Open Recommendations

(U) Rec. 1.b: The DoD OIG recommend that the Air Force Chief Information Officer establish controls, in coordination with the Air Force Chief Information Security Officer and Authorizing Officials, to ensure that system owners mitigated weaknesses identified in plan of action and milestones by their scheduled completion dates and in accordance with the timelines established in Air Force guidance.

(U) Rec. 1.c: The DoD OIG recommend that the Air Force Chief Information Officer update Air Force Instruction 33?332, "Air Force Privacy and Civil Liberties Program," March 10, 2020 (updated on May 12, 2020), in coordination with the Air Force Privacy Officer, to align with the June 2021 DoD Data Breach Response Plan, including the changes to the breach reporting process.

(U) Rec. 2.a: The DoD OIG recommend that the Air Force Chief Privacy Officer establish controls to ensure that Air Force privacy officials are timely reporting breaches in accordance with the Air Force Instruction 33?332, "Air Force Privacy and Civil Liberties Program," March 10, 2020 (updated on May 12, 2020).

(U) Rec. 2.b: The DoD OIG recommend that the Air Force Chief Privacy Officer ensure that all Air Force personnel receive annual privacy training that addresses all the key elements required by Air Force Instruction 33?332, "Air Force Privacy and Civil Liberties Program," March 10, 2020 (updated on May 12, 2020).

Design or redesign control activities for the four risks that have not been fully addressed and that FTA still deems as applicable. These are: a.) Risk of Fraud or Abuse, b.) Recipients May Attempt to Use Funding for a Non-Operating Expense Even Though They Have Furloughed Staff, c.) Private Sector Operators Are Now Eligible to Become Sub-recipients and d.) Limited Capacity of Current Oversight Contracts.

Requires the REAC in coordination with OFO to determine the number of developments and associated units that contain lead-based paint and lead-based paint hazards.

Status

We recommend that the General Deputy Assistant Secretary for Public and Indian Housing require the Real Estate Assessment Center in coordination with the Office of Field Operations to determine the cost to eliminate or control the lead-based paint and lead based paint hazards in public housing and the timeframe to complete such work based on the existing funding levels and strategies that could accelerate the timeframe.

We recommend that the General Deputy Assistant Secretary for Public and Indian Housing require the Real Estate Assessment Center in coordination with the Office of Field Operations to determine whether the public housing agencies identified as having lead-based paint hazards in their housing developments maintain and implement a plan for managing lead-based paint.

We recommend that the General Deputy Assistant Secretary for Public and Indian Housing require the Real Estate Assessment Center in coordination with the Office of Field Operations to assess the lead-based paint hazard reduction activities performed at the 19 developments associated with 18 public housing agencies reviewed that did not implement interim controls and ongoing maintenance and reevaluation activities or adequately document that previously identified lead-based paint had been abated or treated with interim controls and subjected to ongoing maintenance and reevaluati

Revise Directive 06 to include current FECA citations and guidance related to OIG referrals of campaign finance related matters to OGC.

Roles and responsibilities of the SAOGI and other key stakeholders are defined in both the Geospatial Data Strategy and its implementation plan.

The implementation plan for the Geospatial Data Strategy contains detailed action items and milestones, including those for developing a complete and accurate inventory of the Agency’s geospatial data.

Continued coordination with NARA to establish the appropriate level of scientific data for inclusion in NARA-approved records schedules.

Update applicable requirements to require assisted property owners, including PHAs, to maintain adequate documentation to support their determinations that maintenance and hazard reduction activities that disturb surfaces with lead-based paint qualify for the de minimis exemption from the lead-safe work practices under the Lead Safe Housing Rule. Status To address this recommendation, OLHCHH agreed to:

Update applicable requirements to require assisted property owners, including PHAs, to maintain adequate documentation to support their determinations that maintenance and hazard reduction activities that disturb surfaces with lead-based paint qualify for the de minimis exemption from the lead-safe work practices under the Lead Safe Housing Rule.

Status

To address this recommendation, OLHCHH agreed to:

Issue a notice to assisted target housing owners and public housing agencies on the de minimis exception citing the correct application of the de minimis threshold; describing appropriate documentation methods for the application of the de minimis threshold; and recommendations of best practices for documenting…

Rec. A.2.h.1: The DoD OIG recommended, in regards to Military Leadership Diversity Commission report Recommendation 14, the Under Secretary of Defense for Personnel and Readiness address weaknesses in the personnel and finance systems that affect transition between Active and Reserve Components.

We recommend the Executive Assistant Commissioner, Operations Support, U.S. Customs and Border Protection: Recommendation 1: Refine current and identify new strategies and solutions to manage delays in detainee transfers to partner agencies and communicate these improvements throughout the sector.

We recommend the Del Rio Sector Chief, Border Patrol, U.S. Customs and Border Protection: Recommendation 2: Assess whether the Eagle Pass soft-sided facility’s supplemental guidance on the management of detainee property can be developed and implemented sector-wide, and implement where operationally feasible.

Oversee a data integrity review at Del Rio Border Patrol facilities for a sampling of detainee activity logs for 1 month, to verify that the information recorded is accurate. If the problem we identified persists, implement a quality assurance plan and continue to monitor data integrity.

The Under Secretary for Management should develop standard guidance for all reporting entities, clarifying which allegations the Department should report to OIG under the Authorities Act and defining the terms "serious misconduct" and "head of the Department entity," and include affected stakeholders in the development of the guidance.

The Under Secretary for Management should develop a standard approach to tracking reporting dates to ensure compliance with the law and update internal guidance accordingly.

that the Director develop a strategy and structure that integrates information security into the agency’s business operations. This should include an established responsibility for assessing information security risks in all agency programs and operations and providing this analysis to senior leadership, including the ERM Council, for decision-making.

OIG recommended that the Director appoint the chief information security officer to serve on the Enterprise Risk Management Council as a voting member

OIG recommended that that the Director further define and implement the Enterprise Risk Management program to ensure information security risks are communicated and monitored at the system, business process, and entity levels.

OIG recommended that the Chief Information Officer perform a full security assessment of the General Support System to obtain a complete understanding of system weaknesses