Open Recommendations

Conduct an assessment of LearningWorks’ match contribution for its third-year funding to determine whether it met its match requirement, disallow any unsupported match contributions and recover any Federal funds that were overpaid as a result of LearningWorks’ failure to meet its match requirements.

Oversee the Maine Commission when coordinating with LearningWorks to revise its policies to define supporting documentation for the usage and valuation of donated spaces for in-kind contributions;

Instruct the Maine Commission to evaluate compliance of LearningWorks procedures on internal controls for time recordkeeping for donated personnel time at its service sites to provide reasonable assurance that charges are accurate, allowable, and allocable; and necessary.

Provide training to the Maine Commission staff and offer training to LearningWorks and other subgrantees concerning acceptable valuation and documentation of in-kind match costs.

Require the Maine Commission to develop and implement oversight or quality control of all fiscal monitoring performed by its staff.

Coordinate with the Maine Commission to develop guidance explaining and illustrating what constitutes acceptable documentation to support in-kind contributions;

In collaboration with the Office of Land and Emergency Management, establish mechanisms to ensure that all inspections are completed within the required time frame of two years for operating treatment, storage, or disposal facilities or the policy time frame of three years for nonoperatingtreatment, storage, or disposal facilities.

Develop and implement controls to verify that the Superfund program deferrals to the Resource Conservation and Recovery Act are added to RCRAInfo for further Resource Conservation and Recovery Act attention, as necessary.

Develop and maintain a crosswalk of Superfund Enterprise Management System and corresponding RCRAInfo identification numbers.

Develop and implement controls to identify and eliminate overlap of environmental indicators between Resource Conservation and RecoveryAct Corrective Action and Superfund Programs and include this information in public queries, such as Cleanups in My Community.

Rec. 1: The DoD OIG recommended that the Director of the Federal Voting Assistance Program develop and implement agreements, such as memorandums of understanding, with all external stakeholder agencies to enhance outreach and ensure a collaborative and efficient effort to support Uniformed and Overseas Citizen Absentee Voter Act voters and their eligible family members, including those in deployed, dispersed, and tenant organizations.

The Office of Inspector General recommended that the Office of Programs allocate resources for the Railroad Retirement Board’s Unemployment and Programs Support Division – Sickness and Unemployment Benefit Section to work on fraud referrals as provided in the Adjudication Instruction Manual, Part 16, and as instructed by the Office of Inspector General, Office of Investigations.

The Office of Inspector General recommended that the Executive Committee commit additional resources necessary to ensure the implementation of an automated debt recovery process for CARES Act payments.

CMS should Review States’ managed care payment data in T-MSIS and ensure that States have corrective action plans to improve data completeness and quality, as appropriate.

CMS should make public its reviews of States’ managed care payment data.

CMS should clarify and expand its initiative on payment data.

Use the fully defined ISA to: a. Assess enterprise, business process, and information system level risks;b. Formally define enterprise, business process, and information system level risk tolerance and appetite levels necessary for prioritizing and guiding risk management decisions;c. Conduct an organization wide security and privacy risk assessment; and,d. Conduct a supply chain risk assessment.

Using the results of recommendations one (1) and two (2)above:a. Collaborate with the DNFSB’s Cybersecurity Team to establish performance metrics in service level agreements to measure, report on, and monitor the risks related to contractor systems and services being monitored by IT Operations;b. Utilize guidance from the National Institute of Standards in Technology (NIST) Special Publication (SP) 800-55 (Rev. 1) – Performance Measurement Guide for Information Security to establish performance metrics to more effectively manage and optimize all domains of the DNFSB information security program;c. Implement a centralized view of risk across the organization; and,d. Implement formal procedures for prioritizing…

Implement automated mechanisms (e.g. machine-based, or user-based enforcement) to support the management of privileged accounts, including for the automatic removal/disabling of temporary, emergency, and inactive accounts, as appropriate.

Develop and implement a plan to address the challenges presented by the Unit’s organizational structure.

Establish minimum criteria for referrals of patient abuse and neglect to be sent to the MFCU.

Establish a process to coordinate on cases and improve collaboration with Federal partners.

Take steps to ensure that Unit staff report all convictions and adverse actions to Federal partners within the appropriate timeframes.

Take steps to ensure that newly hired investigators complete new employee trainings.

Take steps to ensure that supervisory reviews of case files are conducted and documented in accordance with Unit policy.