Open Recommendations

Sensitive

Sensitive

Sensitive

Sensitive

Sensitive

Sensitive

Sensitive

Sensitive

Sensitive

Sensitive

Sensitive

We recommend the Vice President, Enterprise Planning, take steps to improve consistency in the capacity plan.

We recommend the Vice President, Enterprise Planning, evaluate the solar cost assumptions in the capacity planning model and take actions as necessary.

We recommend the Vice President, Enterprise Planning, consider aligning the Power Supply Plan Input Schedule with the Power Supply Plan Inputs listed in procedures.

We recommend the Vice President, Enterprise Planning, ensure Power Supply Plan inputs are approved and submitted by designated input providers for inclusion in the Power Supply Plan.

We recommend the Vice President, Enterprise Planning, review, update, and approve the Standard Programs and Processes in the Power Supply Plan process.

We recommend the Vice President, Communications, reinforce the process for engaging strategic business unit/business unit leaders for communication approval.

USAID/Cambodia verify that KHANA corrected the three instances of material noncompliance detailed on pages 41 to 44 of the audit report.

We recommend that the Department of Health and Human Services Office of the Chief Information Officer enforce existing information security continuous monitoring (ISCM) requirements for detecting, preventing, and reporting the installation of unauthorized software across OpDivs referenced in HHS Policy for Information Security and Privacy Protection (IS2P) and enforce the new ISCM policy once approved.

We recommend that the Department of Health and Human Services Office of the Chief Information Officer enforce HHS's continuous monitoring policy for detecting, preventing, and reporting unauthorized or suspicious network activity across OpDivs.

We recommend that the Department of Health and Human Services Office of the Chief Information Officer update the HHS IS2P to require OpDivs to implement NIST 800-53, Revision 5, CA-8 (2) Red Team Exercises at least every 2 years and RA-10 Threat Hunting yearly for high and moderate Federal Information Processing Standards Publication 199 impact systems.

(U) Rec 1.a: The DoD OIG recommended that the U.S. European Command Chief Information Office Division Chief update inventory records for all classified mobile devices to include information for the six elements required in an accountable property system of record

(U) Rec 1.b: This recommendation is Controlled Unclassified Information

(U) Rec 1.c: This recommendation is Controlled Unclassified Information

(U) Rec 1.d: The DoD OIG recommended that the U.S. European Command Chief Information Office Division Chief immediately revalidate and document the user justification for the devices and recall the device if the user no longer has a valid mission need, revise existing access policies to require detailed written justifications for obtaining classified mobile devices, and establish processes to periodically, at least annually, revalidate the need for continued access to the devices.