Federal Reports

We determined that the Department has taken some steps to mitigate risks to the Nation’s election infrastructure; however, improved planning, more staff, and clearer guidance could facilitate its coordination with states. Specifically, despite Federal requirement, DHS has not completed the plans and strategies critical to identify emerging threats and mitigation activities, and establishing metrics to measure progress in security the election infrastructure. Further, DHS provides assistance to state and local election officials upon request. Over time, the assistance provided has increased and the quality of information shared has improved. However, staff shortage, lengthy security clearance process, and state and local officials; historic mistrust of the Federal government assistance restrict DHS’ efforts to provide services and assessments needed to secure the election infrastructure. Addressing these issues is essential for continued improvement in the services. We made five recommendations to CISA to enhance the overall effectiveness of DHS’ assistance to secure the election infrastructure, including providing sufficient resources to ensure an organized strategy, improved services and assessments, expanded outreach and information sharing. CISA concurred with all five recommendations.

Transmittal of the Final Report Assessing the Federal Trade Commission’s Compliance with the Federal Information Security Management Act for Fiscal Year 2018 (Redacted for public release)

Michigan expended almost two-thirds of the $3.6 million in civil monetary penalty (CMP) collections during our audit period, reimbursing organizations $2.3 million for activities that protected or improved the quality of care for nursing facility residents. However, it did not fully use available CMP collections to support nursing facility residents.

What We Looked AtUnder the Office of National Drug Control Policy (ONDCP) Circular, Accounting of Drug Control Funding and Performance Summary (Circular), when drug-related obligations total less than $50 million and a detailed accounting would be an unreasonable burden, agencies may submit alternative reports. For this reason, the Federal Aviation Administration (FAA) submitted alternative Drug Control Obligation Summary and the Performance Summary Reports. We reviewed the reports and related management assertions to determine the reliability of those assertions in compliance with the Circular in all material respects. We conducted our review in accordance with generally accepted Government auditing standards for attestation engagements. Specifically, we reviewed selected accounting internal controls to determine whether drug control funds were properly identified in the accounting system. In addition, we reviewed FAA's internal controls for performance measures to gain an understanding of how the measures were developed. We limited our review processes to inquiries and analytical procedures appropriate for an attestation review according to the Circular's criteria.What We FoundFAA's Drug Control Obligation Summary report identified $18,809,602 of obligations from two of FAA's drug control decision units. When we traced those obligations, we found no exceptions. The performance targets in FAA's Performance Summary report for fiscal year 2018 were to: initiate regulatory investigations on 95 percent of all airmen involved in the sale or distribution of illegal drugs within 30 days of knowledge of a conviction or notification by law enforcement; ensure the aviation industry conducts random drug and alcohol testing of safety sensitive employees with results not exceeding 1 percent positives for drugs and 0.5 percent positives for alcohol; and conduct 1,205 drug and alcohol inspections of the aviation industry to ensure compliance with Federal regulations. FAA indicated that it met its performance targets.FAA conducted the activities in its alternative reports in accordance with a past Circular, instead of the current May 8, 2018 version. We conducted our review using the current version, and did not identify any issues with FAA's accounting of drug control activities or compliance with ONDCP's current standards. Based on our review, we are not aware of any material modifications that should be made to FAA's FY2018 Drug Control Obligations Summary and Performance Summary reports in order for them to be in accordance with the Circular.