Open Recommendations

(U) Rec. 2.b: Report is Classified.

4. We recommend that the Department's CIO direct the NTIA CIO to implement phishing-resistant and application-layer MFA on both NTIA HVAs.

STB should research the impacted employees payroll records to confirm the error and determine why the error occurred. Appropriate action should be taken to identify any other affected employees and to correct the root cause of the error.

STB should enforce standard operating procedures to require a second Human Resources Specialist or the Human Resources Director to review all employee transfer and onboarding documents to ensure that the documentation is complete and agrees with the information that was entered into the payroll and personnel system before the information is submitted to the payroll service provider.

STB should perform and document its assessment of the recoverability of excess taxes that were paid in error by the agency in matching Old-Age, Survivors and Disability Insurance and Medicare contributions and the conclusion that was reached.

Create a single, unified agency-specific MCO list updated to reflect current progress toward closing skills gaps.

We recommend that the USAID/Bureau for Humanitarian Assistance, USAID/Bangladesh, USAID/Burma, and USAID Bureau for Asia take the following actions:
3. USAID/Bureau for Humanitarian Assistance identify and implement options for providing long-term funding arrangements for humanitarian assistance activities in Bangladesh.

We recommend that the USAID/Bureau for Humanitarian Assistance, USAID/Bangladesh, USAID/Burma, and USAID Bureau for Asia take the following actions:
5. USAID/Bureau for Humanitarian Assistance, USAID/Bangladesh, and USAID/Burma assess their ability to engage directly with more local nongovernmental organizations in Bangladesh and Burma, to include what may be needed to build their organizational capacity to responsibly manage USAID funds.

Enhance and implement review controls to ensure calculations are properly performed, data is appropriately captured, and errors are appropriately considered so that changes to the baseline are appropriately recorded.

Refine and implement risk register procedures used in the Monte Carlo simulations to reduce the risk of administrative errors.

We recommend that the Manager, PPPO, direct the Deputy Manager, PPPO to:3. Refine and implement the policies and procedures of the control governing manual review of risk register data prior to submission of the change requests to allow for more precise and reasonable estimates of the environmental liability at PPPO.

We recommend that the Manager, PPPO:4. Refine and implement the policies and procedures of the risk register review control to properly review, identify, and discuss inaccurate information and inputs to specific risks as part of risk register updates.

We recommend that the Manager, Berkeley Site Office, direct the Lawrence Berkeley National Laboratory (LBNL) to refine the policies and procedures of the control governing manual review of census data prior to submission to allow for a narrower degree of precision required to detect and correct errors or discrepancies between LBNL and Redwood in a timely manner.

Enhance and implement existing polices and procedures to specifically assess the risk of misstatements presented by stale UCOs left uncosted as of the year-end financial reporting date.

We recommend that the Director, Office of Finance and Accounting, and the Office of Science’s Designated Financial Officer enhance and implement existing policies and procedures to specifically assess the risk of misstatement presented by stale UCOs left uncosted as of the year-end financial reporting date.

We recommend that the Manager, PPPO:7. Enhance communication down and across the entity's reporting line to readily obtain and provide evidence necessary to support the internal controls systems and demonstrate that "stale" undelivered order balances are still valid as of the year-end financial reporting date.

Enhance and implement review controls to ensure calculations are properly performed, data is appropriately captured, and errors are appropriately considered so that changes to the baseline are appropriately recorded.

Refine and implement risk register procedures used in the Monte Carlo simulations to reduce the risk of administrative errors.

We recommend that the Manager, PPPO, direct the Deputy Manager, PPPO to:3. Refine and implement the policies and procedures of the control governing manual review of risk register data prior to submission of the change requests to allow for more precise and reasonable estimates of the environmental liability at PPPO.

We recommend that the Manager, PPPO:4. Refine and implement the policies and procedures of the risk register review control to properly review, identify, and discuss inaccurate information and inputs to specific risks as part of risk register updates.

Refine the policies and procedures of the control governing manual review of census data prior to submissions to allow for a narrower degree of precision required to detect and correct errors or discrepancies between LBNL and Redwood in a timely manner

Enhance and implement existing polices and procedures to specifically assess the risk of misstatements presented by stale UCOs left uncosted as of the year-end financial reporting date.

We recommend that the Director, Office of Finance and Accounting, and the Office of Science’s Designated Financial Officer enhance and implement existing policies and procedures to specifically assess the risk of misstatement presented by stale UCOs left uncosted as of the year-end financial reporting date.

We recommend that the Manager, PPPO:7. Enhance communication down and across the entity's reporting line to readily obtain and provide evidence necessary to support the internal controls systems and demonstrate that "stale" undelivered order balances are still valid as of the year-end financial reporting date.

The Central Texas VA Health Care System Director reviews the privileging and professional practice evaluation processes and performance indicators for nurse practitioners granted full practice authority in specialty care clinics to ensure compliance with current Veterans Health Administration policy and quality of care.