signing of two bills, the Streamlining Claims for Federal Contractor Employees Act, and the Veterans' Compensation Cost-of-Living Adjustments Act of 2013, neither exactly marquee legislative achievements for the president:


    Perhaps the next time Doug Mills enters Jay Carney's office, he'll find a framed print of this photo on Carney's desk.


Note: A version of this article first appeared at The Weekly Standard.

Playing Chess With Iran

    To hear Obama administration officials tell it, Iran got snookered at the bargaining table in Geneva.  The description of the deal worked out between the P5+1 and the world's largest supporter of terrorism is so one-sided, it's a wonder the foreign minister of Iran will be allowed back into his home country.  Two unnamed senior administration officials held a background conference call with reporters early Sunday morning after Secretary of State Kerry addressed the press about the deal.  Here are a few of their remarks:
  • So these are very important concessions and the most significant progress that has been made in halting the progress of the uranium program in a decade...
  • Along with those agreements come an unprecedented transparency and intrusive monitoring of the Iranian program...
  • This is much more extensive monitoring than we have today, and it is a significant portion of this agreement...
  • So, taken together, again, a halt of activities across the Iranian program, a rollback in certain important elements, and extensive and intrusive monitoring...
  • First and most importantly, [Iranian sanctions] relief is limited, temporary, targeted, and reversible. It is designed so that the core of our sanctions, the sanctions that have had a tremendous bite -- the oil, banking and financial sanctions -- all remain in place. So in that very important respect, this deal is limited...
  • Second, the relief that Iran gets under this agreement is insignificant economically...
  • Iran is not back in business and anyone who makes the mistake of thinking so I think will be met with some serious consequences...
  • The deal that was struck is very limited in terms of the additional business that Iran can engage in...
  • So just looking at oil revenue alone, Iran will actually be worse off at the end of this six-month deal than it is today...
    And all of this while still explicitly acknowledging "Iran’s state sponsorship of terrorism, its destabilizing role in the Syrian conflict, and its abysmal human rights record[.]"  What is in this deal for Iran?  What motive does the regime that still publicly calls for Israel's destruction have?
The purpose of sanctions were not to just have sanctions in place. They were to change the calculus of the Iranian government. We began to see that with the election of a new President who ran on a mandate to achieve sanctions relief through a more moderate foreign policy towards the West. And we had an opportunity, the best opportunity we've had in five years, to test whether we could get an agreement through diplomacy.
    The situation calls to mind an amateur chess player who has just taken an important piece in a game with a grandmaster. "Did you see that?  I took his rook! He's in trouble now!" Meanwhile, the grandmaster is saying, "Wow... never saw that coming!" but a smile is visible behind his eyes as he envisions the endgame twelve moves in the future.  If Iraq, Afghanistan, Libya, Syria and Egypt are any indication, the Obama administration will once again be shaking its head and saying, "But things were going so well..." This time, however, the endgame could be the worst outcome yet: a nuclear Iran.

Saturday, November 23, 2013

Three Month Grace Period Mandated for Delinquent Consumers Who Receive Obamacare Subsidies

    Though the Obama administration has been promoting the benefits of Obamacare for several years now, one perk of coverage through the exchanges that has gone largely unnoticed is a mandated three-month grace period for unpaid premiums.  The rule, however, only applies to those receiving subsidies via tax credits advanced to the insurers by the government (§155.430 and §156.270 of the Code of Federal Regulations.)
    Perhaps most notable about the rule is that, as long as a consumer has paid at least one full month's premium during the year, the insurer must continue to pay claims for services rendered during the first month of the grace period after a premium goes unpaid.  Further, even if coverage is eventually terminated, the effective date must be the last day of the first month of the grace period. The consumer thus receives a free month of coverage for which no direct premium was paid.  The insurer is compensated only to the extent of the advance payment of the tax credit for that month.  The tax credits for the second and third months of the grace period, which the insurer is mandated to continue to collect from the government, must be returned to the government if coverage is ultimately cut off.
    Other burdens relative to delinquencies are placed on the insurers as well.  The insurer must notify not only the consumer of past due status, but HHS as well.  Also, while any claims submitted during the second and third month of the aforementioned grace period may be held by the insurer pending payment from the consumer, the insurer is required to notify providers that claims may be ultimately denied if the grace period expires.
    The regulations do not specify a minimum subsidy required for this regulation to take effect, so even a consumer whose subsidy represents only a small portion of the monthly premium may benefit from the extended grace period.  Also not spelled out in the rules is whether the insurer has any legal recourse for the unpaid premium for the month during which coverage was extended.  Nor is it clear if HHS has recourse against the consumer for the tax credit paid to the insurer for that same month.
    The implementation of the advance payments of tax credits to insurers on behalf of consumers is one of the tasks of Obamacare's financial management system, which is still under development as Deputy Chief Information Officer Henry Chao for the Centers for Medicare and Medicaid Services (CMS) told Congress on Tuesday.  Chao testified the system was approximately 60% complete.  However, as we reported on Thursday, the contract for the financial management system was just awarded this past August on a no-bid, emergency basis.  At the time of the award, CMS admitted that its acquisition of "contractor financial services to assist CMS in developing and testing its Marketplace financial activity implementation solution is already minimally two months overdue[.]"  It is not clear if the 60% figure Chao used on Tuesday includes the testing of the system or simply the development phase.
    Less than six weeks remain before the system will need to go live and, among a multitude of other financial tasks, begin remitting funds to insurers on behalf of consumer who purchase coverage through the exchanges.  CMS does not appear to have an alternative if the system is not ready.  In CMS's own words from the August contract award notification, the consequences, "financial and other," of such a failure would be "severe."


Note: A version of this article first appeared at The Weekly Standard.

UPDATE:  After I wrote my article for The Weekly Standard, I found that Reason had already covered this topic earlier in November.


Friday, November 22, 2013

Government Remains Silent on Emergency, No-Bid Obamacare Financial Management Contract

    Even before the October 1 launch, concerns were mounting over the ability of the government to handle the implementation of the Affordable Care Act (ACA), or Obamacare.  Though many expressed those concerns publicly, insiders at the White House, Health and Human Services (HHS), and the contractors hired to design and run the site and its programs were largely silent about potential pitfalls, or at least downplayed them.  However, some internal memos and reports have since come to light as the "glitches" mounted.  But at least one red flag is hiding in plain sight, and the impacts of the serious concerns expressed in an HHS document first reported on by THE WEEKLY STANDARD on September 16 are still looming against a fast-approaching January 1 deadline.
    In testimony before Congress on Tuesday,  Deputy Chief Information Officer Henry Chao for the Centers for Medicare and Medicaid Services (CMS) addressed a heretofore largely overlooked element of the federal government's role in Obamacare's ongoing functions: what happens beginning in 2014.  The website roll out problems have obscured the larger issue of the ongoing responsibilities of CMS.  But, as Politco reports, Chao spoke to some of those issues on Tuesday:
Financial management tools remain unfinished, he said, particularly the process that will deliver payments to insurers... 
The functions need to operate correctly so insurers can enroll the right people in the right plans. That process, called reconciliation, has to work so people can get the care they seek starting as early as Jan. 1. 
...“back office” functions, including accounting and payment systems, were not yet complete.
    Last Thursday, President Obama said that the problems of Healthcare.gov stem from the fact that it is "very complicated.  The website itself is doing a lot of stuff."  While there may be room for debate about whether Healthcare.gov rivals Amazon or Travelocity in complexity, arguably the real work of the ACA still lies ahead: this financial management of ACA functions over the long haul to which Chao referred.  While the current functions of the website may be complex, the financial management functions that CMS needs to have in place by January 1 are far more involved.  Details of these functions and the concerns CMS expressed about its readiness and ability to carry them out are contained in a Justification and Approval that accompanied the awarding of a no-bid, emergency contract to Novitas Solutions, Inc. in early August of this year.
    THE WEEKLY STANDARD in September reported the $11.6 million contract award, noting that in early August CMS had recognized that the "specialized financial management services and expertise are needed beyond what was initially anticipated and beyond CMS' currently available resources," and that development and testing, at that point less than two months from the October 1 launch and less than five months from the January 1 effective date of new coverage, were "already minimally two months overdue."
    The document is remarkable both for its dire warnings and its candor. CMS disclosed that the need had "reached an unusual and compelling level of urgency. The prospect of a delay in implementing the Marketplace by the operational date of January 1, 2014, even for a few days, would result in severe consequences, financial and other..." and "...if payments are not made and debts are not collected, with critical consideration given to timeliness, accuracy and integrity, the Agency's implementation and operation of the Marketplace and the Affordable Care Act will certainly be jeopardized."  These statements are part of a rather lengthy narrative describing the tenuous position in which CMS found itself, but it is worth an extended look to appreciate the magnitude of the task with which CMS believed it was faced and the level of CMS's concerns regarding the dire circumstances that would likely result from any further delay [emphasis added]:
Since enactment of the Affordable Care Act and establishment of the new Marketplace, CMS has been actively developing and refining new and existing procedures and requirements to ensure the successful implementation and operation of the new, complex Marketplace. Throughout every phase of implementing such a large and dynamic program of a kind that has never been done before and as requirements and procedures are being developed and are emerging, CMS continues to learn, evolve and gain insight. As the deadline for implementing the new Marketplace nears, the Agency has been assessing and testing its plan and solution for implementing the new Marketplace. With every unknown and variable encountered, CMS has been leveraging resources and changing, refining and retesting its solution, to not only ensure that the Marketplace is operational on January 1, 20l4, but to ensure that this vital part of the Affordable Care Act is operating effectively and efficiently with as little complication as possible. CMS has recently learned that specialized financial management services and expertise are needed beyond what was initially anticipated and beyond CMS' currently available resources... 
With the impending and mandated October 1, 20l3 Marketplace enrollment and January 1, 2014 go-live deadlines nearing, CMS' need for contractor-provided financial management services has reached an unusual and compelling level of urgency. The prospect of a delay in implementing the Marketplace by the operational date of January 1, 2014, even for a few days, would result in severe consequences, financial and other. The effect of those consequences would most importantly be measured by the impact to the estimated millions of Americans and small businesses that have no health care today or access to affordable health care. Furthermore, if payments are not made and debts are not collected, with critical consideration given to timeliness, accuracy and integrity, the Agency's implementation and operation of the Marketplace and the Affordable Care Act will certainly be jeopardized.
In addition to the urgent and compelling nature of this requirement and the potential for financial and other harm to the Government if the Marketplace is delayed, regrettably CMS does not have enough time to conduct a full and open or limited competition. Acquiring contractor financial services to assist CMS in developing and testing its Marketplace financial activity implementation solution is already minimally two months overdue; therefore, the contractor will be working under an accelerated and fast-tracked schedule...
    The document goes on to describe how CMS arrived at the decision to award the no-bid contract to Novitas, a contractor that already does a considerable amount of work for CMS.  The approval was signed by no fewer than nine CMS officials, up to and including  Chief Operating Officer A. Michelle Snyder.
    The type of work to be done by Novitas is quite extensive and is itemized in the project description:
The contractor shall provide financial management, accounting and reporting services in support of CMS' administration and oversight of the Marketplace financial activities and functions using CMS' accounting system, the Healthcare Integrated General Ledger Accounting System (HIGLAS) to include: accounting, printing and mailing, tracking of accounts receivable and accounts payable, documenting funds collected by CMS, data validation, activity reporting, debt management functions, application of receipts to appropriate transactions, referral of debt to the Department of the Treasury (Treasury), specified batch payment functions in HIGLAS, and systems interface testing and support for HIGLAS functionality.
     The contract announcement and accompanying documents are not completely clear how these activities translate into functions to carry out the ACA and support Healthcare.gov. For example, regulations governing the marketplaces say that an "Exchange may establish a process to facilitate through electronic means the collection and payment of premiums to QHP issuers."  It remains unclear if Healthcare.gov offers such a facilitation process yet, or if that feature will be activated later. (Maryland recently announced that its state-run exchange was indefinitely suspending the bill-pay feature.)
    In any case, as another example, CMS will be responsible for facilitating the payment of the advance tax credits for consumers receiving government subsidies for their plans.  The regulations describing that one function alone reveal a complex formula to determine how, when, and to whom the funds should be remitted, and notifications and other requirements regarding the disposition of the credits.
    However, since the exact nature of the contractor's work remains unclear, we contacted CMS on September 26 to ask for clarification on the contract, and how the work related to the ACA and its functions.  The following email was received in reply:


    However, despite repeated followup email requests, no further information has been received from Mr. Olague or anyone else at CMS in the seven intervening weeks.  A similar email to the contractor, Novitas, was answered promptly, but the company declined to provide further details and referred questions back to CMS.
    The lack of proper operational and security testing of Healthcare.gov that was revealed in the last month and a half give rise to serious questions about the readiness of other areas under CMS's purview related to Obamacare.  Though the agency acknowledged back in August that development and testing were "already minimally two months overdue," there has been no  publicly available update on the status of the Obamacare financial management system until Chao's rather vague testimony on Tuesday that the system may be 60% or so complete.  Without some level of transparency from CMS, the public has no way of knowing if CMS's warnings of "severe consequences, financial and other" will materialize, or whether concerns that the "Agency's implementation and operation of the Marketplace and the Affordable Care Act will certainly be jeopardized" have been adequately addressed.


Note: A version of this article first appeared at The Weekly Standard.