Open Recommendations

Modify the queries used to generate the schedules of properties that accompany the reports to Congress to consider a larger range of dates to ensure that properties that failed consecutive inspections are appropriately identified on all applicable schedules.

Assess and streamline the processes for preparing, reviewing, and approving the reports as appropriate to ensure that the reports are submitted to Congress on or before the required due date.

Implement adequate procedures and controls to ensure that documentation is maintained to support that the reports were submitted to Congress.

Develop and require all users to complete Electronic/Technical Surveillance Tracking System training and maintain documentation of training completion.

Develop a verification process for annual physical equipment inventories to account for all equipment as required by the Inspection Service Manual.

Resolve Electronic/Technical Surveillance Tracking System functionality errors preventing users from temporarily transferring, temporarily assigning, and recording the final disposition of law enforcement surveillance equipment, including digital signature capability.

1) Review all postal inspectors with assigned equipment and validate they are active employees, 2) retrieve equipment from postal inspectors who separated from the agency, and 3) update the status and assignment of all equipment in the Electronic/Technical Surveillance Tracking System.

Implement audit logs containing user activity for creating, assigning, editing, and removing user roles in the Electronic/Technical Surveillance Tracking System.

Finalize and implement a comprehensive formalized enterprise-wide cloud computing strategy that, at minimum, addresses the following:• Alignment with federal guidance and directives such as Cloud Smart and Executive Order 14028. • Prioritization of the use of FedRAMP-authorized systems. • Identification of workforce requirements needed to support cloud procurement, implementation, and risk management.• Management of risks related to the use of cloud computing services such as secure cloud architecture, data governance, and incident management processes.

Develop and implement policies, procedures, and standards that are consistent with the NCUA’s cloud computing strategy and address, at minimum, the following: • Coordination, identification, and clarification of responsibilities and processes across all stakeholders for IT service contract reviews, service level agreements alignment and monitoring, and cloud service incident management. • Specific criterion for the prioritization, selection, and use of cloud computing services. • Periodic review of contract clauses included for cloud computing services to confirm documentation supporting security requirements are clearly identified to the vendor and security and operational risks are appropriately managed.

Develop comprehensive guidance and training for grantees on how to prepare the PR 29 report to ensure that the information collected is reliable, accurate, timely, and in compliance with the Uniform Administrative Guidance for Grants and Cooperative Agreements, specifically 2 CFR 200.302(a)(b) and 2 CFR 200.303

Follow up with the four grantees without adequate supporting documentation and assess their compliance with the financial management requirements in 2 CFR 200.302(b)(3), which require the financial management system of each non-Federal entity to provide for records that adequately identify the source and application of funds for federally funded activities.

Update the CPD Monitoring Handbook to incorporate the review of the PR 29 report when performing financial monitoring reviews.

Develop written procedures on how to review PR 29 report submissions and monitor resubmissions, late submissions, and nonsubmissions.

Evaluate and update IDIS to ensure that resubmissions of PR 29 reports are tracked and prior submissions are preserved and correct the system's misclassification of unsubmitted and uncertified draft PR 29 reports as submitted.

Determine how often grantees' requests for reimbursement contain cost outside the quarter and in coordination with OCFO, evaluate CPD's grant accrual methodology and assumptions to ensure that it adequately considers the impact of these late cost reimbursements.

Develop guidance that encourages grantees to draw down funds for reimbursement on a regular schedule, not less than quarterly.

Work with OCFO to ensure that CPD collects and reports to OCFO all of the information needed to properly account for all CPD activities in HUD's financial statements in accordance with Federal financial reporting requirements and accounting standards.

Update Line 4 - Cash (grant funds) disbursed during the reporting period in the PR 29 report to allow grantees to report all CDBG grant funds disbursed, including funds that have not yet been drawn down from HUD for reimbursement.

Obtain the required approvals under PRA for the PR 29 report.

VA Deputy Secretary to mediate the two offices’ collaboration to develop and publish updates to the personnel security policies and procedures for vetting contractor employees to include appropriate roles and responsibilities; standard contract language to communicate the requirements for vetting contractor employees, including whether a fingerprint check or background investigation is required, that can be used across the department; and a requirement that the VA organization requesting a contract provide the position designation record in the acquisition package submitted to the contracting office.

Executive director of the Office of Acquisition and Logistics and senior procurement executive: 3. Update and publish the Veterans Affairs Acquisition Regulation and Veterans Affairs Acquisition Manual to direct the department’s acquisition professionals to the correct guidance for vetting contractor employees, which should include VA’s personnel security and suitability program policy.

Assistant secretary for information and technology update and publish VA Handbook 6500.6, Contract Security, in collaboration with the Office of Acquisition, Logistics, and Construction and the Office of Human Resources and Administration/Operations, Security, and Preparedness including retitling it to better correspond to its content and removing any personnel security steps that should only be discussed in VA personnel security and suitability program policies.

The Office of Administration should work with the Bureau of Field Service to create an agency wide capital planning report for fiscal years 2024-2028 that includes all field offices (in addition to headquarters) and addresses all considerations required by the Office of Management and Budget's latest Memorandum M-22-14.

The Office of Administration should adequately document exemptions of the Office of Management and Budget's memorandums related to agencywide capital planning requirement.