Open Recommendations

The OIG recommends facility leaders ensure the facility has a policy for test result communication that includes methods to monitor the effectiveness of the patient notification process.

The OIG recommends facility leaders ensure staff develop workflows for the communication of test results for each service.

We recommend that the GSA Chief Administrative Services Officer ensure that justifications for other than full and open competition are completed prior to award and publicly posted.

We recommend that the GSA Chief Administrative Services Officer enforce accountability with OAS personnel who did not comply with the FAR, the GSAM, and OIA internal policies in the award of the audited task order.

We recommend that the GSA Chief Administrative Services Officer revise OIA’s Internal Quality Assurance Review policy to reduce delays, and employ a risk-based sampling methodology when selecting contracts for review.

We recommend that the GSA Chief Administrative Services Officer establish an OAS policy to supplement GSA Order ADM 5000.4B, Office of General Counsel Legal Review, to reduce the monetary threshold for legal review commensurate with the monetary values of OIA contracts.

We recommend that BOR immediately suspend the awarding of Inflation Reduction Act funds using miscellaneous obligations.

We recommend that BOR identify and implement additional oversight controls for existing Bucket 2 agreements.

The Chief, Criminal Investigation, should reemphasize body-worn camera policies and procedures to its special agents, specifically highlighting that videos should be timely uploaded into the cloud-based storage platform and reviewed, including those marked for deletion. Also, special agents should be reminded of following pre-operation plans to not deactivate cameras prematurely and maintaining the required documentation certifying completion of training.

The OIG recommends facility leaders develop and implement a plan to address veterans’ unanswered phone calls.

The OIG recommends the Associate Director ensures staff identify environment of care trends and establish performance improvement plans with outcome measures to address them.

The OIG recommends the Associate Director ensures the manufacturer satisfies contractual requirements to perform preventive maintenance for beds and stretchers and documents the service.

The OIG recommends the Veterans Integrated Service Network Director works with facility and primary care leaders to address the network call center’s effect on primary care team efficiency and workload and reduce the risk of adverse patient safety events.

We recommend that the Chief Financial Officer consider incorporating into policy the requirement that justifications for "other special conveyances," such as car service, include clear and delineable reasoning as to why the selected option meets the FTR's "advantageous to the government" standard.

We recommend that USAID/Nigeria verify that Center for Clinical Care and Clinical Research corrects the one instance of material noncompliance detailed on page 23 of the audit report.

We recommend that the FEC OCIO update the agency’s SSPP documents and establish a privacy program plan that aligns with NIST SP 800-53, Rev.5.1.1 requirements as required by OMB.

We recommend that the FEC OCIO develop and implement a SCRM strategy, policies, and procedures that align with NIST and as OMB requires.

We recommend the FEC OCIO secure (redacted) by monitoring configuration settings to ensure compliance with STIG security configuration settings as required by the agency’s SSP.

We recommend the FEC OCIO review and monitor STIG security configuration settings for its Server 2 as required by the FECLAN SSP.

We recommend that the FEC OCIO implement STIG security configuration settings for Server 1 in accordance with the agency’s FECLAN SSP. If the agency cannot utilize its directory GPOs, we recommend that the agency use alternative methods.

We recommend that the FEC OCIO conduct regular security scans of Server 1 to verify compliance with STIG security configuration settings in accordance with the agency’s FECLAN SSP.

We recommend that the FEC OCIO reassess and reprioritize resources to identify opportunities to accelerate the remediation of urgent, critical, and high vulnerabilities.

We recommend that the FEC OCIO regularly conduct risks assessments in accordance with OMB Circular A-130, Managing Information as a Strategic Resource, to help identify other corrective actions to improve the timeliness of vulnerability remediation.

We recommend that the FEC develop and implement SLA policy and procedures and define KPMs for managing the performance of third-party service contracts.

We recommend that the FEC OCIO ensure (redacted) logs are forwarded to and actively monitored by the agency’s centralized SIEM system, in accordance with the agency’s system security plan.