Veterans Affairs Canada's website is undergoing maintenance. If you are experiencing any issues, please contact us. We apologize for the inconvenience this may cause.

3.0 Audit Results

3.0 Audit Results

3.1 Multi-disciplinary Clinics Registration

3.1.1 Registration Process

When the MDC program was developed, VAC decided to implement a registration process to create a list of clinics that use an integrated, collaborative approach for the treatment of complex health conditions. Once an MDC has been registered, VAC field staff are able to refer Veterans to these clinics for integrated services.

VAC has a number of policies and supporting directives relating to MDC registration. These tools include a registration application package which outlines VAC’s general expectations of registering MDC clinics; a Provider Claims Submission Agreement, which outlines the terms and conditions for providing and billing services for Veterans; and an MDC Clinics Provider Requirements document, which communicates the detailed MDC program requirements to interested applicants.

Clinics applying for registration submit their application to VAC’s Federal Health Claims Processing Service contractor (FHCPS contractor) who reviews the application for completeness. When the package is complete, it is sent to VAC Program Management for review. Program Management reviews the application to determine whether it meets the required criteria. The decision (approved/denied) is forwarded by Program Management to the FHCPS contractor who sends a decision letter to the applicant. For approved clinics, a provider ID number for billing purposes is communicated in the letter.

The audit team reviewed all of the registration applications during the audit scope period for compliance with the established business processes. The audit found that overall the registration process had been adhered to. Minor deviations were noted and were brought forward by the audit team to program management for quality improvement purposes.

Although tools, guidance and policies exist, staff are challenged when making registration decisions. On paper, the application criteria appears straight forward. In practice, staff had difficulty applying the criteria and in ascertaining whether the applicants were in fact clinicians operating in an inter-disciplinary manner. Additionally, MDC applications are becoming more complex as clinics are offering a wide variety of treatments and modalities. Program staff were uncomfortable making decisions on clinic registration as they felt they lacked the medical and mental health expertise to make a determination on the adequacy of the proposed treatments for a clinic.

Given these challenges, processing registration applications involves significant effort for VAC staff. Staff frequently needed additional information or clarification from applicant clinics to ensure and document that all criteria are met. As a result, some applications were not being processed in a timely manner. A file review of processed applications found that decisions on application registration took an average of 98 days and, as of December 31, 2018, there were 55 application awaiting a registration decision. Those unprocessed applications had been awaiting decision an average of 156 days. The registration process has been described by staff as a frustrating administrative procedure for both the applicant and staff suggesting improvements are required. The audit team noted that one application for registration was approved during the audit scope period.

It is important to note that individuals and clinics can claim for services even though they have not registered as an MDC with VAC. In this situation, claims are processed under POC 12. The audit team looked to identify potential providers that were claiming for services under POC 12 without having gone through the MDC registration process. The review noted instances where clinics appeared to have been offering multi-disciplinary services under POC 12.

3.1.2 Monitoring

Registration of a clinic is granted at a point in time, and there is no mechanism to ensure clinics continue to meet requirements. For example, VAC does not monitor and update changes in clinic services, programs, or changes in health care professionals. Some clinics may not be providing the services they initially registered for. VAC program staff, field staff, and health care professionals all expressed concern over the lack of monitoring clinics’ ongoing eligibility. All felt a monitoring and quality review process for registered clinics is important and the registration process should include an expiry date to ensure periodic review.

The MDC clinic registration process requires improvement but to implement stronger controls could require more resources. The benefits of registering MDCs needs to be examined in light of the challenges discussed above. Improvements to the process such as set expiry dates, facility site reviews, health care professional expertise, and a more detailed registration form need to be considered. Consideration should also be given to the cost/benefit of registering and monitoring multi-disciplinary clinics.

Recommendation 1

It is recommended that the Director General, Service Delivery and Program Management, with support from Finance Division, strategically review the registration process, considering that additional guidance and controls are needed.

Management Response:

Service Delivery and Program Management agrees with this recommendation. Program Management had recognized these challenges and prior to the audit established a working group tasked with identifying and addressing these concerns. A detailed action plan was provided to Audit and Evaluation for audit follow up.

Target Completion Date: July 2020

3.2 MDC Treatment Authorization and Payment

Treatments provided at MDCs must be preauthorized by a VAC case manager. Case managers use a system called Client Service Delivery NetworkFootnote 5 (CSDN) to manage a Veteran’s treatment. Among other things, CSDN houses a Veteran’s case plan, progress notes, reports, and authorized treatment details.

Once an MDC treatment has been authorized by the VAC case manager, he or she forwards the authorization details to the FHCPS contractor who sets up the authorized treatment details in the Federal Health Claims Processing Service (FHCPS).Footnote 6

Once the treatment has been set up, the provider is notified of the details of the authorized plan and is provided with billing instructions. The majority of providers claim for these services electronically via the FHCPS Provider Portal. Using the Portal, the provider inputs data into specific fields for the service rendered and the payment is made. Alternatively, providers can claim for services using paper invoices, the details of which are manually entered into FHCPS by the FHCPS contractor and the payment is made.

The audit team examined whether the VAC case managers and the FHCPS contractor adhered to the Business Process that outlines the MDC treatment authorization process. The audit team conducted file reviews, directly observed system authorizations and payments, and interviewed staff from both VAC and the FHCPS contractor . In general, we found that both VAC and the FHCPS contractor were adhering to the requirements of the Business Process. Some minor deviations were noted and these were communicated to program management for quality improvement.

3.2.1 Controls over dollar and frequency limits

VAC offers a variety of treatment benefits, of which MDC treatments are one (under POC 5). There are also many other health related treatment benefits that fall under POC 12 - Related Health Services that are closely tied to the provision of MDC treatments. These POC 12 benefits include treatments and services offered by a wide range of clinicians such as dieticians, chiropractors, psychologists, physiotherapists, social workers, and massage therapists. These clinicians may also provide services while working as part of an MDC.

Treatments under POC 12 have limits on the dollar values that VAC will pay and the frequency of treatments it will allow. For example, a Veteran on Prince Edward Island can access 20 physiotherapist visits per year at a set fee of $55/session. In contrast, MDC services are managed under POC 05, and there are no set frequency or dollar limits for these services. Costs for MDC treatments (inpatient, outpatient, and the various reports) vary widely. There is no guidance for VAC case managers, and they expressed some challenges with referring Veterans to MDC treatments without any guidance on frequencies or appropriate rates.

In addition to there being no set limits or guidance, a case manager’s delegated authority to authorize these treatments also has no set dollar limit.

Where no set limits exist over theses MDC services, we would expect greater controls over payment and monitoring to mitigate the increased risks associated with these services. As outlined in the subsequent section, there are significant gaps in these controls.

3.2.2 Key controls over payments for multi-disciplinary services

After MDC treatment benefits have been authorized by the VAC case manager, the treatment is provided to the Veteran by the relevant MDC provider. As mentioned, the MDC provider submits a claim for payment to VAC in one of two ways: a paper invoice is submitted to the 3rd party payment processing centre or the provider submits the claim details (a prescribed set of fields) directly into the FHCPS contractor ’s FHCPS Portal. We were advised that the majority of providers submit their claims electronically via the Portal.

The audit examined the following key controls and the related observations are noted in the subsequent paragraphs. The audit reviewed whether

  • the provider claimed more than the amount authorized by the case manager and
  • VACs payment verification processes sufficiently addressed the risks associated with the lack of limits over the MDC services.

Payments in excess of authorized amounts

When the MDC provider submits its claim for service via the Portal, it directly populates pre-determined fields within the FHCPS contractor ’s FHCPS portal. These fields include the Veteran’s identification number, the treatment authorization number, the number of occurrences, the treatment service date, and the amount. The claim gets applied to the authorization that had been previously set up in FHCPS by the FHCPS contractor based on the instructions from the VAC case manager. The audit team expected the system to have built-in controls to limit a claimed amount to the dollar value authorized by the case manager. This control is especially important given that POC 5 treatments have no prescribed frequency or dollar limits.

The audit team conducted interviews with the FHCPS contractor and VAC finance staff and performed a detailed file review. The audit found that for claims paid through the portal, the FHCPS contractor system has no mechanism to limit the claimed service to the dollar amount that was authorized by the VAC case manager. Further, our file review found 5/48 (10.4%) instances where the claimed amount exceeded the authorized amount. None of these instances was in excess of $2,500.

Although there are no controls limiting the dollar value of the claims, there are controls built into the system around the date of service and the number of occurrences. The audit test found these controls to be working to an extent; however, they are not as effective as they could be.

There is a lack of consistency and a lack of billing instruction when it comes to setting up the number of occurrences for the authorization and claiming against those authorized occurrences. For example, [Redacted] Footnote §7. Providers are able to claim for services for up to 18 months after the date of service, which allows a large time period for providers to continue to claim and for potential errors to occur.

Payment verification processes

Payment verification becomes increasingly important where a control environment has limited prepayment expenditure controls. There were two key payment verification processes examined in this audit:

  • VAC’s payment verification for individual treatments and
  • VAC’s monitoring for potential duplicate payments.

Payment verification at the treatment level requires that someone confirms that the service was rendered in accordance with the authorization and at the negotiated price. The audit found that the payment system is not set up to allow VAC to confirm these details.

As claims are submitted directly to the FHCPS contractor. [Redacted] Footnote §7

There are two levels of post payment review for all POC treatment benefits: work conducted by the FHCPS contractor ’s audit team and analyses conducted by VAC’s Finance Division. The audit team interviewed key stakeholders to determine what post payment work is done specifically with regards to MDC transactions. The audit team found that post payment verification specific to MDCs is limited. This is due primarily to MDC transactions ranking low from a risk-based planning perspective as it represents a small portion of the total treatment benefits expenditures.

The MDC treatment delivery model allows for the potential of duplicate claims where the registered MDC claims for a Veteran’s treatment using its MDC provider number and the individual clinician also claims for that same service using its provider number, usually under POC 12. The audit sought to conduct data analyses to identify potential duplicate claims. However, there were data limitations that restricted audit’s ability to conduct meaningful analyses. [Redacted] Footnote §7

There are significant weaknesses around the control framework for MDC services. Controls around pre-payment and post-payment require strengthening.

Recommendation 2

It is recommended that the Director General of Service Delivery and Program Management, in collaboration with the Finance Division, improves the control framework for the authorization and payment of multi-disciplinary clinics services, including implementing treatment benefit limits, pre and post-payment controls, and the use of data analytics.

Management Response:

Service Delivery and Program Management agrees with this recommendation. Program Management had recognized these challenges and prior to the audit established a working group tasked with identifying and addressing these concerns. A detailed action plan was provided to Audit and Evaluation for audit follow up.

Target Completion Date: June 2020

3.3 Audit Conclusion

The audit team identified the need for additional controls over the registration, authorization and payment for multi-disciplinary clinics. The audit identified compliance with business processes but this was not sufficient to manage the risks associated with the lack of limits for multi-disciplinary clinics services. The risk of inaccurate or erroneous payments is not managed to an acceptable level and additional controls are required.