Open Recommendations

We recommended the Assistant Secretary for Information and Technology continue to implement improved segmentation controls that restrict vulnerable medical devices from unnecessary access from the general network.

We recommended the Assistant Secretary for Information and Technology implement improved processes to require system owners and management to provide adequate credentials to ensure security scans are authenticated to end devices where feasible and the subsequent vulnerabilities are remediated in a timely manner.

We recommended the Assistant Secretary for Information and Technology improve the process for tracking and resolving vulnerabilities that cannot be addressed by enterprise processes within policy timeframes. Implement mitigations for identified security deficiencies by applying security patches, system software updates, or configuration changes to reduce applicable security risks.

We recommend the Vice President, Chief Information and Digital Officer, Information Technology, implement controls to prevent and detect disallowed cloud services procured outside of the IT procurement process, in conjunction with TVA Supply Chain and TVA Financial Services personnel.

We recommend the Vice President, Chief Information and Digital Officer, Information Technology, update the cloud inventory reconciliation process to include other data sources of cloud services procured or in use to improve cloud inventory completeness.

We recommend the Vice President, Chief Information and Digital Officer, Information Technology, review and update the cloud inventory as appropriate.

We recommend the Vice President, Chief Information and Digital Officer, Information Technology, implement a periodic process to identify and update blank required fields to improve cloud inventory accuracy.

The facility director ensures leaders provide a safe and clean environment of care for veterans, including having adequate staff to clean floors, protecting patient information, and ensuring food is dated and has not expired.

Review outreach staffing assignments and ensure appropriate coverage during future disaster response efforts when minimal resources are available.

Immediately conduct outreach efforts in those counties in North Carolina and South Carolina where the deadline to submit loan applications has not elapsed.

Perform a root cause analysis to determine the basis of insufficient outreach efforts in North Carolina and South Carolina and implement appropriate changes to ensure maximum awareness of available assistance to disaster survivors that accounts for rural
areas.

We recommend that APHIS establish a formal conflicts-of-interest policy that outlines the responsibilities and expectations for all VMOs that perform inspections at horse shows.

We recommend that APHIS establish a process to monitor inspectors’ completion of the requirements set forth in its formal conflicts-of-interest policy to ensure all requirements and actions are complete.

We recommend that APHIS conduct and document an assessment to determine the feasibility of implementing an alternative dispute resolution process for noncompliance determinations made during HPA horse shows.

USDA OIG has determined that this recommendation contains sensitive information and will not be publicly released due to privacy concerns.

We recommend that APHIS develop a process to ensure HPA policy guidance and expectations are communicated to the horse show industry in advance of their implementation date and the start of the horse show season.

We recommend that USAID/Uganda verify that Joint Clinical Research Center corrects the three material weaknesses in internal control detailed on pages 33 to 37 of the audit report.

We recommend that USAID/Uganda verify that Joint Clinical Research Center corrects the two instances of material noncompliance detailed on pages 41 to 43 of the audit report.

We recommend that the PBS Region 2 Regional Commissioner take immediate actions to address any fire protection and worker safety deficiencies at the Javits Building by: ensuring that all fire extinguishers are mounted and unobstructed, all elevator machine rooms comply with applicable requirements for fire barriers, and all fire evacuation route diagrams are up to date to comply with fire codes; confirming that the O&M contractor promptly repairs water leaks or displays proper signage in affected areas to prevent slipping accidents in accordance with Occupational Safety and Health Administration requirements. This is especially important for prolonged leaks for which PBS…

We recommend that the PBS Region 2 Regional Commissioner take immediate actions to reassess compliance with Architectural Barriers Act Accessibility Standards requirements at the Javits Building by: ensuring that proper signage is installed that directs individuals to disability- accessible entrances, exits, restrooms, and other applicable building locations; and cataloging all accessibility violations, resources permitting, throughout the building and developing a plan to remediate them.

We recommend that the PBS Region 2 Regional Commissioner implement controls to ensure that appropriate PBS Region 2 officials notify building occupants of identified EHSF risks in a timely manner in accordance with PBS policies.

1.  We recommend that the NOAA Administrator ensure that OMAO monitors and annually reports on acquisition status, program accomplishments, operations, maintenance, and planned actions for the coming year. It should also identify year-over-year changes to aircraft service life and planned retirements, major repairs or service life extensions, updated condition assessments, and new validated observational collection capability requirements. 

2. We recommend that the NOAA Administrator ensure that OMAO develops comprehensive mitigation plans to offset a likely gap in both hurricane hunter missions that includes major maintenance work packages, cost estimates, and required scheduling to ensure that the WP-3Ds remain mission-ready until the C-130Js are mission ready.

3. We recommend that the NOAA Administrator ensure that Program-level management controls are designed and documented for its G550 and C-130J programs, in accordance with Department policy and guidance. 

4. ​​​​We recommend that the NOAA Administrator ensure that OMAO or another appropriate office conducts cost-benefit and business case analyses for using tailored acquisitions support (e.g., from the U.S. Navy or U.S. Air Force) to bolster NOAA’s ability to execute complex and challenging aircraft acquisitions.