Open Recommendations

Rec. 2: The DoD OIG recommended that the Chief of Naval Personnel confirm whether a control exists in the Navy Standard Integrated Personnel System to ensure that Service members do not take parental leave after the 1-year period following a qualifying event without an approved exception. If no control exists, the Chief of Naval Personnel should perform periodic reviews of, or coordinate with the Office of the Naval Chief Information Officer, to develop internal controls in the Navy Standard Integrated Personnel System to ensure Service member compliance.

Rec. 3.a: The DoD OIG recommend that the Assistant Secretary of the Air Force (Manpower and Reserve Affairs) update LeaveWeb or develop and implement an internal control in the replacement system, MyLeave, in coordination with the Deputy Assistant Secretary (Business Systems and Technology), Chief Information Office, to cumulatively track the amount of parental leave remaining per qualifying event.

We recommend that the Assistant Secretary of the Air Force (Manpower and Reserve Affairs) develop procedures to perform periodic reviews of, or coordinate with the Deputy Assistant Secretary (Business Systems and Technology), Chief Information Office, to develop internal controls in, LeaveWeb or the replacement system, MyLeave, to ensure that Service members do not take unallowable parental leave increments, leave exceeding the allotted amount, or leave after the 1-year period following a qualifying event without an approved exception.

Rec. 4.a: The DoD OIG recommended that the Deputy Commandant for Marine Corps Manpower and Reserve Affairs:a. Update Marine Online to cumulatively track the amount of parental leave remaining per qualifying event for use by commanders and Service members.

We recommend that the Deputy Commandant for Marine Corps Manpower and Reserve Affair develop procedures to perform periodic reviews of, or develop internal controls in, Marine Online to ensure that Service members do not take unallowable parental leave increments.

Rec. 5.a: The DoD OIG recommended that the Space Force Deputy Chief of Space Operations for Human Capital coordinate with the Assistant Secretary of the Air Force (Manpower and Reserve Affairs) to address Recommendation 3.a or develop Space Force-specific processes to cumulatively track the amount of parental leave remaining per qualifying event.

Rec. 5.b: The DoD OIG recommended that the Space Force Deputy Chief of Space Operations for Human Capital coordinate with the Assistant Secretary of the Air Force (Manpower and Reserve Affairs) to address Recommendation 3.b or develop Space Force-specific reviews or automated processes to ensure that Service members do not take unallowable parental leave increments, leave exceeding the allotted amount, or leave after the 1-year period following a qualifying event without an approved exception.

Assess whether the Information Technology Profile and Information Technology Risk Examination work programs used by Reserve Bank examiners address emerging information technology and cybersecurity risks and, based on this assessment, provide supplemental guidance and customize the Information Technology Profile and Information Technology Risk Examination work programs for System-led examinations as needed.

Establish a process to periodically assess whether the Information Technology Profile and Information Technology Risk Examination work programs used by Reserve Bank examiners, including the Board’s customized guidance, address current material risks in the information technology and cybersecurity environment and update the Information Technology Profile and Information Technology Risk Examination work programs as needed.

Clarify accountability for defining systemwide community banking organization information technology and cybersecurity training requirements.

Develop information technology and cybersecurity training guidance that describes expectations for generalist examiners conducting community banking organization information technology examinations, including expectations for on-the-job training and expectations following the completion of the community banking organization Examiner Commissioning Program.

Clarify in guidance the expectations for updating and reaffirming responses in Information Technology Profiles and retaining Information Technology Profiles for each information technology examination in the appropriate system of record, and expectations for assessing ongoing compliance.

Ensure the program clarifies and defines requirements for pain management teams in the new Veterans Health Administration Directive 1151, Pain Management and Opioid Safety.

Establish means to periodically validate the status information of facilities pain management teams.

Require the program and the chief operating officer to assess and ensure corrective actions are taken to address each medical facilitys lack of progress in achieving compliance with the requirement to have a pain management team as mandated by the Jason Simcakoski Memorial and Promise Act.

Facility leaders ensure all veterans and visitors, including those who require mobility assistance, have safe and accessible pathways to clinical areas during elevator repairs.

Facility leaders ensure staff complete and document preventive maintenance for medical equipment.

We recommend that the Office of the Administrator coordinate with the Bureau for Management's Office of Acquisition and Assistance, Bureau for Humanitarian Assistance, and USAID/Afghanistan to review and revise USAID's approach to coordinating implementer security and safety measures in Afghanistan. This review should consider implementing consistent assistance award requirements for implementers in Afghanistan to prepare security and safety plans and report security and safety incidents.

Determine the allowability of $300,245 ($15,786 in questioned ineligible
costs and $284,459 in cost share contribution shortfall amounts) on pages 24 to 26 of the audit report and recover any amount that is unallowable.

Verify that Appleseeds Academy corrects the two instances of material
noncompliance detailed on pages 22 and 23 of the audit report.

We recommend that the OGP Associate Administrator strengthen the PMRD’s policies and procedures to: more clearly define the PMR scoring system and its relevance to the PMR report findings and recommendations; clearly identify the findings and recommendations in the PMR report, including whether corrective action is required to address each finding; and ensure all required corrective actions are included in a CAP and implemented.

We recommend that the OGP Associate Administrator perform training and oversight to ensure proper administration and closeout of CAPs.

The Chief Information Officer should ensure that non-tax paper forms requiring one or more signatures are digitally converted and integrated with e-Signature Services capability by the established time frames.

The Chief Information Officer should ensure that the DMAF project application representative and DIRA project facilitator work together to reconcile and validate risk assessment documentation between DMAF project releases.

The Chief Privacy Officer should review the 1,334 individual taxpayer accounts and if warranted, take appropriate actions to place the data breach indicator on tax accounts and mail notification letters to additional taxpayers affected by the data breach.