Open Recommendations

Identity and Access Management

Revise EPA Manual 3130 A2, Recognition Policy and Procedures Manual, to establish a methodology for determining the equivalent value for time-off awards.

(U) Rec. 5: This recommendation is Controlled Unclassified Information

Finalize the implementation of the access control technologies.

Develop and implement performance metrics for configuration management.

Implement data encryption configurations/solutions at the server level for data at rest for sensitive information (PII).

Conduct a detailed review of all payroll processed in 2018 and 2019 to identify payroll over and underpayments and complete this review within six months of the issuance of this report.

To the extent consistent with the law, reimburse employees that were identified as underpaid and attempt to recover payment from all employees that were identified as overpaid in the above review.

Ensure that LSC unallowable costs are charged to funding sources other than LSC and reflected within the financial software to provide an audit trail.

Recommendation is not publicly available.

Recommendation is not publicly available.

Recommendation is not publicly available.

Recommendation is not publicly available.

Recommendation is not publicly available.

Recommendation is not publicly available.

Recommendation is not publicly available.

Recommendation is not publicly available.

Recommendation is not publicly available.

Recommendation is not publicly available.

Recommendation is not publicly available.

IHS should extend policies to address more types of perpetrators, victims, and abuse;

IHS should conduct additional outreach to Tribal communities to inform them of patient rights, solicit community concerns, and address barriers to reporting of patient abuse.

IHS should ensure that the new incident reporting system is effective and addresses the risks identified in the current system;