Certification Statement

30.2 - Certification Statement (Rev. 10614, Issued: 03-23-21, Effective: 10-01-20, Implementation: 04-22-21) Contractors shall provide a certification statement to CMS pertaining to your internal controls. On the following page is a generic certification statement. This statement should be included as part of your CPIC. The statement is to be signed jointly by your Medicare CFO and Vice President (VP) for Medicare, RDS or MSPRC or the equivalent Senior Executive responsible for Medicare, RDS or MSPRC. The CPIC is due within fifteen (15) business days after June 30th and shall cover the period from October 1st through June 30th. An updated assurance statement for the period July 1st through September 30th is due to CMS within five (5) business days after September 30th. Your certification statement should follow this outline: Sample Certification Statement: Chief Financial Officer Office of Financial Management Attn: Accounting Management Group, C3-13-08 Centers for Medicare & Medicaid Services 7500 Security Boulevard Baltimore, MD 21244-1850 Dear Chief Financial Officer: As the (Chief Financial Officer and Vice President of (contractor name), we are writing to provide certification of reasonable assurance for the period October 1 through June 30 that (contractor name) internal controls are in compliance with the Federal Managers' Financial Integrity Act (FMFIA) and Chief Financial Officers (CFO) Act by incorporating internal control standards into our operations. We are also providing an unqualified [or qualified] statement of assurance that (contractor name) has effective internal controls over financial reporting in compliance with revised OMB Circular A- 123, Appendix A [except for the SSAE 18 Section I finding(s) and/or material weakness(es) identified in the attached Report of Material Weaknesses]. We are cognizant of the importance of internal controls. We have taken the necessary actions to assure that an evaluation of the system of internal controls and the inherent risks have been conducted and documented in a conscientious and thorough manner. Accordingly, we have included an assessment and testing of the programmatic, administrative, and financial controls for the (type of program) operations. In the enclosures to this letter, we have provided an executive summary that identifies a list of the minimum requirements. (See Section 30.3 - Executive Summary for the list of minimum requirements to be provided in your CPIC.) If material weaknesses have been identified, use the following language: "Material weaknesses have been reported to you and the appropriate Innovation & Financial Management (IFM) office, and/or COR. The respective Corrective Action Plans have been forwarded to your office." If no material weaknesses were identified, use the following language: "No material weaknesses have been identified during our review; therefore no material weaknesses have been reported." We have included a description of our risk assessment analysis and our CPIC Report of Material Weaknesses. This letter and attachments summarize the results of our review. We also understand that officials from the Centers for Medicare & Medicaid Services, Office of Inspector General, Government Accountability Office, or any other appropriate Government agency have authority to request and review the working papers from our evaluation. Sincerely, ______________________________________ [Chief Financial Officer Signature] ______________________________________ [Vice President for (type of program) Signature] End Section 30.2 – Certification Statement: Back to Table of Contents