1. Home
  2. |Insights
  3. |Additional Business Systems Reviews Proposed

Additional Business Systems Reviews Proposed

Client Alert | less than 1 min read | 07.17.14

The government issued a proposed rule on Monday that would require contractors subject to withholdings under the Business Systems Rules to conduct annual internal reviews of their accounting, estimating, and material management and accounting business systems and engage an independent CPA firm to conduct audits every three years (or more frequently if directed by the contracting officer). The proposed rule if adopted as drafted would likely result in inefficiency and delay because it contemplates DCAA review and approval of the independent CPA work plan, audit, and workpapers and permits DCAA to challenge the findings of the independent CPAs.


Insights

Client Alert | 7 min read | 08.17.26

Delayed Notification of Cyberattacks May Trigger HIPAA Breach Notification Rule

After identifying a ransomware attack in 2021, OSF Healthcare System waited until its forensic investigation had concluded before notifying the U.S. Department of Health and Human Services (HHS) — and the affected individuals — of the breach. The 110-day delay (nearly double the 60-calendar-day notification deadline mandated by the HIPAA Breach Notification Rule) triggered an investigation from HHS’s Office for Civil Rights (OCR). The health system’s investigation determined that protected health information (PHI) had been stolen....