Open Recommendations

We recommend the Massachusetts Executive Office of Health & Human Services review its procedures designed to prevent OTP noncompliance with Federal and State requirements and make changes to improve documentation of counseling and more timely review of OTP treatment plans.

Chief Information Officer develop and implement procedures to assess whether position risk designations are reviewed for all personnel.

Chief Information Officer develop and implement procedures to assess whether reinvestigations are performed timely for individuals who possess critical-sensitive/high-risk roles that require system access.

Chief Information Officer develop and implement policies and procedures to periodically assess its cybersecurity workforce's knowledge, skills, and abilities to confirm that security training and development activities align with agency needs.

Chief Information Officer develop and implement policies and procedures for agency personnel to monitor performance metrics for information technology services provided by third parties.

Chief Information Officer update the change management charter to designate in writing the responsibilities for monitoring performance metrics, conducting lessons-learned activities, and documenting routine updates and minor changes.

Chief Information Officer update the system security plan to include the frequency for reviewing and updating the contingency plan.

Chief Information Officer develop and implement policies and procedures to obtain feedback on the agency's specialized security training, update the training program, and request that third-party providers update their training content, as appropriate, to keep current with security practices.

To address these shortcomings, we recommend that USADF:
Update its training within 30 days of USAID OIG publishing this advisory to incorporate information on USAID OIG oversight authorities and procedures for disclosing allegations of fraud, waste, abuse, or mismanagement, and develop and implement a plan to provide the updated training to all USADF staff.

To address these shortcomings, we recommend that USADF:
Develop and implement a plan within 90 days of USAID OIG publishing this advisory to schedule fraud awareness briefings with USAID OIG's Office of Investigations for all USADF staff.

This recommendation contains sensitive information that should not be made public. Therefore, we are not including the wording for this recommendation.

This recommendation contains sensitive information that should not be made public. Therefore, we are not including the wording for this recommendation.

This recommendation contains sensitive information that should not be made public. Therefore, we are not including the wording for this recommendation.

This recommendation contains sensitive information that should not be made public. Therefore, we are not including the wording for this recommendation.

We recommend that the Director of FSEM update OPM's Personal Property Management Policies and Procedures manual. The updated manual should meet all GSA standards and document a formal governance structure for OPM's Personal Property Management Process that clearly assigns responsibilities and delegates authority to all involved in the process.

We recommend that the Director of FSEM conduct an agency-wide inventory.

We recommend that OPM implement an agency-wide personal property system of record.

Establish a mechanism to monitor progress of the Digital GI Bill platform implementation under the renegotiated contract to avoid additional costs and delays.

Develop strategies to address critical path failures to provide a clear timeline of further implementation activities.

The VA North Florida/South Georgia Health System Director ensures that providers document their rationales for initiating involuntary examinations under the Baker Act within a patients electronic health record and monitors compliance.

The VA North Florida/South Georgia Health System Director confirms that mental health staff document offering evidence-based therapies during treatment planning with patients diagnosed with posttraumatic stress disorder, as required by Veterans Health Administration policy, and monitors compliance.

The VA North Florida/South Georgia Health System Director develops a process to provide oversight of compliance with all elements required by state law for use of the Baker Act as permitted by federal law and Veterans Health Administration policy.

The VA North Florida/South Georgia Health System Director directs a review of current patient advocate processes for follow-up and resolution with complainants, updates the process as warranted, and monitors compliance.

The VA North Florida/South Georgia Health System Director considers having the patient advocate process for tracking and monitoring trends capture complaints specific to involuntary admissions for leaders awareness and follow-up.

We recommend that USAID/Zambia verify that Centre for Infectious Disease Research in Zambia corrects the one material weaknesses in internal control detailed on pages 59 to 61 of the audit report.