Open Recommendations

We recommend that the GSA Chief Administrative Services Officer continue training related to use of the government travel card in rideshare applications.

We recommend that the GSA Chief Administrative Services Officer continue to remind travelers in training and in the Concur travel system to not pay sales or occupancy taxes in tax‐exempt states.

We recommend that the GSA Chief Administrative Services Officer create the questionable charges report according to the requirements of GSA’s Charge Card Management Plan to ensure that all charges are screened and that questionable charges are identified and investigated.

We recommend that the GSA Chief Administrative Services update the questionable charges report to ensure the results are complete. These updates should include a higher level of detail to ensure timely resolution and response, and capture employee name changes or separations from the Agency.

(U) Rec. 1: Report is Classified.

(U) Rec. 2: Report is Classified.

(U) Rec. 3: Report is Classified.

(U) Rec. 4: Report is Classified.

(U) Rec. 5: Report is Classified.

(U) Rec. 5: Report is Classified.

(U) Rec. 5: Report is Classified.

(U) Rec. 6: Report is Classified.

(U) Rec. 6: Report is Classified.

(U) Rec. 7: Report is Classified.

(U) Rec. 8: Report is Classified.

(U) Rec. 9: Report is Classified.

We recommend that the Assistant Secretary for the Office of Elementary and Secondary Education require Iowa torequire Southeast Polk to ensure that LEA officials responsible for making or reviewing and approving purchases receivesufficient training on Federal rules and regulations related to grant administration and management, particularly thoseaddressing procurement process and documentation requirements.

Establish a requirement in the RPT Program Plan for recurring right-size studies for the RPT capability portfolio and use the results to reexamine workforce and capability requirements for the future.

Ensure that cost models deployed at all RPT Centers include full recovery of applicable maintenance costs for the infrastructure and facilities being utilized, similar to that being piloted at Stennis.

Formally document and establish the FM&M process in the RPT Program Plan or RPTMB Operating Procedures.

Document the results and planned RPT actions following completion of the Commercial Capability Survey.

Ensure that the appropriate revisions are made to NPR and NPD 8600.1 to clarify the authority structure.

We recommend that the Chief Information Security Officer identify qualitative and quantitative metrics on service level agreements held with third parties, then perform an analysis with monthly reporting received from those third parties to identify metrics that can be measured and documented, on either a monthly or quarterly basis, to ensure that EAC is receiving all contracted services.

We recommend that the Chief Information Security Officer develop and implement procedures to leverage the Repository for Software Attestation and Artifacts to obtain sufficient assurance that the security and supply chain controls of systems or services provided by contractors or other entities on behalf of the organization meet FISMA requirements.

We recommend that the Chief Information Security Officer provide annual Anti-Counterfeit Training for IT staff with SCRM responsibilities.