Open Recommendations

We recommend that HUD require the City to analyze the method used to charge planning and administration costs to ensure that all costs are applied to the correct costs category and are valid charges to the National Disaster Resilience grant.

We recommend that HUD require the City to review misallocated planning and administration funds and reallocate any mistakenly allocated funds to the correct National Disaster Resilience project or grant activity. This measure could make available additional funds for program oversight.

We recommend that HUD require the City to develop a plan for how the City will continue to fulfill the required monitoring and oversight responsibilities of the National Disaster Resilience programs and projects if it runs out of planning and administration funds before it completes these programs and projects.

We recommend that HUD require the City to provide monitoring reports and supporting documentation to show that it conducted periodic monitoring of NORA' s performance and compliance with program rules and regulations and ensured that NORA promptly remedies any findings or concerns. This includes, but is not limited to, ensuring that NORA (1) provides adequate oversight of the contractors providing service under the program and (2) maintains documentation to support eligibility for program participants.

We recommend that HUD require the City to develop and implement a methodology for NORA to conduct periodic evaluations at appropriate points during the construction process to assess the quality of the work on all new properties and correct any issues identified.

We recommend that HUD require the City to develop and implement a plan for how to review the condition of the property updates and determine where repairs are needed.

We recommend that HUD require the City to analyze the effectiveness of the Retrofit program and identify what improvements are needed to better benefit program participants and lessen their burden, to include obtaining input from program participants, and implement those improvements.

We recommend that HUD require the City to support or repay, from nonfederal funds, $5,078 in the square footage overcharge for work not completed, according to the project design and invoice documentation.

We recommend that HUD require the City to provide supporting documentation for the 4 program participants that did not have adequate income documentation. If the supporting documentation cannot be provided, repay, from nonfederal funds, $99,347.

We recommend that HUD require the City to since the property updates have been completed for the 24 program participants that did not receive the green infrastructure training, provide documentation that any subsequent program participants completed the green infrastructure training workshop before the grant agreement is signed and construction begins.

Complete the implementation of an automated solution to help ensure a complete and accurate inventory of software assets.

Define a required frequency for updating the system inventory and implement a quality control process to validate that system inventories are updated in a timely manner.

Update existing policy and procedures to ensure plans of action and milestones are closed only after the planned corrective actions and milestones have been implemented.

Review the Enterprise Risk Management Framework Guide annually and update if needed.

Develop a strategy to ensure that products, system components, systems, and services of external providers are consistent with the organization’s cybersecurity and supply chain requirements.

Define timeframe and remediation requirements for baseline and configuration weaknesses.

Properly update and remediate vulnerabilities and configuration weaknesses throughout the SBA environment.

Implement a process to track and enforce compliance with PIV implementation and multi-factor requirements.

Ensure implementation procedures for data loss prevention are updated at least on a biannual basis to reflect new processes and new requirements.

Update existing procedures that identify the roles of individuals with significant IT responsibilities who require role-based training and ensure such training is provided and tracked.

Provide training to individuals with contingency planning roles and responsibilities.

We recommend that the Contracting Officer require the Association to update its claims processing system with edits to ensure that claim lines with telehealth related place of service and procedure code modifiers suspend prior to payment for review.

The Carl Vinson VA Medical Center Director ensures that the CensiTrac Instrument Tracking System is fully implemented, and that training is provided to the CensiTrac coordinator and Sterile Processing Services staff, and monitors for compliance.

The Bureau of Information Services should identify and document detailed project plans for their Information Technology Modernization Initiatives, to include the agency’s goals, project milestones, a description of the work necessary, and designated timelines for completion, as required by the Office of Management and Budget Circular A-130’s specifications for IT investment processes, including planning, budgeting, procurement, management, and assessment.

The Bureau of Information Services should develop and implement a monitoring plan to track agency spending for their Information Technology Modernization Initiatives, which should include how the information technology funds were allocated, reallocated, and spent.