Open Recommendations

Evaluate alternative usage, including relinquishment, of the fitness center space.

Evaluate the appropriate funding source(s) to promote employee commitment to regular participation in a physical fitness program.

Based on results of the evaluations performed in conjunction with recommendation numbers 40 and 41, take action to adopt strategies that promote the efficient delivery of a fitness program for agency employees at an economical cost to the government.

Evaluate the agency’s conference rooms for each space’s respective best and highest use.

Based on the results of the evaluation performed for recommendation number 43, take action to utilize each space in their respective best and highest use in a cost-effective manner.

Collect data showing where National Product Testing and Evaluation Center staff spend their time, lab versus office space, and analyze how space is actually used to determine if the current space allocation best meets CPSC needs.

Based on reported results in recommendation number 45, adopt strategies to promote the efficient utilization of space at National Product Testing and Evaluation Center at an economical cost to the government.

Develop and implement formal guidance for conducting technical evaluations and hands-on inspections to ensure that awards are consistent and comply with solicitation requirements.

Revise Tennessee Valley Authority’s Tech Standard, Authentication - Multifactor Authentication Implementation Requirements, to include the appropriate reauthentication frequency and authorized exclusions.

Revise multi-factor authentication enforcement access policies to include all networks as required by Tennessee Valley Authority’s Tech Standard, Authentication – Multifactor Authentication Implementation Requirements.

Reconcile enterprise applications in Microsoft Entra® to validate their lifecycle and multi-factor authentication status.

Implement a process to periodically validate the lifecycle and multi-factor authentication status of enterprise applications in Microsoft Entra® with appropriate system owners and cloud administrators.

1. Confirm with the California Disability Determination Service that the added internal controls will improve medical evidence of record invoice payment accuracy.

Revise Roadway Worker Protection activity codes or guidance to capture when an inspector reviews on-track safety programs or manuals in part or in full.

Train all safety inspectors and Specialists on how to accurately capture Roadway Worker Protection inspection activities using the correct Roadway Worker Protection activity codes and, when needed, descriptions of their work.

Remove Roadway Worker Protection activity and defect codes from the next version of the Track and Structures Compliance Manual.

Incorporate current Roadway Worker Protection-related activity code definitions into the system inspectors use to record inspection reports, currently the Railroad Inspection Systems for Personal Computers.

Develop and implement a process for updating the code definitions in the system inspectors use to record inspection reports, currently the Railroad Inspection Systems for Personal Computers, when Roadway Worker Protection activity and defect codes are changed.

Add instructions for planning 49 C.F.R. Part 214 work to the Universal Inspection Planning Process with Territory Inspection Plans guidance.

Use the Track and Structures Communications Hub or other FRA system to provide frequently updated Roadway Worker Protection-related data that inspectors can use to inform their oversight by identifying railroads, locations, or practices that pose higher risks to roadway workers.

Develop, document, and implement automatic data quality checks on the data warehouse that transmits data for DataHubs FRA Inspection Defect Details Report.

Develop, document, and implement quality assurance/quality controls and standardized on-demand reporting for FRAs new Secure Site.

Develop and implement guidance for when it is appropriate to perform and how to document on-track safety program reviews, including documentation of new or change notifications received, approval and disapproval notifications, and, when reviews occur, completed on-track safety program review checklists.

Develop and implement centralized storage for documentation of FRAs Roadway Worker Protection oversight including but not limited to on-track safety program notifications, correspondence on approvals/disapprovals, review checklists, and training materials.

Add a warning or disclaimer to future Annual Enforcement Reports that include legacy cases stating that the number of violations associated with cases and the violation totals published in Appendix A may be incorrect.