Open Recommendations

Develop a strategy to ensure that products, system components, systems, and services of external providers are consistent with the organization’s cybersecurity and supply chain requirements.

Define timeframe and remediation requirements for baseline and configuration weaknesses.

Properly update and remediate vulnerabilities and configuration weaknesses throughout the SBA environment.

Implement a process to track and enforce compliance with PIV implementation and multi-factor requirements.

Ensure implementation procedures for data loss prevention are updated at least on a biannual basis to reflect new processes and new requirements.

Update existing procedures that identify the roles of individuals with significant IT responsibilities who require role-based training and ensure such training is provided and tracked.

Provide training to individuals with contingency planning roles and responsibilities.

We recommend that the Contracting Officer require the Association to update its claims processing system with edits to ensure that claim lines with telehealth related place of service and procedure code modifiers suspend prior to payment for review.

The Carl Vinson VA Medical Center Director ensures that the CensiTrac Instrument Tracking System is fully implemented, and that training is provided to the CensiTrac coordinator and Sterile Processing Services staff, and monitors for compliance.

The Bureau of Information Services should identify and document detailed project plans for their Information Technology Modernization Initiatives, to include the agency’s goals, project milestones, a description of the work necessary, and designated timelines for completion, as required by the Office of Management and Budget Circular A-130’s specifications for IT investment processes, including planning, budgeting, procurement, management, and assessment.

The Bureau of Information Services should develop and implement a monitoring plan to track agency spending for their Information Technology Modernization Initiatives, which should include how the information technology funds were allocated, reallocated, and spent.

The Bureau of Information Services should coordinate and work with the Bureau of Fiscal Operations to use existing resources to track, analyze, monitor, and report on the use of Information Technology Modernization Initiatives funding provided through the Consolidated Appropriations Act, 2021 and American Rescue Plan Act of 2021. This should include setting up a centralized system/location/spreadsheet for tracking and monitoring funds and providing training for staff on how to use it.

The Bureau of Information Services should establish a clear reporting structure, including the roles and responsibilities of different departments and staff members within the Bureau of Information Services to increase accountability for the tracking and monitoring of the Information Technology Modernization Initiatives funds.

The Bureau of Information Services should regularly analyze the use of Information Technology Modernization Initiatives funds, to ensure they are being used effectively and to identify any potential issues. This should continue until all Consolidated Appropriations Act, 2021 and American Rescue Plan Act of 2021 funds have been obligated, returned, or expired.

The Bureau of Information Services should use the new Information Technology Modernization Initiatives funds monitoring plan to conduct reviews of the funds’ management process to ensure compliance with established guidelines and procedures. These reviews should identify any areas for improvement and make necessary adjustments.

The Bureau of Information Services should assign a dedicated team or person responsible for monitoring the Information Technology Modernization Initiatives funds. The dedicated team/person should have the necessary resources and authority to carry out their responsibilities.

Resolve the $1,124,864 in questioned subaward expenses for which OU has not agreed to reimburse NSF and direct OU to repay or otherwise remove the sustained questioned costs from its NSF award.

We recommend that the Director of OFAC Develop and implement a close-out checklist for the evidentiary memoranda and OASIS case files that encompasses all necessary documentation to ensure they are complete and closed timely.

We recommend that the Director of OFAC update the OGT SOP to establish responsibilities and expected timeframes for review of evidentiary memoranda and OASIS case files to ensure they are complete and closed timely.

USAID/Pakistan determine the allowability of $358,627 in questioned costs, ($138,032 ineligible and $220,595 unsupported), as detailed in Table 1 above and on pages 20 to 28 of the audit report and recover any amount that is unallowable.

Embassy Singapore should review all unliquidated obligations related to the Ambassador’s travel in accordance with Department guidelines and federal regulations and put up to $48,000 to better use.

Embassy Singapore should schedule embassy-wide security drills when the Ambassador is present and able to participate, in accordance with Department guidance.

Embassy Singapore should implement a plan to improve the timeliness of annual report submissions, Blue Lantern export control checks, demarches, and reporting cables, in accordance with Department guidance.

Embassy Singapore should manage U.S. citizen services and visa wait times in accordance with Department standards.

Embassy Singapore should resolve fraud referrals in accordance with Department standards.