Open Recommendations

ACF should Develop a forum for States to share experiences and best practices related to the following: reducing children's risk for going missing from foster care, locating missing children, and addressing their needs after they return to care.

ACF should Support Missouri as it works to reduce children's risk for going missing from foster care and to improve compliance with Federal and State requirements related to children who go missing.

Develop and implement a process to periodically communicate a consistently understood agency risk appetite.

Revise agency policies and guidance to:a. Designate the official agency risk profile document and remove references to it as a U.S. Office of Management and Budget (OMB) deliverable in Management Directive 4.4, Enterprise Risk Management and Internal Control and Office of the Executive Director for Operations Procedure 0960, Enterprise Risk Management Reporting Instructions.b. Fully address the risk profile components and elements in accordance with OMB Circular A-123, Management’s Responsibility for Enterprise Risk Management and Internal Control.

Implement an enterprise risk management maturity model approach by selecting an appropriate model, assessing current practices per the model, and making progress in advancing the model.

Establish and monitor implementation of procedures to ensure that Quarterly Performance Review (QPR) practices are fully performed, such as completion of the QPR Dashboard entries, and recordation of all management decisions of risk in the QPR meeting summaries and the Executive Committee on Enterprise Risk Management meeting minutes.

Update policies and guidance to address Management Directive 4.4, Enterprise Risk Management and Internal Control, and Management Directive 6.9, Performance Management, links to the Quarterly Performance Review (QPR) and reasonable assurance processes to accurately reflect that both agency processes address different aspects of enterprise risk management (ERM). This includes, but is not limited to:a. Updating Management Directive 6.9 for the expanded risk responsibilities added to the QPR process;b. Explaining the role of the Programmatic Senior Assessment Team (PSAT) in the QPR process in Management Directive 6.9;c. Specifying the Executive Committee on ERM (ECERM) role in decision-making of PSAT risks and…

Update policies and guidance to clarify the effective date of the quarterly risks in the Quarterly Performance Review (QPR) process.

Require enterprise risk management-specific training that addresses U.S. Office of Management and Budget Circular A-123, Management’s Responsibility for Enterprise Risk Management and Internal Control requirements and current best practices, and periodically provide them to NRC personnel with ERM responsibilities.

Develop and implement a plan to prioritize and address the recommendations identified in the 2019 file review for Region 9.

Develop a workforce analysis to address staff workload and the skills needed for the direct implementation of the tribal drinking water program.

We recommend the Executive Assistant Commissioner for the Office of Field Operations implement and enhance controls surroundingthe use of electronic device search equipment to ensure advanced searches are traceable to officers conducting the search.

We recommend the Executive Assistant Commissioner for the Office of Field Operations develop and implement an improved processto manage advanced search equipment including: 1) tracking DOMEX usage by device to identify idle devices and additional equipment required to meet mission needs and 2) keeping an accurate inventory of DOMEX equipment and licenses.

Develop and implement effective procedures to monitor prosthetic spending to make sure medical facilities reimburse vendors at reasonable prices for all prosthetic and orthotic items in accordance with updated pricing policies and processes.

Recommendation is not publicly available.

Recommendation is not publicly available.

Recommendation is not publicly available.

Recommendation is not publicly available.

Recommendation is not publicly available.

We recommend the Assistant Administrator for Response in the Office of Response and Recovery at FEMA improve the reliability ofWebEOC data by:a) developing internal controls for WebEOC to prevent incomplete andinaccurate information from being entered into the system; andb) ensuring all new users receive formal training on completing,submitting, processing, and tracking of resource requests in WebEOC.

We recommend the Associate Administrator for Response and Recovery at FEMA strengthen FEMA’s coordination during the COVID-19response and future pandemics by formally documenting the policies and procedures for making informed and consistent resource allocation decisions for critical lifesaving supplies and equipment.

We recommend the Administrator of FEMA, working with the Secretary of Health and Human Services, issue clarifying guidancedefining agencies’ pandemic response roles and responsibilities under Stafford Act declarations.

Provide CitiManager training and support to cardholders, approving officials, and the purchase card team that will establish the expectation that they use and enable them to effectively use CitiManager for the documentation, justification, and approval of purchases.

Require cardholders and approving officials who have completed the training in Recommendation 2 to maintain approvals and purchase documentation in CitiManager. Update all relevant policies and procedures to reflect this requirement.

Based on the analysis performed in Recommendation 1, update Departmental guidance outlining timeframes for processing program complaints. Once updated, publish the Departmental guidance on OASCR’s public website.