Open Recommendations

Implement processes for continuous monitoring and scanning of counterfeit components to include configuration control over system components awaiting service or repair and serviced or repaired components awaiting return to service.

Develop and implement role-based training with those who hold supply chain risk management roles and responsibilities to detect counterfeit system components.

Update user system access control procedures to include the requirement for individuals to complete a non-disclosure and rules of behavior agreements prior to the individual being granted access to NRC systems and information.

Implement the technical capability to restrict access or not allow access to the NRC’s systems until new NRC employees and contractors have completed security awareness training and role-based training as applicable or implement the technical capability to capture NRC employees and contractor’s initial login date so that the required cybersecurity awareness and role-based training can be accurately tracked and managed by the current process in place.

Based on the results of this audit, exercise reasonable diligence to identify, report, and return any overpayments in accordance with the 60-day rule and identify any of those returned overpayments as having been made in accordance with this recommendation.

We recommend that the Chief Financial Officer and Assistant Secretary for Administration establish a Department-wide framework that includes written procedures and a quality assurance process to ensure prompt processing, independent and objective reviewing, thorough reporting, and tracking the status of H referrals from OIG.

We recommend that the Chief Financial Officer and Assistant Secretary for Administration enforce the reporting requirement on providing to OIG the H referral response as required in DAO 207-10. If the suspense date cannot be met, report its progress to and request an extension from OIG before the suspense date.

CMS should conduct additional outreach to beneficiaries to increase awareness about Medicare coverage for the treatment of opioid use disorder.

CMS should take steps to increase the number of providers and opioid treatment programs for Medicare beneficiaries with opioid use disorder.

CMS should assist SAMHSA by providing data about the number of Medicare beneficiaries receiving buprenorphine in office-based settings and the geographic areas where Medicare beneficiaries remain underserved.

CMS should take steps to increase the utilization of behavioral therapy among beneficiaries receiving medication to treat opioid use disorder.

CMS should create an action plan and take steps to address disparities in the treatment of opioid use disorder.

CMS should collect data on the use of telehealth in opioid treatment programs.

Design and implement an effective accountability system that includes clear expectations of goals, performance measures, estimated target dates, and monitoring to hold OIT leadership accountable for improving AmeriCorps’ information security program to an effective level. (New

Develop, document, and communicate an overall SCRM strategy, implementation plan, and related policies and procedures to guide and govern supply chain risk management activities. If AmeriCorps intends to limit its IT purchases to GSA vendors, it should so state, and indicate who, if anyone, must approve exceptions. (New)

FHFA’s Office of Technology and Information Management (OTIM) should request an assessment to be completed by December 1, 2022, and that assessment will be used to determine if OTIM has sufficient resources (staff, technology, etc.) to update, test, and execute the contingency plan requirements.

Rec. 1: The DoD OIG recommended that the Defense Pricing and Contracting Principal Director review the Defense Federal Acquisition Regulation Supplement and Defense Federal Acquisition Regulation Supplement Procedures, Guidance, and Information to determine whether current policy adequately addresses when cost analysis should be required by contracting officials to determine price reasonableness for sole-source spare parts not subject to Truth in Negotiations Act. If the Principal Director determines that current policy is not sufficient, the Principal Director should initiate actions to revise and update policy and guidance.

We recommend that the Office of Single Family Housing coordinate its efforts with the Office of Public and Indian Housing and the Office of Multifamily Housing Programs to further ensure that appropriate controls are in place to prevent HECM borrowers from violating principal residency requirements.

Resolve the $91,220 in questioned inadequately supported subaward expenses, internal service provider rates, and meal expenses for which UTD has not agreed to reimburse NSF and direct UTD to repay or otherwise remove the sustained questioned costs from its NSF awards.

Direct UTD to provide documentation that it has repaid or otherwise credited the $551 of questioned travel costs that it has agreed to reimburse.

Resolve the $65,226 in questioned materials and supplies and travel costs for which UTD has not agreed to reimburse NSF and direct UTD to repay or otherwise remove the sustained questioned costs from its NSF awards.

Direct UTD to provide documentation supporting that it has repaid or otherwise credited the $5,378 of questioned airfare, participant, repair, and travel costs for which it has agreed to reimburse NSF.

Resolve the $63,753 in questioned subaward expenses for which UTD has not agreed to reimburse NSF and direct UTD to repay or otherwise remove the sustained questioned costs from its NSF awards.

Direct UTD to provide documentation supporting that it has repaid or otherwise credited the $23,082 in questioned fringe benefit, travel, indirect costs, and Cost of Education allowance costs for which UTD has agreed to reimburse NSF.

Direct the Health Information Management program office in coordination with the Office of Community Care and facility chiefs of staff to ensure facilities are conducting post payment audits of billed acupuncture and chiropractic services to verify non VA providers are properly supporting their claims and to develop processes for corrective actions based on audit results.