Open Recommendations

Office of Chief Information Officer implements and updates the agency’s cybersecurity incident response plan to align with Manual Section 899 to include the Office of Inspector General and other required offices in breach notifications.

Office of Chief Information Officer ensures that the Peace Corps network is continuously monitored to mitigate the risk of cyberthreats.

In addition to using available ITIN Policy Section resources, coordinate with the other IRS business operating divisions to identify additional resources to assist with ensuring that on-site compliance reviews of all high-risk CAAs are completed.

Complete a study to determine the feasibility of developing a tool for ITIN applicants, similar to Where’s My Refund?, to check the status of their application.

Review the 5,534 tax returns we identified for which the IRS incorrectly paid retroactive credit claims and take the steps needed to recover the erroneously issued funds.

Review the 2,519 tax returns we identified for which the IRS incorrectly denied retroactive credit claims and take the steps needed to ensure that these taxpayers receive the benefits to which they are entitled.

Review over 150,000 returned billing statements, and resolve any involving identity theft, then refer fraudulent loans to OIG.

We recommend that the California Department of Social Services establish procedures for county agency staff to utilize Medicaid data match reports to verify that court authorizations for psychotropic medications prescribed for children in foster care are documented and maintained.

We recommend that the California Department of Social Services establish procedures for county agency staff to document all medications (including opioid medications) prescribed for children in foster care in CWS/CMS, to the extent allowable under California law.

We recommend that the California Department of Social Services develop and implement procedures for county agency staff to upload the court authorizations for psychotropic medications prescribed for children in foster care into CWS/CMS.

We recommend that the California Department of Social Services coordinate with California Department of Health Care Services to modify the existing data sharing agreement to obtain access to Medicaid claim data for all medications prescribed for children under its care and supervision, to the extent allowable under California law.

Ensure that designated members of a Breach Response Team participate in a tabletop exercise, at least annually.

Require those with specific security and privacy roles to take privacy role-based training.

The Chief Information Officer should coordinate with OMB officials to determine if the IRS’s BYOD program’s policies and procedures are in compliance with the Act and update the program’s policies and procedures as needed.

The Chief, CI, should coordinate with the OMB to determine whether an exception process is needed for the approximately 900 CI employees who can access TikTok via the third-party software on their computers.

The Commissioner, Wage and Investment Division, should take steps to immediately locate and purge Forms 709 associated with the 175,522 taxpayers we identified with one or more Forms 709 filed and stored at the C-site, the taxpayer is deceased five years, and no Form 706 has been filed and processed by the IRS since the taxpayer’s death.

The Commissioner, Wage and Investment Division, should relocate current and future inventory of Forms 2848 and 8821 to another storage facility.

The Chief, FMSS, should enable personnel to access storage boxes without the use of a ladder.

The Chief, FMSS, should repair shelves sagging from the weight of the files and properly mark shelves with load ratings.

The Chief, FMSS, should ensure that new ladders are purchased that meet safety standards and are usable at the C-site until a catwalk can be installed.

The Chief, FMSS, should install protective covering above the area in which C-site personnel park their vehicles.

Conduct reviews of eOPF documents for all employees to ensure that the deductionselected by employees are the deductions being taken on the earnings and leave statementsand are present in FPPS and thereafter conduct reviews at least semi-annually.

Develop and implement a control to prevent improper duplicate "Delivered" scans on the same package, including VA Pharmacy packages.

The U.S. Mission to International Organizations in Vienna should retire records in accordance with Department records management standards.

We recommend that the FWS require the Department to resolve the Federal share of questioned costs related to unsupported other direct costs totaling $171,199.