Open Recommendations

Remedy the unsupported indirect costs of $6,189 in the 2018-VO-GX-0125 grant and $709 in the 2020-JP-FX-0007 grant, totaling $6,898.

Ensure the Mi'kmaq Nation creates written policies and procedures on how to properly support allocated personnel and fringe benefit costs using records that reflect actual time spent among specific activities or cost objectives.

Ensure the Mi'kmaq Nation improves and implements written policies and procedures for maintaining proper property records and conducting required physical inventory on equipment

FHFA should update examination manuals to include specific procedures to assess the Enterprises’ oversight of seller/servicers’ flood insurance compliance.

FHFA should ensure examiners perform and document examination activities to assess whether Freddie Mac implemented procedures reasonably designed to ensure that mortgage loans they purchase are covered by adequate flood insurance if the property is located in a Special Flood Hazard Area.

The Bureaus of Global Talent Management and Diplomatic Security should develop standard operating procedures for political appointees whose security clearances are suspended.

The Bureau of Diplomatic Security should amend its guidance regarding the Information Facilities and Access Restriction (IFAR) process to include criteria as to which type of IFAR should be issued and to emphasize that a "Typical" IFAR allows the employee continued access to a substantial amount of Sensitive But Unclassified information.

The Bureau of Diplomatic Security should amend its processes to ensure that supervisors and colleagues are notified when an employee's security clearance is suspended and the employee is permitted to continue working in the same position in order to ensure that classified information is not shared.

CMS should pursue further actions to help States share knowledge with eachother and coordinate internally regarding strategies to ensure needed care for Medicaid enrollees with HIV.

CMS should take additional steps to help States leverage the State Data Resource Center to access and use Medicare data for dually eligible enrollees with HIV.

CMS should geographically target efforts to increase the number of MOUD providers that treat Medicare enrollees in high-need counties.

CMS should work with States to assess whether their Medicaid reimbursement rates for treatment with MOUD are sufficient to recruit and retain enough MOUD providers.

CMS should work with SAMHSA to develop and maintain a list of active office-based buprenorphine providers.

CMS should geographically target efforts to increase the number of MOUD providers that treat Medicaid enrollees in high-need counties.

We recommend the Commandant of the U.S. Coast Guard develop and implement appropriate planning documents to ensure Infrastructure Investment and Jobs Act funds are obligated before they expire.

We recommend the Commandant of the U.S. Coast Guard develop and implement a process to ensure projects on the unfunded priorities list meet the requirements of the Unfunded Priorities List Business Rules and Civil Engineering Manual.

We recommend the Commandant of the U.S. Coast Guard develop and implement a strategic staffing plan to identify and obtain the staffing resources needed to assist in the timely execution of the IIJA projects.

We recommend the Commandant of the U.S. Coast Guard develop and implement official guidance for formulating quarterly acquisition briefings reported to Congress.

Make capability determinations and/or document capability determinations for the 58[1] beneficiaries in our sample.

Improve controls, such as enhancing eRPS and business processes, to ensure employees complete and document capability determinations that comply with SSA’s policies.

The Chief Information Officer, in conjunction with the Chief Operating Officer, should implement more prohibitive controls for allowing users to ******************* ****************

The Chief Information Officer, in conjunction with the Chief Operating Officer, should revise the DLP rules to be more restrictive to help prevent intentional data exfiltration.

The Chief Information Officer, in conjunction with the Chief Operating Officer, should continue to ensure that the managers and executives responsible for reviewing and approving BEARS ********************** requests carefully review all requests and only approve requests with sufficient and appropriate responses to the required questions.

Update Revenue Procedure 2013-14 to include the language found in the Treasury Regulation § 301.7216-3 that the consent statement must identify the purpose of disclosure and specific recipient(s).

Evaluate whether any clarifications or updates to Revenue Procedure 2013-14 or Treasury Regulation § 301.7216-3 are needed to address concerns or raise awareness of data sharing practices with tax software companies that use pixels.