Open Recommendations

USAC - Access Controls

Supply Chain Risk Management

Configuration Management

Identity Access Management

USAC - Access Controls

FDA should define specific factors that would require FDA's accelerated approval council to advise on certain drug applications.

FDA should take steps to ensure appropriate documentation of meetings with sponsors in drug approval administrative files.

FDA should define specific factors that would require FDA's accelerated approval council to advise on certain drug applications.

FDA should take steps to ensure appropriate documentation of meetings with sponsors in drug approval administrative files.

We recommend the Department design policies and procedures to perform and document a risk assessment of new or revised accounting standards.

We recommend that management across the Department continue to develop and implement policy and standardized procedures in conjunction with the Asset Management Council for tracking fixed asset projects constructed by or with other Federal agencies.

We recommend the Department provide ongoing guidance and training to bureaus and offices to ensure compliance with the standards.

We recommend the Department perform a thorough risk assessment to identify changes needed to internal control processes and controls, including establishment of an information technology solution, to ensure ongoing compliance with SFFAS 54.

We recommend that management across the Department maintain strong communication channels with external Federal agencies involved in constructing assets on the Department's behalf. This should include establishing formal agreements, regular meetings, and periodic reconciliations to ensure all fixed asset transactions are transferred, captured, and recorded timely and accurately.

We recommend that management across the Department establish monitoring controls to regularly review and reconcile fixed asset transactions constructed by other Federal agencies within the financial records. This can involve periodic reviews of project documentation, invoices, and payment records to ensure completeness and accuracy.

We recommend that management across the Department conduct training sessions for relevant personnel involved in financial record-keeping to enhance their understanding of the importance of tracking construction projects performed by or with other Federal agencies. This will help ensure compliance with established procedures and controls.

The Office of Inspector General recommends the Office of Congressional and Public Affairs update Policies and Procedures Manual 201, Information Release Policy, to include the “anti-gag” statement from the Whistleblower Protection Enhancement Act of 2012, as amended.

We recommend that Cattaraugus-Allegany BOCES’ management develop and implement grant management policies and procedures to ensure timely preparation and submission of the required reports.

We recommend that the Florida Agency for Health Care Administration ensure that providers correct the 120 instances of provider noncompliance identified in this report.

We recommend that the Florida Agency for Health Care Administration improve its oversight and monitoring of providers.

We recommend that the Florida Agency for Health Care Administration work with providers to improve their facilities, staffing, and training.

The Chief, Facilities Management and Security Services, should develop standard operating procedures for sensitive document safeguarding and destruction to ensure uniformity and consistency across all IRS facilities.

The Chief, Facilities Management and Security Services, should immediately evaluate the 110 facilities not covered under the national or local contracts to ensure that the IRS has sensitive document safeguarding and destruction procedures in place that comply with NIST guidelines.

The Chief, Facilities Management and Security Services, should ensure that all bins that do not meet requirements are replaced at the Kansas City, Missouri, IRS facility.

The Chief, Facilities Management and Security Services, should develop processes and procedures to periodically inspect bins to identify damaged and altered bins and work with local subcontractors to replace the bins at all IRS facilities.