Open Recommendations

IAF's Chief Information Security Officer document the controls IAF is responsible for implementing for the external system identified and develop and implement a security plan for the system.

Design and implement monitoring controls to help ensure that password configurations for the FMS-NG
application are in compliance with the FMS-NG Operations Manual [language withheld based on applicable Freedom of Information Act exemptions].

The Chief, Taxpayer Services, should ensure that the programming change to accurately update the secondary taxpayer’s account with the date of death annotated on a tax return is implemented in January 2026 and is functioning as intended.

The Chief, Taxpayer Services, should ensure that the requested programming to change how the date of death and corrections are posted to the taxpayer’s account is implemented in January 2027 and is functioning as intended.

The Chief, Taxpayer Services, should verify that the approximately 55,000 taxpayer accounts from the unprocessed January 2023 SSA file are locked.

The Commissioner, Taxpayer Services Division, should ensure that appropriate steps are taken to recover the erroneous RRC payments, including issuing Letter 510C.

The Human Capital Officer should coordinate with IT to determine the time frame when managers must request laptops for new employees. Once determined, formalize the requirement in the standard new employee orientation guidance and update the Manager’s Onboarding Checklist.

The Human Capital Officer should update the Manager’s Onboarding Checklist with a step to issue the performance plan within 30 calendar days of the employee’s start date.

The Human Capital Officer should work with the ITM administrator to ensure that processes are put in place to alert managers when important due dates pass; for example, if the performance plan is past due.

The Human Capital Officer should establish a formal written policy that requires managers to conduct quarterly touchpoint discussions with new employees in their first year and require that managers attend the updated training on conducting quarterly touchpoint activities.

The Human Capital Officer should work with the ITM administrator to add quarterly touchpoint activities to the manager’s ITM module as part of the new employee onboarding, send managers notifications of upcoming due dates for quarterly touchpoint activity discussions and alert managers if the discussions are past due.

The Oklahoma City VA Health Care System Director, with Pathology and Laboratory Medicine Service leaders, conducts a comprehensive review of the quality of care for the four patients identified in this report, including determinations of cytopathology processing delays and assessment of patient harm, and takes action as warranted.

The Oklahoma City VA Health Care System Director ensures that routine non-gynecological turnaround time corrective actions are documented and monitored for effectiveness, as required by the Veterans Health Administration.

The Oklahoma City VA Health Care System Director conducts a comprehensive review of the quality of care provided by the Chief of Pathology and Laboratory Medicine Service, identifies deficiencies, and takes action as warranted.

The Oklahoma City VA Health Care System Director reviews the Pathology and Laboratory Medicine Service event reporting requirements for variance events and ensures completion according to facility policy and Veterans Health Administration requirements.

The Oklahoma City VA Health Care System Director, in conjunction with the National Center for Patient Safety, evaluates patient safety event reporting processes within the Pathology and Laboratory Medicine Service, and ensures completion according to Veterans Health Administration requirements.

The Oklahoma City VA Health Care System Director, with Pathology and Laboratory Medicine Service leaders, conducts a comprehensive review of the quality of care for the four patients identified in this report, including determinations of cytopathology processing delays and assessment of patient harm, and takes action as warranted.

The Oklahoma City VA Health Care System Director ensures that routine non-gynecological turnaround time corrective actions are documented and monitored for effectiveness, as required by the Veterans Health Administration.

The Oklahoma City VA Health Care System Director conducts a comprehensive review of the quality of care provided by the Chief of Pathology and Laboratory Medicine Service, identifies deficiencies, and takes action as warranted.

The Oklahoma City VA Health Care System Director reviews the Pathology and Laboratory Medicine Service event reporting requirements for variance events and ensures completion according to facility policy and Veterans Health Administration requirements.

The Oklahoma City VA Health Care System Director, in conjunction with the National Center for Patient Safety, evaluates patient safety event reporting processes within the Pathology and Laboratory Medicine Service, and ensures completion according to Veterans Health Administration requirements.

Implement vulnerability management processes to ensure all vulnerabilities are identified and plans of action and milestones are created for vulnerabilities that cannot be mitigated by VA deadlines.

Implement a more effective baseline configuration process to ensure network devices and databases are running authorized software that is configured to approved baselines and free of vulnerabilities.

Perform a cost-benefit analysis and implement appropriate controls within the federal Electronic Health Record to limit disclosure of veteran personally identifiable information based on job responsibility.

Segregate the duties of maintaining key stock and making keys.