Open Recommendations

[Description omitted; DOJ has determined that this recommendation contains information that is limited official use or classified.]

(U) Rec. 3: The DoD OIG recommended that the Under Secretary of Defense for Intelligence and Security review and update any applicable counterintelligence guidance and policy documents, including DoD Instruction C-5240.08 and DoD Instruction 5240.04, to address Anomalous Health Incident-related information and counterintelligence investigation requirements; and provide information security advice to the Office of the Under Secretary of Defense for Policy for the development of a Security Classification Guide for Anomalous Health Incidents.

Embassy Khartoum should document its public diplomacy grants in accordance with Department standards.

Embassy Khartoum should conduct its consular fraud prevention program in accordance with Department standards.

Embassy Khartoum should develop and implement a written consular training and orientation program in accordance with Department standards.

Embassy Khartoum should install signage at the Consular Section's public entrance with all information required by Department guidance.

Embassy Khartoum should either implement a plan to fully use the leased facility in El Fashir, Darfur, or terminate the lease for the facility, return U.S. government assets and vehicles to the embassy and put up to $50,000 to better use.

Embassy Khartoum should document all nonexpendable property transfers in accordance with Department standards.

Embassy Khartoum should dismantle and remove its shipping containers and portable structures in accordance with Department requirements or obtain authorization from the Bureau of Overseas Buildings Operations to use them as permanent storage.

Embassy Khartoum should comply with Department training standards on the use of powered industrial trucks, such as forklifts.

Embassy Khartoum should comply with Department guidance on mishap reporting.

Embassy Khartoum should manage its bulk fuel operation in accordance with Department standards.

Embassy Khartoum should use the Integrated Logistics Management System to track all uniforms and personal protective equipment in accordance with Department standards.

Embassy Khartoum should complete all information systems security officer responsibilities in accordance with Department standards.

Embassy Khartoum should register its dedicated internet networks with the Bureau of Information Resource Management.

Embassy Khartoum should implement steps to secure and monitor its dedicated internet networks.

Embassy Khartoum should complete information technology contingency plans for the unclassified and classified networks and test the plans in accordance with Department standards.

Embassy Khartoum should develop an acquisition plan for its information technology needs in accordance with Department standards.

Embassy Khartoum should implement standard operating procedures for managing and tracking mobile devices as required by Department standards.

Embassy Khartoum should implement a records management program that complies with Department standards.

Complete a usage study and document a decision regarding if the IRS will mandate that participants use the TFA IVES system.

FHFA should develop and maintain a complete and accurate cloud system component inventory, as required by NIST SP 800-53.

FHFA should develop and implement a solution to encrypt all data-at-rest on the cloud system as required by National Institute of Standards and Technology SP 800-53.

We recommend the CISA Director update CISA’s Continuity of Operations Plan and develop and implement an information system contingency plan, to ensure availability of redundant systems, capabilities, and communication methods to use if primary systems or networks are compromised.

We recommend the CISA Director require the facility and operations staff conduct an assessment to determine whether secure facility space is appropriately sized and configured to meet operational needs and document any changes necessary for staff to obtain and maintain appropriate access to intelligence information.