Open Recommendations

Remediate the 7 findings and 19 associated recommendations identified in Cloud Platform #1 and the applications built on Cloud Platform #1.

Remediate the 8 findings and 11 associated recommendations identified in Cloud Platform #2 and the applications built on Cloud Platform #2.

Remediate the 4 findings and 5 associated recommendations identified in the applications built on Cloud Platform #3.

Remediate the 3 findings and 6 associated recommendations identified in Cloud Platform #4.

Remediate the 4 findings and 7 associated recommendations identified in Cloud Platform #5.

This recommendation is redacted.

Design and implement a plan to prevent, detect, and remediate security weaknesses on FDICcloud platforms and applications related to insecure coding practices, misconfigured securitysettings, least privilege violations, outdated software versions, and ineffective monitoring

OIG recommends that the Bureau of Administration develop and implement a process to formally designate and issue warrants to transportation officers responsible for authorizing tenders of service at overseas posts, as recommended by the Federal Management Regulation. The process should outline the training and experience requirements for obtaining a transportation officer authorization and the conditions for maintaining the authorization. The process should also include a mechanism for tracking and managing the requirements for maintaining the warrant.

OIG recommends that the Bureau of Administration develop and implement a training program for personnel responsible for executing transportation-related acquisitions using tenders of service, as recommended by the Federal Management Regulation. The program should outline baseline and continuing education training requirements for General Services Officers and locally employed transportation staff.

(U) Rec. A.1: The DoD OIG recommended that the Commander of Navy Munitions Command Atlantic emphasize the importance of providing the highest levels of materiel accountability and asset visibility for munitions to all officials at Navy Munitions Command Atlantic Detachment Bahrain who are responsible for munitions at Naval Support Activity Bahrain.

(U) Rec. A.2.a: The DoD OIG recommended that the Commander of Navy Munitions Command Atlantic, in coordination with the Commanding Officer of Helicopter Mine Countermeasures Squadron 15 conduct a review of Helicopter Mine Countermeasures Squadron 15's inventory procedures and implement required corrective actions.

(U) Rec. A.2.b: The DoD OIG recommended that the Commander of Navy Munitions Command Atlantic, in coordination with the Commanding Officer of Helicopter Mine Countermeasures Squadron 15 Update the "Memorandum of Understanding in Case of Ammunition and Explosives Accountability" to include responsibilities for providing oversight of inventory procedures for Helicopter Mine Countermeasures Squadron 15.

(U) Rec. B.1: The DoD OIG recommended that the Commander of Navy Munitions Command Atlantic emphasize the importance of providing the highest levels of materiel accountability and asset visibility for munitions to all Navy Munitions Command Atlantic Detachment Bahrain officials responsible for munitions at [Redacted].

(U) Rec. 2: The DoD OIG recommended that the Executive Director of the DoD Explosives Safety Board issue guidance for weapons safety managers to verify, at least quarterly, the net explosive weight totals in munitions storage structures located on installations within the U.S. Central Command area of responsibility.

We recommend that the Executive Assistant Commissioner of CBP’s Office of Field Operations develop and implement a plan to ensure effective oversight and monitoring by assessing the results of the monthly statute of limitations report reviews from the Fines, Penalties, and Forfeitures field offices.

We recommend that the Executive Assistant Commissioner of CBP’s Office of Field Operations implement a plan to ensure effective oversight and monitoring by increasing the frequency of oversight surveys of Fines, Penalties, and Forfeitures field offices. This includes establishing a plan to follow up with field offices with unsatisfactory survey results in a timely manner.

We recommend the TSA Administrator, in coordination with the Secretary and the Office of Management and Budget, work with Congress and the Department to resolve funding shortfalls or request Congress amend or repeal the requirements identified in our report for which TSA did not receive sufficient funding.

We recommend the TSA Administrator, in coordination with the Secretary and the Office of Management and Budget, work with Congress to amend or repeal the requirements identified in our report that TSA indicated it did not plan to implement.

We recommend the TSA Administrator report to Congress on the requirements identified in our report as not fully implemented based on insufficient evidence where TSA disagreed with our assessment.

Update existing methods of resource allocation to account for system categorization.

Perform a cost benefit analysis of introducing automation to support a centralized view of cybersecurity risks, manage risk designations, maintain privileged accounts, and test system contingency plans; and apply the appropriate risk mitigation strategy.

Develop qualitative and quantitative performance measures to evaluate the effectiveness of the following: Configuration management plan and change control activities; Data exfiltration and enhanced network defenses; Data breach response plan; Privacy awareness training program; Incident response capability; ISCM policies, strategy, and processes; Incident detection, analysis, handling, and response activities; Information system contingency plans. For all performance measures, ensure that supporting data is obtained accurately, consistently, and in a reproducible format.

Obtain access to the appropriate subject matter experts or training to assist with the implementation of secure configuration settings for its information systems.

Implement the logging requirements outlined within OMB's M-21-31.

Correct the processing or payment errors in our sample that resulted in an overage or arrearage to the beneficiaries or incorrect updates to beneficiary records.