Open Recommendations

Periodically monitor the satisfaction of the system risk assessment and POA&M creation requirements to help ensure ongoing compliance associated with the timely completion of and updates to system risk assessments and documentation and tracking of POA&Ms.

We recommend PBGC management to coordinate with its CSP to update its service agreement and shared responsibility matrix to address ambiguities regarding accountable parties for key controls and develop and implement a contingency plan for the system.

Update and track IASA program milestones to improve timeliness and mitigate risk from civil aviation authorities under assessment.

Establish and implement processes to ensure routine upkeep of program documents, including checklists.

Create and implement a process to document when exceptions to the normal IASA in-country assessment process are appropriate and how they should be handled.

Develop and implement a policy to maintain a historical record of all interim and completed Risk Assessment Tools for future trend analyses.

Establish a formal prioritization methodology for new assessments, reassessments, technical assistance, and other duties.

Formalize process of how and when Operations Specifications for foreign air carriers are limited when a risk is identified.

Finalize the proposed changes and related updates to FAA Order 8900.1, Volume 12.

Continue to monitor First Solar’s impact, including through the June 30, 2026 annual Development Outcomes Survey and midpoint performance assessments, to have relevant information for assessing the project’s core impacts and metrics.

Adjust the ESOC Award Fee Plan to include clear, objective criteria for the Management and Technical Performance, Business Management, Compliance with Safety and Health Requirements evaluation category

Align definitions in the ESOC Award Fee Plan with Federal Acquisition Regulation guidance

Coordinate with an existing NASA supply chain group (e.g., Supply Chain Risk Management Program) to investigate alternative supply chain management strategies, such as evaluating the feasibility of incorporating the Supply Chain Visibility Data Requirement Deliverable into ESOC to increase visibility into spacesuit supply chains.

This recommendation is Sensitive But Unclassified.

This recommendation is Sensitive But Unclassified.

This recommendation is Sensitive But Unclassified.

This recommendation is Sensitive But Unclassified.

This recommendation is Sensitive But Unclassified.

This recommendation is Sensitive But Unclassified.

This recommendation is Sensitive But Unclassified.

This recommendation is Sensitive But Unclassified.

This recommendation is Sensitive But Unclassified.

This recommendation is Sensitive But Unclassified.

This recommendation is Sensitive But Unclassified.

This recommendation is Sensitive But Unclassified.