Open Recommendations

Management should re-enforce requirements for performing DNFSBs change control procedures in accordance with the agency’s Configuration Management Plan by defining consequences for not following these procedures and conducting remedial training as necessary.

Based on the results of DNFSB’s supply chain risk assessment included in the recommendation for the Identify function above, update DNFSB’s contingency planning policies and procedures to address ICT supply chain risk.

NIH should update its training materials routinely to include informationabout breaches of peer reviewer confidentiality and possibleundue foreign influence.

NIH should require all peer reviewers to attend periodic trainings aboutpeer review integrity.

NIH should conduct targeted, risk-based oversight of peer reviewers using analysis of information about threats to research integrity.

NIH should consult with Federal law enforcement and national securityexperts to determine what additional steps it might take toidentify and address potential risks to the confidentiality of thepeer review process, including possible undue foreign influence.

Ensure future process changes are implemented according to change management best practices noted by GAO.

The Office ofInformation Technology (OIT), in partnership with OFP and OFO, should re-evaluate IMS requirements, and requirementsfor the framework of its successor system, to determine what additional reporting functionalities are needed in order to analyze data about staff and office productivity. A Voice of the Customer exercise or a user requirement meeting could serve as starting point to gather current requirements from IMS main users (OFP and OFO) and to determine what other current systems need to be integrated to make them function in alignment with IMS (Power BI, Complainant Portal).

OIT developers should meet directly with software users, such as OFO attorneys and supervisory attorneys and OFP AJs and Supervisory AJs(SAJ)to determine additional requirements.

OFO and OFP, in partnership with OIT, should consider development of an IMS training guide or document that is consistently updated and reviewed following upgrades, enhancements or modifications of the software. This guide should include all necessary codes for every action item in the process and should be available for all product users. This guide should ensure that product users track all mandated steps in IMS. Given that each office’s staff has their own needs within IMS: One guide should be made for OFP legal techs, AJs, and SAJs. A separate guide should be available for OFO CCD staff, attorneys…

Assign a target amount of days for intake so that management can determine if changes implemented impact the efficiency of the process.

We recommend that the New York State Department of Health obtain and review the results of MCO site visits at adult day care facilities as part of its beneficiary health and safety monitoring activities.

We recommend that the New York State Department of Health ensure that MCOs work with their contracted adult day care services providers to correct the 476 instances of noncompliance with health and safety requirements identified in this report.

We recommend that the New York State Department of Health require MCOs to improve their site visit procedures to ensure compliance with health and safety requirements detailed in the State agency’s CMS-approved MCO contract and New York’s regulations on adult day care programs.

Establish controls that mitigate the risk of inmates communicating with unknown and un-vetted parties and take steps, including the utilization of available technological features as found in TRULINCS, to reduce the risk of mass emails being received by high-risk inmates, including terrorist inmates.

Review cellblock conversation monitoring policy, procedures, and capabilities to determine whether and how improvements can be made to achieve security goals, including improvement of audio monitoring systems.

Revisit its social communication monitoring policy for high-risk inmates, including terrorist inmates, to better ensure that all visits between terrorist inmates and their visitors are sufficiently monitored.

We recommend that BMA exercise reasonable diligence to identify and return any additional similar overpayments outside of our audit period, in accordance with the 60-day rule, and identify any returned overpayments as having been made in accordance with this recommendation

We recommend that BMA refund to the Federal Government the portion of the estimated $96,185 in improper payments for claims incorrectly billed to the Medicare program that are within the reopening period

We recommend that BMA for the remaining portion of the estimated $96,185 in improper payments for claims that are outside of the Medicare reopening period, exercise reasonable diligence to identify any additional similar improper payments in accordance with the 60-day rule, and identify any returned overpayments as having been made in accordance with this recommendation

Rec. 1.a.2: The DoD OIG recommended that the Assistant Secretary of Defense for Sustainment, in coordination with U.S. Transportation Command and the Military Services, give the Military Surface Deployment and Distribution Command the authority and ability to enforce the Military Services' compliance with the Military Surface Deployment and Distribution Command accident investigation recommendations by tasking the Military Services to take specific action through a system of draft recommendations, command response, Military Surface Deployment and Distribution Command evaluation of those responses, and adjustment of the Military Surface Deployment and Distribution Command recommendations.

Establish a control to validate that Agency personnel are creating the required plans of action and milestones for weaknesses that are identified from vulnerability testing but not remediated within the Agency’s established time frames per the EPA’s information security procedures.

We recommend that the U.S. Department of Health and Human Services, Assistant Secretary for Financial Resources continue the grant remediation process to close remaining pooled accounts in the PMS.

We recommend that the U.S. Department of Health and Human Services, Assistant Secretary for Financial Resources work with CMS to: 1. implement an electronic grant management system for CMCS and CCSQ, 2.assign clear roles and responsibilities related to grant closeout activities at CMCS, and 3. clarify CMCS’s ability to close out its grants.

Information is maintained in case files to support that eligibility determinations were performed in accordance with Federal and State requirements.