DMHAS shall select the contracted providers to audit, define the scope of the audit and establish the frequency of audits based on consideration of factors that may include, but are not limited to, any the following:
A contracted provider who, as a result of an audit, is found to be out of compliance with the provisions as specified in sections 17a-453a-1 to 17a-453a-19, inclusive, of the Regulations of Connecticut State Agencies shall be subject to progressive sanctions as may be determined by the commissioner, including but not limited to, the following:
Conn. Agencies Regs. § 17a-453a-16