Open Recommendations

We recommend that the Massachusetts Department of Public Health follow up with the 20 nursing homes reviewed in this audit that demonstrated life safety, emergency preparedness, and infection control deficiencies to ensure that they have taken corrective actions.

We recommend that the Director for IES ensure that the Department continues to implement the covered agency requirements listed under section 759(a) of the Geospatial Data Act.

We recommend that the Director for IES ensure that the Department implements section 759(a)(6) once applicable guidance becomes available.

We recommend that the Director for IES assess whether the Department has allocated sufficient resources to NCES to support continued compliance with the Geospatial Data Act and advance the Department's geospatial work and take the appropriate responsive actions that are within NCES's direct responsibilities.

(U) Rec. 1: The DoD OIG recommended that the Under Secretary of Defense for Research and Engineering revise program protection plan guidance to include a process for the identification of software assurance risks and steps for how the acceptance of risks should be tracked, if left unmitigated.

(U) Rec. 2.a: This recommendation is Controlled Unclassified Information

(U) Rec. 2.b: This recommendation is Controlled Unclassified Information

(U) Rec. 2.c: This recommendation is Controlled Unclassified Information

(U) Rec. 2.d: This recommendation is Controlled Unclassified Information

(U) Rec. 3.a: The DoD OIG recommended that the Next Generation Overhead Persistent Infrared Program Manager ensure that the Geosynchronous Earth Orbit Program Protection Lead regularly updates the Geosynchronous Earth Orbit program protection plan, at a minimum annually, to accurately reflect the program management office and contractor's progress implementing software assurance activities.

(U) Rec. 3.b: The DoD OIG recommended that the Next Generation Overhead Persistent Infrared Program Manager submit the program protection plan to the Milestone Decision Authority for approval, in accordance with the Air Force Systems Security Engineering Cyber Guidebook.

In collaboration with the Federal Aviation Administration, obtain reauthorizations for geospatial systems with expired authorizations to operate in accordance with DOT ITIM 2022-001 requirements and verify completion.

The Commission should continue its efforts to finalize ERM policies and procedures impacting and related to the Identify Function.

The Commission should Implement effective ERM reporting tools impacting and related to the Identify Function.

The Commission should ensure system-level Business Impact Analyses are integrated with the ERM program impacting and related to the Recover Function.

Create documented processes for ensuring all DOL’s geospatial data is included within the geospatial data inventory and processes to improve data accuracy and data quality.

Develop a training program that ensures DOL officials with system and data responsibilities are aware of the requirements when implementing Department of Labor Geospatial Data Strategy and the geospatial data inventory processes.

Create a plan to acquire sufficient funding to properly oversee and create data quality standards of geospatial data throughout DOL and its contracts.

Develop an approach for including pertinent financial (i.e., costs and savings) and sustainability impact data in its Vehicle Acquisition Strategy and related contingencies.

The Department of Energy Has Made Little Progress Implementing the Geospatial Data Act of 2021

Complete a privacy assessment specific to geospatial data to ensure that personal privacy information is adequately protected in the Department’s information systems.

Use the FY24–26 Geospatial Science Program Communications Plan to increase engagement with programs and sites.

Finalize and distribute the revised DOE Geospatial Science Program Implementation Plan

We recommend that the Department of Health and Human Services fulfill the remaining seven covered agency responsibilities established in GDA section 759(a).

We recommend that the Department of Health and Human Services ensure that the HHS Office of the Chief Data Officer oversees, coordinates, and facilitates HHS's implementation of geospatial-related requirements, policies, and activities.