Open Recommendations

We recommend that the PBS Commissioner develop and implement a method to track and monitor building studies and ensure that PBS can retrieve all studies efficiently.

We recommend that the PBS Commissioner develop and implement policies and procedures to ensure that: PBS building study data is complete, accurate, and reliable; PBS is not wasting tax dollars on unnecessary or duplicative building studies; and building studies are preserved in accordance with the Federal Records Act of 1950 and GSA records-retention policies.

The Richard L. Roudebush VA Medical Center Director ensures that residents, fellows, and clinical service leaders understand and follow the requirement to document complete and pertinent information, including assessments and recommendations, in patients’ electronic health records.

The Richard L. Roudebush VA Medical Center Director educates providers on the requirements related to completing a clinical disclosure when an adverse event occurs, such as a delay in care.

The Richard L. Roudebush VA Medical Center Director ensures the episode of care related to the patient’s transfer is reviewed to determine whether an institutional disclosure is needed in accordance with Veterans Health Administration requirements, and takes action as warranted.

The Richard L. Roudebush VA Medical Center Director monitors to ensure that Joint Patient Safety Reporting system reports are included or rejected in accordance with Veterans Health Administration guidance.

The Richard L. Roudebush VA Medical Center Director ensures a comprehensive review of the patient’s care and transfer is completed to identify factors that contributed to the patient’s unnecessary transfer and takes action as warranted.

We recommend that the Grantee revise its procurement policies and procedures, to ensure strict adherence to competitive bidding requirements for future projects.

We recommend that the Grantee maintain adequate documentation justifying all sole-source vendor selection to ensure compliance with all applicable regulations.

We recommend that the Grantee work with ARC, to solve the $396,000 of questioned costs.

We recommend that the Grantee develop procedures to hold their partners accountable for preparing and submitting quarterly reports in a timely manner.

We recommend the Vice President, Generation Tech Support, revise Generation’s Standard Operating Procedure 12.871, Cyber Security – Backup and Recovery, to address encryption to align with federal guidance and communicate the standard operating procedure requirements to plant personnel.

We recommend the Vice President, Generation Tech Support, develop backup and recovery plans for each plant in accordance with Generation’s Standard Operating Procedure 12.871, Cyber Security – Backup and Recovery.

Finalize implementation of controls within the new Automated Transaction Manager system to require all forms and supporting documentation associated with purchase card transactions be properly completed, verified, and retained in accordance with policy.

Identify and review recurring payments and assess whether establishing a contract would better serve the Postal Regulatory Commission.

Include controls within the Automated Transaction Manager system that requires the purchaser to submit justification if a non-preferred vendor is used, and requires the Credit Card Authorizing Official to conduct a formal evaluation of purchases when this occurs.

Reiterate guidelines and policies to approving officials for proper management oversight and approval of officers', limited-term contract employees', and executive directors' travel and expense reimbursements to promote adherence to policies and verify reimbursement requests are properly supported.

Review and update applicable guidelines, as needed, to reflect policy exceptions, when appropriate, or document approved exceptions within the eTravel system.

Reconsider implementing the seat upgrade draft policy, and instead, reinforce current seat upgrade policy.

Create a process to periodically verify limited-term contract employees are included in the officer group within the eTravel system.

We recommend that the Office of Information Technology update training for all employees on identifying and reporting suspected phishing emails, and establish a process to periodically remind employees of these responsibilities.

Develop and implement an agency-wide IP risk assessment standard operating procedures
(SOP). This SOP should include risk assessment procedures to be performed by each
identified significant program. These procedures should be based on OMB Circular A-123
guidance found in Appendix C.

For each identified significant program, the responsible program official (or office) should
review and approve the program-specific risk assessment. This review and approval should
be documented.

Leverage the existing risk-assessment tool and add FLRA specific reviews, as well as the
above-mentioned employee pay and benefits section.

Revise policies and procedures for financial reporting to ensure costs are tracked and reported accurately and timely.