Open Recommendations

Review and take appropriate action (for example, verify the beneficiaries’ vital status, input death information, terminate payment records, initiate recovery of improper payments) on the remaining cases in our population of 1,596 beneficiaries reported as deceased in State Department records.

Work with State Department officials and develop an electronic method to timely report death information for U.S. citizens who die abroad.

Work with State Department officials to timely forward reports of death abroad when State Department obtains a first-party report of death.

Ensure vulnerabilities are remediated within the Office of Information and Technologys established time frames. (This is a repeat recommendation from the prior site inspection.)

We recommend that USAID's Deputy Administrator for Policy and Programming: Direct the Bureau for Latin America and the Caribbean to develop and implement an action plan to ensure missions' compliance with Automated Directives System Chapter 206 and 303 requirements for pre-award risk management procedures that includes steps to make sure (a) overseas leadership at posts designated as covered countries are aware of their responsibility to implement and document compliance with Automated Directives System Chapter 206, including the determination process (i.e., post advance review), and (b) all signed certification and assurance statements required by Automated Directives System Chapter 303 Section 3.8…

Revise the content of the NCUA’s Enforcement Manual to include current policies, procedures, and responsibilities for the NCUA’s formal enforcement actions and ensure its content is consistent with other agency policies. Regularly review this guidance for continued relevance and effectiveness in achieving the agency’s objectives.

We recommend that Retirement Services develop and implement additional cost-effective corrective actions, aimed at the root causes of improper payments, to further reduce the improper payments rate.

(U) Rec. A.1: The DoD OIG recommended that the Chief Digital and Artificial Intelligence Officer, in coordination with the Washington Headquarters Services Director, develop, resource, and implement a records management program that includes records management training for all personnel in accordance with Federal and DoD records management requirements.

(U) Rec. A.2: The DoD OIG recommended that the Chief Digital and Artificial Intelligence Officer implement a formal after'action review process to determine the success and effectiveness of the Defense Digital Services' engagements.

(U) Rec. A.3: The DoD OIG recommended that the Washington Headquarters Services Director ensure that each head of a Washington Headquarters Services'serviced Component has established and resourced a records and information management program within their organization in accordance with DoD policies.

(U) Rec. B.1.a: The DoD OIG recommended that the Chief Digital and Artificial Intelligence Office Chief Information Officer and Authorizing Official, in coordination with the Defense Information Systems Agency Chief Information Officer, assess the hardware, software, cloud services, networks, and any other tools used by the Defense Digital Service since 2015 to determine whether the hardware, software, cloud services, and other tools are necessary to meet the mission requirements of the Defense Digital Service;

(U) Rec. B.1.b: The DoD OIG recommended that the Chief Digital and Artificial Intelligence Office Chief Information Officer and Authorizing Official, in coordination with the Defense Information Systems Agency Chief Information Officer, assess the hardware, software, cloud services, networks, and any other tools used by the Defense Digital Service since 2015 to determine whether the hardware, software, cloud services, and other tools are approved for use by the DoD.

(U) Rec. B.1.c: This recommendation is Controlled Unclassified Information

(U) Rec. B.1.d: The DoD OIG recommended that the Chief Digital and Artificial Intelligence Office Chief Information Officer and Authorizing Official, in coordination with the Defense Information Systems Agency Chief Information Officer, assess the hardware, software, cloud services, networks, and any other tools used by the Defense Digital Service since 2015 to determine whether the hardware, software, cloud services, and other tools were acquired under terms that ensure that the DoD retains ownership of DoD data.

(U) Rec. B.2.a: The DoD OIG recommended that the Chief Digital and Artificial Intelligence Office Chief Information Officer and Authorizing Official, in coordination with the Defense Information Systems Agency Chief Information Officer, conduct a risk assessment of the DoD data stored, processed, or transmitted by the hardware, software, cloud services, networks, and any other tools used by the Defense Digital Service to determine the DoD Component owner, the nature, and classification of the data.

(U) Rec. B.2.b: The DoD OIG recommended that the Chief Digital and Artificial Intelligence Office Chief Information Officer and Authorizing Official, in coordination with the Defense Information Systems Agency Chief Information Officer, conduct a risk assessment of the DoD data stored, processed, or transmitted by the hardware, software, cloud services, networks, and any other tools used by the Defense Digital Service to determine whether the DoD data were and are appropriately protected in accordance with DoD cybersecurity and cloud security policies.

(U) Rec. B.2.c: The DoD OIG recommended that the Chief Digital and Artificial Intelligence Office Chief Information Officer and Authorizing Official, in coordination with the Defense Information Systems Agency Chief Information Officer, conduct a risk assessment of the DoD data stored, processed, or transmitted by the hardware, software, cloud services, networks, and any other tools used by the Defense Digital Service to determine whether any DoD data were spilled, compromised, or potentially compromised, and if so, immediately initiate mitigating and remedial actions to protect DoD information, including personally identifiable information, in accordance with DoD policies.

(U) Rec. B.3: The DoD OIG recommended that after completion of Recommendations B.1 and B.2, the Chief Digital and Artificial Intelligence Officer develop and implement a plan of actions and milestones to bring any out-of-compliance hardware, software, cloud services, networks, and other tools used by the Defense Digital Service and other Office of the Chief Digital and Artificial Intelligence Office Components into compliance with DoD policies.

(U) Rec. B.4.a: The DoD OIG recommended that the Chief Digital and Artificial Intelligence Officer develop and implement a formal process for all Chief Digital and Artificial Intelligence Office directorates to follow when requesting waivers of DoD policies and guidance that, at a minimum, requires documentation of the request, justification for the request, and the approval or denial from the policy's issuing DoD Component.

(U) Rec. B.4.b: The DoD OIG recommended that the Chief Digital and Artificial Intelligence Officer develop and implement a formal process for all Chief Digital and Artificial Intelligence Office directorates to follow when requesting waivers of DoD policies and guidance that, at a minimum, requires documentation of the Office of the Secretary of Defense's approval and notification in writing to the policy's issuing DoD Component of the approval of the waiver, if the Office of the Secretary of Defense overrides the denial of the waiver by the Office of the Secretary of Defense Principal Staff Assistant or DoD Component head…

(U) Rec. B.4.c: The DoD OIG recommended that the Chief Digital and Artificial Intelligence Officer develop and implement a formal process for all Chief Digital and Artificial Intelligence Office directorates to follow when requesting waivers of DoD policies and guidance that, at a minimum, requires maintenance of the documentation created as a result of the implementation of Recommendations B.1.a and B.1.b in accordance with Federal and DoD records management requirements.

(U) Rec. B.5: The DoD OIG recommended that the Chief Digital and Artificial Intelligence Officer implement Recommendations B.1, B.2, and B.3 for all the Chief Digital and Artificial Intelligence Office directorates.

The Mint Director ensures the Mint considers additional procedures to oversee refiners including, but not limited to, obtaining and periodically reviewing documentation from the Mint’s approved refineries, such as the LBMA-required third party audits and supporting documentation, to ensure that refineries are sourcing gold responsibly in accordance with U.S. law and the best interests of the U.S. Government.

The Mint Director ensures the Mint within 30 days of issuance of this report, develops a plan that outlines the steps and controls the Mint will implement to comply with Public Law 99-185 and Public Law 109-145 in the production of gold coins which includes a review of the Mint’s current methodology to ensure it complies with U.S. law. As part of this review, the Mint should publish its procedures for acquiring newly mined U.S. gold in the Federal Register. Furthermore, the Mint needs to update its website for accuracy and its BOAs and operating procedures to ensure that these…

Rec. 2: The DoD OIG recommended that the Under Secretary of Defense for Personnel and Readiness update DoD Directive 1344.10 to include a requirement for the Services and the National Guard Bureau to provide guidance and training on partisan and nonpartisan political activities to all Service members at least each presidential election year.