Open Recommendations

Implement a process to periodically validate the lifecycle and multi-factor authentication status of enterprise applications in Microsoft Entra® with appropriate system owners and cloud administrators.

1. Confirm with the California Disability Determination Service that the added internal controls will improve medical evidence of record invoice payment accuracy.

Update and implement FAD monitoring procedures to include routine, documented monitoring activities to ensure timely implementation of corrective actions.

Develop and implement guidance to clearly define the frequency with which OASCR will conduct civil rights compliance reviews.

Develop Civil Rights Compliance Review policies, procedures, and practices, implementing an alternative process to ensure USDA programs are regularly assessed when budget and staffing resources are limited.

Coordinate with the responsible USDA agency to establish an implementation plan and ensure the outstanding corrective actions identified in this report are addressed.

We recommend that USAID's Chief of Travel and Transportation review the list of 33 separated users whose accounts in the End-to-End Travel system that have no record of being disabled and, if they are not needed, disable them.

We recommend that USAID's Chief of Travel and Transportation determine the activities of 11 separated users who logged into the End-to-End Travel system after their termination dates and take appropriate action.

We recommend that USAID's Chief of Travel and Transportation designate an Information System Security Officer to perform security functions for the End-to-End Travel system in accordance with USAID policy.

We recommend that USAID's Chief of Travel and Transportation revise the system security plan to require account managers for the End-to-End Travel system to be notified about personnel separations in a timely manner and receive sufficient time to disable system access within 24 hours, rather than 3 days, of a user's separation.

FHFA should take actions as it deems appropriate regarding the $95,768 in recruitment bonuses identified above ($20,000 + $75,768) for which FHFA has not provided documentary support.

FHFA should reinforce to all Agency personnel the requirements of the Executive and Non-Executive Compensation Policy as it relates to recruitment bonuses.

CMS should obtain the Federal shares of MLR remittances from States that failed to return these amounts to CMS for the 2017-2018 and 2018-2019 MLR reporting years.

CMS should develop the capacity to systematically track and readily determine the amounts of the Federal shares of MLR remittances that States return to CMS.

CMS should improve internal communication to confirm that States return the Federal shares of the MLR remittance amounts reported annually to CMS.

CMS should routinely confirm that States return the Federal shares of State-reported MLR remittance amounts.

CMS should develop procedures to track (a) when each State is expected to return the required Federal shares of MLR remittances owed and (b) whether States have returned the Federal shares timely.

We recommend that USAID/Uganda verify that Uganda Protestant Medical Bureau provides Palladium International LLC with a copy of the finding raised in Ernst and Young's audit report to take any corrective actions regarding the one instance of material noncompliance detailed on page 35 of the audit report. Report.

We recommend that USAID/Uganda verify that Baylor College of Medicine Children's Foundation Uganda corrects the one instance of material noncompliance detailed on pages 29 to 30 of the audit report.

We recommend that the General Counsel ensure all nondisclosure agreements and forms currently in use by the
Department and identified in this report as noncompliant with the WPEA are updated to include the anti-gag provision statement.

We recommend that the General Counsel develop and issue written policies and procedures and create a process, to include identifying those responsible for the implementation and management of the process, to ensure that all nondisclosure forms and agreements, including settlement agreements, are tracked and comply with Federal law and include the anti-gag provision statement when required.

Determine the allowability of $59,107 in ineligible questioned costs on page 15 of the audit report and recover any amount that is unallowable.

Verify that DEVIDA corrects the two instances of material noncompliance detailed on page 40 of the audit report.

Ensure Nye staff forward all detainee grievances containing allegations of staff misconduct to ICE.

Provide responses to detainee requests within 5 days.