Open Recommendations

(U) Rec. 1: The DoD OIG recommended that the DoD Chief Information Officer, in coordination with the Under Secretary of Defense for Policy, issue DoD-wide policy implementing the Cybersecurity Information Sharing Act of 2015 requirements, including a requirement for the DoD Components to document barriers to sharing cyber threat indicators and defensive measures and take appropriate actions to mitigate the identified barriers.

Develop and implement a process to assess the knowledge, skills, and abilities of Board staff with significant security responsibilities and establish plans to close identified gaps.

Determine whether established processes and procedures for management of user-access agreements and rules-of-behavior forms for privileged users are effective and adequately resourced and make changes as needed.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

Obtain the necessary OMB approval for the updated FDS 2.0 funds control process.

Obtain the necessary OMB approval for the updated FDS 2.0 funds control process.

The Office of the Chief Information Officer enforce the policy to remediate patch and configuration related vulnerabilities within agency defined timeframes.

The Office of the Chief Information Officer implement a process to detect and migrate unsupported software to supported platforms before support for the software ends.

The Bureau of Consular Affairs, Office of Passport Services, in conjunction with the Bureau of Diplomatic Security, should develop centralized, searchable databases to track and manage passport revocation cases, as well as retentions of passports and other documents seized on suspicion of fraud when citizens apply for consular services, or under other circumstances, and to track confiscations of such documents if they are seized on grounds other than retention authority.

We recommend that FDA establish written procedures and practices for securely sharing sensitive information about cybersecurity events with key stakeholders who have a “need to know.”

We recommend that ProLab, for the remaining portion of the estimated $319,277 overpayment for claims that are outside of the Medicare reopening period, exercise reasonable diligence to identify and return overpayments in accordance with the 60-day rule, and identify any returned overpayments as having been made in accordance with this recommendation.

We recommend that ProLab refund to the Medicare program the portion of the estimated $319,277 overpayment for claims incorrectly billed that are within the reopening period.

We recommend that ProLab exercise reasonable diligence to identify and return any additional similar overpayments outside of our audit period, in accordance with the 60-day rule, and identify any returned overpayments as having been made in accordance with this recommendation.

We recommend that BSEE revise the regulations under 30 C.F.R. 254 for managing oil spill preparedness and response.

Develop comprehensive procedures for ddentifying and managing heritage assets, including defining roles and responsibilities for the different NASA entities responsible for evaluating what historic items would most effectively be maintained by the Agency and considered as heritage assets

Ensure NASA policy and procedures for using the proceeds from facilities leased under NHPA authority appropriately aligns with Agency goals to minimize excess facilities.

We recommend that Crittenton review its claimed expenditures for FY 2016 (the third year of the grant awards) to determine whether they were claimed in accordance with Federal requirements and refund to the Federal Government any unallowable amount.

We recommend that Crittenton implement adequate policies and procedures to ensure that it identifies and claims actual expenditures incurred for services and shelter care provided to UAC.

We recommend that Crittenton refund to the Federal Government $342,263 for unallowable expenditures claimed.