SOCIAL SECURITY ADMINISTRATION

ADMINISTRATIVE COSTS
CLAIMED BY THE
GEORGIA DISABILITY
ADJUDICATION SERVICES

August 2008

A-04-08-18013

AUDIT REPORT

Mission

By conducting independent and objective audits, evaluations and investigations, we inspire public confidence in the integrity and security of SSA's programs and operations and protect them against fraud, waste and abuse. We provide timely, useful and reliable information and advice to Administration officials, Congress and the public.

Authority

The Inspector General Act created independent audit and investigative units, called the Office of Inspector General (OIG). The mission of the OIG, as spelled out in the Act, is to:

Conduct and supervise independent and objective audits and investigations relating to agency programs and operations.
Promote economy, effectiveness, and efficiency within the agency.
Prevent and detect fraud, waste, and abuse in agency programs and operations.
Review and make recommendations regarding existing and proposed legislation and regulations relating to agency programs and operations.
Keep the agency head and the Congress fully and currently informed of problems in agency programs and operations.

To ensure objectivity, the IG Act empowers the IG with:

Independence to determine what reviews to perform.
Access to all information necessary for the reviews.
Authority to publish findings and recommendations based on the reviews.

Vision

We strive for continual improvement in SSA's programs, operations and management by proactively seeking new ways to prevent and deter fraud, waste and abuse. We commit to integrity and excellence by supporting an environment that provides a valuable public service while encouraging employee development and retention and fostering diversity and innovation.

MEMORANDUM

Date: August 20, 2008

To: Paul D. Barnes
Regional Commissioner Atlanta

From: Inspector General

Subject: Administrative Costs Claimed by the Georgia Disability Adjudication Services (A-04-08-18013)

OBJECTIVE

Our objectives were to
evaluate the Georgia Disability Adjudication Services' (GA-DAS') internal controls over the accounting and reporting of administrative costs,
determine whether costs GA-DAS claimed for Fiscal Years (FY) 2005 and 2006 were allowable and funds were properly drawn, and
assess limited areas of the general security controls environment.

BACKGROUND

Disability determinations under the Social Security Administration's (SSA) Disability Insurance and Supplemental Security Income programs are performed by disability determination services (DDS) in each State or other responsible jurisdiction, according to Federal regulations. Each DDS is responsible for determining claimants' disabilities and ensuring adequate evidence is available to support its determinations. To make proper disability determinations, each State is authorized to purchase consultative examinations and medical evidence of record from the claimants' physicians or other treating sources. SSA pays the State agency 100 percent of allowable expenditures using a State Agency Report of Obligation for SSA Disability Programs, Form SSA 4513. The DDS withdraws Federal funds through the Department of the Treasury's (Treasury) Automated Standard Application for Payments (ASAP) system to pay for program expenditures.

GA-DAS is a division of the Georgia Department of Labor's (GA-DoL) Rehabilitation Services. It is located in Stone Mountain, Georgia, and has three branch offices in Thomasville, Athens, and Savannah, Georgia. GA-DoL maintains GA-DAS' official accounting records and prepares its Forms SSA 4513. For additional background, scope and methodology, see Appendix B.

RESULTS OF REVIEW

GA-DAS' internal controls over the accounting and reporting of administrative costs for FY 2006 were generally adequate to ensure costs claimed were allowable and funds were properly drawn. However, for FY 2005, GA-DAS and its parent agency (GA-DoL) could not provide data by category to support most costs claimed on the Form SSA 4513. As such, we did not rely on the data to perform all of our audit tests for that year.

GA-DoL explained that a system error occurred in its accounting software during the first quarter of FY 2005 that resulted in the inadvertent allocation of indirect costs across direct cost transactions (for example, a portion of indirect costs was inadvertently added to transportation expenses). GA-DoL was unable to correct the error, which impacted how it reported costs on the Form SSA-4513 for the entire year. To adjust for the error,
GA-DoL estimated the amounts claimed in each of the Form SSA-4513 cost categories except for the expenditures in the Medical Costs category, which were not affected by the error.

In total, costs claimed on the FY 2005 Form SSA-4513 reconciled with data in the GA DoL accounting system. However, because GA-DoL had to estimate the amounts claimed in the separate Form SSA-4513 cost categories, its accounting system data did not reconcile to the Form SSA-4513 cost categories (except for the Medical Costs category). As such, we did not rely on the FY 2005 data other than Medical Costs and consequently deemed the scope of our audit to be limited. Specifically, for FY 2005, our audit was limited to tests of medical expenditures, cash management procedures and general security controls. Accordingly, we reported only on the controls and costs tested in FY 2005.

We did perform tests of reasonableness on the total costs claimed by the GA-DAS in FY 2005. That is, we compared the total costs with those claimed in previous periods and FY 2006. We concluded the total amount GA-DAS claimed in FY 2005 appeared reasonable. However, except for the Medical Costs-which we determined to be allowable-we could not report on whether all of the costs claimed on the Form SSA 4513 were allowable.

Regarding cash management, in FY 2006, GA-DAS withdrew $10,277 more from its Treasury ASAP account than it reported in actual expenditures. Additionally, GA-DAS did not adjust unliquidated obligations totaling $29,914 in FYs 2005 and 2006. We also determined that physical security controls could be improved at the three GA-DAS branch offices-Thomasville, Athens and Savannah.
For additional information related to our FY 2005 scope limitation, see Appendix B.

CASH MANAGEMENT

Cash Draws Exceeded Reported Expenditures

In FY 2006, GA-DAS withdrew $10,227 more from its Treasury ASAP account than it reported in actual expenditures on its Form SSA-4513 (see Table 1).

Table 1: Cash Draws Exceeded Reported FY 2006 Expenditures
ASAP
Cash
Draws Expenditures
Per
Form SSA-4513 ASAP Draws Exceed Expenditures
$48,008,557 $47,998,330 $10,227

Each year, SSA authorizes a budget to reimburse GA-DAS for its allowable expenditures. The total budgeted funds are not immediately available to GA-DAS. Rather, during the FY, SSA intermittently creates an "obligational authorization" that releases a portion of the budgeted funds to the Treasury ASAP account for GA-DAS' use. GA-DAS has a separate ASAP account for each FY. In FY 2006, GA-DAS periodically withdrew funds from the ASAP account up to the SSA-authorized funding level. As of December 31, 2007, GA-DAS had drawn $10,227 more in ASAP funds than it claimed as expenditures on its Form SSA-4513. Proper cash management and accounting practices dictate that cash draws match reported expenditures.

Unliquidated Obligations

GA-DAS did not adjust unliquidated obligations, totaling $29,914, for its FYs 2005 and 2006 authorizations (see Table 2). SSA policy requires that States review the status of unliquidated obligations at least once a month and cancel those that are no longer needed.

Table 2: Unliquidated Obligations FYs 2005 and 2006
Form SSA-4513 Cost Category FY 2005 FY 2006 Total
Personnel $ 0 $0 $0
Medical 10,263 16,245 26,508
Indirect 0 0 0
All Other 0 3,406 3,406
Totals $10,263 $19,651 $29,914

As of December 31, 2007, the FY 2006 Form SSA-4513, shows total expenditures and obligations that exceed SSA's authorized funding by $9,424 (see Table 3).

Table 3: FY 2006-Expenditures and Obligations Exceed Funding
SSA
Authorized Funding Form SSA 4513 Expenditures
Form SSA 4513 Unliquidated Obligations Total
Expenditures
& Obligations Expenditures
& Obligations
that Exceed Funding
$48,008,557 $47,998,330 $19,651 $48,017,981 $9,424

A GA-DAS official stated GA-DAS will need to investigate both the FYs 2005 and 2006 unliquidated obligations to determine whether the funds are still needed. If
GA-DAS determines the FY 2006 funds are necessary, it will need to request additional funding from SSA to cover its expenditures. Conversely, if GA-DAS determines the funds are not necessary, it will need to return $10,227 in ASAP draws that exceed the expenditures reported on the Form SSA-4513 (as of December 31, 2007). The refund would be required because, as previously discussed, GA-DAS has already drawn its entire authorized funding.

GENERAL SECURITY CONTROLS

SSA's policy requires that DDSs adequately safeguard claimant/program information. Further, the Agency provides guidelines for protecting the DDS facilities and their personnel. Although the physical security controls were adequate at the GA-DAS headquarters facility in Stone Mountain, Georgia, the physical security controls could be improved at all three branch offices.

Thomasville Branch Office-Perimeter Security Enhancements Needed

Physical security controls at the Thomasville branch did not adequately prevent unauthorized access to the building. The Thomasville facility is located in a privately owned, single-story building and is occupied solely by GA-DAS. There are windows along three sides of the building, and three doors provide access to the building.

The building was not protected with on-site security guard service. Additionally, neither an intrusion detection system (IDS) nor a surveillance system had been installed. The perimeter doors were not solid wood core, metal sheathed, or protected with a 1-inch deadbolt or its equivalent. One of the emergency exit doors had restricted visibility and did not have a peephole. Also, GA-DAS management reported on SSA's Annual Security Self Review Checklist and Risk Assessment that the office windows were not well constructed and did not have adequate locks.

Overall, the physical security controls did not adequately protect or limit access to the Thomasville office. GA-DAS and SSA regional officials stated they were aware of the limited physical security controls and that a relocation plan had been initiated by
GA-DAS, but a site and date for the relocation had not been determined. A representative from the Atlanta Region Center for Disability explained that restricted budgets and the uncertainty as to how much longer GA-DAS will remain at the current site, had delayed SSA from funding major building improvements needed to enhance the physical security controls. However, given that there is no definite schedule in GA-DAS' plan to relocate the Thomasville office, SSA should consider funding cost-effective improvements that would enhance physical security.

Athens Branch Office

The Athens office had neither an IDS nor a surveillance system. According to SSA policy, an IDS is required in all facilities unless determined unnecessary. A GA-DAS risk assessment of the Athens branch office concluded that security could be improved with the installation of an IDS, pending funds availability.

The Athens office is located on the second floor of a privately owned, multi-tenant, two-story building. The public enters the office via the reception area, which is adjacent to the reception office. The two rooms are separated by a wall, and the only access to the GA-DAS is through a locked door. There are panic alarms in the reception area and the receptionist's office. With the exception of the main entrance door, all other external doors are locked. GA-DAS staff enter the office through a separate door that is protected with a pass code keypad lock.

The second floor location and the existing perimeter security controls limit access to the GA-DAS. Nevertheless, in accordance with SSA policy, an IDS should be in place to improve 24-hour office security.

Savannah Branch Office

The Savannah office does not have on-site security guard services or an IDS. According to SSA policy, an IDS is required in all facilities unless determined unnecessary. A GA-DAS risk assessment of the Savannah branch office concluded that security could be improved with the installation of an IDS, pending funds availability.

The Savannah office is located in a privately owned, two-story, multi-tenant building. Windows are present on both floors of the building. GA-DAS occupies portions of both floors, with most of the staff located on the second floor. Public access to GA-DAS is limited to the first floor from the lobby area. There is a security partition between the lobby and reception area, and access to the reception area is restricted through a door secured with a pass code keypad lock.

Although perimeter security controls generally limit access to GA-DAS, in accordance with SSA policy, an IDS should be in place to improve 24-hour office security and add an additional safeguard for claimants' personally identifiable information.

CONCLUSION AND RECOMMENDATIONS

GA DAS' internal controls over the accounting and reporting of administrative costs for FY 2006 were generally effective to ensure costs claimed were allowable and funds were properly drawn. However, because of an accounting system error, GA-DoL could not provide data by cost category to support most costs claimed on the FY 2005 Form SSA-4513. As such, we could not rely on the data to perform all of our audit tests for that year, which limited the scope of our audit. We did perform tests to determine the reasonableness on the total costs claimed for FY 2005, which appeared reasonable when compared to other years. Moreover, the accounting system error was corrected, and the FY 2006 data were reliable. However, even though the FY 2005 appeared reasonable, because of the scope limitation, we could not determine whether all costs claimed for FY 2005 were allowable. We encourage SSA and GA-DoL to closely monitor system controls to prevent a recurrence. Additionally, we will review these controls in future audits of GA-DAS' administrative costs.

Regarding cash management, FY 2006 ASAP cash draws exceeded the total disbursements and obligations reported on GA-DAS' Forms SSA-4513 by $10,227. Also, GA-DAS did not adjust unliquidated obligations of $10,263 and $19,651 for its FYs 2005 and 2006 authorizations, respectively. Lastly, the physical security controls at the three branch offices could be improved.

Accordingly, we recommend that SSA:

1. Instruct GA-DAS to review unliquidated obligations totaling $29,914 in FYs 2005 and 2006, and cancel those that are no longer needed. If GA-DAS determines the FY 2006 unliquidated obligations are not needed, GA-DAS will need to return $10,227 due to the excess ASAP cash draws.
2. Assess the physical security controls at the Thomasville branch office and determine what cost-effective improvements should be made to enhance physical security.
3. Install an IDS in the Athens and Savannah branch offices.

AGENCY COMMENTS

In commenting on our draft report, SSA and GA-DoL generally agreed with our recommendations. See Appendices D and E, respectively, for the full text of SSA's and GA-DoL's comments.

OTHER MATTERS

In September 2005, we issued a report on Disability Determination Services' Use of Social Security Numbers on Third Party Correspondence. In this report, we recommended that SSA:

Clarify existing policy to define what third parties may be provided a claimant's SSN [Social Security number] as a part of the DDS's disability determination process. To ensure SSN integrity, we believe the SSN should only be disclosed when it is critical to a third party's ability to adequately respond to the DDS's information request.

SSA agreed with this recommendation and stated:

A claimant's SSN should only be disclosed when it is critical to a third party's ability to adequately respond to a DDS's information request. We will review and, to the extent necessary, clarify our existing policy to more clearly define which third parties should be provided a claimant's full or partial SSN as part of the DDS evidence collection process.

We asked GA-DAS if it disclosed claimants' SSN's on documents sent to third parties. GA-DAS confirmed that it includes claimants' SSN's on requests for medical evidence of record and consultative examinations requests, and has been doing so for many years. We believe GA-DAS should take steps to exclude the SSN from documents it sends to third parties.

Patrick P. O'Carroll, Jr.

Appendices
APPENDIX A - Acronyms
APPENDIX B - Background, Scope and Methodology
APPENDIX C - Schedule of Total Costs Reported on Forms SSA-4513-State Agency Report of Obligation for SSA Disability Programs
APPENDIX D - Agency Comments
APPENDIX E - Georgia Department of Labor Comments
APPENDIX F - OIG Contacts and Staff Acknowledgments

Appendix A
Acronyms

Act Social Security Act
ASAP Automated Standard Application for Payments
C.F.R. Code of Federal Regulations
DDS Disability Determination Services
DI Disability Insurance
Form SSA-4513 State Agency Report of Obligation for SSA Disability Programs
FY Fiscal Year
GA-DAS Georgia Disability Adjudication Services
GA-DoL Georgia Department of Labor
IDS Intrusion Detection System
OMB Office of Management and Budget
POMS Program Operations Manual System
SSN Social Security Number
SSA Social Security Administration
SSI Supplemental Security Income
Treasury Department of the Treasury

Appendix B
Background, Scope, and Methodology

BACKGROUND

The Disability Insurance (DI) program, established under Title II of the Social Security Act (Act), provides benefits to wage earners and their families in the event the wage earner becomes disabled. The Supplemental Security Income (SSI) program, established under Title XVI of the Act, provides benefits to financially needy individuals who are aged, blind, or disabled.

The Social Security Administration (SSA) is responsible for implementing policies for the development of disability claims under the DI and SSI programs. Disability determinations under both the DI and SSI programs are performed by disability determination services (DDS) in each State, Puerto Rico and the District of Columbia in accordance with Federal regulations. In carrying out its obligation, each DDS is responsible for determining claimants' disabilities and ensuring adequate evidence is available to support its determinations. To assist in making proper disability determinations, each DDS is authorized to purchase medical examinations, x-rays, and laboratory tests on a consultative basis to supplement evidence obtained from the claimants' physicians or other treating sources.

SSA reimburses the DDS for 100 percent of allowable expenditures up to its approved funding authorization. The DDS withdraws Federal funds through the Department of the Treasury's (Treasury) Automated Standard Application for Payments system to pay for program expenditures. Funds drawn down must comply with Federal regulations and intergovernmental agreements entered into by Treasury and States under the Cash Management Improvement Act of 1990. An advance or reimbursement for costs under the program must comply with the Office of Management and Budget's (OMB) Circular A-87, Cost Principles for State, Local, and Indian Tribal Governments. At the end of each quarter of the Fiscal Year (FY), each DDS submits a State Agency Report of Obligation for SSA Disability Programs, Form SSA-4513, to account for program disbursements and unliquidated obligations.

SCOPE

To accomplish our objectives, we reviewed the administrative costs Georgia Disability Adjudication Services (GA-DAS) reported on its Forms SSA-4513 for FYs 2005 and 2006. However, our audit tests were limited in FY 2005.

Scope Limitation

For FY 2005, we could not rely on the electronic data submitted by Georgia Department of Labor (GA-DoL) to support the administrative costs claimed on the Form SSA-4513. Specifically, the FY 2005 electronic data did not reconcile by cost category with the costs claimed on the Form SSA-4513, except for the medical expenditure transactions in the Medical Costs category. The GA-DoL explained that an electronic accounting system error occurred in the first quarter of FY 2005. The error occurred when an accounting systems application was executed to compute the first quarter indirect costs. The system application inadvertently allocated indirect costs throughout the individual direct cost transactions. GA-DoL was unable to correct the error, and the error impacted the costs reported on the Form SSA-4513 for the entire FY.

A GA-DoL official explained the total costs reported on the Form SSA-4513 were accurate. However because of the system error, GA-DoL had to estimate the costs claimed in each cost category identified on the Form SSA-4513, except for the expenditures in Medical Costs. The Medical Costs claimed on the Form SSA-4513 were accurate because the system application that caused the problem was not executed on the medical expenditure transactions.

Because of the accounting system error, we could not rely on the FY 2005 data, except for the data supporting the Medical Costs. Consequently, we determined the scope of our audit to be limited. For FY 2005, we limited our audit tests to the Medical Costs transactions, cash management procedures and select general security controls. Accordingly, we reported only on the controls and costs tested in FY 2005.

For the periods reviewed, we obtained evidence to evaluate recorded financial transactions and determine whether they were allowable under OMB Circular A-87, as appropriate, as defined by SSA's Program Operations Manual System (POMS).

We also:
Reviewed applicable Federal laws, regulations and pertinent parts of POMS, DI 39500, DDS Fiscal and Administrative Management, and other instructions pertaining to administrative costs incurred by GA-DAS and draw down of SSA funds.
Interviewed staff at GA-DAS and the SSA regional office.
Evaluated and tested internal controls regarding accounting and financial reporting and cash management activities.
Verified the reconciliation of official State accounting records to the administrative costs reported by GA-DAS on Forms SSA-4513 for FYs 2005 and 2006.
Examined the administrative expenditures (Personnel, Medical, and All Other
Non-personnel Costs) incurred and claimed by GA-DAS for FY 2006. For FY 2005 our tests were limited to Medical Costs.
Examined the indirect costs claimed by GA-DAS for FY 2006 and the corresponding Indirect Cost Allocation Plan.
Compared the amount of SSA funds drawn to support program operations to the allowable expenditures reported on Forms SSA-4513. Tests were performed on both FYs 2005 and 2006 Forms SSA-4513.
Determined the reasonableness of the costs claimed on the FY 2005 Form SSA 4513 by comparing the cost for that year with the costs claimed for other FYs Forms SSA-4513.
Reviewed the State of Georgia's Single Audit reports issued in 2005 and 2006.
Conducted limited general controls testing-which encompassed reviewing the physical access security in the GA-DAS. Specifically, we visited and performed tests of the general security controls at the Stone Mountain, Thomasville, and Athens, Georgia, offices. For the Savannah office, we reviewed the GA-DAS Annual Security Plan and interviewed SSA regional office and GA-DAS staff.

The FY 2006 electronic data used in our audit were sufficiently reliable to achieve our audit objectives. Additionally, we determined GA-DAS' FY 2005 electronic data detailing the medical expenditure transactions in the Medical Costs category were reliable to achieve our objectives. We assessed the reliability of the electronic data by reconciling them with the costs claimed on the Forms SSA-4513. We also conducted detailed audit testing on selected data elements in the electronic data files.

We performed our audit at GA-DoL in Atlanta, Georgia; GA-DAS in Stone Mountain, Thomasville, and Athens, Georgia; and the Office of Audit in Atlanta, Georgia, from May 2007 through February 2008. We conducted this financial audit in accordance with generally accepted government auditing standards. Those standards require that we plan and perform the audit to obtain sufficient, appropriate evidence to provide a reasonable basis for our findings and conclusions based on our audit objectives.

METHODOLOGY

Our sampling methodology encompassed the three areas of direct costs reported on Forms SSA 4513: (1) Personnel, (2) Medical, and (3) All Other Non personnel Costs. We obtained computerized data from GA-DoL for FYs 2005 and 2006 for use in statistical sampling.

Personnel Costs

We reviewed a random sample of 50 personnel transactions from 1 randomly selected pay period in FY 2006. Because the electronic data file is on a monthly pay basis and the pay period information is presented on a semi-monthly basis, we also reviewed the pay period following the one selected. In addition, we reviewed all 50 medical consultants' transactions from 1 randomly selected pay period in FY 2006. We tested payroll records to ensure GA-DoL correctly paid these employees and adequately supported the payments.

Medical Costs

We reviewed 100 Medical Costs items from FYs 2005 and 2006 (50 items from each FY) using a stratified random sample. We distributed the sample items between medical evidence of record and consultative examinations based on the proportional distribution of the total medical costs for each year. We determined whether sampled costs were properly reimbursed.

All Other Non-Personnel Costs

We stratified All Other Non-personnel Costs for FY 2006 into 10 categories: (1) Occupancy, (2) Contracted Costs, (3) Electronic Data Processing Maintenance, (4) Equipment Purchases, (5) Equipment Rental, (6) Communications, (7) Applicant Travel, (8) DDS Travel, (9) Supplies, and (10) Miscellaneous. To test occupancy costs, we randomly selected 1 month in the FY and reviewed all occupancy expenditures for that month, the months that preceded and followed the selected month (a total of
3 months were reviewed). Next, we randomly selected 50 transactions from the 9 remaining cost categories. The number of sample items selected from each of the nine cost categories for each year was based on the proportional distribution of the costs included in each cost category for that year.

Appendix C
Schedule of Total Costs Reported on Forms SSA-4513-State Agency Report of Obligation for Social Security Administration Disability Programs

Georgia Disability Adjudication Services
(As of December 31, 2007)
FY 2005
REPORTING ITEMS DISBURSEMENTS UNLIQUIDATED OBLIGATIONS TOTAL
OBLIGATIONS
Personnel $29,784,265 $0 $29,784,265
Medical 13,319,699 10,263 13,329,962
Indirect 2,955,450 0 2,955,450
All Other 5,459,859 0 5,459,859
TOTAL $51,519,273 $10,263 $51,529,536
FY 2006
REPORTING ITEMS DISBURSEMENTS UNLIQUIDATED OBLIGATIONS TOTAL
OBLIGATIONS
Personnel $28,675,955 $0 $28,675,955
Medical 11,087,805 16,245 11,104,050
Indirect 3,064,007 0 3,064,007
All Other 5,170,563 3,406 5,173,969
TOTAL $47,998,330 $19,651 $48,017,981

Appendix D
Agency Comments

MEMORANDUM

Date: July 24, 2008
To: Inspector General

From: Regional Commissioner Atlanta

Subject: Administrative Costs Claimed by the Georgia Disability Adjudication Services (A-04-08-18013, Your Memorandum, 7/2/08)--REPLY

Thank you for the opportunity to comment on the validity of the facts and reasonableness of the recommendations presented in your draft audit report
(A-04-08-18013) of the administrative costs claimed by the Georgia Disability Adjudication Services (GA-DAS).

Overall, we believe that the Office of Inspector General (OIG) audit for fiscal years (FYs) 2005 and 2006 was detailed and thorough. We concur with the finding that the GA-DAS's internal controls over the accounting and reporting of their administrative costs are generally effective to ensure that costs claimed are allowable and funds are being properly drawn. We have the same concerns, though, regarding the systems accounting error experienced by the GA-DAS's parent agency, the Georgia Department of Labor (GA-DOL), in the first quarter of fiscal year 2005 that prevented them from providing documentation by cost category to support the SSA-4513 for that same year. We believe from working with them for many years, however, that this statewide problem was an isolated incident, beyond the control of the GA-DAS, and that the data eventually provided to support the costs claimed was reasonable and consistent with other fiscal information. Please know that SSA will continue to work with both the GA-DAS and GA-DOL to monitor system controls.

We have reviewed the specific recommendations cited in your report regarding reconciliation of several cash draws and physical security controls at the GA-DAS's branch offices, and our comments are provided below:

1. Instruct GA-DAS to review unliquidated obligations totaling $29,914 in FYs 2005 and 2006, and cancel those that are no longer needed. If GA-DAS determines the FY 2006 unliquidated obligations are not needed, GA-DAS will need to return $10,227 due to the excess Automated Standard Application for Payments (ASAP) cash draws.

While the GA-DAS did not initially adjust unliquidated obligations in the amount of $10,263 and $19,651 for FYs 2005 and 2006 respectively (totaling $29,914 as noted in the draft report), this action has now been taken on subsequent
SSA-4513s. In addition, the cash draw for $10,227 in 2006 that exceeded the amount shown on an earlier SSA-4513 has been corrected with an adjustment for that same amount and documented on a subsequent SSA-4513.

Please know that SSA had notified both the GA-DAS and GA-DOL regarding these discrepancies and had requested the necessary adjustment, which was subsequently taken. We will continue to monitor fiscal controls to ensure that all records balance and that cash draws do not exceed obligations.

2. Assess the physical security controls of the Thomasville branch office and determine what cost-effective improvements should be made to enhance physical security.

We concur with the findings in the draft report regarding the need for additional security improvements and controls at the Thomasville office and have discussed the issue at length with the GA-DAS Director, Mickey Alberts. During the actual audit review, Ms. Alberts explained that she was not taking current action to make costly improvements to this office because they were in the process of putting together a cost benefit analysis and proposal to relocate the Thomasville office. Overall, since the GA-DAS sees the need to move that office due to critical space and health issues, in addition to security concerns that would require extensive renovations, they are not planning on making security improvements at this time.

The GA-DOL is supportive of the plan to relocate versus renovate the office, and SSA expects to receive the relocation request for approval shortly. Please know, though, SSA will work with the GA-DAS to identify any critical, short-term security improvements that can be made while the relocation process is moving forward, especially since the GA-DAS believes that it will take well over a year to relocate that office after final approval for the project is given by both SSA and GA-DOL.

3. Install an Intrusion Detection System (IDS) in the Athens and Savannah branch offices.

While both the Athens and Savannah branch offices of the GA-DAS have secure office space, with public access limited to a reception area that has a locked doorway between the lobby and work area, we concur with this OIG recommendation. No security problems have been reported in either of these offices to date due to the lack of an IDS; however, we agree that installation of such a system would certainly provide an additional safeguard for claimants' personally identifiable information, as well as general 24-hour security.

Please know that this issue has been discussed with Mickey Alberts, who had her staff obtain bids for installation of an IDS in both offices as a result of the OIG recommendation. The cost estimates were submitted to SSA last week, and both have been approved. Accordingly, the GA-DAS will be installing intrusion detection systems in the Athens and Savannah offices, and we expect the action to be completed before the end of this fiscal year.

Please contact me if you have any questions or concerns before our final comments are made. Staff questions should be referred to Barbara Hites in the Atlanta Region's Center for Disability at 404-562-1419 or Karen Killam in the Financial Management Team at 404-562-5727.

Paul D. Barnes

Appendix E
Georgia Department of Labor Comments

Appendix F
OIG Contacts and Staff Acknowledgments
OIG Contacts
Kimberly A. Byrd, Director, (205) 801-1650
Frank Nagy, Audit Manager, (404) 562-5552
Acknowledgments
In addition to those named above:
Luis Alberto Ramírez Robert, Program Analyst
Charles Lober, Information Technology Specialist

For additional copies of this report, please visit our web site at www.socialsecurity.gov/oig or contact the Office of the Inspector General's Public Affairs Specialist at (410) 965-3218. Refer to Common Identification Number A-04-08-18013.

Overview of the Office of the Inspector General
The Office of the Inspector General (OIG) is comprised of an Office of Audit (OA), Office of Investigations (OI), Office of the Counsel to the Inspector General (OCIG), Office of External Relations (OER), and Office of Technology and Resource Management (OTRM). To ensure compliance with policies and procedures, internal controls, and professional standards, the OIG also has a comprehensive Professional Responsibility and Quality Assurance program.

Office of Audit
OA conducts financial and performance audits of the Social Security Administration's (SSA) programs and operations and makes recommendations to ensure program objectives are achieved effectively and efficiently. Financial audits assess whether SSA's financial statements fairly present SSA's financial position, results of operations, and cash flow. Performance audits review the economy, efficiency, and effectiveness of SSA's programs and operations. OA also conducts short-term management reviews and program evaluations on issues of concern to SSA, Congress, and the general public.

Office of Investigations
OI conducts investigations related to fraud, waste, abuse, and mismanagement in SSA programs and operations. This includes wrongdoing by applicants, beneficiaries, contractors, third parties, or SSA employees performing their official duties. This office serves as liaison to the Department of Justice on all matters relating to the investigation of SSA programs and personnel. OI also conducts joint investigations with other Federal, State, and local law enforcement agencies.

Office of the Counsel to the Inspector General
OCIG provides independent legal advice and counsel to the IG on various matters, including statutes, regulations, legislation, and policy directives. OCIG also advises the IG on investigative procedures and techniques, as well as on legal implications and conclusions to be drawn from audit and investigative material. Also, OCIG administers the Civil Monetary Penalty program.

Office of External Relations
OER manages OIG's external and public affairs programs, and serves as the principal advisor on news releases and in providing information to the various news reporting services. OER develops OIG's media and public information policies, directs OIG's external and public affairs programs, and serves as the primary contact for those seeking information about OIG. OER prepares OIG publications, speeches, and presentations to internal and external organizations, and responds to Congressional correspondence.

Office of Technology and Resource Management
OTRM supports OIG by providing information management and systems security. OTRM also coordinates OIG's budget, procurement, telecommunications, facilities, and human resources. In addition, OTRM is the focal point for OIG's strategic planning function, and the development and monitoring of performance measures. In addition, OTRM receives and assigns for action allegations of criminal and administrative violations of Social Security laws, identifies fugitives receiving benefit payments from SSA, and provides technological assistance to investigations.