Open Recommendations

We recommend that USAID's Office of Acquisition and Assistance Cost, Audit and Support Division/Contract Audit Management Branch verify that Kenya Red Cross Society corrects the one instance of material noncompliance detailed on pages 25 and 27 of the audit report.

Rec. 2.a: The DoD OIG recommended that the Cybersecurity Maturity Model Certification (CMMC) Program Management Office Director direct the contracting officer to modify the contract with the Cyber Accreditation Body to require the Cyber Accreditation Body (Cyber AB) to verify that the Cyber AB has signed Cybersecurity Maturity Model Certification Third?Party Assessment Organization (C3PAO) Agreements and Codes of Professional Conduct for every authorized C3PAO within 30 days of the date of this report or revoke the C3PAO's authorization to perform CMMC Level 2 assessments until the documents are received.

Rec. 2.c: The DoD OIG recommend that the Cybersecurity Maturity Model Certification (CMMC) Program Management Office Director direct the contracting officer to modify the contract with the Cyber Accreditation Body to require the Cyber Accreditation Body (Cyber AB) to verify that the quality control leads (QCL) for every authorized Cybersecurity Maturity Model Certification Third?Party Assessment Organization (C3PAO) meet the certification requirement within 30 days of the date of this report, and, for any of the C3PAO's QCLs who are not certified, revoke the authorization for those C3PAOs to perform CMMC Level 2 assessments until the C3PAOs provide support the QCLs…

Rec. 3.a: The DoD OIG recommended that the Cybersecurity Maturity Model Certification (CMMC) Program Management Office Director develop and implement a formal reauthorization process for the Cybersecurity Maturity Model Certification Third?Party Assessment Organizations (C3PAO) that includes a review and verification for all requirements in the C3PAO authorization process.

Rec. 3.b: The DoD OIG recommended that the Cybersecurity Maturity Model Certification (CMMC) Program Management Office Director develop and implement a process to ensure Cybersecurity Maturity Model Certification Third?Party Assessment Organizations (C3PAO) immediately notify both the CMMC Program Management Office and Cyber Accreditation Body of any changes associated with any of the requirements in the C3PAO authorization process.

The District Director ensures district leaders are aware of the Readjustment Counseling Service policy requirements to provide oversight of morbidity and mortality review completion, including panel member assignments, participation of affected vet center staff, report completion, reporting of completion delays, and information dissemination.

The District Director determines reasons vet center counselors did not complete safety plan components for clients assessed at intermediate or high suicide risk level in either acute, chronic, or both categories; ensures completion of safety plans for all active clients assessed at intermediate or high suicide risk levels; and monitors compliance across all zone vet centers.

The District Director determines reasons staff did not document providing safety plans to clients, ensures all active clients assessed at intermediate or high suicide risk levels receives a safety plan, and monitors compliance across all zone vet centers.

The OIG recommends facility leaders ensure staff understand procedures for cleaning equipment and continue to monitor the physical separation of clean and dirty items in storage spaces.

The OIG recommends that primary care leaders incorporate feedback from primary care staff and include them in process improvement projects.

Communicate to locations with electric vehicle infrastructure that policy regarding reporting safety hazards also includes electric vehicle infrastructure.

Continue to recruit and retain individuals with relevant financial management and/or accounting skills, train, as well as cross-train existing resources on financial management standards, concepts, policies, and procedures.

Enhance controls for the Department and the components to identify, analyze, and respond to risks and/or significant changes to operations and financial reporting processes.

Enhance controls for the Department and the components to monitor and evaluate the design and effectiveness of existing controls and enhance communication between the Department and components.

Enhance monitoring capabilities related to existing deficiencies to address existing design deficiencies and improve operating effectiveness of the related controls in a timely manner. Specifically, management should consider a baseline (current year) assessment and compare against management's design (future state) of the internal control system to address the objectives and risks of the Department.

Develop new and/or enhance existing training for procurement personnel and other stakeholders to more accurately respond to the prepayment and accrual data calls and record expenses appropriately, including consideration of the completeness and accuracy of data call responses.

Reinforce existing policies and procedures related to identifying expenses and obligations related to capitalizable projects, including consideration of the spending object code.

Rec. 1.a: The DoD OIG recommended that the U.S. Army Corps of Engineers Chief of Engineering and Construction issue a memorandum and provide training to U.S. Army Corps of Engineers personnel emphasizing guidance to:
1. Develop accurate construction-related estimates on future military construction contract solicitations.

2. Estimate cost and schedule for possible variations in the soil conditions based on a geotechnical report and weather conditions of the location of future military construction projects.
3. Use the quality management system, including how to categorize and access lessons learned from previous military construction projects, and the importance of reviewing after-action reviews to…

Rec. 1.b: The DoD OIG recommended that the U.S. Army Corps of Engineers Chief of Engineering and Construction review the benefits and limitations of U.S. Army Corps of Engineers Baltimore District officials using the bifurcated solicitation process to determine guidelines for the circumstances in which U.S. Army Corps of Engineers contracting personnel can use the bifurcated solicitation process in future military construction projects.

Rec. 1.c: The DoD OIG recommended that the U.S. Army Corps of Engineers Chief of Engineering and Construction review the actions of U.S. Army Corps of Engineers Savannah District officials for site preparation to determine whether U.S. Army Corps of Engineers personnel can use these actions in preparation for future military construction projects and issue a memorandum to U.S. Army Corps of Engineers personnel with the results of the review to use as lessons learned.

Rec. 1.d: The DoD OIG recommended that the U.S. Army Corps of Engineers Chief of Engineering and Construction review the actions U.S. Army Corps of Engineers Savannah District officials took to determine if U.S. Army Corps of Engineers contracting personnel can use these actions when managing military construction projects and issue guidance for U.S. Army Corps of Engineers contracting personnel on how to incorporate these actions for other military construction projects.

Rec. 1.e: The DoD OIG recommended that the U.S. Army Corps of Engineers Chief of Engineering and Construction review the mitigating actions and lessons learned that U.S. Army Corps of Engineers Seattle District officials had for challenges with design changes, security boundaries, and software systems to determine if U.S. Army Corps of Engineers contracting personnel should use these actions when managing other military construction projects.

Rec. 2.a: The DoD OIG recommended that the Commander of the U.S. Army Corps of Engineers Baltimore District provide training to U.S. Army Corps of Engineers personnel reinforcing how the costs of the various types of installed building equipment under military construction projects should be included in construction contracts for future Army military construction projects in accordance with Army Regulation 420-1, "Army Facilities Management."

Rec. 2.b: The DoD OIG recommended that the Commander of the U.S. Army Corps of Engineers Baltimore District complete an after-action review for the General Instruction Building project, including the benefits and additional efforts required for the bifurcated solicitation process in accordance with U.S. Army Corps of Engineers Engineer Regulations, and make the review available for U.S. Army Corps of Engineers personnel to consider when planning and executing future military construction projects.

Risk Management