Open Recommendations

Communicate formally to all relevant stakeholders the need to immediately cease counterintelligence evaluations of the President and Vice President in accordance with 10 CFR 709 and other Federal requirements.

Develop and implement effective processes immediately to ensure that counterintelligence evaluations are conducted in accordance with 10 CFR 709 and the exemptions reflected in SEAD 4, Executive Order 13467, and Executive Order 12968 to include: Communicating and fully implementing Federal requirements that incorporate provisions regarding personnel exempt from Department counterintelligence evaluations requirements such as the President and Vice President and identify, by position, the senior officials from other Government agencies that are covered; Establishing policies, procedures, and/or mechanisms to ensure counterintelligence evaluations are not requested or conducted in a manner that is inconsistent with the scope of individuals who are…

Determine whether there is any other noncompliance with laws, regulations, or Government-wide policies, including, but not limited to, the requirements of the Privacy Act of 1974. If noncompliance has occurred, take appropriate remedial or corrective, including reporting to the necessary authorities, as appropriate.

Develop and implement effective processes immediately to ensure that counterintelligence evaluations are conducted in accordance with 10 CFR 709 and the exemptions reflected in SEAD 4, Executive Order 13467, and Executive Order 12968 to include: Communicating and fully implementing Federal requirements that incorporate provisions regarding personnel exempt from Department counterintelligence evaluations requirements such as the President and Vice President and identify, by position, the senior officials from other Government agencies that are covered; Establishing policies, procedures, and/or mechanisms to ensure counterintelligence evaluations are not requested or conducted in a manner that is inconsistent with the scope of individuals who are…

Communicate formally to all relevant stakeholders the need to immediately cease counterintelligence evaluations of the President and Vice President in accordance with 10 CFR 709 and other Federal requirements.

Develop and implement effective processes immediately to ensure that counterintelligence evaluations are conducted in accordance with 10 CFR 709 and the exemptions reflected in SEAD 4, Executive Order 13467, and Executive Order 12968 to include: Communicating and fully implementing Federal requirements that incorporate provisions regarding personnel exempt from Department counterintelligence evaluations requirements such as the President and Vice President and identify, by position, the senior officials from other Government agencies that are covered; Establishing policies, procedures, and/or mechanisms to ensure counterintelligence evaluations are not requested or conducted in a manner that is inconsistent with the scope of individuals who are…

The Chief Recovery Officer should review Ground Services International, Inc.'s and Inflight Catering's requested amount for unallowable expenses, under PSP2 and PSP3, and seek reimbursement for the overpayment, if applicable.

Take appropriate actions to remedy the remaining improperpayments of $25,111 identified in this audit.

Develop and implement written standard operating procedures toinclude but not limited to establishing clear roles and responsibilities for employees whoare accountable for the Workers’ Compensation Program to:1. Ensure only eligible claimants receive continuation of pay benefits and anypreviously provisioned continuation of pay is rescinded when the FederalEmployees’ Compensation Act claim is formally denied by the Department of Labor.2. Monitor and track all workers’ compensation-related activities recorded in theGovernment Publishing Office time and attendance system and take timely actionsto remedy ineligible activities under Federal Employees’ Compensation Act.3. Standardize processes to provide a consistent approach for conducting anddocumenting case reviews.

Review and update Government Publishing Office Directive 665.5B in compliance with Government Publishing Office Directive 001.D.

We recommend that the National Institutes of Health provide additional training and implement oversight controls to ensure that acquisition workforce and program staff adhere to the roles and responsibilities defined in the HHS Policy for Information Technology Procurements - Security And Privacy Language, including that staff must incorporate all applicable information security and privacy requirements, contract language, and clauses into acquisition documents; and complete the Information Security Program Requirements Checklist and Certification properly for all acquisitions involving the procurement of information and IT products and services.

We recommend that the National Institutes of Health provide additional training and implement oversight controls to ensure that contractor performance assessments are completed and uploaded to the Contractor Performance Assessment Reporting System timely.

We recommend that the National Institutes of Health provide additional training and implement oversight controls to ensure that NIH Competition Advocates prepare and submit timely Annual Competition Advocate Reports to HHS in accordance with the requirements of FAR 6.502(b)(2) and the HHS Competition Advocacy Directive.

Refine current, and identify new, strategies and solutions to manage delays in detainee transfers to partner agencies and communicate those improvements throughout the Rio Grande Valley sector.

Recommendation 2: Oversee a data integrity review at Rio Grande Valley Border Patrol facilities for a sampling (from at least one month of data) of detainee custody logs to verify that the information recorded is accurate and implement quality assurance mechanisms to monitor data integrity. We recommend the Executive Assistant Commissioner, Operations Support, U.S. Customs and Border Protection:

EEOC should determine a responsible official (or office) with overall responsibility forcompliance with PIIA agency-wide. The responsible official (or office) should identify theprograms (new and old) to be reviewed, provide overall guidance to the programs, andensure overall compliance with all PIIA requirements on an annual basis;

2. EEOC should develop an agency-wide Improper Payment risk assessment standardoperating procedures (SOP). This SOP should include risk assessment procedures to beperformed by each identified significant program. These procedures should be based onOMB A-123 guidance found in Appendix C. For each identified significant program, aresponsible program point of contact should be established. The responsible party shouldreport results of their programs risk assessment to the EEOC responsible official (or office);

EEOC should develop a SOP to ensure annual compliance with OMB A-136 PIIA reviewand reporting requirements.

We recommend that Saint Louis University refund $263 to NIH for unallowable travel costs.

We recommend that Saint Louis University ensure that it always manages NIH awards in accordance with Federal and award requirements by strengthening procedures for reconciliation of payroll costs to approved salaries and wages and to payroll reports, and strengthening controls to ensure the timely completion and certification of employee time and effort reports after completion of each 6-month reporting period.

We recommend that Saint Louis University enhance its existing controls by developing and implementing policies and procedures to ensure that either the internal audits conducted by its internal audit firm, the University's compliance department, or both, review costs that the University claims for its NIH awards.

We recommend that Saint Louis University strengthen its controls, to include policies and procedures, to ensure that it properly monitors its subaward subrecipients, to include: evaluating its current risk assessment policies and procedures and implementing procedures to improve monitoring of subrecipients classified as high or medium risk and developing and implementing notification and followup procedures to be executed in cases of subrecipient subaward or contract cancellation.

(U) Rec. A.1.a: The DoD OIG recommended that the Under Secretary of Defense for Intelligence and Security, in coordination with the DoD Chief Information Officer and DoD Component Heads, develop and implement a DoD-wide solution for automatically populating documents and e-mails with the required markings based on a set of selection criteria.

(U) Rec. A.1.b: The DoD OIG recommended that the Under Secretary of Defense for Intelligence and Security revise DoD Instruction 5200.48 to require DoD Components to implement a process to track the completion of controlled unclassified information training, such as the use of a learning management system, and use that process to enforce the requirement that personnel complete the controlled unclassified information training.

(U) Rec. A.1.d: The DoD OIG recommended that the Under Secretary of Defense for Intelligence and Security add a question to the controlled unclassified information questionnaire that requires DoD Components to select a sample of controlled unclassified information documents, test whether personnel are including the required markings, and report the discrepancies identified during the test.