Open Recommendations

Develop a process to define its performance measures--that consider DOT's business environment--to assess the effectiveness of DOT's information security program, including its ISCM program.

Using NIST guidance, test and authorize CDM applications (such as BigFix) that have been placed into operation on DOT's networks without proper security control assessments.

Direct OST to prioritize and resolve COE security weaknesses identified by assessor, and develop POA&Ms that realistically reflect resources and timeframes for completions of these actions.

Direct OST to establish MOUs that delineate the responsibilities for COE common controls with each of the following OAs: FHWA, FMCSA, FRA, FTA, OIG, MARAD, SLSDC, and NHTSA.

Direct OAs (FAA, FHWA, FMCSA, FRA, FTA, OST, PHMSA, MARAD, and NHTSA) with weaknesses in data protection and privacy to update the status and develop POA&Ms to address the weaknesses.

Develop and define a taxonomy that describes the content of the hardware and software inventory and the process to assemble, verify and maintain adequate support for the inventory data as well as the related information reported to OMB and other external parties.

(U) Rec. A.1.e: This recommendation is Controlled Unclassified Information

(U) ???????Rec. A.2.c: The DoD OIG recommended that the Navy Chief Information Officer direct Navy Command officials to implement processes to ensure that SECRET Internet Protocol Router Network users complete all required security training before receiving access to the network and ensure that all SECRET Internet Protocol Router Network users complete all required refresher training to maintain network access and ensure compliance with the processes.

(U) Rec. A.2.d: This recommendation is Controlled Unclassified Information

(U) Rec. A.2.e: This recommendation is Controlled Unclassified Information

(U) Rec. A.3.e: This recommendation is Controlled Unclassified Information

(U) Rec. A.4: This recommendation is Controlled Unclassified Information

(U) Rec. B.5.b: This recommendation is Controlled Unclassified Information

(U) Rec. B.8: This recommendation is Controlled Unclassified Information

(U) Rec. B.10: The DoD OIG recommended that the DoD Chief Information Officer, in coordination with the Under Secretary of Defense (Intelligence), ensure that the Army, Navy, and Air Force Chief Information Officers; the Army Deputy Chief of Staff for Intelligence; and the Army Provost Marshal General apply corrective actions related to physical security safeguards at each Command within their Components.

Rec. 1.a: The DoD OIG recommended that the Under Secretary of Defense for Acquisition and Sustainment review the accounting and management actions of the F-35 Program Office for F-35 Program Government property.

Rec. 2.a: The DoD OIG recommended that the F-35 Program Executive Officer ensure that contracting officers identify and resolve government-furnished property list inaccuracies and incomplete or missing entries before attachment to and award of subsequent contracts.

Rec. 2.c: The DoD OIG recommended that the F-35 Program Executive Officer, before the F-35 Program Office makes a decision to begin full-rate production of the F-35, ensure that the component property lead and accountable property officer reconcile all F-35 Program Government-furnished property by performing a complete inventory of delivered property and use the result of the inventory to establish a baseline property record in its accountable property system of record.

Rec. 2.d: The DoD OIG recommended that the F-35 Program Executive Officer establish and implement procedures for property officials to continuously input the data required by DoD Instruction 5000.64 in its accountable property system of record.

Rec. 3.b: The DoD OIG recommended that the F-35 Program Executive Officer direct F-35 Program Office officials, in coordination with the Defense Contract Management Agency and the prime contractor, before a decision to begin full-rate production of the F-35 is made, upon completion of Recommendation 3.a, ensure contractor-acquired property procured on past contracts is transitioned to Government-furnished property on contracting actions as required by the Defense Federal Acquisition Regulation Supplement.

Rec. 3.c: The DoD OIG recommended that the F-35 Program Executive Officer direct F-35 Program Office officials, in coordination with the Defense Contract Management Agency and the prime contractor, before a decision to begin full-rate production of the F-35 is made and upon completion of Recommendation 3.a, ensure the required delivery of contractor-acquired property identified as special tooling or special test equipment for accountability and management purposes as required by the Defense Federal Acquisition Regulation Supplement.

Rec. 3.d: The DoD OIG recommended that the F-35 Program Executive Officer direct F-35 Program Office officials, in coordination with the Defense Contract Management Agency and the prime contractor, before a decision to begin full-rate production of the F-35 is made, provide updates for the accountable property system of record for any Government-furnished property resulting from the actions taken for contractor-acquired property in the previous recommendations.

Recover the $43,626 in questioned Federal costs and $19,390 in education awards and address any impact to Federal costs of the $33,720 in questioned match costs for American Red Cross of Indiana for grant No. 15ACHIN001.

We recommend the Immigration and Customs Enforcement Director: Implement the use of an electronic system comparable to, or more accurate than, eTD as a source for official statistics, to improve the measures of cooperation with travel document requests.