Open Recommendations

Develop and document procedures for detecting and removing unapproved software on the Agency’s network, to include time frames for removal, risk classifications, and identification of software collecting privacy data.

Develop and provide training on the Agency’s processes for detecting and removing unapproved software to users with privileges to install software on the EPA’s network.

Conduct a UAS detection and C-UAS program assessment that includes a determination of future resource needs and organizational structure based on how to best align those resources.

Evaluate the UAS detection and C-UAS coordination request process to identify and correct inefficiencies to improve timeliness in anticipation of future program growth.

Finalize internal UAS detection and C-UAS request processing and document retention guidance.

Rec. 2.a: The DoD OIG recommended that the Chief, National Guard Bureau, in coordination with the Director of the Army National Guard and the Director of the Air National Guard, develop and implement policies and procedures to require the Army National Guard and Air National Guard to complete a review of proof of residency documentation when the member's primary residency is established or changed for the Basic Allowance for Housing entitlement to ensure consistency throughout all Army National Guard and Air National Guard units and organizations within every state, territory, and the District. The policies and procedures should also include…

Rec. 2.b: The DoD OIG recommended that the Chief, National Guard Bureau, in coordination with the Director of the Army National Guard and the Director of the Air National Guard, develop and implement policies and procedures to outline the process and frequency of recertification for Basic Allowance for Housing entitlement that Army National Guard and Air National Guard officials will use to verify and fully document the dependency status of members to provide clarification to the DoD Financial Management Regulation, volume 7A, chapter 26. These procedures should include: * how recertifications will be completed; * which members will complete a…

Rec. 2.c: The DoD OIG recommended that the Chief, National Guard Bureau, in coordination with the Director of the Army National Guard and the Director of the Air National Guard, develop and implement policies and procedures to require Army National Guard and Air National Guard officials to review and document the status of a military member married to another military member regardless of which Military Service, Reserve or Active Component, or Army National Guard or Air National Guard unit the member's spouse belongs to, and identify which member will claim any applicable dependents.

Rec. 2.d: The DoD OIG recommended that the Chief, National Guard Bureau, in coordination with the Director of the Army National Guard and the Director of the Air National Guard, develop and implement policies and procedures to specify the methods for confirming eligibility and paying Family Separation Allowance for Army National Guard and Air National Guard members, in accordance with the DoD Financial Management Regulation, volume 7A, chapter 27, and include the: * timeliness of payments; * determination of Family Separation Allowance eligibility for back to back orders; * members assigned to their normal duty locations; and * requirement to…

Rec. 2.e: The DoD OIG recommended that the Chief, National Guard Bureau, in coordination with the Director of the Army National Guard and the Director of the Air National Guard, develop and implement policies and procedures to establish formal dissemination and communication procedures for National Guard Bureau policies related to entitlements provided to the Army National Guard and Air National Guard, including the policies in the preceding recommendations. The procedures should require: 1) creation of a central location where policies and procedures will be kept for easy access by all states, territories, and the District; and 2) confirmation of receipt…

Rec. 3: The DoD OIG recommended that the Chief, National Guard Bureau, in coordination with the Director of the Army National Guard and the Director of the Air National Guard, develop and implement additional internal control procedures for the review of transactions manually submitted by the Army National Guard and Air National Guard to the payment system prior to payment to ensure the completeness and accuracy of transactions.

Integrate its C-IED data sources and modernize its NCCAD reporting system to generate automated reports at the national, regional, and state level.

2. Immediately restore off-site storage of backup tapes and implement a strategy that will ensure that the Agencyconsistently stores backups of its systems at an off-site location. Additionally, explore alternative methods of off-site backup that can be performed automatically and do notrequire physical intervention by CSB personnel, such as storing backups in the cloud.

We recommend that the New York City provider refund to the Medicare program the estimated $1,118,789 overpayment.

We recommend that the New York City provider based upon the results of this audit, exercise reasonable diligence to identify, report, and return any overpayments in accordance with the 60-day rule and identify any of those returned overpayments as having been made in accordance with this recommendation.

We recommend that the New York City provider develop policies and procedures to ensure that: o treatment plans contain all required elements, are maintained and are signed by the treating physician, o the performing therapists and supervising physicians comply with the requirements related to incident-to services, o psychotherapy services are conducted by therapists that meet Medicare qualification requirements, o time spent on psychotherapy services is documented, and o treatment notes are signed and maintained to support the services billed.

CMS should Encourage Part D plans to increase access to and use of biosimilars.

CMS should Monitor Part D plans’ submitted formularies to determine whether they discourage beneficiaries from using biosimilars

(U) Rec. 2.b: The DoD OIG recommended that the Under Secretary of Defense for Intelligence and Security develop operations security training requirements on the risks of sharing DoD information on non-DoD-controlled systems and add these requirements to the existing training requirements described in DoD Instruction 8170.01, Online Information Management and Electronic Messaging, August 24, 2021, and DoD Directive, 5205.02E, DoD Operations Security (OPSEC) Program, June 20, 2012, (Incorporating Change 2, August 20, 2020).

(U) Rec. 3.a: The DoD OIG recommended that the Commanders of the U.S. Africa Command, U.S. Central Command, U.S. European Command, U.S. Indo-Pacific Command, and U.S. Southern Command issue command-level guidance clarifying the use of non-DoD-controlled electronic messaging systems. This guidance should include: i. any area of responsibility-specific conditions that permit personnel to use non-DoD-controlled messaging systems; ii. what information can be shared over the electronic messaging system; iii. how personnel are to maintain records generated on non-DoD systems in accordance with records management regulations; iv. how to report any security violations or misuse of a system; v. a process…

(U) Rec. 3.a: The DoD OIG recommended that the Commanders of the U.S. Africa Command, U.S. Central Command, U.S. European Command, U.S. Indo-Pacific Command, and U.S. Southern Command issue command-level guidance clarifying the use of non-DoD-controlled electronic messaging systems. This guidance should include: i. any area of responsibility-specific conditions that permit personnel to use non-DoD-controlled messaging systems; ii. what information can be shared over the electronic messaging system; iii. how personnel are to maintain records generated on non-DoD systems in accordance with records management regulations; iv. how to report any security violations or misuse of a system; v. a process…

(U) Rec. 3.b: The DoD OIG recommended that the Commanders of the U.S. Africa Command, U.S. Central Command, U.S. European Command, U.S. Indo-Pacific Command, and U.S. Southern Command establish risk assessment procedures to evaluate and monitor combatant command use of current and emerging information technologies to identify opportunities for use and to assess risks in accordance with DoD Instruction 8170.01, "Online Information Management and Electronic Messaging," August 24, 2021.

(U) Rec. 3.b: The DoD OIG recommended that the Commanders of the U.S. Africa Command, U.S. Central Command, U.S. European Command, U.S. Indo-Pacific Command, and U.S. Southern Command establish risk assessment procedures to evaluate and monitor combatant command use of current and emerging information technologies to identify opportunities for use and to assess risks in accordance with DoD Instruction 8170.01, "Online Information Management and Electronic Messaging," August 24, 2021.

(U) Rec. 3: Recommendation is Classified.

(U) Rec. 4: Recommendation is Classified.