Open Recommendations

(U) Rec. 1.d: The DoD OIG recommended that the DoD Chief Information Officer direct DoD Components, in coordination with the Chief Information Security Officers, Chief Information Officers, and Authorizing Officials, to require that officials conduct privacy impact assessments for all non-national security systems and update the Enterprise Mission Assurance Support Service, or its equivalent system, as required by DoD guidance.

(U) Rec. 1.e: The DoD OIG recommended that the DoD Chief Information Officer implement a process, in coordination with the DoD Component Chief Information Security Officers, Chief Information Officers, and Authorizing Officials, such as periodic Enterprise Mission Assurance Support Service reviews, to ensure that officials complete privacy impact assessments for all non-national security systems and update the Enterprise Mission Assurance Support Service, or its equivalent system, as required by DoD guidance.

(U) Rec. 1.a: Report is Classified.

(U) Rec. 2.a: Report is Classified.

(U) Rec. 2.b: Report is Classified.

(U) Rec. 3.b: Report is Classified.

(U) Rec. 4: Report is Classified.

(U) Rec. 4: Report is Classified.

Rec. 1.a: The DoD OIG recommended that the Defense Health Agency Director, in consultation with the Defense Civilian Personnel Advisory Service develop and implement a plan to ensure a more competitive pay rate for nursing and other hard to fill medical positions in all Defense Health Agency regions.

Rec. 1.c: The DoD OIG recommended that the Defense Health Agency Director, in consultation with the Defense Civilian Personnel Advisory Service develop and implement a plan to establish qualification requirements for nursing and other hard to fill medical positions if it is determined that it would enhance the DoD's efforts to help recruit and retain health care personnel.

Rec. 2.a: The DoD OIG recommended that the Under Secretary of Defense for Personnel and Readiness, in consultation with the Assistant Secretary of Defense for Health Affairs and the Defense Health Agency Director determine whether the DoD needs to extend waiving the authority to apply section 3326, title 5, United States Code, for appointments made to positions in medical or health profession with the DoD under the direct hire authority and, if so, provide the extension in a subsequent memo before the authority for covered positions expires on September 30, 2025.

Rec. 3.a: The DoD OIG recommended that the Defense Health Agency Director revise Defense Health Agency Administrative Instruction 5136.03 to establish approval authority for any civilian personnel extensions outside the continental United States beyond a period of 7 years.

Rec. 3.b: The DoD OIG recommended that the Defense Health Agency Director establish maximum time frames to approve civilian personnel extensions outside of the continental United States and require monitoring of extension approval timelines.

Rec. 3.d: The DoD OIG recommended that the Defense Health Agency Director develop and implement a plan to apply strategies and incentives used by other Federal agencies to hire entry-level registered nurses if it is determined the strategies and incentives would enhance the DoD's recruitment efforts.

The Office of the Chief Management Officer and Security Services Office assign the staffing and resources necessary to conduct pending reinvestigations.

The Security Services Office develops and implements adequate internal policies and standard operating procedures.

The Security Services Office develops and implements a required training framework for its Security Specialists and program personnel.

The Security Services Office implements an internal database to house investigation and clearance documentation.

Rec. 1.a: The DoD OIG recommended that the Under Secretary of Defense (Comptroller)/Chief Financial Officer, DoD, ensure DoD Components develop and implement a process to identify the characteristics of the data included in the variances from the universe of transactions.

Develop and implement a plan, including communication strategy and available staff, for the timely deployment and installation of mail theft initiatives nationwide.

Require the New York 2 District Manager to establish procedures to complete annual safety inspections, remediate deficiencies, and document the results for blue collection and green relay boxes.

Develop a process to define roles, responsibilities, and frequency for inspecting green relay boxes, and to record and track the location and condition of green relay boxes.

Review and appropriately resolve hold codes related to the 5,044 7(a) loans to determine impact on 7(a) eligibility and seek remedy or repayment of all 7(a) loans deemed ineligible.

Implement written procedures to test recipients' CARES Act payments using methodologies to sufficiently validate that costs are supported and eligible. These procedures should include guidance for determining the extent of transaction level testing needed to sufficiently validate recipient's payment.

Implement written procedures to test recipients' financial system controls to prevent duplicate payments from Federal, State, and local sources.