Federal Reports

Objective: To determine whether the Social Security Administration issued payments to beneficiaries who were deceased according to New York City’s vital statistics records.

This Annual Plan presents the major initiatives and priorities the OIG intends to undertake in FYS 2025-2026 to assist the U.S. Department of Education (Department) in fulfilling its responsibilities to America’s taxpayers and students. The plan details the assignment areas and resources that the OIG plans to devote to evaluating the efficiency, effectiveness, and integrity of Department programs and operations. The plan incorporates suggestions from Department leaders and staff, Congress, and the Office of Management and Budget.

For our audit of the U.S. Department of Commerce’s (the Department’s) Enterprise Continuous Diagnostics and Mitigation (ECDM) program, our objective was to assess the effectiveness of the program. To address this objective, we assessed data quality, data security, and aspects of program management in a recent ECDM tool procurement decision. We found that I. ECDM data quality does not fully support Department oversight and reporting needs; II. The National Institute of Standards and Technology does not consistently control and thoroughly test the ECDM program’s information system changes; III. The ECDM program’s information system is relatively secure but has some internal security weaknesses; IV. Deficiencies in ECDM program management place future enterprise cybersecurity tool deployments at risk; and V. The Department does not fully incorporate bureau-incurred costs in its ECDM project cost tracking.

The U.S. International Development Finance Corporation (DFC) Office of Inspector General (OIG) contracted with the independent public accounting firm RMA Associates, LLC (RMA) to conduct an audit of DFC’s acquisition of goods and services. The objective of this audit was to determine whether DFC complied with applicable goods and services contract regulations, policies, and procedures. We evaluated six goods and services contracts. This included one contract for hardware, one for technical support services, one large software purchase, one contract for legal services, and two contracts for consulting services.

We found issues with inaccurate and incomplete bankruptcy data, outdated policies and procedures, and inconsistent internal control documentation.