CMS Pub. 100-06, ch. 7, § 30.3

An executive summary shall be included in your CPIC, and at a minimum provide:

A. The contractor identification numbers;

B. The geographical locations for which the certification applies - include all

locations for the contractor line of business;

C. A list of the control objectives selected for internal review;

D. The specific time period during which each of the reviews were conducted;

E. The name and title of the person(s) who conducted the review;

F. The location and custodian of the working papers for the review;

G. The name, telephone number, and email address of a contact person who can

explain the risk assessment process, the certification review, the results, and the

status of any corrective action plans;

H. The total number of material weaknesses reported in the CPIC Report of Material

Weaknesses;

I. The total number of control deficiencies and significant deficiencies reported in

the CPIC Report of Internal Control Deficiencies; and

J. A list of all other internal and external reviews conducted during the CPIC

reporting period. The list should include the type of review, who conducted the

review, dates conducted, functional areas reviewed, and the number of findings in

each area. (Do not include the certification reviews already listed in ‘C’ above.)

End Section 30.3 – Executive Summary: Back to Table of Contents