Open Recommendations

(U) Rec. 1.b: The DoD OIG recommended that the DoD Chief Information Officer develop, in coordination with the Under Secretary of Defense for Research and Engineering and the Under Secretary of Defense for Acquisition and Sustainment, policies and procedures implementing the DoD-wide Supply Chain Risk Management strategy as required by the National Institute of Standards and Technology guidance, including organizational-wide tools and techniques that allow DoD Components to consistently and effectively manage risks associated with using external providers.

(U) Rec. 1.c: The DoD OIG recommended that the DoD Chief Information Officer determine when DoD Components should complete a privacy impact assessment for information systems and ensure that all DoD guidance, including DoD Instruction 5400.16, "DoD Privacy Impact Assessment (PIA) Guidance," July 14, 2015, Incorporating Change 1, August 11, 2017, and the DoD Risk Management Framework Knowledge Service guidance, aligns with that determination.

(U) Rec. 1.d: The DoD OIG recommended that the DoD Chief Information Officer direct DoD Components, in coordination with the Chief Information Security Officers, Chief Information Officers, and Authorizing Officials, to require that officials conduct privacy impact assessments for all non-national security systems and update the Enterprise Mission Assurance Support Service, or its equivalent system, as required by DoD guidance.

(U) Rec. 1.e: The DoD OIG recommended that the DoD Chief Information Officer implement a process, in coordination with the DoD Component Chief Information Security Officers, Chief Information Officers, and Authorizing Officials, such as periodic Enterprise Mission Assurance Support Service reviews, to ensure that officials complete privacy impact assessments for all non-national security systems and update the Enterprise Mission Assurance Support Service, or its equivalent system, as required by DoD guidance.

(U) Rec. 1.a: Report is Classified.

(U) Rec. 2.a: Report is Classified.

(U) Rec. 2.b: Report is Classified.

(U) Rec. 3.b: Report is Classified.

(U) Rec. 4: Report is Classified.

(U) Rec. 4: Report is Classified.

Rec. 1.a: The DoD OIG recommended that the Defense Health Agency Director, in consultation with the Defense Civilian Personnel Advisory Service develop and implement a plan to ensure a more competitive pay rate for nursing and other hard to fill medical positions in all Defense Health Agency regions.

Rec. 1.c: The DoD OIG recommended that the Defense Health Agency Director, in consultation with the Defense Civilian Personnel Advisory Service develop and implement a plan to establish qualification requirements for nursing and other hard to fill medical positions if it is determined that it would enhance the DoD's efforts to help recruit and retain health care personnel.

Rec. 2.a: The DoD OIG recommended that the Under Secretary of Defense for Personnel and Readiness, in consultation with the Assistant Secretary of Defense for Health Affairs and the Defense Health Agency Director determine whether the DoD needs to extend waiving the authority to apply section 3326, title 5, United States Code, for appointments made to positions in medical or health profession with the DoD under the direct hire authority and, if so, provide the extension in a subsequent memo before the authority for covered positions expires on September 30, 2025.

Rec. 3.a: The DoD OIG recommended that the Defense Health Agency Director revise Defense Health Agency Administrative Instruction 5136.03 to establish approval authority for any civilian personnel extensions outside the continental United States beyond a period of 7 years.

Rec. 3.b: The DoD OIG recommended that the Defense Health Agency Director establish maximum time frames to approve civilian personnel extensions outside of the continental United States and require monitoring of extension approval timelines.

Rec. 3.d: The DoD OIG recommended that the Defense Health Agency Director develop and implement a plan to apply strategies and incentives used by other Federal agencies to hire entry-level registered nurses if it is determined the strategies and incentives would enhance the DoD's recruitment efforts.

The Security Services Office determines the number of pending investigations, including pending investigations awaiting a PD update and PDT.

The Security Services Office communicates and coordinates with the Human Resources Office to obtain the PDs and PDTs needed for reinvestigations.

The Office of the Chief Management Officer and Security Services Office assign the staffing and resources necessary to conduct pending reinvestigations.

The Security Services Office develops and implements adequate internal policies and standard operating procedures.

The Security Services Office develops and implements a required training framework for its Security Specialists and program personnel.

The Security Services Office implements an internal database to house investigation and clearance documentation.

Rec. 1.a: The DoD OIG recommended that the Under Secretary of Defense (Comptroller)/Chief Financial Officer, DoD, ensure DoD Components develop and implement a process to identify the characteristics of the data included in the variances from the universe of transactions.

Develop and implement a plan, including communication strategy and available staff, for the timely deployment and installation of mail theft initiatives nationwide.

Require the New York 2 District Manager to establish procedures to complete annual safety inspections, remediate deficiencies, and document the results for blue collection and green relay boxes.