Skip to main content
Report File
Date Issued
Submitting OIG
Railroad Retirement Board OIG
Other Participating OIGs
Railroad Retirement Board OIG
Agencies Reviewed/Investigated
Railroad Retirement Board
Report Number
23-01
Report Type
Audit
Agency Wide
Yes
Number of Recommendations
15
Questioned Costs
$0
Funds for Better Use
$0

Open Recommendations

This report has 2 open recommendations.
Recommendation Number Significant Recommendation Recommended Questioned Costs Recommended Funds for Better Use Additional Details
6 No $0 $0 Management does not concur with this recommendation. This recommendation remains open because the Office of Inspector General for the Railroad Retirement Board continues to see the need for the recommended corrective action.

The Railroad Retirement Board Bureau of Information Services should design and implement the necessary information technology controls in the following five areas: 1. Security Management, 2. Access Controls, 3. Configuration Management, 4. Segregation of Duties, and 5. Contingency Planning.

10 No $0 $0 Management does not concur with this recommendation. This recommendation remains open because the Office of Inspector General for the Railroad Retirement Board continues to see the need for the recommended corrective action.

The Railroad Retirement Board Bureau of Fiscal Operations should establish a process to maintain detailed corrective action plans for all internal control deficiencies. More specifically, in order to comply with the requirements of Office of Management and Budget A-123, Railroad Retirement Board Bureau of Fiscal Operations should: (a) Communicate corrective actions to the appropriate level of the Agency and delegateauthority for completing corrective actions to appropriate personnel. (b) Determine the resources required to correct a control deficiency. The corrective action plan must indicate the types of resources needed (e.g., additional personnel, contract support, training, etc.), including non-financial resources, such as Senior Leadership support for correcting the control deficiency. (c) Include critical path milestones that affect the overall schedule and performance of the corrective actions needed to resolve the control deficiency. Critical path milestones must lead to a date certain of the correction of the control deficiency. (d) Require prompt resolution and internal control testing to validate the correction ofthe control deficiency. (e) Ensure that accurate records of the status of the identified control deficiency are maintained and updated throughout the entire process. (f) Ensure that the corrective action plans are consistent with laws, regulations, and Agency policy. (g) Ensure that performance appraisals of appropriate officials reflect effectiveness in resolving or implementing corrective action for identified material weaknesses. (h) Fully disclose uncorrected internal control weaknesses and highlight those that are material.

Railroad Retirement Board OIG

United States