The objective of our audit was to determine the extent to which Federal Student Aid (FSA) had implemented its enterprise risk management (ERM) framework. FSA did not implement all elements of its ERM framework or implement all elements characteristic of effective ERM. FSA developed an ERM framework, established a risk management office, and created a risk management committee. However, FSA did not fully implement the following elements characteristic of effective ERM.(1) Internal Environment: FSA did not define and retain records of management’s risk management philosophy, risk appetite, or risk tolerance.(2) Information and Communication: FSA did not communicate management’s risk management philosophy, risk appetite, or risk tolerance; FSA’s ERM framework; or information about FSA’s enterprise-level risks to internal and appropriate external stakeholders.(3) Objective Setting: FSA did not ensure that objectives and risk responses were aligned with management’s risk appetite.(4) Event Identification: FSA did not identify and assess risks in a way that ensured that it had a complete risk profile (set of enterprise-level risks) to evaluate. (5) Monitoring: FSA did not annually evaluate ERM efforts to assess whether FSA was achieving its ERM objectives or reducing risks to be within the level management was willing to accept.Because FSA management did not ensure that all elements of FSA’s ERM framework and all elements characteristic of effective ERM were fully implemented, it did not have reasonable assurance that ERM efforts helped management achieve its ERM objectives and reduced enterprise-level risks to be within the level that management was willing to accept.
| Report Date | Agency Reviewed / Investigated | Report Title | Type | Location | |
|---|---|---|---|---|---|
| Department of Education | Federal Student Aid: Efforts to Implement Enterprise Risk Management Have Not Included All Elements of Effective Risk Management | Audit | Agency-Wide | View Report | |
| Department of Health & Human Services | Wisconsin Physicians Service Insurance Corporation Claimed Unallowable Medicare Part A Administrative Costs for Fiscal Year 2013 | Audit |
|
View Report | |
| Department of Health & Human Services | Wisconsin Physicians Service Insurance Corporation Claimed Unallowable Medicare Part B Administrative Costs for Fiscal Year 2013 | Audit |
|
View Report | |
| Appalachian Regional Commission | Erwin Utilities | Audit |
|
View Report | |
| Department of Health & Human Services | Illinois Did Not Comply With Federal Waiver and State Requirements at 18 of 20 Adult Day Service Centers Reviewed | Audit |
|
View Report | |
| Overseas Private Investment Corporation | Assessment of the Overseas Private Investment Corporation's Fiscal Year 2016 Government Charge Card Programs | Audit |
|
View Report | |
| Department of the Treasury | Termination Memorandum – Audit of the Controls Over Purchase and Travel Cards | Other | Agency-Wide | View Report | |
| Department of Defense | DoD Management of the Enhanced Army Global Logistics Enterprise Maintenance Contract in Afghanistan | Audit | Agency-Wide | View Report | |
| Architect of the Capitol | Government Ethics; Standards of Conduct; and Personal Property Manual: Substantiated | Investigation | Agency-Wide | View Report | |
| U.S. Agency for International Development | Audit of VSF Germany Under Multiple USAID Agreements for the Fiscal Year Ended December 31, 2016 | Other |
|
View Report | |