Open Recommendations

Based on results of the evaluations performed in conjunction with recommendation numbers 40 and 41, take action to adopt strategies that promote the efficient delivery of a fitness program for agency employees at an economical cost to the government.

Evaluate the agency’s conference rooms for each space’s respective best and highest use.

Based on the results of the evaluation performed for recommendation number 43, take action to utilize each space in their respective best and highest use in a cost-effective manner.

Collect data showing where National Product Testing and Evaluation Center staff spend their time, lab versus office space, and analyze how space is actually used to determine if the current space allocation best meets CPSC needs.

Based on reported results in recommendation number 45, adopt strategies to promote the efficient utilization of space at National Product Testing and Evaluation Center at an economical cost to the government.

Develop and implement formal guidance for conducting technical evaluations and hands-on inspections to ensure that awards are consistent and comply with solicitation requirements.

Revise Tennessee Valley Authority’s Tech Standard, Authentication - Multifactor Authentication Implementation Requirements, to include the appropriate reauthentication frequency and authorized exclusions.

Revise multi-factor authentication enforcement access policies to include all networks as required by Tennessee Valley Authority’s Tech Standard, Authentication – Multifactor Authentication Implementation Requirements.

Reconcile enterprise applications in Microsoft Entra® to validate their lifecycle and multi-factor authentication status.

Implement a process to periodically validate the lifecycle and multi-factor authentication status of enterprise applications in Microsoft Entra® with appropriate system owners and cloud administrators.

1. Confirm with the California Disability Determination Service that the added internal controls will improve medical evidence of record invoice payment accuracy.

Update and implement FAD monitoring procedures to include routine, documented monitoring activities to ensure timely implementation of corrective actions.

Develop and implement guidance to clearly define the frequency with which OASCR will conduct civil rights compliance reviews.

Coordinate with the responsible USDA agency to establish an implementation plan and ensure the outstanding corrective actions identified in this report are addressed.

Develop Civil Rights Compliance Review policies, procedures, and practices, implementing an alternative process to ensure USDA programs are regularly assessed when budget and staffing resources are limited.

We recommend that USAID's Chief of Travel and Transportation review the list of 33 separated users whose accounts in the End-to-End Travel system that have no record of being disabled and, if they are not needed, disable them.

We recommend that USAID's Chief of Travel and Transportation determine the activities of 11 separated users who logged into the End-to-End Travel system after their termination dates and take appropriate action.

We recommend that USAID's Chief of Travel and Transportation designate an Information System Security Officer to perform security functions for the End-to-End Travel system in accordance with USAID policy.

We recommend that USAID's Chief of Travel and Transportation revise the system security plan to require account managers for the End-to-End Travel system to be notified about personnel separations in a timely manner and receive sufficient time to disable system access within 24 hours, rather than 3 days, of a user's separation.

FHFA should take actions as it deems appropriate regarding the $95,768 in recruitment bonuses identified above ($20,000 + $75,768) for which FHFA has not provided documentary support.

FHFA should reinforce to all Agency personnel the requirements of the Executive and Non-Executive Compensation Policy as it relates to recruitment bonuses.

CMS should obtain the Federal shares of MLR remittances from States that failed to return these amounts to CMS for the 2017-2018 and 2018-2019 MLR reporting years.

CMS should develop the capacity to systematically track and readily determine the amounts of the Federal shares of MLR remittances that States return to CMS.

CMS should improve internal communication to confirm that States return the Federal shares of the MLR remittance amounts reported annually to CMS.

CMS should routinely confirm that States return the Federal shares of State-reported MLR remittance amounts.