Open Recommendations

We recommend ICE’s Chief Information Officer develop and implement a process to ensure all third-party messenger applications allowed to be used for official duties are up to date with the latest security updates.

We recommend ICE’s Chief Information Officer update ICE’s mobile device use policy to align with current DHS requirements and industry best practices.

We recommend the DHS Chief Information Security Officer determine whether similar issues exist for other DHS agencies and take immediate appropriate actions as appropriate.

The Under Secretary for Health evaluates whether low-dose computed tomography lung cancer screenings sent through VA community care have quality assurance practices in place that ensure timely reporting of results to VA facilities consistent with other cancer screenings that are sent through the community care program and takes corrective action to address any identified deficiencies.

We recommend that the Plan ensure that appropriate copayments are applied to claims as defined in the FEHBP benefit brochure.

We recommend that the Health Resources and Services Administration perform postpayment reviews of 108 renal dialysis providers that attested to and kept automatic PRF payments totaling $58 million and recoup any outstanding overpayments from these providers.

We recommend that the Health Resources and Services Administration perform postpayment reviews of 58 providers with multiple subsidiary organizations that attested to and kept automatic PRF payments totaling $130 million and recoup any outstanding overpayments from these providers.

We recommend that the Health Resources and Services Administration perform postpayment reviews of 642 providers that attested to and kept $165 million in automatic PRF payments for which they were not eligible and recoup any outstanding overpayments from these providers.

We recommend that the Health Resources and Services Administration commit to strengthening its procedures that may apply to future programs of a similar nature to better ensure that; providers receive their intended share of financial assistance; financial assistance payments are properly calculated; data and data sources are appropriate, current, complete, and accurate, and revisions are made when necessary for calculating financial assistance; and all available data sources are utilized to identify ineligible providers and prevent them from receiving financial assistance.

Sensitive information redacted

Sensitive information redacted

We recommend that the CBP Senior Official Performing the Duties of the Commissioner designate an official or group to be responsible for implementing the requirements of the Synthetic Opioid Exposure Prevention and Training Act and: • issue a component-wide policy to the CBP workforce to safely handle potential synthetic opioids; • make personal protective equipment and opioid receptor antagonists, including naloxone, available and readily accessible to all personnel at risk of exposure to opioids; and • require initial and recurrent training for all at-risk personnel on the risk of opioid exposure and how to access and administer naloxone.

We recommend that the Deputy Assistant Secretary instruct PRDOH to implement a process to regularly conduct fraud risk assessments and determine a fraud risk profile. The fraud risk profile should include key findings and conclusions from the risk assessment, including the analysis of the types of fraud risks, their perceived likelihood and impact, risk tolerance, and the prioritization of risks.

We recommend that the Deputy Assistant Secretary for Grant Programs evaluate PRDOH's risk exposure and tolerance as part of HUD's program-specific fraud risk assessment for disaster grant programs.

We recommend that the Deputy Assistant Secretary for Grant Programs coordinate with HUD's Chief Risk Officer to (1) provide training and technical assistance to PRDOH with a focus on the design, implementation, and performance of fraud risk assessments, and (2) establish a fraud risk management framework for the organization.

We recommend that the Deputy Assistant Secretary for Grant Programs assess whether grantees have mature fraud risk management programs within the disaster recovery and mitigation programs.

We recommend that the Deputy Assistant Secretary for Grant Programs determine the fraud risk exposure in HUD's disaster recovery and mitigation programs and work with grantees to implement appropriate fraud mitigation activities.

We recommend the Acting Commissioner for the Bureau of Labor Statistics perform a nonresponse bias study or imputation assessment to determine if bias exists in the Consumer Price Index and Import and Export Price Index economic information due to the increased use of imputations.

We recommend the Acting Commissioner for the Bureau of Labor Statistics, based on the nonresponse bias study or imputation assessment, establish, as applicable, a threshold at which the Consumer Price Index and Import and Export Price Index must publicly disclose the amount of imputations used. Update program policies and procedures to include the established threshold and document how to publicly disclose when the threshold is met.

Determine the allowability of $48,606 in questioned costs ($4,593 ineligible and $44,013 unsupported) on page 15 of the audit report and recover any amount that is unallowable.

Verify that FUNADEH corrects the one instance of material noncompliance detailed on page 35 of the audit report.

We recommend that NYC DOHMH refund $15,671,958 to the Federal government.

We recommend that NYC DOHMH strengthen its oversight of subrecipients to prevent future unallowable payments by reviewing subrecipient invoices and supporting documentation to ensure costs claimed are allowable and allocable.

To address the issues identified, we recommend the Administrator direct the Associate Administrator for the Office of Disaster Recovery and Resilience to reevaluate eligibility for the 47 applicants we questioned and recover grant funds from the ineligible applicants.

To address the issues identified, we recommend the Administrator direct the Associate Administrator for the Office of Disaster Recovery and Resilience to implement additional controls to ensure that, during the monitoring, auditing, and compliance phases, awards are carefully screened to verify eligibility and to recover grant funds from ineligible entities.