Open Recommendations

Embassy Vientiane should report on public diplomacy programming using established reporting mechanisms in accordance with Department standards.

Embassy Vientiane should develop a written consular fraud prevention strategy and standard operating procedures in accordance with Department standards.

Embassy Vientiane should maintain consular cashier records in accordance with Department standards.

Embassy Vientiane should comply with Department standards for consular crisis preparedness.

Embassy Vientiane should bring its bulk fuel program into compliance with Department standards.

Embassy Vientiane should bring its property management program into compliance with Department standards.

Embassy Vientiane should enforce duty driver limits for all embassy drivers in accordance with Department guidelines.

Embassy Vientiane, in coordination with the Bureau of Overseas Buildings Operations, should bring its fire protection program into compliance with Department standards.

Embassy Vientiane should bring its safety, health, and environmental management program into compliance with Department standards.

Embassy Vientiane should complete all information systems security officer responsibilities in accordance with Department standards.

Embassy Vientiane should manage its non-enterprise networks in accordance with Department standards.

Embassy Vientiane should manage its records management program in accordance with Department standards.

Embassy Vientiane should make its high frequency radio systems operational.

Embassy Vientiane should test its high frequency radio systems in accordance with Department standards.

The Commission conduct an information security risk assessment and develop and implement comprehensive written policies and procedures for all areas of the information security program.

The Commission develop and implement a quality review system to review and revise information security policies and procedures on an annual basis, in accordance with previously established Commission standards.

Identify how the remaining IIJA workforce training and development funds will be used and the goals and outcomes expected from their use.

Establish and implement a control to track the amount of S&E and Business Operations funds expended for IIJA Section 40803(c)(7).

We recommend that the Orphaned Wells Program Office establish milestones for the Osage Nation's execution of its performance goals in its development grants and ensure it has made progress in meeting those performance goals before awarding phase 3 funds.

We recommend that the Orphaned Wells Program Office establish milestones for the Osage Nation's execution of the implementation grants and ensure it has made progress in plugging orphaned wells before awarding phase 3 funds.

Apply population change factors, such as projected growth and trends of sorting and delivery center locations, as part of its Financial Rigor Tests for the investments.

Perform inspections and complete route adjustments where needed as part of the required annual process within the year prior to estimating the Financial Rigor Tests related to sorting and delivery center investments.

Require tracking, reconciling, and reporting of operating costs throughout the Sorting & Delivery Center project, with adjustments to investment calculations for significant changes; and delegate responsibility for the oversight of financial performance over routes related to the project.

Completely implement monitoring activities over the effectiveness of existing controls to ensure expenses, including accruals, are recorded accurately. Such activities should include, at a minimum:
a. Coordinating with the participating agencies to monitor the design and effectiveness of accrual controls.
b. Responding to the results of such monitoring with appropriate revisions to process-level activities and controls as necessary.

Enhance existing risk assessment processes to identify and respond to potential areas of increased risk in key process areas, including consideration of materiality and aggregation risk across the participating agencies and types of business events.