Open Recommendations

HUD OCIO should develop system policies and procedures for dynamic access controls that include just-in-time and just-enough access tailored to individual actions and individual resource needs.

HUD's Privacy Office should require program offices to periodically review systems in all environments (testing, development, production) for unnecessary disclosure of personally identifiable information (PII).

HUD OCIO should capture risks that are associated with zero trust architecture implementation and document these risks in its risk register.

That the FBI assess the processes and procedures it uses to prepare for events that it determines present potential domestic security issues-but have not been designated as NSSE or SEAR events by DHS-to ensure that its processes and procedures set forth with clarity the division of responsibilities between and within the relevant FBI field office and FBI headquarters; clearly define a mechanism for making a formal determination whether and what kind of a nationwide intelligence and CHS canvass is necessary and appropriate under FBI policies; and provide sufficient guidance to ensure that relevant intelligence can be timely shared among the…

Rec. A.1.a: The DoD OIG recommended that Deputy Assistant Secretary of the Navy for Civilian Personnel ensure the Office of Civilian Human Resources reviews the circumstances for the 120 entry level engineers we identified who received an accelerated promotion before the Office of Personnel Managements approval of the Accelerated Promotion Program on December 22, 2016, and determines the appropriate actions to take regarding those circumstances.

BEP management should update LAN WAN password configuration settings to comply with policy requirements or formally document a risk acceptance with mitigating controls.

Treasury Office of Capital Access follow-up on any CRF specific questioned costs reported in the fiscal year 2020 and 2021 Single Audit Act reports.

Castro also recommends that Treasury's Office of Capital Access to ensure that management decision letters are issued on the CRF specific findings identified by the auditor in the Single Audit Act reports noted in the finding.

For the Fiscal Year 2021 Single Audit report, Treasury Office of Inspector General should follow-up with Treasury's Office of Capital Access to ensure that management decision letters are issued on the findings identified by the auditor in the Single Audit report and should follow-up on any CRF related questioned costs.

Treasury's Office of Capital Access follow-up on the CRF-specific questioned costs reported in the fiscal year 2021 report.

Castro recommends Office of Inspector General (OIG) follow-up with Arizona's management to confirm if the $135,747,413 noted as unsupported expenditures within the Transfers greater than equal to $50,000 and Aggregate Payments to Individuals payment types can be supported. If support is not provided, Treasury OIG should recoup the funds or request Arizona's management to provide support for replacement expenses, not previous charges, that were eligible during the CRF period to performance. In addition, Castro recommended that Treasury OIG request the Arizona management provide support for replacement expenses, not previously charged, that were eligible during the CRF period of performance for…

Treasury's Office of Capital Access ensure that management decision letters are issued on the findings identified by the auditor in the fiscal years 2020 and 2021 Single Audit reports.

Treasury's Office of Capital Access should follow up with Arizona to obtain a copy of its fiscal year 2023 Single Audit Act report.

Treasury OIG request that Arizona's management completes a reconciliation of its Transfers greater than or equal to $50,000. Additionally, Castro recommends Treasury OIG determine the feasibility of performing additional testing over Transfers greater than or equal to $50,000.

Treasury OIG request Arizona's management perform and assessment over whether there were any additional indirect costs, above those identified by Castro, claimed withing its Grants greater than or equal to $50,000 CRF submission, and identify those for removal and repayment to Treasury, as applicable.

Treasury OIG request that Arizona's management performs and assessment of whether it had any additional annual leave payouts that were earned prior to the covered period and claimed as CRF expenses, above those identified by Castro, and identify those for reversal and repayment to Treasury.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.