Open Recommendations

Develop and implement a plan to complete systematic compliance reviews to determine full compliance with the Title VI program.

Verify that EPA funding applicants address potential noncompliance with Title VI with a written agreement before the funds are awarded.

Determine how to use existing or new data to identify and target funding recipients for proactive compliance reviews, and develop or update policy, guidance, and standard operating procedures for collecting and using those data.

Develop and deliver training for the deputy civil rights officials and EPA regional staff that focuses on their respective roles and responsibilities within the EPA’s Title VI program.

Complete and publish a document describing lessons learned after the BRT completes its work related to this breach.

Annually update and require refresher training for all Clearinghouse staff on the use of the data extraction tool and policies and procedures for accomplishing Clearinghouse work, up to and including the AED for EPHA.

Develop, disseminate, provide training, and implement policies and procedures on how to use this new data extraction tool to all Clearinghouse staff, up to and including the AED for EPHA. These policies must include step-by-step instructions and checklists to aid staff in completing routine tasks. These policies must include guides and checklists for supervisory review of Clearinghouse staff work.

Determine, document, and implement a structure for the Clearinghouse.

Implement the recommendations from the Human Resources study.

FDA should use the new TIRF REMS patient registry to monitor for known areas of risk, such as inappropriate conversions and off-label prescribing.

FDA should strengthen the REMS for opioid analgesics (the successor to ER/LA opioids) by requiring prescriber training.

FDA should enhance its REMS assessment review process.

FDA should seek additional authority to ensure that manufacturers are held accountable when appropriate.

We recommend the FEMA Administrator establish robust transportation, supply chain, and general logistics contingency contracts to provide more timely and effective delivery of disaster support.

We recommend the FEMA Administrator develop internal controls over contract administration from initiation to closeout. These controls should: 1) ensure all contract requirements are met in accordance with the Federal Acquisition Regulation and corresponding DHS and FEMA policies and procedures; 2) ensure training needs are met by procurement personnel and appropriate approvals are obtained prior to the award or modification of contracts; and 3) ensure contract oversight officials adequately review invoices, including verifying costs, to theextent possible, based on source documentation to ensure billed costs are supported and allowed.

We recommend the FEMA Administrator Investigate FEMA’s transportation contracts in response to the Puerto Rico disaster for potential Anti-Deficiency Act violations and appropriately report the results of the review.

The Deputy Commissioner for Services and Enforcement should continue efforts to close the virtual currency information gap by issuing guidance clarifying the proper information reporting associated with virtual currency transactions.

We recommend the DHS Chief Information Officer identify and apply the resources needed in the Geospatial Management Office to the Department to fulfill covered agency responsibilities under Section 759 of the Geospatial Data Act of 2018.

We recommend the DHS Chief Information Officer work with the Geospatial Information Officer tocoordinate with internal and external stakeholders to ensure a commondefinition of geospatial data, including the classification of Law EnforcementSensitive Information, as it applies to the DHS mission and operatingenvironment.

CMS should ensure that all States receive training on CMS’s updated triage guidance.

CMS should identify new approaches to address those States that are consistently failing to meet the required timeframes for investigating the most serious nursing home complaints.

We recommend CBP’s Assistant Commissioner for the Office of Information and Technology implement all mitigation and policy recommendations to resolve the 2019 data breach identified in CBP’s Security Threat Assessments, including implementing USB device restrictions and applying enhanced encryption methods.

We recommend the Deputy Executive Assistant Commissioner, Office of Field Operations coordinate with the CBP Office of Information and Technology to ensure that all additional security controls are implemented on relevant devices at all existing Biometric Entry-Exit program pilot locations.

We recommend the Deputy Executive Assistant Commissioner, Office of Field Operations establish a plan for the Biometric Entry-Exit Program to routinely assess third-party equipment supporting biometric data collection to ensure partners’ compliance with Department security and privacy standards.

We recommend that the Oregon Health Authority provide additional guidance to CCOs on the processes for provider credentialing and for beneficiary grievances and appeals.