Open Recommendations

Finalize the implementation of the access control technologies.

Develop and implement performance metrics for configuration management.

Implement data encryption configurations/solutions at the server level for data at rest for sensitive information (PII).

Conduct a detailed review of all payroll processed in 2018 and 2019 to identify payroll over and underpayments and complete this review within six months of the issuance of this report.

To the extent consistent with the law, reimburse employees that were identified as underpaid and attempt to recover payment from all employees that were identified as overpaid in the above review.

Ensure that LSC unallowable costs are charged to funding sources other than LSC and reflected within the financial software to provide an audit trail.

Recommendation is not publicly available.

Recommendation is not publicly available.

Recommendation is not publicly available.

Recommendation is not publicly available.

Recommendation is not publicly available.

Recommendation is not publicly available.

Recommendation is not publicly available.

Recommendation is not publicly available.

Recommendation is not publicly available.

Recommendation is not publicly available.

Recommendation is not publicly available.

IHS should extend policies to address more types of perpetrators, victims, and abuse;

IHS should conduct additional outreach to Tribal communities to inform them of patient rights, solicit community concerns, and address barriers to reporting of patient abuse.

IHS should ensure that the new incident reporting system is effective and addresses the risks identified in the current system;

IHS should designate a central owner in IHS headquarters to ensure clear roles and responsibilities for shared ownership in implementing patient protection policies, and managing and responding to abuse reports;

IHS should continue to actively promote an organizational culture of transparency and work to resolve barriers to staff reporting of abuse

The executive in charge, office of under secretary for health, and the principal executive director, office of acquisition, logistics, and construction, require the Healthcare Commodities Program Office and Strategic Acquisition Center to develop a formal process to validate correct order fulfillment reporting by the prime vendors, ensure the correct algorithms are used, and help prevent missed opportunities to identify and mitigate issues.

The executive in charge, office of under secretary for health, and the principal executive director, Office of Acquisition, Logistics, and Construction, require the Healthcare Commodities Program Office and Strategic Acquisition Center to monitor the Integrated Product Team’s development and implementation of a process to validate performance metric reporting such as on unadjusted fill rates.

The executive in charge, office of under secretary for health, requires the Procurement and Logistics Office to strengthen controls, monitor the Healthcare Commodities Program Office monthly, and ensure adherence to the established Medical/Surgical Prime Vendor Next Generation program control plan.