Specifications include, but are not limited to: 2.4.3 Controls Audit 2.4.3.1 The SOC 1, Type 2 review must include all portions of the MMIS designed, developed, or operated by the MMIS contractor, including the Drug Rebate subsystem. The SOC 1, Type 2 reviews will not include activities performed by the Department of Human Services (DHS) or OHA. 2.4.3.2 The portions of the MMIS designed, developed, or operated by the MMIS Contractor are: a. User Interface: Drug Rebate, Contract Management, Reference, Plan of Care, Service Authorization, Claims, Provider, COLD, Managed Care, Third Party Recovery, Financial, CTMS/Member Services, Benefits Administration, and Client. b. Input Methods: Electronic Document Management System (converting paper claims), Web Portal and OHA employee input.