Open Recommendations

USAID/Zambia determine the allowability of $1,192,504 in questioned costs ($14,127 ineligible, $1,178,377 unsupported) on pages 13 and 16 of the audit report and recover any amount that is unallowable.

USAID/Zambia determine the allowability of $1,063,630 in questioned cost sharing costs contributions ($40,346 ineligible, $1,023,284 unsupported) on page 69 of the audit report and recover any amount that is unallowable.

We recommend that the PBS Commissioner address the specific vulnerabilities the OIG identified for the child care centers.

We recommended that the PBS Commissioner conduct a comprehensive assessment to identify security vulnerabilities at each child care center located in a GSA-controlled building and expedite action to upgrade these buildings to the minimum security standards. If PBS cannot address vulnerabilities identified in these buildings, the child care centers should be moved to safer locations.

Determine the allowability of the questioned transactions and recover $1,135,453, if applicable.

Recommendation 1: With the involvement of the Office of the Technical Director, develop and implement an Excepted Service recruitment strategy and update guidance to reflect this strategy.

Develop and implement a step-by-step hiring process metric with periodic reporting requirements.

Update and finalize policies and procedures relative to determining the technical qualifications of OTD applicants. These should include examples of experience such as military and teaching, and their applicability to OTD positions.

Develop and issue hiring-process guidance and provide training to DNFSB staff involved with the hiring process.

Ensure that OIT monitors and promptly installs patches and antivirus updates across the enterprise when they are available from the vendor. Enhancements should include:Pending since FY 2017

Implement a process to track patching of network devices and servers by the defined risk-based patch timelines in CNCS policy.

Monitor and record actions taken by the contractor to ensure vulnerability remediation for network devices and servers is addressed or the exposure to unpatchable vulnerabilities is minimized.

Ensure that OIT evaluates if the internet connections at the National Civilian Community Corps Campuses and Regional Offices are sufficient to allow patches to be deployed to all devices within the defined risk-based patch timeline in CNCS policy. If the internet connections are determined to be inadequate, develop and implement a plan to enhance the current internet connections.

Develop and implement a written process to ensure manual updates to the CMDB inventory and FasseTrack system are made simultaneously when the inventory is updated.

Develop and implement a written process to perform periodic reconciliations between CMDB and the FasseTrack system.

Perform and document analysis to determine the feasibility of completely automating the inventory management process.

Physically or mechanically disable the networking capability of the laptop used for member badging at the NCCC Pacific Region Campus.

Document and implement a process to validate that physical counselor files from the NCCC Southwest Region Campus are disposed of within six years after the date of the member’s graduation in accordance with the AmeriCorps NCCC Manual.

Replacement of information system components when support for the components is no longer available from the developer, vendor or manufacturer.

Enhance the inventory process to ensure all devices are properly identified and monitored.

Federal regulations define rehabilitative services as services recommended by a licensed practitioner for maximum reduction of physical or mental disability and restoration of a beneficiary to their best possible functional level. State regulations for PACT, which the State agency defines in its Medicaid State plan as a rehabilitative program, stipulate that the prior authorization of services shall cover all dates that services were provided to ensure proper reimbursement. Although State regulations stipulate that a prior authorization should cover all dates of service, they do not specify a timeframe for which authorized services are eligible for Medicaid reimbursement. Essentially, this results…

Of the 100 sampled State agency claims for Federal Medicaid reimbursement of payments for PACT services, 50 complied with Federal and State requirements, but the remaining 50 did not. The below deficiencies were found and many of the claims had more than one deficiency. *Services not adequately supported or documented *Plan of care requirements not met *Required clinical disciplines not included on PACT team *Prior authorization requirements not met *No documentation of compliance with boarding home requirements *Documentation did not support 2 hours of face-to-face contact *No nursing assessment

Of the 100 sampled State agency claims for Federal Medicaid reimbursement of payments for PACT services, 50 complied with Federal and State requirements, but the remaining 50 did not. The deficiencies occurred because the State agency did not inform PACT providers of all Federal and State requirements for providing PACT services, and its monitoring procedures were not adequate to identify all instances when providers did not claim PACT services in accordance with these requirements. In fact, the monitoring procedures did not include checking whether some requirements were met. As a result, PACT providers did not follow requirements for providing PACT…

Of the 100 sampled, State agency claims for Federal Medicaid reimbursement of payments for PACT services, 50 complied with Federal and State requirements, but the remaining 50 did not. These deficiencies occurred because providers were not aware of all PACT requirements or did not adhere to the requirements.

Review IRDF’s use of prolonged administrative segregation and seek alternative housing when appropriate.