Open Recommendations

Embassy Bangui should complete a review of all structures on the chancery compound and ensure that they are reported in the Real Property Application.

Embassy Bangui should complete all information systems security officer responsibilities in accordance with Department standards.

Embassy Bangui should dispose of obsolete classified information processing equipment, in accordance with Department guidance.

Embassy Bangui should implement a records management program that complies with Department standards.

Review El Paso sector staffing levels, determine staffing requirements, and develop and implement additional strategies for staffing centralized processing centers during migrant surges.

Develop, implement, and regularly monitor quality assurance mechanisms at the Santa Teresa station to ensure compliance with standards related to providing hygiene items, sleeping mats, and medical care to detainees.

Oversee a data integrity review at the El Paso Hardened Facility to verify that staff are accurately recording custodial actions. If the problem we identified persists, implement a quality assurance plan, and continue to monitor data integrity.

We recommend the CISA Chief Information Officer immediately mitigate the control deficiencies or cease operation of the Federal Virtual Training Environment system.

We recommend the FLETC Chief Information Officer immediately mitigate the control deficiencies or cease operation of the eFLETC system.

Implement controls to allow for the capability to identify and monitor potential scheduling delays and to ensure family preferences are being met at national cemeteries.

Establish informed baselines for future sites that align with schedule management best practices.

Improve schedule management for charging station construction by using a project management system and related analytics to record dynamic updates, centralize information, and analyze performance to inform future construction baselines.

Evaluate whether contractual assistance is needed for its deployment effort, including aligning the Postal Service's schedule management with best practices.

We recommend that USAID/Kenya and East Africa determine the allowability of $122,971 in questioned costs ($111,642 ineligible, $11,329 unsupported) on pages 13, 16, and 22 of the audit report and recover any amount that is unallowable.

We recommend that USAID/Kenya and East Africa verify that University of Nairobi Enterprises and Services Limited corrects the two instances of material noncompliance detailed on pages 37 to 39 of the audit report.

(U) Rec. 1: Recommendation is Classified.

(U) Rec. 2: Recommendation is Classified.

(U) Rec. 3: Recommendation is Classified.

(U) Rec. 4.a: Recommendation is Classified.

(U) Rec. 4.b: Recommendation is Classified.

(U) Rec. 4.c: Recommendation is Classified.

We recommend that GHC continue to remediate the specific technical weaknesses discovered during this audit as outlined in the vulnerability scan audit inquiry.

We recommend that GHC implement a routine process to audit security configuration settings of its servers to ensure compliance with approved security configuration settings.

Develop and implement adequate procedures to ensure that confirmed EBLL cases, unconfirmed EBLL cases, and environmental investigations are reported to HUD.

Develop and implement adequate procedures and controls to ensure that environmental investigations are completed when required.