Open Recommendations

Use death information in Centers for Medicare & Medicaid Services and various state death data files to input death information on approximately 498,000 Numident records.

Develop a methodology to annotate death information onto the Numident records of the approximately 15.8 million remaining non-current payment status beneficiary numberholders identified by our audit.

We recommend that the Centers for Medicare & Medicaid Services work with the DME MACs to do the following, which if in effect during our audit period could have saved Medicare as much as $30,051,107 for wheelchair repairs: review accumulated costs for wheelchair repairs that exceed the federally recommended cost limit, and for those wheelchairs that the DME MACs determine will not remain serviceable for their entire 5-year RUL, enforce Federal requirements by requiring the suppliers that transferred ownership of the wheelchairs purchased on a rental basis to enrollees to furnish replacement wheelchairs to those enrollees at no cost to…

We recommend that the Centers for Medicare & Medicaid Services work with the DME MACs to do the following, which if in effect during our audit period could have saved Medicare as much as $30,051,107 for wheelchair repairs: implement system edits to identify for review claims for repairs made to wheelchairs during their 5-year RUL when the accumulated costs of repairs have exceeded a certain cost limit.

We recommend that the Centers for Medicare & Medicaid Services work with the DME MACs to do the following, which if in effect during our audit period could have saved Medicare as much as $30,051,107 for wheelchair repairs: strengthen Medicare requirements to ensure that DME MACs review accumulated costs of repairs made to wheelchairs (including wheelchairs purchased on a lump-sum basis) during their 5-year RUL that exceed a certain cost limit and use this cost limit as a basis for determining when wheelchairs furnished by suppliers will not remain serviceable for their entire 5-year RUL.

We recommend that the Centers for Medicare & Medicaid Services work with the DME MACs to do the following, which if in effect during our audit period could have saved Medicare as much as $30,051,107 for wheelchair repairs: take appropriate action for suppliers that consistently bill for repairs made to wheelchairs during their 5-year RUL that exceed the federally recommended cost limit or the cost limit used as the basis for determining when wheelchairs furnished by suppliers will not remain serviceable for their entire 5-year RUL (e.g., by educating suppliers on proper billing and recovering improper payments).

FMC should develop, document, and approve a Log Retention Policy.

The FMC should develop and document an approved Risk Assessment Policy that utilizes NIST SP 800-30 (Guide for Conducting Risk Assessments) in its development.

(U) Rec. 1: The DoD OIG recommended that the Under Secretary of Defense for Intelligence and Security, through the Defense Intelligence Enterprise Manager for Analysis, provide guidance to the combatant commands and the Defense Intelligence Enterprise on the requirement for a tradecraft evaluation program in order to comply with Intelligence Community Directive 203, "Analytic Standards."

(U) Rec. 3: The DoD OIG recommended that the Under Secretary of Defense for Intelligence and Security issue policy guidance to ensure that the Service intelligence centers and combatant command Joint Intelligence Operations Centers provide ICD 203 training to their respective command's senior analysts and staff members responsible for analytical and editorial review of junior analysts' production items.

Document in special management unit records the reason detainees refuse to return to general population to ensure facility staff do not use disciplinary segregation as a punitive measure for detainees who require protection.

Ensure health screenings are conducted within the first 12 hours after a detainee arrives at the facility, before classifying or determining housing assignment.

Establish a log to maintain a permanent record of all sick call requests, including but not limited to the detainee’s name, A number, a brief description of the complaint, and how the issue was resolved.

Establish and implement a peer review program for nursing staff, and onboard needed mental health staff to contribute to timely medical care.

We recommend that the FWS address the questioned costs related to unfunded retirement and retiree health totaling $2,250,417 (Federal share) in consultation with appropriate U.S. Department of the Interior offices to determine if the costs are allowable pursuant to Federal regulations and award terms and conditions.

Develop and communicate an organization-wide Supply Chain Risk Management strategy/plan to manage the supply chain risks associated with the research, development, design, manufacturing, acquisition, delivery, integration, operations, maintenance, and disposal of the CPSC systems, system components, or services.

Develop, implement, and disseminate processes to implement Trusted Internet Connection 3.0, including updating its network and system boundary policies, in accordance with Office of Management and Budget Memorandum 19-26, Update to the Trusted Internet Connections (TIC) Initiative. This includes, as appropriate, the incorporation of Trusted Internet Connection security capabilities catalog, Trusted Internet Connection use cases, and Trusted Internet Connection overlays.

Develop, implement, and disseminate an Identity and Access Management policy and procedures which are in accordance with the most recent National Institute of Standards and Technology guidance.

Finalize and implement the Awareness and Training policy which is currently in draft.

Implement Information Security Continuous Monitoring roles and responsibilities.

Develop mechanisms to ensure Information Security Continuous Monitoring stakeholder accountability.

Develop and implement policies and procedures for maintaining a Continuity of Operations Plan and conducting organizational and system level Business Impact Analyses in accordance with current federal guidance. (e.g., National Institute of Standards and Technology Special Publication 800- 34/53, Federal Continuity Directive 1, National Institute of Standards and Technology Cybersecurity Framework, and National Archive and Records Administration guidance).

Treasury OIG follow-up on the missing documentation and make a determination whether to conduct a full-scope audit of Point Hope. In addition, Treasury OIG personnel determine whether to take further action, up to and including recoupment of Point Hope’s CRF proceeds, based on the scope limitation and potential noncompliance with the records retention requirement.

Treasury’s Office of Capital Access will ensure that management decision letters are issued on the findings identified by the auditor in the Single Audit report

We recommend the Acting Assistant Secretary for Employment and Training specify within its policy the information states must include in their documentation to support compliance with the requirements to receive grant funds prior to disbursement of the funds.