Open Recommendations

We recommend that the PBS Commissioner resolve identified roof fall hazards in a timely manner by installing necessary OSHA- compliant fall protection on roofs with equipment located near unprotected roof edges. If no funding is available to do so, implement interim controls to protect against fall hazards and monitor the performance of those controls to ensure they remain effective.

We recommend that the PBS Commissioner require contractors to use OSHA-compliant fall protection.

We recommend that the PBS Commissioner implement a consistent process for ensuring facility managers are aware of all open risk conditions in the Inventory Reporting Information System, address open risk conditions in a timely manner, and periodically review open risk conditions until they are abated.

We recommend that the PBS Commissioner improve risk management surveys to ensure survey inspectors identify and record all applicable roof fall hazards under OSHA 1910.28, Duty to have fall protection and falling object protection, consistently.

We recommend that the PBS Commissioner review all ongoing and future roof replacement projects to ensure they comply with P100 roof replacement requirements for a review of existing fall protection by a qualified consultant; and, if the fall protection is deemed inadequate, design and install OSHA-compliant fall protection.

We recommend that the PBS Commissioner post appropriate signage at all roof access points to warn employees, contractors, and tenants of roof fall hazards.

We recommend the TSA Administrator evaluate the organizational placement of the Insider Threat Program within TSA to determine optimal alignment to achieve its goals and objectives.

We recommend the TSA Administrator update existing TSA management directives to clarify and align law enforcement roles and responsibilities with TSA’s current strategic intent and eliminate policy conflicts. In particular, TSA MD 100.0 must clearly distinguish roles and responsibilities of ITS and TSA Investigations.

We recommend the TSA Executive Assistant Administrator for LE/FAMS develop Insider Risk Mitigation Hub policies to standardize communication and deconfliction practices between TSA Investigations and ITS.

We recommend the TSA Executive Assistant Administrator for LE/FAMS formalize and implement ITS policies and procedures in an approved SOP, including criteria agreed upon with TSA Investigations for referring and deconflicting allegations of misconduct.

We recommend the TSA Executive Assistant Administrator for LE/FAMS develop and implement a formalized training plan to ensure ITS personnel: • follow internal referral and investigation processes outlined in its approved SOP; and • possess appropriate levels of insider threat-related training to meet DHS Insider Threat Program Minimum Standards.

We recommend the TSA Executive Assistant Administrator for LE/FAMS develop a mechanism to accurately track and maintain ITS personnel training records.

Follow up with AIPs that did not submit reports for the 148 required $200,000 Indemnity Reviews in CY 2022 and (1) determine whether the $61.9 million in questioned, unsupported indemnity cost were supported and allowable, and (2) recover any costs determined to be unsupported and unallowable.

Review CYs 2019 through 2023 and follow up with AIPs for unsubmitted reports for the required $200,000 Indemnity Reviews and, if adequate support is not provided, recover the unsupported indemnity amounts.

Develop and implement a process and procedures to regularly reconcile the required $200,000 Indemnity Reviews with the associated completion reports submitted by AIPs.

Evaluate whether VA should establish an enterprise-wide governance structure for Caseflow development, consistent with VA’s initial comprehensive plan to Congress.

Develop a well-defined roadmap for the future development and implementation of Caseflow.

Enforce contract requirements through improved oversight, ensuring violations are identified and remediated.

Direct the selected State agency to review the four sponsoring organizations that provided documentation and had meal count discrepancies, expand the review as appropriate, and determine whether the results warrant review of other sponsoring organizations as well.

Direct the selected State agency to provide further training to CACFP sponsoring organizations on point of service meal counts.

Direct the selected State agency to review the sponsoring organization identified in this finding that declined to provide acceptable State-required documentation to determine whether meal claims of more than $6.6 million are unsupported, recover any costs determined to be unallowable, and determine whether further action is appropriate.

Review and revise guidance such as Existing Flexibilities in the Child and Adult Care Food Program, dated July 26, 2013, as necessary, to provide clarity that States should enforce any additional operating requirements they prescribe.

We determined that the State of North Carolina paid out ERA1 funds in the amount of $803,160 in violation of the ERA1 statute because the funds were disbursed loan ineligible household. On August 12, 2025, Treasury's Bureau of the Fiscal Service issued an invoice for $803,160 to the State of North Carolina, establishing a debt to the Federal Government.

We recommend SSA include terms or conditions in all contracts that require that contractors identified as having significant security responsibilities complete role based security training before they perform their assigned duties and, at least, each fiscal year thereafter.

We recommend SSA implement data validation controls before it processes the role based privacy training assignments to prevent errors and avoid confusion between different components.