Open Recommendations

We recommend that the FWS work with the Division to develop a mechanism to hold employees accountable for submitting Federal Financial Reports timely.

We recommend that the FWS work with the Division to develop and implement a mechanism of controls to ensure all indirect costs and approved indirect cost rates are accurately reported on Federal Financial Reports.

We recommend that the FWS work with the Division to develop and implement procedures to ensure compliance with Federal regulations and Federal Funding Accountability and Transparency Act requirements related to subaward reporting.

We recommend that the FWS work with the Division to develop and implement procedures to evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward.

We recommend that the FWS work with the Division to develop and implement procedures to adjust monitoring plans based on the results of each subrecipient's risk assessment.

Treasury OIG should pursue obtaining documentation from the Chippewa Cree Tribe's (CCT) management and ensure reporting corrections are made within the GrantSolutions portal. Further, based on CCT’s responsiveness to Treasury OIG’s requests and its ability to provide documentation, Treasury OIG should determine if a focused audit is feasible for Grants greater than or equal to $50,000 and Direct Payments greater than or equal to $50,000.

Develop a standardized statement for Social Security Administration employees to confirm the beneficiary or representative payee’s intent to enroll into the Direct Express Debit Card program and explain Comerica Bank is the financial institution that will mail the debit card and provide instructions on activating the card. The standardized statement could also include such information as the Direct Express® customer service telephone number.

The Under Secretary for Health directs the Office of Primary Care and Office of Mental Health and Suicide Prevention to identify barriers to provider documentation of opioid use disorder in progress notes and implement solutions addressing these barriers.

The Under Secretary for Health ensures the Office of Primary Care and Office of Mental Health and Suicide Prevention determine impediments to maintaining accurate identification of opioid use disorder in electronic health record problem lists and implement policy and training to support accurate use of problem lists.

The Under Secretary for Health confirms the Office of Primary Care and Office of Mental Health and Suicide Prevention evaluate barriers affecting provider access and use of Department of Defense treatment records in Joint Longitudinal Viewer and implement solutions.

The Under Secretary for Health ensures the Office of Primary Care and Office of Mental Health and Suicide Prevention improve continuity of care by confirming providers are educated on the navigation and retrieval of Department of Defense treatment records in Joint Longitudinal Viewer.

The Under Secretary for Health requires the Assistant Under Secretary for Health for Clinical Services/Chief Medical Officer to evaluate and update processes for identification of veterans with a history of opioid use disorder for the provision of opioid overdose risk mitigation strategies.

We recommend that the Centers for Medicare & Medicaid Services direct the appropriate Medicare contractors to review claims billed under CPT code 81408 for our audit period to determine whether they complied with Medicare requirements.

We recommend that the Centers for Medicare & Medicaid Services direct the appropriate Medicare contractors to determine the amount of improper payments for the claims that did not comply with Medicare requirements and, for those that are within the 4-year claim-reopening period, in accordance with CMS's policies and procedures, recover up to $888,169,038 for claims that were at risk of improper payment during our audit period.

We recommend that the Centers for Medicare & Medicaid Services direct the appropriate Medicare contractors to based upon the results of this audit, notify appropriate providers (i.e., those for whom CMS determines this audit constitutes credible information of potential overpayments) so that the providers can exercise reasonable diligence to identify, report, and return any overpayments in accordance with the 60-day rule and identify any of those returned overpayments as having been made in accordance with this recommendation.

Implement a new labor distribution system that includes features such as timekeeping, overtime and Controller-in-Charge tracking, and real-time leave balances.

Determine the workload impact of commercial space operations at air traffic facilities, and take action as needed.

Identify the specific direct tasks associated with commercial space operations, determine if they should be included in the en-route controller workload model, and if so, incorporate them in the next updated model.

Provide guidance to OAs on how to identify and assess fraud risks in their programs, including guidance on specific tools, methods, and sources for gathering information about fraud risks. This guidance should also address the leading practices for identifying and assessing the likelihood and impact of inherent fraud risks, determining fraud risk tolerance, examining the suitability of existing controls, prioritizing residual fraud risks, and documenting the program's fraud risk profile to inform managers' decisions on their responses to assessed risks.

(U) Rec. 2.a: The DoD OIG recommended that the Under Secretary of Defense for Intelligence and Security revise or replace DoD Instruction O-3300.04 to reflect the transition of responsibilities from the Defense Intelligence Agency to the Under Secretary of Defense for Intelligence and Security for the management, support, and requirements of the DoD Biometrically Enabled Watch List.

We recommend that the Administrator and Chief Executive Officer direct the Chief Administrative Officer to: 1.Ensure that BPA’s information system inventory accurately reflects the current information system environment and that reviews of the information system component inventory are documented.

We recommend that the Administrator and Chief Executive Officer direct the Chief Administrative Officer to: 2.Develop and maintain a current security architecture for BPA’s organization that includes all necessary Federal and Department requirements.

We recommend that the Administrator and Chief Executive Officer direct the Chief Administrative Officer to: 3.Ensure continuous monitoring of BPA’s information systems and applications to gain assurance that rquired controls are implemented, working as intended, and continue to operate at an acceptable level of risk.

We recommend that the Administrator and Chief Executive Officer direct the Chief Administrative Officer to: 4.Develop and implement security assessment plans that establish the appropriate expectations for security control assessments and incorporate all required security controls used as part of the continuous monitoring and security authorization process.

We recommend that the Administrator and Chief Executive Officer direct the Chief Administrative Officer to: 5.Ensure that all information systems and major applications currently in operation have complete authorization packages, including ensuring that all known issues and supporting processes, such as risk assessments, are fully and effectively addressed, and a rationale of the system categorization is appropriately documented.