ISA-2013-4410

This audit was conducted to determine whether the Department of Health and Human Services has properly tested its new Medicaid computer system before it goes live on July 1, 2013. The Department failed to fully test the system, and the production testing process had flaws. Key decisions about user accounts and privacy and security procedures have yet to be made. Independent verification of test results was not conducted and a vendor was permitted to set its own guidelines for whether its work was acceptable. No formal criteria exists to determine whether the new system is ready to go-live. Generally, the Department agreed with our findings and recommendations. Details about each item are provided in the Findings and Recommendations section of the report.