Open Recommendations

We recommended the Assistant Secretary for Information and Technology implement improved mechanisms to continuously identify and remediate security deficiencies on VAs network infrastructure, database platforms, and Web application servers in accordance with established policy timeframes. If patches cannot be applied or are unavailable, other protections or mitigations should be documented and implemented to address the specific risks.

We recommended the Assistant Secretary for Information and Technology continue to implement improved segmentation controls that restrict vulnerable medical devices from unnecessary access from the general network.

We recommended the Assistant Secretary for Information and Technology implement improved processes to require system owners and management to provide adequate credentials to ensure security scans are authenticated to end devices where feasible and the subsequent vulnerabilities are remediated in a timely manner.

We recommended the Assistant Secretary for Information and Technology improve the process for tracking and resolving vulnerabilities that cannot be addressed by enterprise processes within policy timeframes. Implement mitigations for identified security deficiencies by applying security patches, system software updates, or configuration changes to reduce applicable security risks.

The Bureau of the Comptroller and Global Financial Services should implement appropriate internal controls to ensure that it is complying with hours of work ceilings, salary caps, and travel regulations surrounding the employment of reemployed annuitants.

OIG recommends that the Peace Corps amend or modify its relevant policies, procedures, and forms to incorporate the required anti-gag provision.

We recommend the Vice President, Chief Information and Digital Officer, Information Technology, implement controls to prevent and detect disallowed cloud services procured outside of the IT procurement process, in conjunction with TVA Supply Chain and TVA Financial Services personnel.

We recommend the Vice President, Chief Information and Digital Officer, Information Technology, update the cloud inventory reconciliation process to include other data sources of cloud services procured or in use to improve cloud inventory completeness.

We recommend the Vice President, Chief Information and Digital Officer, Information Technology, review and update the cloud inventory as appropriate.

We recommend the Vice President, Chief Information and Digital Officer, Information Technology, implement a periodic process to identify and update blank required fields to improve cloud inventory accuracy.

The facility director ensures leaders provide a safe and clean environment of care for veterans, including having adequate staff to clean floors, protecting patient information, and ensuring food is dated and has not expired.

Ensure the WBSD submits its FY 2023 single audit and develops and implements policies and procedures to ensure timely completion and submission of all single audit reporting packages to the Federal Audit Clearinghouse within the required timeframe.

Coordinate with the WBSD to develop policies and procedures to properly categorize and track grant expenditures in the appropriate budget categories in accordance with the DOJ Grants Financial Guide and initiate a GAM if a budget modification reallocates funds to unapproved cost categories or if a proposed change exceeds 10 percent of the total award.

Ensure the WBSD develops and implements written policies and procedures for maintaining complete property records and conducting required physical inventory on equipment.

Ensure the WBSD adds existing federally funded equipment into the improved property management system.

Ensure the WBSD develops and implements written policies and procedures to ensure grant match requirements are met and properly tracked.

Require the WBSD to develop and implement written policies and procedures to ensure accurate and timely FFR submissions.

Ensure outstanding federal financial reporting is submitted.

Review outreach staffing assignments and ensure appropriate coverage during future disaster response efforts when minimal resources are available.

Immediately conduct outreach efforts in those counties in North Carolina and South Carolina where the deadline to submit loan applications has not elapsed.

Perform a root cause analysis to determine the basis of insufficient outreach efforts in North Carolina and South Carolina and implement appropriate changes to ensure maximum awareness of available assistance to disaster survivors that accounts for rural
areas.

We recommend that APHIS conduct and document an assessment to determine the feasibility of implementing an alternative dispute resolution process for noncompliance determinations made during HPA horse shows.

USDA OIG has determined that this recommendation contains sensitive information and will not be publicly released due to privacy concerns.

We recommend that APHIS develop a process to ensure HPA policy guidance and expectations are communicated to the horse show industry in advance of their implementation date and the start of the horse show season.

We recommend that USAID/Uganda verify that Joint Clinical Research Center corrects the three material weaknesses in internal control detailed on pages 33 to 37 of the audit report.