Open Recommendations

We recommend that the PBS Commissioner provide fall protection training to PBS facility managers that addresses roof fall hazards and fall protection requirements issued by OSHA and GSA.

We recommend that the PBS Commissioner resolve identified roof fall hazards in a timely manner by installing necessary OSHA- compliant fall protection on roofs with equipment located near unprotected roof edges. If no funding is available to do so, implement interim controls to protect against fall hazards and monitor the performance of those controls to ensure they remain effective.

We recommend that the PBS Commissioner require contractors to use OSHA-compliant fall protection.

We recommend that the PBS Commissioner implement a consistent process for ensuring facility managers are aware of all open risk conditions in the Inventory Reporting Information System, address open risk conditions in a timely manner, and periodically review open risk conditions until they are abated.

We recommend that the PBS Commissioner improve risk management surveys to ensure survey inspectors identify and record all applicable roof fall hazards under OSHA 1910.28, Duty to have fall protection and falling object protection, consistently.

We recommend that the PBS Commissioner review all ongoing and future roof replacement projects to ensure they comply with P100 roof replacement requirements for a review of existing fall protection by a qualified consultant; and, if the fall protection is deemed inadequate, design and install OSHA-compliant fall protection.

We recommend that the PBS Commissioner post appropriate signage at all roof access points to warn employees, contractors, and tenants of roof fall hazards.

Follow up with AIPs that did not submit reports for the 148 required $200,000 Indemnity Reviews in CY 2022 and (1) determine whether the $61.9 million in questioned, unsupported indemnity cost were supported and allowable, and (2) recover any costs determined to be unsupported and unallowable.

Review CYs 2019 through 2023 and follow up with AIPs for unsubmitted reports for the required $200,000 Indemnity Reviews and, if adequate support is not provided, recover the unsupported indemnity amounts.

Develop and implement a process and procedures to regularly reconcile the required $200,000 Indemnity Reviews with the associated completion reports submitted by AIPs.

Evaluate whether VA should establish an enterprise-wide governance structure for Caseflow development, consistent with VA’s initial comprehensive plan to Congress.

Develop a well-defined roadmap for the future development and implementation of Caseflow.

Enforce contract requirements through improved oversight, ensuring violations are identified and remediated.

Direct the selected State agency to review the four sponsoring organizations that provided documentation and had meal count discrepancies, expand the review as appropriate, and determine whether the results warrant review of other sponsoring organizations as well.

Direct the selected State agency to provide further training to CACFP sponsoring organizations on point of service meal counts.

Direct the selected State agency to review the sponsoring organization identified in this finding that declined to provide acceptable State-required documentation to determine whether meal claims of more than $6.6 million are unsupported, recover any costs determined to be unallowable, and determine whether further action is appropriate.

Review and revise guidance such as Existing Flexibilities in the Child and Adult Care Food Program, dated July 26, 2013, as necessary, to provide clarity that States should enforce any additional operating requirements they prescribe.

We determined that the State of North Carolina paid out ERA1 funds in the amount of $803,160 in violation of the ERA1 statute because the funds were disbursed loan ineligible household. On August 12, 2025, Treasury's Bureau of the Fiscal Service issued an invoice for $803,160 to the State of North Carolina, establishing a debt to the Federal Government.

We recommend SSA include terms or conditions in all contracts that require that contractors identified as having significant security responsibilities complete role based security training before they perform their assigned duties and, at least, each fiscal year thereafter.

We recommend SSA implement data validation controls before it processes the role based privacy training assignments to prevent errors and avoid confusion between different components.

We recommend SSA develop and implement a process to send stakeholders routine reminders to update personnel information and periodically validate that all stakeholder information is accurate.

The Chief, Taxpayer Services, should educate IRS representatives about the fraud scheme and require them to properly authenticate callers before providing tax account information, including tax deposit and tax transcript information.

Conduct a study to establish minimum loan thresholds for performing site visits, implement policies and procedures based the results of that study, and perform site visits to help facilitate appropriate liquidation of collateral on defaulted COVID-19 EIDLs in an effort to maximize collections.

Verify all delinquent COVID-19 EIDL obligors are reported to credit bureaus in a timely manner.

Confer with the DOJ to establish a reasonable standard for referral of delinquent COVID-19 EIDLs to the DOJ for litigation.