Open Recommendations

We recommend the Vice President, Financial Operations and Performance, evaluate the control gap to identify solutions to prevent the execution of purchase orders for projects that do not have all required approvals.

Track facilities supply chain personnel vacancies as part of the quality control reviews and take appropriate action.

Develop guidelines that define when facility supply chain management problems require additional interventions and then routinely identify them for network director action.

Ensure facility and network directors work with the Procurement and Logistics Office on a plan to identify resources and milestones to resolve identified supply chain management problems for identified facilities.

Direct the program office to develop a process to provide resources when needed to help networks and facilities resolve persistent supply chain management deficiencies, including those identified in this report.

Continue Procurement and Logistics Office efforts to automate tracking that will accurately capture and monitor all quality control review results, corrective action plans, and implementation of those plans.

Update the Procurement and Logistics Office audits of the quality control program to apply risk-based sampling, evaluate action plan sufficiency and implementation, and use the results to continuously improve quality control review guidance and requirements.

Conduct refresher training for the PCs regarding documenting and maintaining asset management system records in accordance with NCUA policy and procedures.

Update the accountable property policy to implement a process for the PMO to complete a periodic review of the IT asset inventory to validate that the inventory is documented and maintained in accordance with NCUA policy and procedures.

Complete the PRISM risk assessment review on an annual basis and document the results.

Ensure that the annual risk assessment reviews for all third-party NCUA services are completed.

Document and implement a process to track and complete supply chain risk assessments for all third-party systems and service providers.

Implement improved processes for leveraging dashboards in order to monitor and manage patch compliance and remediation of vulnerabilities including the tracking of approved and unapproved software.

Complete the 2024 backlog of overdue reinvestigations.

Document and implement a process for notifying OHR to add the initial role-based security training requirement to the learning profile in the learning management system for new hires requiring the training

Complete implementation of the new alternate processing and storage site to a fully operational state.

Collaborate with the Bureau of Labor Statistics to track and report data specific to mixed earners in the U.S. economy to allow for the provision of timely and useful assistance to the mixed earner population during future emergencies.

Monitor the state workforce agencies’ levels of benefit payment activity and establish timeframes to reduce the remaining allotment to the sufficiently minimal amount required to meet future benefit payment needs and ensure the remaining Mixed Earners Unemployment Compensation funds are expended appropriately or returned to Treasury.

Perform an assessment of previous emergency unemployment insurance (UI) programs and the pandemic-related UI programs to determine an appropriate historically-based time limit for states’ acceptance of emergency program benefit claims after the expiration of the UI programs’ eligibility periods and consider making a legislative proposal to Congress to use the determined the time limit on future emergency programs.

Perform an assessment on mixed earners, including a cost-benefit analysis of the Mixed Earners Unemployment Compensation program, to aid future decision-making regarding this segment of the work population and advise Congress based on lessons learned.

We recommend that Novitas develop and deliver education to auditors and supervisors regarding applicable criteria and review requirements.

We recommend that OSMRE develop and implement a long-term staffing plan for grants management specialists that considers existing resources, Infrastructure Investment and Jobs Act funding, and OSMRE's priorities and goals.

We recommend that OSMRE create and implement a mechanism to track and monitor all key dates for processing applications, modifications, and authorizations to proceed to ensure processing dates are met.

We recommend that OSMRE design and implement an updated risk assessment checklist that requires grants management specialists to document consideration of applicable risk factors and document any mitigating measures for each risk factor identified.

We recommend that OSMRE develop and provide to grant applicants guidance on prioritization of projects for the Justice40 Initiative.