Open Recommendations

(U) Rec. 4.b: The DoD OIG recommended that the Chief Information Officers for the [Redacted] develop and implement a process for identifying individuals who are authorized to use removable media on their networks and systems as well as procedures for monitoring the type and volume of data transferred to and from removable media.

(U) Rec. 4.c: The DoD OIG recommended that the Chief Information Officers for the [Redacted] assess existing security camera placements to identify gaps in security coverage and install security cameras with [Redacted] to monitor personnel movements throughout their facilities.

CMS should develop policies and procedures to improve the timeliness of recovering Medicaid overpayments, and recover uncollected amounts identified during OIG’s audit.

Verify that future overpayments are reported correctly on Line 10 of the CMS-64

Recover the remaining $1,644,235,438 due the Federal Government from the current period

Require states to submit corrected CMS-64s to identify recovered overpayments on Line 10 when done incorrectly

Recover the remaining $188,593,212 due the Federal Government from the prior period

Continue to educate the States about their responsibility to report overpayments on the correct line of the CMS-64 to improve oversight of the reporting process

Rec. A.1: The DoD OIG recommended that the Under Secretary of Defense for Intelligence examine current DoD intelligence training and education policies and mandate, as necessary, training standards based on a common essential body of knowledge, including Intelligence Community Directive 203, "Analytic Standards," January 2, 2015, for all entry-level/developmental intelligence professionals.

To improve the DOT's information security continuous monitoring program, DOT Chief Information Officer needs to update the department's federal information security modernization act standard operating procedures to include steps for verifying the accuracyand completeness of the Federal Aviation Administration's (FAA) CrossAgency Priority (CAP) goal metrics.

To improve the accuracy and completeness of the data FAA uses to report on its CAP goal metrics, the Federal Aviation Administrator needs to implement procedures that: define the requirements for selecting the operating systems to be monitored; criteria for determining which tools should be used to collect data for the CAP goal metrics; and verify the accuracy and completeness of the CAP goal metrics.

We recommend the Executive Assistant Commissioner of the Office of Field Operations: a) Develop and implement performance measures for the advanced searches of electronic devices pilot program. b) Evaluate the effectiveness of the pilot program to determine whether the advanced searches are achieving the program's intended purpose. c) Work with the Commissioner of U.S. Customs and Border Protection to evaluate the performance of Office of Field Operations in the advanced searches of electronic devices pilot program and, based on the results of such evaluation, decide whether to discontinue or establish it as a permanent program of record.

Develop an implementation plan for deploying a scheduling system for controllers that includes schedule milestones, system requirements, risk assessment and mitigation, and funding requirements.

Assess and quantify the expected benefits of a customized controller scheduling tool.

We recommend that the Penobscot Nation establish a preventative maintenance program for the facility and medical equipment to ensure that it provides a safe, clean, and accessible environment.

We recommend that Penobscot Nation implement Federal and Tribal preemployment screening controls for employees who have not been fully screened prior to employment and for new staff hired at PNHD, including the performance of fingerprinting and FBI background checks for all staff currently working with Indian children, and maintain complete employee personnel files that include current licensing information when applicable.

(3) We recommend that the Penobscot Nation conduct annual program evaluations in accordance with Federal requirements, review the results of the program evaluations, and take corrective actions as appropriate.

(6) We recommend that Penobscot Nation work with the Penobscot Nation’s Tribal government to ensure that its emergency preparedness program is reviewed, updated, and tested annually, in accordance with Federal requirements, and review and update PNHD’s standard operating procedures in accordance with Tribal requirements.

(2) We recommend that the Penobscot Nation develop, approve, and implement written medical policies and procedures, with the advice of the required group of professional medical staff, that include: - pain-management treatment prioritization requirements for opioid prescription and compliance monitoring, and - requirements for timely completion, signature, and review of patient health records.

(1) We recommend that the Penobscot Nation ensure that PNHD is under the medical direction of a physician who performs all of the duties required in the job description and in accordance with Federal and Tribal requirements.

We recommend that the Acting Assistant Secretary of the Office of Management require the Privacy Office to allocate appropriate resources to the Compliance Office based on the stated priority of reducing or eliminating the investigation backlog so that FERPA complaints are resolved in a timely manner.

We recommend that the Acting Assistant Secretary of the Office of Management require the Privacy Office to work with the Office of General Counsel to resolve outstanding policy issues that impede the Compliance Office's ability to investigate certain FERPA complaints.

We recommend that the Acting Assistant Secretary of the Office of Management require the Privacy Office to implement an effective FERPA complaint tracking system that allows the Compliance Office to account for and track all complaints it receives, including the status and outcome of each complaint, and that provides an effective mechanism for reliable performance measurement and reporting.

We recommend that the Acting Assistant Secretary of the Office of Management require the Privacy Office to use reliable performance data to design and implement appropriate performance standards for the Compliance Office as a whole and for individual personnel responsible for handling complaints.

We recommend that the Acting Assistant Secretary of the Office of Management require the Privacy Office to investigate all complaints that meet the criteria requiring investigation and do not place complaints into an "inactive" status.