Page 202

EAP Policy Manual FFY23 Chapter 10 Incidents and Appeals Page 2 • Cyberattacks of the Service Provider network that may compromise data files. • Service Provider IT shutdown in response to cyberattacks. • Unauthorized access to EAP private data. • Errors: • Unintentional misuse of program funds or unintentional mistakes in the handling and processing of application information. • Event resulting in accidental over or under payment to vendors or households. • Waste: • Waste occurs as the result of resources being consumed by inefficient or non- essential activities, including systematic errors or misapplication of policy. • Abuse: • Abuse occurs as the result of purposeful departure of policies and procedures where resources are improperly used. • Suspected Fraud: • Events including suspected or intentional deception, omission, or concealment made for personal gain, to assist or harm others and/or misuse of program funds. • Disasters and Emergencies. Incident Reporting Incident reporting is a critical EAP control intended to manage and mitigate risks that could affect the integrity of the program and its stakeholders. Service Providers are required to report all incidents described in this chapter to Commerce by completing the Incident Report Form within one working day of the event or the beginning of an investigation. Reports must be submitted to eap.mail@state.mn.us. Service Providers must provide updates to Commerce as they occur. Errors Errors are unintentional misuse of program funds or unintentional mistakes in the handling and processing of application information. An error is considered isolated and affects one or just a few households. If an unintentional mistake affects more households follow the waste procedures below. Errors can result in accidental over or under payment to energy vendors or households. Errors may occur due to the failure of a household, Service Provider or energy vendor to: • Report or utilize complete and accurate information.