Open Recommendations

We recommend that FWS require the Division to certify that grant-funded, real properties are used for their intended purposes.

Update existing MAOs in accordance with established timelines.

The Office of Administration should implement a control to ensure program integrity of the Financial Management Integrated System key vendor data files on an ongoing basis.

The Office of Administration should correct the discrepant vendor information identified during the ongoing program integrity reviews.

The Bureau of Fiscal Operations should implement updated Accounts Payable procedures to coincide with the deployment of the Financial Management Integrated System enhancements for the Invoice Processing Platform.

(U) Rec. 1: The DoD OIG recommended that the Commander of U.S. Cyber Command, the Chiefs of Staff for the U.S. Army and U.S. Air Force, the Chief of Naval Operations, and the Commandant of the Marine Corps develop a doctrine, organization, training, materiel, leadership and education, personnel, facilities, and policy framework that addresses strategies to build, grow, and sustain the Cyber Mission Force.

(U) ???????Rec. 2: The DoD OIG recommended that the Commander of U.S. Cyber Command, the Chiefs of Staff for the U.S. Army and the U.S. Air Force, the Chief of Naval Operations, and the Commandant of the Marine Corps formalize an agreement to focus capability development on functional and mission areas consistent with results of the mission alignment board.

(U) ???????Rec. 2: The DoD OIG recommended that the Commander of U.S. Cyber Command, the Chiefs of Staff for the U.S. Army and the U.S. Air Force, the Chief of Naval Operations, and the Commandant of the Marine Corps formalize an agreement to focus capability development on functional and mission areas consistent with results of the mission alignment board.

KPMG recommends that the OCIO document and map access rights in OPM systems to personnel roles and functions, following the principle of 'least privilege'.

KPMG recommends that the OCIO enhance OPM’s information security control monitoring program to detect information security control weaknesses by: • Implementing and monitoring procedures to ensure system access is appropriately granted to new users, consistent with the OPM access approval process; and Monitoring the process for the identification and removal of separated users to ensure that user access is removed timely upon separation; implementing procedures to ensure that user access, including user accounts and associated roles, are reviewed on a periodic basis consistent with the nature and risk of the system, and modifying any necessary accounts identified.