Open Recommendations

The Office of Administration should implement a control to ensure program integrity of the Financial Management Integrated System key vendor data files on an ongoing basis.

The Office of Administration should correct the discrepant vendor information identified during the ongoing program integrity reviews.

The Bureau of Fiscal Operations should implement updated Accounts Payable procedures to coincide with the deployment of the Financial Management Integrated System enhancements for the Invoice Processing Platform.

(U) Rec. 1: The DoD OIG recommended that the Commander of U.S. Cyber Command, the Chiefs of Staff for the U.S. Army and U.S. Air Force, the Chief of Naval Operations, and the Commandant of the Marine Corps develop a doctrine, organization, training, materiel, leadership and education, personnel, facilities, and policy framework that addresses strategies to build, grow, and sustain the Cyber Mission Force.

(U) Rec. 2: The DoD OIG recommended that the Commander of U.S. Cyber Command, the Chiefs of Staff for the U.S. Army and the U.S. Air Force, the Chief of Naval Operations, and the Commandant of the Marine Corps formalize an agreement to focus capability development on functional and mission areas consistent with results of the mission alignment board.

(U) Rec. 2: The DoD OIG recommended that the Commander of U.S. Cyber Command, the Chiefs of Staff for the U.S. Army and the U.S. Air Force, the Chief of Naval Operations, and the Commandant of the Marine Corps formalize an agreement to focus capability development on functional and mission areas consistent with results of the mission alignment board.

Establish a process to track the amount HUD owes to PHAs to cover prepayment shortages and provide the information to OCFO so that it can be properly recognized as accounts payable.

Contact all other HUD program offices to determine whether any other programs authorize or are aware of grantees holding funds in advance of their immediate disbursement needs and determine financial statement impact on and compliance with Treasury cash management requirements of any found.

KPMG recommends that the OCIO document and map access rights in OPM systems to personnel roles and functions, following the principle of 'least privilege'.

KPMG recommends that the OCIO enhance OPM’s information security control monitoring program to detect information security control weaknesses by: • Implementing and monitoring procedures to ensure system access is appropriately granted to new users, consistent with the OPM access approval process; and Monitoring the process for the identification and removal of separated users to ensure that user access is removed timely upon separation; implementing procedures to ensure that user access, including user accounts and associated roles, are reviewed on a periodic basis consistent with the nature and risk of the system, and modifying any necessary accounts identified.