CMS and its contractors have adopted few program integrity practices to address vulnerabilities in EHRS.