Open Recommendations

We recommend EEOC ensure that emailed policy memos are promptly updated in the appropriate EEOC Directives Transmittal Order.

We recommend EEOC management update its policies and procedures to include all required safeguards and internal controls to be compliant with the Government Charge Card Abuse Prevention Act of 2012. In addition, EEOC should create a monitoring control to review the policy when changes or updates are made to federal law or Office of Management and Budget or General Services Administration guidance.

Update user system access control procedures to include the requirement for individuals to complete a non-disclosure agreement as part of the clearance waiver process prior to the individual being granted access to the NRC systems and information. Also, incorporate the requirement for contractors and employees to complete non-disclosure agreements as part of the agency’s on-boarding procedures prior to these individuals being granted access to the NRC’s systems and information.

Continue efforts to identify individuals having additional responsibilities for PII or activities involving PII and develop role-based privacy training for them to be completed annually.

Implement the technical capability to restrict NRC network access for employees who do not complete annual security awareness training and, if applicable, their assigned role-based security training.

Integrate metrics for measuring the effectiveness of information system contingency plans with information on the effectiveness of related plans, such as organization and business process continuity, disaster recovery, incident management, insider threat implementation, and occupant emergency plans, as appropriate, to deliver persistent situational awareness across the organization.

Implement automated mechanisms to test system contingency plans, then update and implement procedures to coordinate contingency plan testing with ICT supply chain providers and implement an automated mechanism to test system contingency plans.

Standardize documentation required in alien files that Customs and Border Protection needs to include for transfer of aliens from Customs and Border Protection to Immigration and Customs Enforcement, Enforcement and Removal Operations custody that will apply to all field offices.

We recommend that North Mississippi Medical Center refund to the Medicare program the estimated $67,038 in overpayments for claims that it incorrectly billed.

We recommend that North Mississippi based upon the results of this audit, exercise reasonable diligence to identify, report, and return any overpayments in accordance with the 60-day rule,18 and identify any of those returned overpayments as having been made in accordance with this recommendation

We recommend that North Mississippi Medical Center educate its staff on properly billing for polysomnography services.

We recommend that North Mississippi Medical Center revise policies and procedures to ensure that claims are coded correctly and that sleep technicians have the required credentials before billing claims for polysomnography services to ensure full compliance with Medicare requirements.

We recommend that the FWS work with the Department to resolve the questioned costs related to ineligible other direct costs totaling $8,503.

We recommend that the FWS require the Department to implement policies and procedures that properly allocate ASPA charges.

We recommend that the FWS work with the Department to resolve the questioned costs related to unsupported leave payouts totaling $3,167.

We recommend that the FWS require the Department to establish policies that follow Federal regulations to ensure leave payouts are allocated based on activity charged to specific grants.

Review the OIG identified potential duplicate disbursements for eligibility and take action to recover any improper payments as applicable

Provide the support staff and equipment necessary at the JFK IMF to adequately inspect mail in a timely manner.

Implement the necessary controls to secure mail in CBP’s possession at the JFK IMF.

[Description omitted; DOJ has determined that this recommendation contains information that is limited official use or classified.]

Review and update, as necessary, all applicable policies to reflect the changes to the statute of limitations created by the Disaster Recovery Reform Act of 2018 for Section 705(a) of the Robert T. Stafford Disaster Relief and Emergency Assistance Act.

Revise FEMA’s process to routinely review all internal policies and procedures when Federal laws and regulations affecting FEMA change to ensure internal policies and procedures remain compliant and required changes are timely.

Create a software license inventory policy, which will include identifying the number of licenses, license-counts authorized, overall costs of licenses, maintenance fees, and contracts used for each licensed software. Track and report savings produced by software licensing inventory and report the savings as part of the Office of Management and Budget’s annual SpendUnder Management data.

CMS should ensure the accuracy of non-nurse staffing data used on Care Compare.

1. We recommend that the Florida Agency for Health Care Administration, Division of Health Quality Assurance work with CMS to provide clear guidance to nursing facilities regarding what constitutes a reportable incident.