Open Recommendations

Integrate documented contingency plans with the other relevant agency planning areas (Contingency Planning iii).

Develop a comprehensive strategic plan for transitioning to a fully digital security camera system that, among other things:a. identifies enhancements needed to address camera functionality and coverage deficiencies, b. provides cost projections and the BOP appropriations account to fund the upgrades, andc. includes an estimated timeline for completion of the work.

We recommend that Coventry Health Care of Missouri, Inc. refund to the Federal Government the $548,852 of total net overpayments.

We recommend that Coventry Health Care of Missouri, Inc. identify, for the diagnoses included in this report, instances of noncompliance in the enrollee-years that occurred: (1) during our audit period but were not included in our judgmental sample and (2) before and after our audit period and refund any resulting overpayments to the Federal Government.

We recommend that Coventry Health Care of Missouri, Inc. enhance its compliance procedures to focus on diagnosis codes that are at high risk for being miscoded by 1) educating its providers about the proper use and documentation of these diagnoses and 2) determining whether these diagnosis codes (when submitted to CMS for use in CMS's risk adjustment program) comply with Federal requirements.

This recommendation is Sensitive But Unclassified.

This recommendation is Sensitive But Unclassified.

USDA OIG has determined that this recommendation contains sensitive information and will not be publicly released due to privacy concerns.

USDA OIG has determined that this recommendation contains sensitive information and will not be publicly released due to privacy concerns.

The Office to Monitor and Combat Trafficking in Persons should review its unliquidated obligations in accordance with Department standards and put up to $496,000 to better use.

This recommendation is Sensitive But Unclassified.

This recommendation is Sensitive But Unclassified.

This recommendation is Sensitive But Unclassified.

This recommendation is Sensitive But Unclassified.

This recommendation is Sensitive But Unclassified.

The Director evaluates and determines any additional reasons for noncompliance and ensures that staff complete the required prevention and management of disruptive behavior training based on the risk level assigned to their work areas.

Develop and communicate an organization wide Supply Chain Risk Management strategy and implementation plan to guide and govern supply chain risks.

Undertake a strategic analysis of the Inspector General FISMA Metrics and the weaknesses identified in the audit, to develop a multi-year strategy and approach to include objective milestones, and resource commitments by the Department and the CIO that address the corrective actions
necessary to show steady, measurable improvements towards an effective information security program.

Work with the Federal Aviation Administrations CIO and Federal Motor Carrier Safety Administrations Information Security System Manager (ISSM), to investigate and remediate cross-site scripting vulnerabilities identified in public facing web applications.

Work and coordinate with system owners to identify and remediate weak and default authentication mechanisms within their systems and the Common Operating Environment.

Develop and implement a process to facilitate centralized monitoring, oversight (by ISSMs and their alternates) and escalation efforts to ensure the timely completion of required security awareness training and role based training for all DOT personnel leveraging an automated integrated solution(s) and dashboards.

Revise the COR Appointment Letter to require compliance with the detailed written procedures developed in response to Recommendation 1 (which required the development of procedures for the COR process, including a standard governance structure and standard communication processes among CORs to support the Primary COR function, as well as invoice review responsibilities for all types of COR and how invoices are reviewed for accuracy and completeness.)

OIG recommends that the Bureau of Administration develop and implement additional internal control procedures for monitoring to ensure that justifications and approvals for other than full and open competition are completed and approved in accordance with Federal Acquisition Regulation requirements and Office of the Procurement Executive guidance and that reviewing officials verify that the justifications include all required content.

OIG recommends that the Bureau of Administration develop and implement internal controls to ensure Contracting Officers comply with Federal Acquisition Regulation Subpart 6.305, Office of the Procurement Executive Procurement Implementation Bulletin 2014-11, and Office of Acquisitions Management Memorandum 16-16 regarding providing public notice of noncompetitive contracts and maintaining proof of public notice in contract files.

OIG recommends that the Bureau of Administration (a) determine the feasibility, practicality, and cost-effectiveness of adding functions to the new online application being developed for justifications and approvals that will automatically transfer completed justifications to the electronic contract file and also post the justifications publicly in accordance with the Competition in Contracting Act and the Federal Acquisition Regulation and (b) if determined to be feasible, practical, and cost-effective, incorporate such a function in the application.