Open Recommendations

Update and maintain a complete Critical Software Inventory that staff may utilize to fulfill their responsibilities and provide transparency and tracking.

Create or update guidance to implement policies and procedures to guide and govern supply chain risk management activities related to attestations.

Ensure all responsible staff receive appropriate training on attestation roles and responsibilities.

Update PBGC's process documentation to properly align with OMB requirements for software producers who cannot attest to adhering to the secure software development practices within their attestations and ensure PBGC effectively follows this process.

Contact OMB to obtain additional guidance to determine if an exception, waiver, or if the Corporation should discontinue the use of software for outstanding attestations.

(U) Rec. A.1: Recommendation is Classified.

(U) Rec. A.2.a: Recommendation is Classified.

(U) Rec. A.2.b: Recommendation is Classified.

(U) Rec. A.2.c: Recommendation is Classified.

(U) Rec. A.2.d: Recommendation is Classified.

(U) Rec. A.2.e: Recommendation is Classified.

(U) Rec. A.3: Recommendation is Classified.

(U) Rec. A.3: Recommendation is Classified.

(U) Rec. B.1: Report is Classified

Incorporate Office of Strategic Infrastructure LMD representatives with property expertise
into the programs and projects at the contract’s onset to ensure procurement officials receive
sufficient support.

Review Artemis-related contracts that are not delegated to DCMA for contractor-held property
management to determine whether NASA can leverage the delegations already in place to
consolidate government property administration tasks.

District leaders and the Detroit, Escanaba, and Cincinnati Vet Center Directors collaborate with the supporting VA medical facility to determine reasons for noncompliance with staff participation on the mental health executive council, take action as indicated, and monitor compliance.

District leaders and the Fort Wayne, Escanaba, and Cincinnati Vet Center Directors determine reasons for noncompliance with completing four hours of external clinical consultation for clinically complex cases per month, ensure a process is implemented, and monitor compliance.

District leaders and the Detroit and Escanaba Vet Center Directors determine reasons for noncompliance with employees completing select trainings in the required time frame, ensure completion, and monitor compliance.

District leaders and the Fort Wayne, Detroit, Escanaba, and Cincinnati Vet Center Directors determine reasons for noncompliance with completion of an outreach plan with all required strategic components, ensure completion, and monitor compliance.

District leaders and Escanaba Vet Center Director determine reasons for noncompliance with annual fire or safety inspections, ensure completion, and monitor compliance.

District leaders and the Fort Wayne, Detroit, and Escanaba Vet Center Directors determine reasons for noncompliance with having an annual risk and vulnerability assessment completed by VA police or local law enforcement, ensure completion, and monitor compliance.

District leaders and the Cincinnati Vet Center Director determine reasons for noncompliance with annual automated external defibrillator servicing by VA medical center biomedical engineering, ensure completion, and monitor compliance.

District leaders and the Detroit and Escanaba Vet Center Directors determine reasons for noncompliance with having a current emergency and crisis plan that includes required components, ensure completion, and monitor compliance.

The Readjustment Counseling Service Chief Officer reviews the administrative site visit protocol and Veterans Health Administration requirements related to inconsistencies in frequency for risk and vulnerability assessments and updates the administrative site visit protocol as indicated.