Open Recommendations

We recommend that DHS define succession and contingency plans for key roles involved in internal control over financial reporting to mitigate risks due to employee turnover.

We recommend that DHS improve the process for identification, analysis, and response to risks related to financial reporting.

We recommend that DHS strengthen monitoring controls over remediating internal control deficiencies.

timely review and approval of SVs; and

The Commissioner, Wage and Investment Division, and the National Taxpayer Advocate should formally develop and document a vision and specific goals for their VSD programs and develop performance measures to monitor and evaluate the performance of the individual programs.

The Commissioner, Wage and Investment Division, and the National Taxpayer Advocate should both conduct public awareness activities to increase taxpayers’ knowledge of the VSD program.

(U) Rec. 1: The DoD OIG recommended that the DoD Chief Information Officer, in coordination with the Under Secretary of Defense for Policy, issue DoD-wide policy implementing the Cybersecurity Information Sharing Act of 2015 requirements, including a requirement for the DoD Components to document barriers to sharing cyber threat indicators and defensive measures and take appropriate actions to mitigate the identified barriers.

Develop and implement a process to assess the knowledge, skills, and abilities of Board staff with significant security responsibilities and establish plans to close identified gaps.

Determine whether established processes and procedures for management of user-access agreements and rules-of-behavior forms for privileged users are effective and adequately resourced and make changes as needed.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

Obtain the necessary OMB approval for the updated FDS 2.0 funds control process.

Obtain the necessary OMB approval for the updated FDS 2.0 funds control process.

The Office of the Chief Information Officer enforce the policy to remediate patch and configuration related vulnerabilities within agency defined timeframes.

The Office of the Chief Information Officer implement a process to detect and migrate unsupported software to supported platforms before support for the software ends.

The Bureau of Consular Affairs, Office of Passport Services, in conjunction with the Bureau of Diplomatic Security, should develop centralized, searchable databases to track and manage passport revocation cases, as well as retentions of passports and other documents seized on suspicion of fraud when citizens apply for consular services, or under other circumstances, and to track confiscations of such documents if they are seized on grounds other than retention authority.

We recommend that FDA establish written procedures and practices for securely sharing sensitive information about cybersecurity events with key stakeholders who have a “need to know.”

We recommend that ProLab, for the remaining portion of the estimated $319,277 overpayment for claims that are outside of the Medicare reopening period, exercise reasonable diligence to identify and return overpayments in accordance with the 60-day rule, and identify any returned overpayments as having been made in accordance with this recommendation.

We recommend that ProLab refund to the Medicare program the portion of the estimated $319,277 overpayment for claims incorrectly billed that are within the reopening period.

We recommend that ProLab exercise reasonable diligence to identify and return any additional similar overpayments outside of our audit period, in accordance with the 60-day rule, and identify any returned overpayments as having been made in accordance with this recommendation.

We recommend that BSEE revise the regulations under 30 C.F.R. 254 for managing oil spill preparedness and response.