Open Recommendations

Verify DGCCVS used the fees collected for the event to reduce the Federal share charged to the grant or were used as match.

Ensures DGCCVS strengthens its monitoring to verify subgrantee compliance with CNCS best practices for member NSOPW check.

Confirm DGCCVS has established and implemented a procedure to have all staff involved in conducting subgrantee on-site monitoring to have a NSCHC.

Ensure DGCCVS revises its Program Director Handbook to include guidance on how to address and document a change in member living allowance when a member’s term is changed to ensure living allowance payments after conversion is correct.

Ensure DGCCVS strengthens its monitoring to verify subgrantee compliance with member living allowance requirements.

Work with DGCCVS to resolve the living allowance underpayments to DPR members.

Ensure DGCCVS strengthens its monitoring to verify subgrantee compliance with DGCCVS approval requirement for changes in a member’s term of service.

Ensures DGCCVS strengthens and implements its monitoring tools to verify subgrantee compliance with timekeeping requirements.

Require DGCCVS put procedures in place to ensure that DGCCVS is providing reporting guidance and reporting templates to the subgrantees before the end of the first month of the subgrantee’s program year and all subgrantees are reporting its costs in accordance with the DGCCVS Program Director Handbook.

Require DGCCVS to obtain PERs from DPR covering the Federal and match costs incurred during the program year 2017-2018 as of March 31, 2018, along with transaction-level detail, so that CNCS can test those costs for allowability.

(U) Rec. 1.a: The DoD OIG recommended that the Secretary of Defense direct an organization or group to develop a risk-based approach to prioritize commercial off-the-shelf items for further evaluation.

(U) Rec. 1.b: The DoD OIG recommended that the Secretary of Defense direct an organization or group to develop a process to test high-risk commercial off-the-shelf items.

(U) Rec. 1.c: The DoD OIG recommended that the Secretary of Defense direct an organization or group to develop a process to prohibit the purchase and use of high-risk commercial off-the-shelf items, when necessary, until mitigation strategies can limit the risk to an acceptable level.

(U) Rec. 2.a: The DoD OIG recommended that the Under Secretary of Defense for Acquisition and Sustainment update existing DoD acquisition policies or develop and implement new policy to require organizations to review and evaluate cybersecurity risks, including supply chain and counterintelligence risks, for high-risk commercial off-the-shelf items prior to purchase, regardless of purchase method.

(U) Rec. 3: The DoD OIG recommended that the DoD Chief Information Officer revise DoD Instruction 8100.04, "DoD Unified Capabilities (UC)," December 9, 2010, to require an assessment of supply chain risks as a condition for approval to be included on the Unified Capabilities approved products list.

(U) Rec. 2.a: The DoD OIG recommended that the DoD Chief Information Officer develop and issue a user activity monitoring policy and strategy, as required by DoD Directive 5205.16, "The DoD Insider Threat Program," September 29, 2014, incorporating Change 2, August 28, 2017.

(U) Rec. 2.b: This recommendation is Controlled Unclassified Information

(U) Rec. 3.a: The DoD OIG recommended that all Combatant Commanders establish a full-time insider threat program manager position to ensure that the program meets national and DoD requirements.

The Bureau of Overseas Buildings Operations, in coordination with Embassy Paramaribo, should address the roof leaks in the new embassy compound and mitigate the resulting health hazards within 180 days.

Encrypt PII data on personal and network drives in accordance with DOT Chief Information Officer Departmental Privacy Risk Management Policy.

Develop a plan and address identified high and medium vulnerabilities on any remaining legacy websites and verify that new websites are being assessed for vulnerabilities.

CMS should seek legislative authority to implement least costly alternative policies for Part B drugs under appropriate circumstances.

We recommend that SAMHSA reconcile each month the OIG stewardship reports (or the HHS electronic Single Audit recommendation listing for audits processed on or after October 1, 2018) with SAMHSA’s audit resolution records and follow up on any differences noted.

We recommend that SAMHSA promptly resolve the 188 outstanding audit recommendations that were past due as of September 30, 2016.

We recommend that SAMHSA finalize and follow its policies and procedures related to the audit resolution process to ensure that all management decisions are issued within the required 6-month resolution period.