Open Recommendations

Oversee a data integrity review at the El Paso Hardened Facility to verify that staff are accurately recording custodial actions. If the problem we identified persists, implement a quality assurance plan, and continue to monitor data integrity.

We recommend the CISA Chief Information Officer immediately mitigate the control deficiencies or cease operation of the Federal Virtual Training Environment system.

We recommend the FLETC Chief Information Officer immediately mitigate the control deficiencies or cease operation of the eFLETC system.

Implement controls to allow for the capability to identify and monitor potential scheduling delays and to ensure family preferences are being met at national cemeteries.

Establish informed baselines for future sites that align with schedule management best practices.

Improve schedule management for charging station construction by using a project management system and related analytics to record dynamic updates, centralize information, and analyze performance to inform future construction baselines.

Evaluate whether contractual assistance is needed for its deployment effort, including aligning the Postal Service's schedule management with best practices.

(U) Rec. 1: Recommendation is Classified.

(U) Rec. 2: Recommendation is Classified.

(U) Rec. 3: Recommendation is Classified.

(U) Rec. 4.a: Recommendation is Classified.

(U) Rec. 4.b: Recommendation is Classified.

(U) Rec. 4.c: Recommendation is Classified.

We recommend that GHC continue to remediate the specific technical weaknesses discovered during this audit as outlined in the vulnerability scan audit inquiry.

We recommend that GHC implement a routine process to audit security configuration settings of its servers to ensure compliance with approved security configuration settings.

Develop and implement adequate procedures to ensure that confirmed EBLL cases, unconfirmed EBLL cases, and environmental investigations are reported to HUD.

Develop and implement adequate procedures and controls to ensure that environmental investigations are completed when required.

Perform a search for historical documentation to support the lead-free status of the 15 units and the associated developments. If adequate documentation is not found to support that all lead-based paint was identified and abated and clearance was achieved as required, the Authority should complete a lead-based paint inspection of the developments to determine whether they are lead free.

Develop a quality control process to ensure that records for the remaining 1,385 units contain evidence of lead-free status. If adequate documentation is not found to support that all lead-based paint was identified and abated and clearance was achieved as required, the Authority should complete a lead-based paint inspection of the developments to determine whether they are lead free.

Implement procedures that align with HUD's requirements and controls to ensure that visual assessments for lead-based paint are completed at least every 12 months.

Implement policies and procedures that align with HUD's requirements and controls to ensure that reevaluations are completed when required.

Implement controls to ensure that accurate lead disclosures are provided to prospective and current tenants.

Work with HUD's Office of Lead Hazard Control and Healthy Homes to assess whether the lead-based paint inspections and risk assessments with missing elements are sufficient to support the lead-based paint status of the Authority's properties. If it is determined that the lead-based paint and risk assessment reports are not sufficient, HUD should require the Authority to perform new assessments.

We recommend OCFO and responsible program officials review supporting documentation to verify the accuracy and completeness of reported information prior to publication. Any fatal flaws identified should be communicated timely to OMB to remediate the incorrectly reported information.

Embassy Bucharest should implement a coordination process for the oversight of foreign assistance programming in Romania in accordance with Department guidelines.