Open Recommendations

We recommend that USAID Southern Africa verify that Africa Resource Centre NPC corrects the one material weakness in internal control detailed on pages 33 and 34 of the audit report.

We recommend that USAID/Southern Africa verify that Africa Resource Centre NPC corrects the five instances of material noncompliance detailed on pages 37 to 46 of the audit report.

(U) Rec. 1.a: The DoD OIG recommended that the DoD Chief Information Officer direct DoD Components, including the Coast Guard, in coordination with the DoD Component Chief Information Security Officers, Chief Information Officers, and Authorizing Officials, to identify all critical and non-critical software on the DoD Information Network that is subject to Office of Management and Budget-required self-attestation requirements.

(U) Rec. 1.b: The DoD OIG recommended that the DoD Chief Information Officer direct DoD Components, including the Coast Guard, in coordination with the DoD Component Chief Information Security Officers, Chief Information Officers, and Authorizing Officials, to obtain Office of Management and Budget-required self-attestations from software providers or implement an Office of Management and Budget?approved alternative solution for all identified third-party software on the DoD Information Network.

(U) Rec. 1.c: The DoD OIG recommended that the DoD Chief Information Officer direct DoD Components, including the Coast Guard, in coordination with the DoD Component Chief Information Security Officers, Chief Information Officers, and Authorizing Officials, to establish a plan of action and milestones to obtain all remaining Office of Management and Budget-required third-party provider self-attestations and request an extension from the Office of Management and Budget deadline.

(U) Rec. 1.d: The DoD OIG recommended that the DoD Chief Information Officer direct DoD Components, including the Coast Guard, in coordination with the DoD Component Chief Information Security Officers, Chief Information Officers, and Authorizing Officials, to implement a process, such as periodic reviews of the Enterprise Mission Assurance Support Service, or an equivalent system, to ensure that officials are accurately reporting the system authorization status for non?national security systems in accordance with DoD guidance.

(U) Rec. 1.e: The DoD OIG recommended that the DoD Chief Information Officer direct DoD Components, including the Coast Guard, in coordination with the DoD Component Chief Information Security Officers, Chief Information Officers, and Authorizing Officials, to update the Enterprise Mission Assurance Support Service, or an equivalent system, to ensure that it captures compliance information for all controls associated with Inspector General Federal Information Security Modernization Act of 2014 reporting metrics for their non-national security systems.

(U) Rec. 1.f: The DoD OIG recommended that the DoD Chief Information Officer direct DoD Components, including the Coast Guard, in coordination with the DoD Component Chief Information Security Officers, Chief Information Officers, and Authorizing Officials, to develop and implement a process, such as periodic reviews of the Enterprise Mission Assurance Support Service, or an equivalent system, to ensure that officials implemented the necessary National Institute of Standards and Technology information system controls and accurately reported the status for all non-national security systems.

(U) Rec. 1.g: The DoD OIG recommended that the DoD Chief Information Officer direct DoD Components, including the Coast Guard, in coordination with the DoD Component Chief Information Security Officers, Chief Information Officers, and Authorizing Officials, to require officials to develop a plan of action and milestones for non-national security systems that have not implemented all Inspector General Federal Information Security Modernization Act of 2014 reporting metrics-related controls or those systems with a low implementation percentage (for example, below 75 percent), and track the completion of the plans until such controls are implemented or have elevated to an acceptable level…

(U) Rec. 2: The DoD OIG recommended that the DoD Chief Information Officer direct the Army Chief Information Officer, in coordination with their Chief Information Security Officer and Authorizing Officials, to review the Enterprise Mission Assurance Support Service, or an equivalent system, to ensure that officials are correctly reporting the system authorization status for their non-national security systems and update the status for any miscategorized systems.

(U) Rec. 3: The DoD OIG recommended that the DoD Chief Information Officer direct the Navy Chief Information Officer, in coordination with their Chief Information Security Officer and Authorizing Officials, to review the Enterprise Mission Assurance Support Service, or an equivalent system, to ensure that officials are correctly reporting the system authorization status for their non-national security systems and update the status for any miscategorized systems.

(U) Rec. 4: The DoD OIG recommended that the DoD Chief Information Officer direct the Air Force Chief Information Officer, in coordination with their Chief Information Security Officer and Authorizing Officials, to review the Enterprise Mission Assurance Support Service, or an equivalent system, to ensure that officials are correctly reporting the system authorization status for their non-national security systems and update the status for any miscategorized systems.

(U) Rec. 5: The DoD OIG recommended that the DoD Chief Information Officer direct the Coast Guard Chief Information Officer, in coordination with their Chief Information Security Officer and Authorizing Officials, to review the Enterprise Mission Assurance Support Service, or an equivalent system, to ensure that officials are correctly reporting the system authorization status for their non-national security systems and update the status for any miscategorized systems.

(U) Rec. 6: The DoD OIG recommended that the DoD Chief Information Officer direct the Defense Security Cooperation Agency Chief Information Officer, in coordination with their Chief Information Security Officer and Authorizing Officials, to review the Enterprise Mission Assurance Support Service, or an equivalent system, to ensure that officials are correctly reporting the system authorization status for their non-national security systems and update the status for any miscategorized systems.

We recommend the Vice President, Transmission PIanning and Projects, increase collaboration with Major Projects early in the project process to mitigate the risk of inadequate funding.

We recommend the Vice President, Transmission PIanning and Projects, ensure planning estimates are adequately developed and account for cost inflation.

We recommend the Vice President, Transmission PIanning and Projects, take steps to involve Joint Project Team members in risk identification and notify risk owners of their assigned responsibilities.

Create a job aid for claims processors on how to determine the correct effective date for PACT Act"related claims.

Remove the outdated effective date builder from the Veterans Benefits Administrations internal job aids page.

Continue updating the Veterans Benefits Management System-Rating systems effective date builder to add functionality that applies liberalizing laws on claims when the Veterans Benefits Administration receives an intent to file.

Update the Veterans Benefits Management System-Rating systems effective date builder to add functionality that applies liberalizing laws on claims when a veterans service connection is based on a toxic exposure risk activity.

Evaluate PACT Act refresher training by monitoring the results to assess the effectiveness of the training.

Correct all processing errors on cases identified by the review team and report the results to the Office of Inspector General.

(U) Rec. 1.a: The DoD OIG recommended that the Director of the Navy Culture and Force Resilience Office N17: develop and implement a plan with milestones to ensure all Navy commands have a completed local crisis response plan, as required by Office of the Chief of Naval Operations Instruction 1720.4B, "Suicide Prevention Program."

(U) Rec. 1.b: The DoD OIG recommended that the Director of the Navy Culture and Force Resilience Office N17: Update Office of the Chief of Naval Operations Instruction 1720.4B, "Suicide Prevention Program," to assign an office with oversight and annual reporting responsibilities for Naval commanding officers' compliance with having a completed crisis response plan that contains the elements required by the Instruction.