Open Recommendations

We recommend that SAMHSA provide formal guidance to the State agency on alerting SAMHSA about any unexpended funds.

We recommend that SAMHSA provide formal guidance to the State agency on accounting for SABG expenditures.

Develop a process to define its performance measures--that consider DOT's business environment--to assess the effectiveness of DOT's information security program, including its ISCM program.

Using NIST guidance, test and authorize CDM applications (such as BigFix) that have been placed into operation on DOT's networks without proper security control assessments.

Direct OCIO to follow policy and conduct annual cybersecurity performance analysis reviews of OAs' cybersecurity programs, and submit reports to OAs with recommendations to address cybersecurity weaknesses.

Direct OST to prioritize and resolve COE security weaknesses identified by assessor, and develop POA&Ms that realistically reflect resources and timeframes for completions of these actions.

Direct OST to establish MOUs that delineate the responsibilities for COE common controls with each of the following OAs: FHWA, FMCSA, FRA, FTA, OIG, MARAD, SLSDC, and NHTSA.

Direct OAs (FAA, FHWA, FMCSA, FRA, FTA, OST, PHMSA, MARAD, and NHTSA) with weaknesses in data protection and privacy to update the status and develop POA&Ms to address the weaknesses.

Enhance security awareness training policy to define processes to tailor this training to DOT's unique environment and use feedback to enhance its program.

Develop and define a taxonomy that describes the content of the hardware and software inventory and the process to assemble, verify and maintain adequate support for the inventory data as well as the related information reported to OMB and other external parties.

Reimburse the four HOME program participants $468 from program funds for the underpayment of housing assistance due to inappropriate calculations of housing assistance.

Reimburse the three CoC program participants $260 from program funds for the underpayment of housing assistance due to inappropriate calculations of housing assistance.

Support or reimburse its CoC program $7,309 from non-Federal funds for the unsupported housing assistance payments.

(U) Rec. A.1.e: This recommendation is Controlled Unclassified Information

(U) ???????Rec. A.2.c: The DoD OIG recommended that the Navy Chief Information Officer direct Navy Command officials to implement processes to ensure that SECRET Internet Protocol Router Network users complete all required security training before receiving access to the network and ensure that all SECRET Internet Protocol Router Network users complete all required refresher training to maintain network access and ensure compliance with the processes.

(U) Rec. A.2.d: This recommendation is Controlled Unclassified Information

(U) Rec. A.2.e: This recommendation is Controlled Unclassified Information

(U) Rec. A.3.e: This recommendation is Controlled Unclassified Information

(U) Rec. A.4: This recommendation is Controlled Unclassified Information

(U) Rec. B.5.b: This recommendation is Controlled Unclassified Information

(U) Rec. B.8: This recommendation is Controlled Unclassified Information

(U) Rec. B.10: The DoD OIG recommended that the DoD Chief Information Officer, in coordination with the Under Secretary of Defense (Intelligence), ensure that the Army, Navy, and Air Force Chief Information Officers; the Army Deputy Chief of Staff for Intelligence; and the Army Provost Marshal General apply corrective actions related to physical security safeguards at each Command within their Components.

Rec. 1.a: The DoD OIG recommended that the Under Secretary of Defense for Acquisition and Sustainment review the accounting and management actions of the F-35 Program Office for F-35 Program Government property.

Rec. 2.a: The DoD OIG recommended that the F-35 Program Executive Officer ensure that contracting officers identify and resolve government-furnished property list inaccuracies and incomplete or missing entries before attachment to and award of subsequent contracts.

Rec. 2.c: The DoD OIG recommended that the F-35 Program Executive Officer, before the F-35 Program Office makes a decision to begin full-rate production of the F-35, ensure that the component property lead and accountable property officer reconcile all F-35 Program Government-furnished property by performing a complete inventory of delivered property and use the result of the inventory to establish a baseline property record in its accountable property system of record.