Open Recommendations

[Description omitted; DOJ has determined that this recommendation contains information that is limited official use or classified.]

[Description omitted; DOJ has determined that this recommendation contains information that is limited official use or classified.]

[Description omitted; DOJ has determined that this recommendation contains information that is limited official use or classified.]

We recommend that the Bureau for Humanitarian Assistance take the following actions: In coordination with the Bureau for Management Office of Acquisition and Assistance, develop a schedule to incorporate the standard provision, "Safeguarding Against Exploitation, Sexual Abuse, Child Abuse, and Child Neglect," in existing Ukraine response awards.

We recommend that the Bureau for Humanitarian Assistance take the following actions: Update its Award Filing Guidance to include that all protection from sexual exploitation and abuse-related application materials required in the Bureau for Humanitarian Assistance's Emergency Application Guidelines be filed in the Agency Secure Image and Storage Tracking System.

We recommend that the Bureau for Humanitarian Assistance take the following actions: Update technical guidance and develop questions for third-party monitors to use during site visits that align with protection from sexual exploitation and abuse-related guidance and
requirements, including the Emergency Application Guidelines.

The Executive Director mitigates the impact of construction on patient care in the Emergency Department.

The Chief of Staff ensures the toxic exposure screening navigators verify data to track veterans waiting for secondary screenings and address any backlog.

Develop a plan with the Atlanta Regional Processing and Distribution Center to better align mail arrival and processing times at the Macon Local Processing Center.

Complete a review of Postal Vehicle Service transportation schedules that includes updated truck parking information and verify related actions are implemented at the Macon Local Processing Center.

(U) Rec 1: The DoD OIG recommended that the Commander of the Army's 66th Military Intelligence Brigade (Theater) develop and implement a plan to ensure that Counterintelligence Probationary Program agents are mentored by senior CI agents and request additional guidance from Army Intelligence and Security Command when senior CI agents are unavailable, in accordance with Army Regulation 381-20 and Army Intelligence CIPP Handbook requirements.

(U) Rec 3: The DoD OIG recommended that the Army Deputy Chief of Staff for Intelligence and the Commander of the Army Intelligence and Security Command develop and implement a plan to ensure an appropriate balance of senior counterintelligence agents to Counterintelligence Probationary Program agents to enable commands to effectively mentor Counterintelligence Probationary Program personnel as required by Army Regulation 381-20.

We recommend the FSA Chief Operating Officer— Assess FSA’s planned resourcing to ensure institutional compliance with Section 117 reporting requirements and make changes, as appropriate.

We recommend the FSA Chief Operating Officer— Develop and implement a monitoring plan, policies, and procedures, along with a related timeframe for doing so, that includes a risk-based framework and activities designed to assist with detecting inaccuracies, incomplete submissions, or instances of non-reporting and that motivates institutions to comply with the requirements of Section 117.

We recommend the FSA Chief Operating Officer— Require an annual certification, to cover the preceding year, from a high-level official at all institutions receiving Title IV funds certifying full compliance with Section 117 reporting requirements.

We recommend the FSA Chief Operating Officer— Include edit checks in the Department’s Section 117 reporting portal system or implement other data monitoring processes that would ensure: (1) institutions are properly classifying gifts and contracts as restricted based on answers to related questions, (2) all restricted gifts and contracts include required descriptions, and (3) potential duplicate entries are flagged for further review.

We recommend the FSA Chief Operating Officer— Ensure that the portal includes adequate descriptors of country names for those that may be confusing (e.g., North Korea).

We recommend the FSA Chief Operating Officer— Develop a more efficient process for preparing data for posting on the website.

Direct FAA to update its policies and procedures and implement corresponding controls and processes to align with the Department's new requirements for mobile device management identified in its Information Technology Implementation Memo (ITIM) 2023-009, and verify completion.

Direct FAA to develop and implement a process to identify and maintain an accurate mobile device inventory in accordance with National Institute for Standards and Technology (NIST) Special Publications 800-124, and verify completion.

Direct USMMA to update its policies and procedures and implement corresponding controls and processes to align with the Department's new requirements for mobile device management identified in its ITIM 2023-009, and verify completion.

Direct USMMA to develop and implement a process to conduct vulnerability assessments on its mobile device solution component and update the solution with the latest available patches/software updates to address specific vulnerabilities in accordance with NIST SP 800-124, and verify completion.

Develop and implement a process for the Office of the Chief Information Officer to identify and disconnect mobile and MIFI devices with zero usage (considering mission-critical exceptions) in accordance with Executive Order 13589, and verify completion. Completing this recommendation could put up to $203,884.19 to better use.

Direct FAA to update and enforce its process to identify and disconnect mobile and MIFI devices with zero usage (considering mission-critical exceptions) in accordance with Executive Order 13589, and verify completion. Completing this recommendation could put up to $422,838.60 to better use.

KPMG recommends that FAA management formally communicate to procurement system users' supervisors their responsibility to ensure that the system administrators are notified by the individual users or their supervisors when individuals separate from FAA.