Open Recommendations

We recommend that CGS Administrators, LLC revise its policies and procedures so that it meets the reopening deadlines established in Federal requirements.

We recommend that CGS Administrators, LLC conduct the prior years' hospice cap calculations for the five hospices with UPIC recoupments and collect any additional overpayments.

We recommend that OPM centralize its audit resolution process into one program structure, instead of the current audit resolution structure that delegates responsibilities to multiple programs within OPM.

We recommend that OPM implement a plan to develop an agency-wide audit tracking system with all of the functionality needed to facilitate resolution workflows and which acts as a repository for all resolution and closure documentation.

We recommend that Federal Employee Insurance Operations work with all appropriate stakeholders to update the MOUs to reflect the Federal Employee Insurance Operations' current resolution process and implement a plan to regularly review and update the MOUs.

We recommend that Internal Oversight Compliance design a system of controls to track recommendations requiring monetary recoveries, including the five recommendations identified in this finding, to ensure that OPM has recovered all monies.

We recommend that Internal Oversight and Compliance immediately track the three recommendations described in our finding and begin the resolution process to resolve and close the recommendations.

We recommend that the audit follow-up official provide the OIG with corrective actions for the 10 open recommendations identified in this finding.

We recommend that Federal Employee Insurance Operations communicate any new or updated MOUs to the appropriate stakeholders.

We recommend that IOC and ARC develop and implement the necessary internal controls to ensure that all recommendations are resolved within a maximum of 6 months after issuance of a final report and that completed final action on each management decision occurs within 12 months after the date of the Inspector General's report.

We recommend that ARC work with IOC to develop work or corrective action plans, which include timeliness milestones, to resolve any outstanding recommendations directed toward OPM program offices reported in carrier audits.

We recommend that ARC work with the Office of the Chief Financial Officer to develop a process to verify that questioned funds identified in final reports and agreed to be returned to the FEHBP are fully returned to the FEHBP.

We recommend the Vice President, Contracts and Rates Strategy, Pricing and Contracts formalize and update the cost of service study internal guidance, and develop a cadence for review and approval.

We recommend the Vice President, Contracts and Rates Strategy, Pricing and Contracts evaluate the inclusion of Valley Investment Initiative and Performance Grant credits, as well as any other local power company or customer specific costs going forward, as part of the cost of service study.

The Chief, FMSS, should ***************************************************************************************************************************************************************************.

The Chief, FMSS, ****** ***** *** *** ************** ** ********* * **** ** *** *********** *********** ***** ****** **** **** ** **** *** ******* **** *** ************** ** **********

The Chief, FMSS, ****** ****** **** *** ** ********* ** ******* ******** ** *** *** ******** ******** *** ***** ** ******** **** **********

Complete efforts to document and implement an enterprise-wide risk management strategy that incorporates the review and approval processes set forth in agency policy.

[REDACTED]

[REDACTED]

[REDACTED]

Develop and implement a mechanism to enforce recurring privileged user training for applicable personnel.

Update its business impact analysis template to ensure that the SEC assesses all systems using a correct and comprehensive set of mission-essential functions.

Incorporate assessments of system recovery time objectives into future disaster recovery exercises.

We recommend that the Puerto Rico Health Department (the Health Department) update its policies and procedures to conform to Federal procurement standards—including policies and procedures related to contracts for leases, goods, and nonprofessional services—and to address the role of the Oversight Lead and the certification process.