Open Recommendations

In coordination with OCFO and the OCIO, develop and implement a plan with defined milestones and timelines to resolve data discrepancies between Maximo and Odyssey and ensure property data are complete, accurate, and properly reconciled with the F/A module. As part of this plan, clarify roles, responsibilities, and coordination mechanisms between offices to ensure sustained accountability for property management and reconciliation activities.

Assess and, where feasible, enhance Maximo’s configuration to automate key property management controls. This assessment should include a cost–benefit analysis to determine viable improvements and identify compensating controls if system enhancements are not practical, to ensure consistent and accurate property data entry and reconciliation.

Finalize and issue updates to property management policies and procedures, including the DFMH, MS 511, and related guidance, to reflect the implementation of Maximo as the agency’s property management system and ensure alignment with current processes and controls.

Ensure all Posts receive and acknowledge updated property management guidance and expectations for the use of Maximo. This could include providing refresher training or written instructions on key processes, such as asset capitalization, status updates, and disposals, and obtaining confirmation from Posts that the information was reviewed and understood.

Reinforce the Annual Inventory Certification process as a data-quality control by providing targeted guidance and verification procedures to ensure that certifications accurately reflect property records in Maximo.

Continue performing monthly reconciliations between Maximo and Odyssey and enhance the reconciliation process, as appropriate, based on the results of the Maximo configuration assessment in Recommendation 2. Coordinate with the Compliance and Risk Office to ensure the reconciliation process is properly designed, consistently executed, and effective in identifying and resolving differences in a timely manner.

Office of Programs should Add reference to the Management Control Procedures Guide in the
Railroad Retirement Board’s Division of Programs Operating Manuals, Article 11.

Office of Programs should provide evidence that Policy and Systems staff have completed training
regarding management control review requirements, and roles and responsibilities.

Office of Programs should Inform staff of the 20 CFR §345.305(a) regulation requiring the RRB to send quarterly
notices to all railroad employers with their own experience rating.

Office of Programs should issue quarterly notices containing the railroad employer’s cumulative benefit balance
and net cumulative contribution balance to all employers with their own experience rating, in alignment with
requirements of 20 CFR §345.305(a).

Office of Programs should work with the Railroad Retirement Board developers to implement a system change for
Agency Enterprise General Information Support System-Z (IBM Mainframe environment) to maintain records
for at least three calendar years, or longer, if necessary, to align with other financial management practices and
information needed for the experience rating calculation for employers.

Office of Programs should update the Division of Programs Operating Manuals, Article 11
to reflect the implementation of recommendation 5.

Office of Programs should Update the Division of Programs Operating Manuals, Article 11
to reflect the requirements of 20 Code of Federal Regulations §345.305.

Office of Programs should Update Division of Programs Operating Manuals, Article 11
to reflect the required annual notification process.

OIG recommends that the Peace Corps develops and implements formal policies and procedures for establishing and maintaining its target cybersecurity profile(s). (Metric 1)

OIG recommends that the Peace Corps implements formal processes to ensure externally sourced products, systems, components, and services comply with its cybersecurity and supply chain risk management requirements, including integration into procurement and vendor management activities. (Metric 5)

OIG recommends that the Peace Corps develops and implements formal policies and procedures for maintaining a comprehensive inventory of data and corresponding metadata. (Metric 10)

OIG recommends that the Peace Corps allocates the necessary resources to ensure that baseline configurations and associated deviations are reviewed and updated at least annually. (Metric 14)

OIG recommends that the Peace Corps prioritize the procurement and implementation of a Data Loss Prevention solution to enhance its ability to detect and prevent unauthorized data exfiltration. (Metric 22)

Assess where the company and its partners’ expectations of the company’s role differ. Based on this assessment, take steps to clarify the company’s role, as appropriate.

Work with GDC to ensure that the company has adequate, ongoing visibility into project risks on the construction packages it is not leading.

Identify and document all relevant internal stakeholders and their related HTP support activities, and assign accountable departments and individuals for each activity identified.

Finalize the HTP internal document management system and related guidance consistent with Capital Delivery procedures.

The Associate Director for Operations ensures staff keep patient care areas clean and clean storage areas free of dirty items and equipment.

The Chief of Staff ensures the facility has workflows for all services to identify team members roles in the test result communication process.