Open Recommendations

(U) Rec. 4.d: The DoD OIG recommended that the Principal Director of Defense Pricing and Contracting, Office of the Under Secretary of Defense for Acquisition and Sustainment develop and implement plans, in coordination with the Principal Deputy Chief Information Officer, Office of the DoD Chief Information Officer, to ensure that contracting officers are aware of the DoD technical experience requirements for contracting officer's representatives who monitor contractor cybersecurity services or accept cybersecurity deliverables.

(U) Rec. 4.e: The DoD OIG recommended that the Principal Director of Defense Pricing and Contracting, Office of the Under Secretary of Defense for Acquisition and Sustainment direct the Defense Acquisition Regulations Council to revise Defense Federal Acquisition Regulation Supplement Part 239, "Acquisition of Information Technology," Subpart 239.71, "Security and Privacy for Computer Systems," to reflect current DoD cybersecurity policies.

(U) Rec. 5: The DoD OIG recommended that the Defense Acquisition University President revise the DoD contracting officer's representative training curriculum and materials, in coordination with the Principal Director of Defense Pricing and Contracting and the Director of the Defense Contract Audit Agency, to include detailed instructions for contracting officer's representatives to review and validate that contractor payment requests, including interim vouchers, are commensurate with performance to prevent improper payments.

We recommend that the CBP Commissioner and the ICEDirector coordinate with the DHS Secretary to contract with an independent,federally funded research and development center to complete a fullassessment of the staffing needs at the Southwest border and strategicallyimplement recommendations based on the assessment. The assessmentshould:• review existing staffing models and methodology for deploying personnelat the Southwest border and across the country and the impact ofcontinuously relying on details and overtime to temporarily fill staffinggaps; and• include factors within and outside of DHS’ control that are affectingworkloads and exacerbating staffing challenges to identify solutions thecomponents can accomplish as well as those…

We recommend that the CBP Commissioner and the ICE Director communicate the duties and responsibilities of the SBCC moreeffectively to frontline staff.

Develop an infrastructure strategy to increase the overall effectiveness of facilities management. The strategy should align infrastructure decisions with the BOP's mission; include one or more methodologies for allocating resources; and include short, medium, and long-range planning goals. As part of this strategy, the BOP should consider incorporating a portfolio-based repair model; a retention or disposal decision model; and business case analyses for new construction, as appropriate.

Develop and implement key performance indicators to track whether the BOP is meeting its infrastructure goals.

Establish an automated and comprehensive inventory for managing and tracking software licenses.

Develop and implement a comprehensive software licensing policy that includes a methodology for analyzing and maintaining software usage data to determine the software license needs of the agency.

Determine the allowability of the questioned transactions and recover $14,886,138, if applicable.

We recommend that the Office of Refugee Resettlement include a review of compliance by ICFs and EISs with all background check requirements and facility access as a part of ORR's routine site visit monitoring.

We recommend that the Centers for Medicare & Medicaid Services work with the MACs to recover $35,560 in improper payments made to providers for the 128 sampled enrollee days that did not meet Medicare requirements. 

Now that CMS has reinstituted most program integrity measures, we also recommend that CMS take the following steps, which if in effect during the audit period could have saved Medicare an estimated $579,667,510 during that period: Conduct medical reviews of psychotherapy services, including services provided via telehealth, to verify that the services are documented and billed in accordance with Medicare requirements.

Now that CMS has reinstituted most program integrity measures, we also recommend that CMS take the following steps, which if in effect during the audit period could have saved Medicare an estimated $579,667,510 during that period: Implement system edits for psychotherapy services, including services provided via telehealth, to prevent payments for services that were billed incorrectly.

Now that CMS has reinstituted most program integrity measures, we also recommend that CMS take the following steps, which if in effect during the audit period could have saved Medicare an estimated $579,667,510 during that period: Strengthen educational efforts to make providers aware of educational materials on how to meet Medicare requirements and guidance for psychotherapy services, including services provided via telehealth.

Now that CMS has reinstituted most program integrity measures, we also recommend that CMS work with the MACs to take the following steps, which if in effect during the audit period could have saved Medicare an estimated $579,667,510 during that period: Review MAC jurisdictions' LCD requirements for psychotherapy services to identify which provisions effectively promote program integrity, and consider additional steps that CMS could undertake to ensure appropriate coverage and payment for psychotherapy services across all jurisdictions.

Establish and implement a maintenance technician workforce plan that considers factors such as average training time, training requirements, and staffing turnover for a period longer than 1 year.

Complete implementation of OMB M-21-31 to achieve past due Event Logging 1 and 2 maturity levels and to meet the Event Logging 3 maturity due by August 27, 2023.

We recommend that Indian Affairs coordinate with the Division of Facilities Management and Construction and the BIA Office of Justice Services to develop and implement a plan to identify and address all critical health and safety issues at the facilities mentioned in this management advisory. This plan should include, at a minimum, specific corrective actions and associated milestones for each identified issue.

We recommend that the Board chair or a designee develop a process to verify the accuracy of the information on financial disclosure reports for individuals subject to the Investment and Trading Policy. As part of this effort, a. require covered individuals to provide brokerage statements to their respective ethics officer for all accounts with holdings and transactions reported on their annual financial disclosure report.b. update financial disclosure review guidance to include the use of employee-provided brokerage statements to check annual financial disclosure reports for accuracy and completeness.

We recommend that the Board chair or a designee develop an approach to verify the accuracy of the information on financial disclosure reports for individuals who have access to confidential Class I FOMC information and are not covered by the Investment and Trading Policy. As part of this effort,a. determine the method and frequency for checking the accuracy and completeness of financial disclosure reports against brokerage statements, for example, by conducting periodic random sampling or full reviews.b. update financial disclosure review guidance to include the use of employee-provided brokerage statements to check annual financial disclosure reports for accuracy and completeness…

Revise the Transport Airplane Risk Assessment Methodology (TARAM) handbook to incorporate current safety data, including available international data when appropriate.

Review the TARAM handbook's quantitative safety guidelines to determine if they still meet the Agency's needs, and implement identified corrections as appropriate.

Review the TARAM and Transport Airplane Safety Manual (TASM), address any identified key differences the two documents, and integrate TASM into TARAM when appropriate.

Identify lessons learned related to the application of the 737 MAX recertification and the Continued Operational Safety process that have not yet been addressed and include them into airplane certification and safety evaluation processes.