Open Recommendations

We recommend the Director, Cybersecurity and Infrastructure Security Agency: Establish policies, procedures, and performance metrics to help ensure CISA divisions consistently assess the impact of all programs and activities relating to CISA's role as the Sector-Specific Agency for the Dams Sector, and that CISA assess their effectiveness in the role of Sector-Specific Agency for the Dams Sector.

We recommend the Director, Cybersecurity and Infrastructure Security Agency: Develop and implement a strategy for Dams Sector stakeholders to use the HSIN-CI Dams Portal to its fullest potential. CISA should develop metrics on usage, performance, and training needs; update the HSIN-CI Dams Portal with clear instructions; and encourage sharing of lessons learned, after action reports, and best practices among stakeholders.

We recommend that the Colorado Department of Health Care Policy and Financing work with CMS to determine the total amount of claims that were eligible for rebates as well as the unallowable portion of the physician-administered drug claims, invoice drug manufacturers for the calculated rebates, and refund the Federal share of rebates collected for the years covered by our audit period and for years after our audit period.

We recommend that the Colorado Department of Health Care Policy and Financing develop and implement policies and procedures to ensure that all eligible physician-administered drugs, including those dispensed to MCO enrollees, are invoiced for rebate.

Develop and institute an agency-wide process to prioritize and fund institutional and programmatic CoF projects that align with Agency-level missions and goals and require business case analyses to be completed and considered as part of the process prior to the project's approval.

In coordination with the Mission Directorates, institute a process to ensure facility requirements are identified and funding sources are specified during a program’s development and implementation phases.

Develop a strategy to work with Federal agencies to reduce the eligible disposal backlog.

Review policies and procedures and determine which internal stakeholders, including the IG, should be notified and revise policies and procedures as necessary.

Prioritize creation of DEER and DCR Audit Reports under the ARCIS contract.

Develop a strategy to transition agencies to use the ARCIS Customer Portal Disposition Module.

Develop and implement an ARCIS internal user manual.

The Bureau of Consular Affairs should implement a process to store the Passport Services Directorate’s archived advisory opinions, so they are easily searchable and retrievable in accordance with Department standards.

Take steps to ensure that all convictions and adverse actions are reported to Federal partners within the appropriate timeframes

Revise the Unit's MOU with the State Medicaid agency to establish procedures by which the Unit will receive referrals of potential fraud from managed care organizations

The Bureau of Fiscal Operations should develop and maintain comprehensive set of policies and procedures for the Debt Recovery Section, Financial Systems Section, and Treasury Section, using in-house personnel with adequate relevant expertise and experience, or outsource the task to an entity with the relevant expertise and experience.

The Bureau of Fiscal Operations should maintain documentary evidence of adequate periodic review of control activities performed.

The Bureau of Fiscal Operations should ensure that the Debt Recovery Section’s policies and procedures include guidance and process for developing and modifying thresholds, including those related to waivers and write-offs.

The Bureau of Fiscal Operations should maintain documentary evidence of adequate supervisory review of control activities around recording of transactions and reconciliations for the Debt Recovery Section.

The Bureau of Fiscal Operations should develop and maintain a comprehensive set of policies and procedures for outsourcing the Financial Systems Section functions.

Determine the allowability of the questioned transactions and recover $32,153,264, if applicable.

Establish review and monitoring standards for loans and report the results of those activities.

Review, update, and implement revised policies and procedures related to the loan program including, NARA 1572, Preventing Theft and Vandalism of NARA Holdings in NARA Facilities, NARA 1611, Loans of Archival Holdings to Federal Originators, NARA 1611 Supplement, Procedures for Loans to Originators, NARA 1612, Exhibition Loans and Traveling Exhibits, NARA 1612 Supplement 1, Procedures for Exhibition Loans, and NARA 1702, Transporting Holdings in NARA's Physical and Legal Custody, to ensure they are reflective of current practices and the organizational structure.

Ensure current Research Services and Legislative Archives, Presidential Libraries, and Museum Services employees are familiar with and properly trained on the updated loan program.

Ensure NARA coordinates with the Central Intelligence Agency (CIA), Central Imagery Office, and United States Geological Survey, to review, cancel, update, or create a new Memorandum of Understanding (MOU), Declassified Imagery Transition, or other appropriate instrument, which is equal with NARA’s current operations for fulfilling loan requests.

This recommendation contains information about IT deficiencies which, if made public, could endanger NARA systems. Please contact the OIG if you need further information.