Open Recommendations

We recommend the Vice President and Chief Information and Digital Officer, Technology and Innovation, implement automated monitoring via DHS’ Continuous Diagnostics and Mitigation program for components applicable to TVA’s information security continuous monitoring strategy and update processes for developing and maintaining an accurate and complete inventory of TVA’s information systems to include automation and near real-time updates.

We recommend the Vice President and Chief Information and Digital Officer, Technology and Innovation, implement, assess, and maintain common secure configuration settings for all information systems.

We recommend the Vice President and Chief Information and Digital Officer, Technology and Innovation, define, consistently implement, and communicate qualitative and quantitative performance measures on the effectiveness of its configuration management plan.

We recommend the Vice President and Chief Information and Digital Officer, Technology and Innovation, perform the configuration management roles and responsibilities that have been defined for common secure configurations, enterprise-wide configuration management plans, and flaw remediation processes.

Establish procedures to complete annual safety inspections, remediate deficiencies, and document the results for the blue collection boxes and green relay boxes.

OIG recommends that the Bureau of Intelligence and Research, in coordination with the Office of Management Strategy and Solutions and the Bureau of Diplomatic Technology, (a) conduct a review to determine whether its Office of the Geographer and Global Issues is best positioned to implement compliance with the Geospatial Data Act of 2018, and (b) develop and implement a plan to address the results of the review.

OIG recommends that the Bureau of Intelligence and Research, in coordination with the Office of the Legal Advisor, the Office of Management Strategy and Solutions, and the Bureau of Diplomatic Technology, (a) determine what qualifies as geospatial data for purposes of compliance with the Geospatial Data Act of 2018, Section 759(a), codified at 43 United States Code 2808(a), and (b) formally communicate the determination to affected geospatial data stakeholders.

OIG recommends that the Bureau of Intelligence and Research, in coordination with the Office of Management Strategy and Solutions and the Bureau of Diplomatic Technology, develop and implement a strategy to maintain an inventory of all Department of State geospatial data as prescribed by the Geospatial Data Act of 2018, Section 759(b)(2)(B), codified at 43 United States Code 2808(b)(2)(B), after a determination is made regarding what qualifies as geospatial data, as mentioned in Recommendation 2.

OIG recommends that the Bureau of Intelligence and Research, in coordination with the Office of Management Strategy and Solutions and the Bureau of Diplomatic Technology, develop written policies, procedures, and guidance that can be used to implement requirements 2 through 12 of the Geospatial Data Act of 2018, Section 759(a), codified at 43 United States Code 2808(a).

OIG recommends that the Bureau of Intelligence and Research, in coordination with the Office of Management Strategy and Solutions and the Bureau of Diplomatic Technology, formally define and communicate areas of authority, roles, and responsibilities in the Geospatial Data Strategy for personnel responsible for carrying out compliance with the Geospatial Data Act of 2018.

OIG recommends that the Bureau of Intelligence and Research, in coordination with the Bureau of Budget and Planning, the Office of Management Strategy and Solutions, and the Bureau of Diplomatic Technology, develop and implement a comprehensive, long-term funding plan and include geospatial data when preparing its budget submission as prescribed by the Geospatial Data Act of 2018, Section 759(b)(2)(A), codified at 43 United States Code 2808(b)(2)(A).

OIG recommends that the Bureau of Intelligence and Research, in coordination with the Bureau of Administration, the Office of Management Strategy and Solutions, and the Bureau of Diplomatic Technology, (a) review current records schedules to determine whether data information products and other records created in geospatial data and activities are included on agency record schedules that have been approved by the National Archives and Records Administration as prescribed by the Geospatial Data Act of 2018, Section 759(a)(4), codified at 43 United States Code 2808(a)(4), and (b) update the records schedules as necessary to include geospatial data and activities.

We recommend FS establish and implement a control activity in its accounting structure, to track the IIJA – State and Private Forestry funds expended in the FS Operations account, that would ensure funds were expended on allowable IIJA provisions.

Review and align the processes for submitting, tracking and maintaining Quality Step Increase (QSI) awards with the established policy provisions to address potential noncompliance in QSI submission and approval processes

Review and assess the human capital policy management roles and responsibilities to identify opportunities for improvement in human capital policy management and oversight. Enhance or develop and implement specific measures to foster consistent communication and collaboration between the Human Capital Management Division and the Policy and Special Programs Division.

Practice timely reporting of the exit interview survey program to ensure its results are analyzed consistently and effectively. This includes defining timelines for reporting results to upper management and ensuring prompt action on identified issues.

Implement a centralized repository where all telework application packages, both approved and denied, across the agency are maintained. This includes establishing a regular review process of the repository to sustain its integrity and ensure consistency, fairness and policy compliance.

Per AOC Order 4-1, Issuing Architect of the Capitol (AOC) Policy, effectively execute the process to verify the assignment of policies to the appropriate Office of Primary Responsibility within the AOC Policy Library, particularly following any transfers or changes in ownership between offices/jurisdictions.Additionally, this recommendation should include a focus on ensuring that, when applicable, policy memorandums reference the original order number and section of the overarching policies to maintain alignment with their provisions.

Review and assess the policy governance framework over the jurisdictions to identify opportunities to improve policy governance, standards and communication. Enhance or develop and implement a comprehensive policy governance framework across all jurisdictions. Furthermore, this recommendation should include a focus on designating a Point of Contact at the Human Capital Management Division to handle policy-related inquiries, thereby discouraging reliance on non-designated resources and promoting adherence to policies.

Establish a review process that effectively addresses any inconsistencies or manual input errors encountered during preparation and submission of Standard Form 52 forms.

Establish data management protocols, incorporating routine review and reconciliation of employee data, alongside procedures for data entry and updates.

Revise the “Feedback to Non-Selected Internal Candidates Interviewed Form” to incorporate explicit criteria and pertinent evidence validating that feedback was extended to interviewed, non-selected internal candidates for vacant positions.

Establish clear procedures and defined timelines for administering and conducting exit interviews with separating employees.

Review and assess AOC Order 4-1, Issuing Architect of the Capitol Policy, protocols for update and retirement of outdated policies and identify opportunities to improve policy protocol activities. Enhance or develop and implement protocol measures to affect timely updates to older policies and the prompt retirement or revision of outdated or unclear policies, ensuring continuous alignment with regulatory requirements and organizational objectives.

Ensure all interrelated policies are tracked to facilitate the identification of those potentially impacted by the update of a single policy.