Open Recommendations

The auditors recommend that the Chief Information Officer require the Department and FSA to review and approve theUSDS-MaxED/AidVntge and EDAWSEW MOU. Furthermore, the Department and FSA should update existingprocedures and ensure all MOUs reflect the appropriate two-year review cycle.

The auditors recommend that the Chief Information Officer require the Department and FSA to implement a process tomonitor that PRDs are reviewed and signed prior to the security investigation.

The auditors recommend that the Chief Information Officer require the Department and FSA to implement an automationprocess to centrally document, track, and share risk designation and screening information.

The auditors recommend that the Chief Information Officer require the Department and FSA to reinforce their process fordocumenting the authorization, review, and approval of PUAs.

The auditors recommend that the Chief Information Officer require the Department and FSA to develop enhanced monitoring controls to ensure proper internal controls mechanisms and processes are strictly enforced.

The auditors recommend that the Chief Information Officer require Departmental Principal Offices re-evaluate the use ofPIV alternates/exemptions across the organization, and modify onboarding procedures, as needed, to support a newstrategic direction which aligns with HSPD-12.

Establish guidance to clarify the roles and responsibilities of the Millennium Challenge Corporation's Monitoring and Evaluation Leads in reviewing and approving data quality review recommendations and tracking Millennium Challenge Accounts' implementation of the recommendations.

Establish a requirement that Millennium Challenge Accounts directly attribute modifications to their Monitoring and Evaluation plans to data quality review recommendations, as applicable.

Establish action plan guidance that defines roles and responsibilities related to addressing data quality review recommendations, the required contents of an action plan, and any permissible exceptions to the action plan requirement.

Conduct an assessment to determine whether the Millennium Challenge Corporation would benefit from periodic Agency-wide or sector-specific analyses of data quality reviews and their recommendations to identify lessons learned.

Provide the Millennium Challenge Corporation's Monitoring and Evaluation Leads access to individual data quality reviews on established Agency platforms or another central repository.

The Director of FinCEN should implement quality control measures, including a timeliness metric for form completion, to ensure supervisors properly review and complete departed employees’ out-processing forms.

Treasury OIG should confirm the transactions noted as unsupported or ineligible expenditures within Contracts greater than or equal to $50,000, Aggregate Reporting less that $50,000, and Aggregate Payments to Individuals are recouped or reallocated to other eligible uses by Bucks County in conformity with Treasury's Guidance. Based on Bucks County's responsiveness to Treasury's OIG's requests and its ability to provide sufficient documentation, we recommend Treasury OIG determine the feasibility of conducting an audit for Contract greater than or equal to $50,000, Aggregate Reporting less than $50,000, and Aggregate Payments to individuals. Castro also identified other matters throughout the course of…

Add the 915,534 records to the DMF

Develop a plan to add the remaining records to the Death Master File (for example, add the records 117 years after the Numident date of birth).

Review the 84 current payment status cases and take appropriate action (for example, terminate improper payments)

Maximize technology (for example, develop automated program that compares Numident name, date of birth, sex designation, place of birth, parents’ names) to identify all instances where two different individuals’ Numident records are cross-referred and uncross-refer the records.

Review all cases where the Numident records of beneficiaries in current payment status are cross-referred to deceased individuals’ Numident records and take action to correct the records.

Maximize technology (for example, develop automated program that compares Numident name, date of birth, sex designation, place of birth, parents’ names) to review the 2.4 million non-current payment status beneficiaries whose cross-referred Numident records contain death information, and input death information on their cross-referred record, as appropriate.

Implement controls to prevent similar errors from occurring in the future.

The VA Houston Health Care System Director ensures that staff document offering VA-issued devices for participation in virtual mental health appointments in patients electronic health records.

The VA Houston Health Care System Director conducts a review of providers lethal means safety assessment and planning with the patient, identifies barriers to effective lethal means safety discussions, and takes action as warranted.

The VA Houston Health Care System Director reviews staffs compliance with high-risk flag patient care requirements, to include updating and reviewing safety plans, following up on failed contacts, and completing suicide risk assessments.

We recommend that the Chief Operating Officer of FSA ensure that budget requests and lifecycle cost estimates forSABER-related projects are submitted and approved according to FSA’s Management Review 1 SOP and FSA’s otherestablished policies and procedures, and that they are properly maintained.

We recommend that the Chief Operating Officer of FSA ensure that FSA Acquisition officials follow the Department’sContract Monitoring Directive, specifically pertaining to COR Appointment Memorandums, deliverable monitoring, contractpayment records, contract monitoring plans, and QASPs for the FTI SABER system contracts we reviewed.