Open Recommendations

CMS should assist SAMHSA by providing data about the number of Medicare beneficiaries receiving buprenorphine in office-based settings and the geographic areas where Medicare beneficiaries remain underserved.

CMS should take steps to increase the utilization of behavioral therapy among beneficiaries receiving medication to treat opioid use disorder.

CMS should create an action plan and take steps to address disparities in the treatment of opioid use disorder.

CMS should collect data on the use of telehealth in opioid treatment programs.

Design and implement an effective accountability system that includes clear expectations of goals, performance measures, estimated target dates, and monitoring to hold OIT leadership accountable for improving AmeriCorps’ information security program to an effective level. (New

Develop, document, and communicate an overall SCRM strategy, implementation plan, and related policies and procedures to guide and govern supply chain risk management activities. If AmeriCorps intends to limit its IT purchases to GSA vendors, it should so state, and indicate who, if anyone, must approve exceptions. (New)

FHFA’s Office of Technology and Information Management (OTIM) should request an assessment to be completed by December 1, 2022, and that assessment will be used to determine if OTIM has sufficient resources (staff, technology, etc.) to update, test, and execute the contingency plan requirements.

(U) Rec. 1: The DoD OIG recommended that the Defense Pricing and Contracting Principal Director review the Defense Federal Acquisition Regulation Supplement and Defense Federal Acquisition Regulation Supplement Procedures, Guidance, and Information to determine whether current policy adequately addresses when cost analysis should be required by contracting officials to determine price reasonableness for sole-source spare parts not subject to Truth in Negotiations Act. If the Principal Director determines that current policy is not sufficient, the Principal Director should initiate actions to revise and update policy and guidance.

Direct the Health Information Management program office in coordination with the Office of Community Care and facility chiefs of staff to ensure facilities are conducting post payment audits of billed acupuncture and chiropractic services to verify non VA providers are properly supporting their claims and to develop processes for corrective actions based on audit results.

Direct the Health Information Management program office, in coordination with the Office of Community Care and facility chiefs of staff, to ensure facilities are conducting postpayment audits of billed evaluation and management services to verify non VA providers are properly supporting their claims, including a focus on providers who frequently bill high level evaluation and management services and/or submit charges during periods when global surgery packages are in effect, and develop processes for corrective actions based on audit results.

We recommend that the Centers for Medicare & Medicaid Services expand the IRF transfer payment policy to apply to early discharges to home health care. If this expanded policy had been in place, Medicare could have saved $993,134,059 in 2017 and 2018.

We recommend that MCC's Chief Information Officer develop and document supply chain policies, procedures and strategies

The Bureau of Consular Affairs should clearly define the ConsularOne modernization program and Consular Systems Modernization, including its components, projects, supporting contracts, and the associated total cost of those contracts for both efforts.

The Bureau of Consular Affairs should require the Office of Consular Systems and Technology to implement an internal communication and collaboration plan.

The Bureau of Consular Affairs should perform annual security controls assessments for the Office of Consular Systems and Technologys information systems in accordance with Department standards.

Use Treasury’s DNP analysis to systemically flag COVID-19 EIDL and Emergency EIDL grant recipients who were found in Treasury’s DNP system and not previously reported by OIG. Review the applications and determine whether they are deemed ineligible. If the applicant is deemed ineligible, recover any disbursed funds, and flag the application as ineligible.

For all COVID-19 EIDLs and Emergency EIDL grants identified and flagged as potentially ineligible above, include those transactions in SBA’s 2021 improper payments estimation process.

In order to mitigate risks to the Station's structural integrity, ensure the risks associated with cracks and leaks in the Service Module Transfer Tunnel are identified and mitigated prior to agreeing to an ISS life extension.

The Chief Administrative Officer review jurisdiction-level fleet policies and standardize jurisdictional best practices across the AOC where appropriate;

The Chief Administrative Officer, in coordination with AOC organization leaders, review and revise AOC-wide and jurisdictional policies to include standards for vehicle utilization, and guidance for implementing these standards while maintaining jurisdiction-level operational flexibility.

We recommend the Chief Administrative Officer develop and implement additional policies and procedures that:a) ensure adherence to vehicle utilization reporting,b) include a more formal scheduled vehicle maintenance program, andc) collect, track, monitor and analyze fleet costs throughout the vehicle lifecycle at the vehicle level.

We recommend the Director of CISA develop an implementation plan to conduct periodic assessments for monitoring theprogress of goals and activities and complete annual updates on action items, as required by the Cyber Action Plan and associated 2015 and 2018memorandums.

We recommend the Director of CISA conduct centralized tracking and completion of signed closeout summaries to reconcile the ongoing,outstanding, and open tasks and activities, as required by the Cyber Action Plan and associated 2015 and 2018 memorandums.

We recommend the Director of CISA establish performance measures to ensure the effectiveness and completion of the CyberAction Plan and associated 2015 and 2018 memorandum activities.

We recommend the Director of CISA establish the DHS governance structure and ensure it consists of an Executive Committee thatmeets at least semi-annually and a Steering Committee that meets at least quarterly, as required.