Open Recommendations

Ensure that the Illinois Court of Claims aligns its policies and procedures with the DOJ Grants Financial Guide's record retention requirements.

Ensure that the Illinois Court of Claims enhances it policies and procedures to include the daily loss of earnings computation methodology and the use of the templated spreadsheet.

Ensure that the Illinois Court of Claims updates its drawdown policy to ensure that federal cash on hand is the minimum needed for reimbursements or disbursements made immediately or within 10 days.

Revise regulations to require documents that can be verified to ensure firms complied with 13 CFR § 126.200(d)(3), that a legacy employee resided in a HUBZone for at least 180 days following the most recent certification (or recertification).

Update and implement standard operating procedures to request documents, as permitted under 13 CFR 126.304(b)(1), to verify during program examinations that firms meet size standards in the North American Industry Classification System code in which they perform on HUBZone contracts.

Improve the HCTS system notification module to ensure recertification notifications are sent timely and consistently to all HUBZone firms.

In the interim, establish procedures to verify completion of annual recertifications by defining parameters, timing, and other requirements as needed, including expected OCIO response times when the HUBZone program office requires manual HCTS processing.

Develop a plan that includes a timeline within which a preservation review will be performed of all NARA owned or leased records storage facilities to mitigate potential risks and ensure the long-term preservation and accessibility of valuable records;

Update policies and procedures to include established frequency ofreviews

Develop contingency plans for assigning responsibilities if a key role inthe entity is vacated. In addition, contingency plans should include implementation ofalternative procedures for preservation reviews when on-site visit is not possible or curtailedin the future. As an alternative, consider performing part of the preservation reviews remotewhere possible (i.e. review of preservation plans, inquiries of facility personnel, etc.)

Develop and implement a comprehensive SOP that can help mitigatethe above effects by providing clear guidelines, promoting consistency, and ensuringpreservation activities are conducted effectively, uniformly, and systematically across theorganization

Develop a prioritization method for preservation actions. BudgetRequests should be submitted for any additional resources necessary to complete prioritizedpreservation actions

Review all NARA facilities’ Plans annually to ensure they include allrequired minimum elements and that the Plans are reviewed annually by their respectivefacility director/administrator and Records Emergency Management Team (REMT)

Implement consistent controls across all facilities to maintain evidenceof annual review of the Plans by the facility director/administrator and REMT

Finalize and implement any remaining risk matrices for vulnerableaudio and video formats

We recommend that the Illinois Department of Healthcare and Family Services remediate the four security control findings identified by OIG.

We recommend that the Illinois Department of Healthcare and Family Services develop and implement flaw remediation policies and procedures for effectively identifying vulnerabilities, prioritizing them based on potential impact and exploitability, and remediating them within a defined timeframe as required by NIST SP 800-53, SI-2, Flaw Remediation, or other standards governing security of Federal systems and information.

We recommend that the Illinois Department of Healthcare and Family Services enhance its testing procedures to include performing more robust technical testing of web-facing systems and emulation of an adversary's tactics and techniques on a defined reoccurring basis, in order to better assess the effectiveness of NIST SP 800-53 controls.

Rec. 1.b: The DoD OIG recommended that the Commander of Naval Support Activity Naples monitor the contractor's execution of the contracted radon testing services for all Government-owned and Government-controlled unaccompanied housing and nonresidential facilities, including the 10 rooms with continued elevated radon levels, to ensure that adjustments to the radon mitigation systems resolve the elevated radon levels and the required testing is performed.

Rec. 3.a: The DoD OIG recommended that the Deputy Assistant Secretary of Defense for Housing develop and implement policy to ensure DoD personnel living in non-Government-Owned and Government-Controlled off-base housing are made aware of known elevated radon levels at installations outside the continental United States.

Rec. 3.b: The DoD OIG recommended that the Deputy Assistant Secretary of Defense for Housing conduct a review to determine whether the DoD has the authority to provide at-home radon test kits to DoD personnel living in non- Government-Owned and Government-Controlled off-base housing at installations outside the continental United States.

Rec. 3.c: The DoD OIG recommended that the Deputy Assistant Secretary of Defense for Housing, if the DoD determines it has the authority to provide at-home radon test kits, issue guidance to the Services on providing at-home radon test kits to DoD personnel living in non-Government-Owned and Government-Controlled off-base housing at installations outside the continental United States.

We recommend that FSA’s Acting Chief Operating Officer require FSA to establish objectives for returning borrowers torepayment in specific and measurable terms that are easily understood and allow for the assessment of performancetoward achieving objectives.

We recommend that FSA’s Acting Chief Operating Officer require FSA to establish effective quantitative or qualitativeperformance measures and indicators for returning borrowers to repayment.

We recommend that FSA’s Acting Chief Operating Officer require FSA to ensure that appropriate control activities aredesigned and implemented to assess FSA's performance in returning borrowers to repayment, such as reviews ofperformance measures and indicators; comparing achievements to plans, goals, and objectives; and comparing actualperformance to planned or expected results.