An official website of the United States government
Here's how you know
Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock (
) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
Brought to you by the Council of the Inspectors General on Integrity and Efficiency
Federal Reports
Report Date
Agency Reviewed / Investigated
Report Title
Type
Location
Department of Transportation
DOT Is Taking Steps To Manage and Secure Its Mobile Devices, but Further Actions Are Needed
Our Objective(s)To determine whether DOT has established and implemented effective controls to secure and manage its mobile devices. As part of our review of DOT's mobile device management, we also assessed DOT's processes for maintaining an inventory of mobile devices and monitoring the costs of their use.
Why This AuditMany Federal employees use mobile devices, including smart phones to access their agencies' networks and systems, including those that process sensitive information. However, these devices can leave sensitive data vulnerable to cybersecurity threats and malicious software. Given increased use of mobile devices by DOT personnel and the cybersecurity risks associated with this use, we initiated this audit.
What We FoundDOT is taking steps to secure its mobile devices but has not yet implemented sufficient controls to effectively secure and manage all devices.
DOT's Office of the Chief Information Officer (OCIO), the Federal Aviation Administration (FAA), the U.S. Merchant Marine Academy (USMMA), and the Office of Inspector General (OIG) have begun implementing user and device authentication and data protection controls for their use of mobile devices. However, FAA and USMMA have not rapidly adopted software updates to ensure mobile operating systems are configured securely.
FAA and USMMA do not always restrict the use of mobile applications and do not have effective policies and procedures to manage and secure their mobile devices. In addition, OCIO and USMMA have not addressed security control weaknesses for their mobile device management solutions.
FAA has not maintained accurate inventories, and DOT OCIO and FAA have not ensured efficient spending for mobile devices.
Maintaining accurate inventories and monitoring spending are keys to efficient mobile device management. However, FAA did not maintain accurate inventories of its mobile devices. We found 157 personally owned mobile devices that had been granted access to FAA's network resources that FAA did not report to OIG when we took inventory.
DOT OCIO and FAA did not have effective controls in place to ensure efficient spending on mobile devices and services. We identified that FAA and OCIO were spending money on many mobile devices with zero usage, resulting in our identification of up to $422,838.45 for FAA and up to $203,884.19 for OCIO in funds that could be put to better use.
RecommendationsWe made 6 recommendations to improve DOT's process for managing and securing mobile devices within DOT's enterprise.
Our Objective(s)To inform FHWA's guidance for preventing and detecting anticompetitive practices. Specifically, we (1) assessed competition in procurement for Federal-aid highway projects using statistical methods, (2) provided estimates of the effects on contract costs when certain anticompetitive practices occur, and (3) identified opportunities to improve FHWA's guidance for preventing and detecting anticompetitive practices.
Why This AuditFederal law generally requires States to award contracts for Federal-aid highway projects through competitive bidding. However, concerns about anticompetitive bidding practices in highway procurements have existed for decades. Because of the importance of competition in highway procurement and the low number of studies that have attempted to assess it, we undertook this audit.
What We FoundOur analyses found significant indications of potential complementary bidding on highway procurements.
At least a third of the contracts we analyzed using machine learning in Florida, Georgia, North Carolina, New Jersey, Pennsylvania, and South Carolina were potentially affected by complementary bidding.
Our conservative, econometric method also flagged significant potential complementary bidding in most States we examined, affirming the machine learning results.
Contracts identified as potentially affected by complementary bidding had higher costs, but separate analysis of firms in flagged pairs found limited evidence of their affecting costs.
We estimated that the costs of flagged contracts ranged from an average of 5.2 percent to 10.2 percent higher, depending on the State, than for comparable potentially competitive contracts.
Cumulatively, these estimated cost increases amount to $1.19 billion (in 2021 dollars), or a 6.9 percent cost increase in the Federal-aid highway contracts flagged by our analyses across the six States.
While FHWA has improved its guidance for preventing anticompetitive practices, our analysis shows a more systematic approach to detection is needed.
FHWA's guidance during our review period did not adequately support State DOTs' prevention or identification of anticompetitive practices.
Although improved, FHWA's current guidance continues to lack explicit direction for frequent, regular, and systematic analysis.
RecommendationsWe made 1 recommendation to improve State DOTs' capabilities to detect and mitigate anticompetitive bidding.
EPA Guidance Addresses Implementation Requirements for Infrastructure Investment and Jobs Act for Drinking Water State Revolving Fund Emerging Contaminants Funding, but Clarification Is Needed Before More States Spend Funds
EPA guidance generally addresses IIJA Drinking Water State Revolving Fund, or DWSRF, emerging contaminants provisions. These provisions include focusing on projects that address per- and polyfluoroalkyl substances, or PFAS. However, the EPA's guidance does not detail allowable ranking and funding levels of non-PFAS projects. Further, the EPA guidance does not adequately describe how to process transfers between different state revolving funds.
Without adequate guidance, states may inconsistently process transfers between their state revolving funds.
This report presents the results of our audit of delivery operations and property conditions at the Warner Robins Main Post Office in Warner Robins, GA.
This Office of Inspector General (OIG) Healthcare Facility Inspection program report describes the results of a focused evaluation of the care provided at the VA Salem Healthcare System in Virginia.
This evaluation focused on five key content domains: • Culture • Environment of care • Patient safety • Primary care • Veteran-centered safety net
The OIG issued two recommendations for improvement in one domain: 1. Environment of care • Mitigating the impact of construction on patient care in the Emergency Department • Ensuring the toxic exposure screening navigators verify data to track veterans waiting for secondary screenings and address any backlog