Open Recommendations

Design, implement, and document the performance of a manual review, at least quarterly, of the general ledger activity of downward and upward adjustments of prior year obligations general ledger accounts and record journal adjustments, when needed, to properly reclassify any errors that are identified.

Update existing policies and procedures to include the performance of a manual review of downward and upward adjustment activity during the period under review.

Require MidFirst to remedy the 24 borrowers in our sample with improper foreclosure filings or take administrative actions if appropriate.

Analyze MidFirst's resolution of the manual process issues identified during its 2022 quality control review to verify that it remedied the borrowers or HUD and corrected the issues identified related to manual processing.

Require MidFirst to update its policies and procedures to comply with HUD requirements by placing foreclosure holds for loss mitigation requests made before the first legal filing.

We recommend that USAID/Zimbabwe verify that Mavambo Orphan Care Trust corrects the four instances of material noncompliance detailed on pages 28, and 33 to 36 of the audit report.

We recommend that the Acting Chief Operating Officer for FSA—Develop and implement controls to ensure policies and procedures related to the time frames for draft final audit determination letters for close-out audits, Missing Audit PRRs, and PRRs for closed school loan discharges are followed and completed timely, including updating policies and procedures to reflect the risk-based approach FSA uses to prioritize its oversight of IHEs participating in Title IV programs.

We recommend that the Acting Chief Operating Officer for FSA— Establish and review performance measures and indicators for the timely issuance of draft final audit determination letters for close-out audits of closed IHEs, Missing Audit PRRs, and PRRs for closed school loan discharges.

We recommend that the Acting Chief Operating Officer for FSA—Evaluate whether the staffing level assigned to final audit determinations for close-out audits of closed IHEs, Missing Close-Out Audit Program Reviews, and Closed School Loan Discharge Program Reviews is sufficient to timely and effectively assess liabilities for IHEs that close, and if not, develop and implement a plan of action to address the issue.

We recommend that the Acting Chief Operating Officer for FSA—Develop and implement controls to ensure SPD closed school analysts provide FSA closed school stakeholders with required notifications, including the Acknowledgement of Intent to Close notice and the Closed School Email Alert; or specify in its policies and procedures situations that do not require the notifications.

We recommend that the Acting Chief Operating Officer for FSA—Evaluate whether the staff assigned to issue the Acknowledgement of Intent to Close notice, Closed School Email Alert, and Close-Out Reminder letter is sufficient to timely and effectively notify FSA closed school stakeholders and closed IHEs, and if not, develop and implement a plan of action to address the issue, including updating the policies and procedures to align with FSA’s priorities, available staffing levels, and prescribed time frames as necessary.

We recommend that the Acting Chief Operating Officer for FSA—Establish and review performance measures and indicators for the timely issuance of the Acknowledgement of Intent to Close notice, Closed School Email Alert, and Close-Out Reminder letters.

Develop and execute a comprehensive plan to improve the transportation performance at the Richmond Regional Processing and Distribution Center and monitor progress.

Work directly with Richmond Regional Processing and Distribution Center processing and logistics managers to develop and execute a plan to improve scanning compliance and monitor progress.

Direct the Richmond Regional Processing and Distribution Center plant manager to enforce Postal Service attendance policy. In addition, monitor the progress and actions taken to address attendance.

(U) Rec. A.1: Recommendation is Classified.

(U) Rec. A.2: Recommendation is Classified.

(U) Rec. B.2.a: Recommendation is Classified.

We recommend that the NRC OCIO management, in coordination with OCHCO and ADM, evaluate the NRC’s separation policies and procedures and re-engineer the related business processes and the automation used to disable separated employees’ accounts to ensure that the NRC terminates these accounts in a timely manner.

We recommend that the TTC and NRC management evaluate the TTC system ATO memorandum for revision and update it to reflect the current operating environment.

We recommend that the NRC’s TTC management install a server cage on the second floor of the facility for the NRC Information Technology Infrastructure Patch Panel.

We recommend that the NRC’s TTC management install protective covers over the emergency power shut-off switches throughout the facility.

We recommend that NRC management define and implement a risk-based process for regularly reviewing users who have badged access to the NRC general access group and restricting badged access to the Regions based on business needs.

We recommend that NRC management perform a risk-based analysis of the practice of allowing users to have general badge access to multiple NRC facilities. As a part of this risk-based analysis, NRC management should define, document, and implement mitigating controls that reduce the potential impact of having users with badged access to multiple facilities.

The Carl T. Hayden Medical Center Director ensures that supervisory staff take effective actions to correct clinical deficiencies.