Open Recommendations

We recommend that OSMRE provide training to grants management specialists on conducting thorough risk assessments, including guidance on identifying and analyzing single audit findings.

We recommend that OSMRE develop and implement a long-term staffing plan for grants management specialists that considers existing resources, Infrastructure Investment and Jobs Act funding, and OSMRE's priorities and goals.

We recommend that OSMRE create and implement a mechanism to track and monitor all key dates for processing applications, modifications, and authorizations to proceed to ensure processing dates are met.

We recommend that OSMRE design and implement an updated risk assessment checklist that requires grants management specialists to document consideration of applicable risk factors and document any mitigating measures for each risk factor identified.

We recommend that OSMRE develop and provide to grant applicants guidance on prioritization of projects for the Justice40 Initiative.

We recommend that OSMRE develop and provide to grant applicants guidance on expectations of subrecipient and contractor monitoring.

We recommend that OSMRE develop and provide to grant applicants guidance on information required for OSMRE to compile its Infrastructure Investment and Jobs Act report submission to Congress.

The Chief Information Officer should ensure that separation of duty controls reflect NIST guidance and require that all cloud systems have a unique System Owner and AO or AO Designated Representative.

The Chief Information Officer should ensure that the cloud system immediately completes its pilot program and that an ATO memorandum is approved for the system to remain in production.

The Chief Information Officer should ensure that management approvals are consistent and documented per the requirements for cloud systems.

The FBI devise and implement a plan to ensure that it meets all of the requirements of the e-Recording Policy.

The DEA and FBI include discussion of the e-Recording Policy in the curricula of trainings provided to TFOs.

The ATF, DEA, FBI, and USMS provide their personnel refresher training on the e-Recording Policy, including the policy's allowable exceptions to recording.

The ATF, DEA, FBI, and USMS provide their personnel refresher training on the e-Recording Policy, including the policy's allowable exceptions to recording.

The ATF, DEA, FBI, and USMS provide their personnel refresher training on the e-Recording Policy, including the policy's allowable exceptions to recording.

This recommendation is Sensitive But Unclassified.

This recommendation is Sensitive But Unclassified.

This recommendation is Sensitive But Unclassified.

This recommendation is Sensitive But Unclassified.

This recommendation is Sensitive But Unclassified.

This recommendation is Sensitive But Unclassified.

We recommend that FWS require the Department to develop and implement controls to ensure WSFR and license revenue funding sources are recorded, to include updating language in Department policy accordingly.

We recommend that FWS require the Department to develop a control that requires current and any new Department employees to be trained on policies and procedures related to equipment management, to include maintaining complete and accurate information in the new fixed asset system and the proper use of equipment transfer and disposal forms.

We recommend that FWS require the Department to conduct independent inventory reviews, per Department policy, to proactively identify issues, such as equipment not being recorded in the fixed asset system or not being properly disposed of.

We recommend that FWS require the Department to update the new fixed asset system with the missing information identified in this finding, to the extent feasible.