Open Recommendations

Strengthen its policies and procedures to ensure that grant drawdowns are used to cover immediate cash needs necessary for its Head Start expenditures; only allowable costs are charged to the Head Start program; vehicle usage costs are adequately supported; and background checks and health screenings are performed on all volunteers who provide more than 20 percent of services during GBCA's weekly operating hours.

We recommend that CPB management require Valley PBS to repay $214,340 in CSG overpayments.

We recommend that CPB management require Valley PBS to identify the AA revenues reported as NFFS for the prior two fiscal years to recover related CSG overpayments.

We recommend that CPB management require Valley PBS to identify the corrective actions and controls it will implement to ensure future compliance with all CPB NFFS reporting requirements, including documenting its in-kind agreements and verifying the funding sources associated with local productions and workshops.

We recommend that CPB management require Valley PBS to exclude $8,820 for presenting fees that were paid in FY 2022, along with any additional presenting fees that were incurred and reported as NFFS on the FY 2022 AFR.

We recommend that CPB management require Valley PBS to identify the corrective actions and internal controls it will implement to ensure continuing compliance with Act and CPB requirements addressing:a) posting the audited financial statements on a timely basis; b) maintaining accurate EEO employment and hiring statistics for public information; c) maintaining a current Diversity Statement; d) providing harassment prevention training for employees and interns; and e) discretely accounting for its CSG expenditures.

[Description omitted; CSOSA has determined that this recommendation contains information that is limited official use or classified.]

[Description omitted; CSOSA has determined that this recommendation contains information that is limited official use or classified.]

[Description omitted; CSOSA has determined that this recommendation contains information that is limited official use or classified.]

[Description omitted; CSOSA has determined that this recommendation contains information that is limited official use or classified.]

[Description omitted; CSOSA has determined that this recommendation contains information that is limited official use or classified.]

[Description omitted; CSOSA has determined that this recommendation contains information that is limited official use or classified.]

We recommend that the National Institutes of Health define the process and timeline for what NIH considers "immediate notification" as it relates to specific award conditions intended to report unexpected research outcomes.

Establish and implement comprehensive written investigative policies and procedures for whistleblower investigations conducted by AAE that address best practice investigation standards in the areas of Qualifications, Independence, Due Professional Care, Planning, Execution, Reporting, and Information Management

Revise FAA Order 1100.167B to readjust duties that are inconsistent with the limitations established by the Aircraft Certification, Safety, and Accountability Act of 2020.

Assess its help desk system against other technical solutions and ensure that the help desk solution used captures complete data on technical support requests. This measure includes but is not limited to ensuring that sequence gaps are properly documented or do not occur, valid transactions are accepted by the help desk system, rejected transactions are identified, and the history of each transaction is retained.

The Under Secretary for Health conducts a review to assess the possible scope of current and former VA psychiatry residents being in possession of patients’ personal health information, to include video recorded treatment sessions and consent forms, and consults with the appropriate organizational leaders such as the Office of General Counsel on the required disposition of the recordings and forms, and takes action as needed.

We recommend that management design and implement controls that require the validation of the relevance and reliability of underlying data used in developing the assumptions related to the subsidy cost estimates. Such review should be documented and maintained.

We recommend that the Department evaluate, develop, and implement a formal process to track and report all new and separated contractors.

We recommend that the Department ensure separated contractors are off-boarded and system personnel are notified in a timely manner to disable or remove access to IT resources.

We recommend that the Department provide training and oversight to the Department’s personnel with on/off-boarding responsibilities to help ensure new/separated contractors are properly tracked.

We recommend that the Department update access review procedures to require the reviewers to verify the access lists received to be used in the performance of the access reviews is complete and accurate and not modified prior to commencing the access reviews.

We recommend that the Department identify and implement a process for the reviewer to validate the population generated for review is complete and accurate.

We recommend that the Department enforce established access authorization controls and ensure all requirements are met prior to granting system access.

We recommend that the Department formally perform and document the periodic reviews of all database user accounts in accordance with Department policy to confirm access is current, authorized, and commensurate with job responsibilities.