Open Recommendations

The Overton Brooks VA Medical Center Director makes certain that oversight of the intensive care unit physician credentialing and privileging process is completed prior to physicians being scheduled and providing patient care, and monitors compliance.

The Overton Brooks VA Medical Center Director ensures root cause analyses are completed according to Veterans Health Administration policy including team composition, root cause analysis process steps, and timeliness.

The Under Secretary for Health evaluates the additional root cause analysis concurrence step used within Veterans Health Administration medical centers to ensure alignment with National Center for Patient Safety guidance, and takes action as indicated.

Information Technology Branch should review CFTC Cyber Security Operations Center (eSOC) standard operating procedures to ensure detections of foreign IP addresses are effectively resolved, particularly when multiple detections are received for the same employee.

In compliance with the collective bargaining agreement, Human Resources Branch should update supervisory controls as necessary to ensure compliance with Article 46 of the CFTC-NTEU Master Collective Bargaining Agreement, as amended, and prevent misuse of official time.

Human Resources Branch should review language in the standard administrative leave memorandum (“Subj: Place on Administrative Leave”) and update the memorandum to clearly state requirements for employees placed in an administrative leave status.

In our August and September 2024 alerts, we recommended that the Chief, Business Continuity Operations Officer, should ensure that the identified primary and spare pad-paks that have expired are replaced immediately.

In our August and September 2024 alerts, we recommended that the Chief, Business Continuity Operations Officer, should ensure that where TIGTA identified missing spare pad-paks, they are replaced.

In our August and September 2024 alerts, we recommended that the Chief, Business Continuity Operations Officer, should ensure that where TIGTA did not conduct an inspection, an immediate assessment is conducted on AEDs across the IRS AED program to identify and replace AED pad-paks expired or missing.

The Chief, Business Continuity Operations Officer, should ensure that appropriate signage identifying the location of mounted AEDs is provided.

In our September 2024 alert, we recommended that the Chief, Business Continuity Operations Officer, should ensure that where TIGTA did not conduct an inspection, an immediate assessment is conducted of AED wall cabinets across the IRS AED program to identify and mount AEDs within an approved cabinet and comply with proper placement guidelines, as appropriate.

In our August 2024 alert, we recommended that the Chief, Business Continuity Operations Officer, should ensure that where TIGTA did not conduct an inspection, an immediate assessment is conducted of AEDs across the IRS AED program to identify, repair, or replace AEDs that are nonoperational.

In our September 2024 alert, we recommended that the Chief, Business Continuity Operations Officer, should ensure that an immediate assessment is conducted to ensure that AED trainer models are not distributed, mounted, and available for use in the event of an emergency. If any AED trainer models exist, they should be immediately removed and stored away from AED cabinets and signage to avoid confusion.

The Chief, Business Continuity Operations Officer, should ensure that AED site coordinators complete their monthly maintenance inspections as required.

In our September 2024 alert, we recommended that the Chief, Business Continuity Operations Officer, should determine whether AEDs have been implemented at these IRS PODs. If so, provide documentation that supports AEDs have been provided at these PODs, e.g., serial numbers and locations of AEDs.

In our September 2024 alert, we recommended that the Chief, Business Continuity Operations Officer, should identify where AEDs have not been implemented at IRS PODs with more than 100 employees and determine whether an AED program will be implemented at these PODs, e.g., recruiting and training volunteers, installing AEDs, etc.

We recommend that OCP develop and implement monitoring activities to assess USDA agencies’ compliance with CPARS requirements, including CPARS training requirements, performance evaluation quality requirements, and timely reporting requirements.

We recommend that OCP develop and implement performance measures to evaluate the quality and timeliness of CPARS evaluations.

USDA OIG has determined that this recommendation contains sensitive information and will not be publicly released due to privacy concerns.

USDA OIG has determined that this recommendation contains sensitive information and will not be publicly released due to privacy concerns.

USDA OIG has determined that this recommendation contains sensitive information and will not be publicly released due to privacy concerns.

USDA OIG has determined that this recommendation contains sensitive information and will not be publicly released due to privacy concerns.

Take corrective actions to ensure that facilities and programs remove unauthorized sensitive information from collaborative application sites.

Expand roles and responsibilities of facility and program information system security officers and privacy officers to include the routine review of SharePoint and Teams site permissions and content.

Implement automated tools and policies, supported with training, to enable the timely and routine detection and correction of improper sharing and unauthorized content throughout VA.