Open Recommendations

(U) Rec. 2.f: The DoD OIG recommended that the Director of the Joint Military Information Support Operations Web Operations Center, in coordination with the Commander of the U.S. Special Operations Command, coordinate with the U.S. Army Corps of Engineers to develop a plan to establish permanent facilities for the Joint Military Information Support Operations Web Operations Center (Facilities 2 action).

CMS should explore the discrepancy between Medicaid claims data and medical documentation for lead toxicity and implement solutions to ensure better oversight of the EPSDT program.

CMS should issue guidance to reiterate State obligations under the EPSDT benefit to ensure access to services to correct or ameliorate confirmed blood lead levels identified during screenings.

Design and implement a quality assurance program to ensure that SBA system hardware inventory is maintained as required by the National Institute of Standards and Technology (NIST) Special Publication 800-53.

Implement a process to ensure SBA reviews its external service providers for supply chain risks and ensure all assessments of supply chain risks are documented as outlined in NIST 800-53.

Communicate and reinforce to program offices the requirement to review and remove system and user accounts in accordance with SOP 90 47 6.

Develop, document, and implement a process that requires management review of information security data and report information security threats.

Redacted.

Redacted.

Redacted.

(U) Rec. 1: The DoD OIG recommended that the Executive Secretary, Office of the Secretary of Defense, examine the current process of subordinates reviewing and approving the WHMO Director and Deputy Director travel authorizations and vouchers.

(U) Rec. 2: The DoD OIG recommended that the Executive Secretary, Office of the Secretary of Defense, consider an alternate reviewer and approval authority from outside of the WHMO.

We recommend that CPB management take the following actions, require WUTC-FM to identify the corrective actions and controls it will implement to ensure future compliance with Act requirements for open financial records.

We recommend that CPB management require WUTC-FM to identify the corrective actions and controls it will implement to ensure future compliance with CPB’s General Provision requirements.

Update, in consultation with the Board of Governors, the director of FS, and the general counsel, the delegations of authority related to the stress testing program to clarify how actions should be delegated when there is no vice chair for supervision or CSR chair.

Reassess its policies to incorporate enhanced communication among personnel involved in inmate transfer decisions.

Ensure that its written procedures and practices regarding medical transfer codes and paperwork are consistent.

Consider modifying its policies to require BOP personnel to review an inmate's medical records before making decisions that impact the inmate's medical care.

Modify its policies to require reviews of inmate medical care levels either upon specified changes in inmates' medical care or at regular intervals, such as annually, and reassess its policies to incorporate enhanced communication among clinical providers involved in inmate medical care level decisions. 12/9/24: Received BOPs status update.

Closely examine the Medical Care Level Guidelines and Medical Classification Algorithm for needed clarity and improvement.

Modify the Medical Care Level Guidelines to address how an inmate's noncompliance with medical treatment should impact the inmate's medical care level classification, regardless of the patient's reason for noncompliance.

Consider limiting the number of BOP personnel who receive notification of an inmate's impending transfer, especially for Broad Publicity and other high-risk inmates. For example, the BOP should consider discontinuing distribution of transfer information to group email inboxes accessible by numerous personnel, many of whom would not have reason to be notified of the transfer.

Reassess and clarify the BOP's policies regarding maintaining the confidentiality of information regarding designations, redesignations, and transfers of inmates, and provide training to BOP employees on these policies.

Reassess its policies regarding assessing and ensuring the security of inmates at the time of designation, redesignation, and transfer and consider (a) adding specific criteria for BOP officials within DSCC, OMDT, and Central Office to consider before approving the designation and redesignation of Broad Publicity and other CIM inmates; (b) whether changes should be made to the criteria for considering an inmate to be a member, leader, associate, former member, or drop-out of Organized Crime; (c) requiring that additional categories of inmates, such as inmates of a certain level of public notoriety, be referred to Senior Intelligence Designators or the…

Create specific procedures for assigning inmates to units within facilities, which may include security considerations, SIS approval, and approval from the warden or other high-level officials.