Open Recommendations

Enhance the quarterly review process to include strategic planning to emphasize recipients meeting performance goals.

Increase oversight of cooperative agreement recipients and establish and implement a risk-based approach to monitor recipients that are not meeting their quarterly milestone goals.

The Bureau of Diplomatic Technology should update the Foreign Affairs Manual and Foreign Affairs Handbook to define its organizational structure and assign the associated cloud-related responsibilities to the responsible offices in its organizational structure.

The Bureau of Diplomatic Technology should update its cloud computing policies in accordance with Department standards.

The Bureau of Diplomatic Technology should update its cloud service procurement policies and guidelines and communicate the changes to the Department.

The Bureau of Diplomatic Technology should review Department configuration management policies for inconsistencies and update them to align with federal cloud policies.

The Bureau of Diplomatic Technology, in coordination with the Bureau of Diplomatic Security, should follow Department standards for cloud security guidelines.

The Bureau of Diplomatic Technology should comply with Department encryption key management requirements for enterprise cloud systems.

The Bureau of Diplomatic Technology, in coordination with the Bureau of Administration, should develop and communicate guidance specifying what cloud services procurement requirements staff need to implement, which staff are responsible for implementing them, and how the requirements should be implemented.

We recommend the Director, Office of Biometric Identity Management work with the Department of Defense to develop and implement a plan to address Automated Biometric Identification System data access restrictions.

We recommend the Senior Official Performing the Duties of the Commissioner of CBP develop a policy directing field offices to implement a process to manage risk when primary name queries of every traveler are not considered operationally feasible. The policy should include guidance to help field offices manage port understanding and implementation, and conduct annual reviews to verify port compliance and analyze performance.

We recommend the Senior Official Performing the Duties of the Commissioner of CBP continue to conduct technology testing until a solution is identified to perform biometric matching at land POE vehicle lanes.

We recommend the Director of USCIS update screening requirements for delayed adjudications to ensure applicants are continuously rescreened; implement a process to continuously monitor asylum applicants pending adjudication past 180 days to identify those who may pose a threat to the United States and should be placed in an appropriate handling process; and ensure that USCIS takes appropriate action when derogatory information is identified.

We recommend the Director of USCIS develop and implement a plan, including cost estimates, to automate security checks for asylum applicants.

(U) Rec. 1.a: This recommendation is Controlled Unclassified Information

(U) Rec. 1.a: This recommendation is Controlled Unclassified Information

(U) Rec. 1.a.1: This recommendation is Controlled Unclassified Information

(U) Rec. 1.a.1: This recommendation is Controlled Unclassified Information

(U) Rec. 1.b: This recommendation is Controlled Unclassified Information

(U) Rec. 1.b: This recommendation is Controlled Unclassified Information

(U) Rec. 1.c: This recommendation is Controlled Unclassified Information

(U) Rec. 1.c: This recommendation is Controlled Unclassified Information

We recommend the Senior Vice President, Resource Management and Operations Services, work with the Tennessee Valley Authority Office of General Counsel and the Tennessee Valley Authority Board of Directors to update the Tennessee Valley Authority Board Practice “Use of TVA Aircraft” to explicitly state the Tennessee Valley Authority Board of Director’s intent regarding whether all travel by Tier 1 passengers should be considered required use. If the Tennessee Valley Authority Board’s intent was not that all travel by Tier 1 passengers be considered required use travel, require all requests for use of the fixed wing aircraft to identify the travel…

Work with Montana BCC to enhance its existing policies and procedures to include clearly defined, measurable, and VOCA-compliant subrecipient monitoring requirements for the timing and frequency of desk reviews and on-site visits.

Work with Montana BCC to enhance its existing policies and procedures to provide substantive guidance on the nature and scope of activities monitoring personnel are expected to perform and to ensure desk reviews and on-site visits are adequately documented and the records maintained.