Open Recommendations

Review Resource Conservation and Recovery Act information system inspection data entered during the coronavirus pandemic to determine the extent off-site compliance-monitoring activities were incorrectly countedas inspections and correct the inspection data in the system as needed.

Work with all EPA regions to determine why the rate of violations per inspection was reduced during the coronavirus pandemic and the inspection rate for large quantity generators was below historical levels from October 2020 through February 2021.

Develop policies that define inspection requirements and flexibilities to optimize the capabilities of authorized state programs in future large-scale pandemic or disaster events. These should include mechanisms, consistent with EPA guidance documents, that allow maintenance of normal Resource Conservation and Recovery Act inspection rates while ensuring the safety of enforcement staff.

The Bureau of Consular Affairs should clearly define the ConsularOne modernization program and Consular Systems Modernization, including its components, projects, supporting contracts, and the associated total cost of those contracts for both efforts.

The Bureau of Consular Affairs should require the Office of Consular Systems and Technology to implement an internal communication and collaboration plan.

The Bureau of Consular Affairs should perform annual security controls assessments for the Office of Consular Systems and Technology's information systems in accordance with Department standards.

Use Treasury’s DNP analysis to systemically flag COVID-19 EIDL and Emergency EIDL grant recipients who were found in Treasury’s DNP system and not previously reported by OIG. Review the applications and determine whether they are deemed ineligible. If the applicant is deemed ineligible, recover any disbursed funds, and flag the application as ineligible.

For all COVID-19 EIDLs and Emergency EIDL grants identified and flagged as potentially ineligible above, include those transactions in SBA’s 2021 improper payments estimation process.

In order to mitigate risks to the Station's structural integrity, ensure the risks associated with cracks and leaks in the Service Module Transfer Tunnel are identified and mitigated prior to agreeing to an ISS life extension.

The Chief Administrative Officer review jurisdiction-level fleet policies and standardize jurisdictional best practices across the AOC where appropriate;

The Chief Administrative Officer, in coordination with AOC organization leaders, review and revise AOC-wide and jurisdictional policies to include standards for vehicle utilization, and guidance for implementing these standards while maintaining jurisdiction-level operational flexibility.

We recommend the Chief Administrative Officer develop and implement additional policies and procedures that:a) ensure adherence to vehicle utilization reporting,b) include a more formal scheduled vehicle maintenance program, andc) collect, track, monitor and analyze fleet costs throughout the vehicle lifecycle at the vehicle level.

We recommend the Director of CISA develop an implementation plan to conduct periodic assessments for monitoring theprogress of goals and activities and complete annual updates on action items, as required by the Cyber Action Plan and associated 2015 and 2018memorandums.

We recommend the Director of CISA conduct centralized tracking and completion of signed closeout summaries to reconcile the ongoing,outstanding, and open tasks and activities, as required by the Cyber Action Plan and associated 2015 and 2018 memorandums.

We recommend the Director of CISA establish performance measures to ensure the effectiveness and completion of the CyberAction Plan and associated 2015 and 2018 memorandum activities.

We recommend the Director of CISA establish the DHS governance structure and ensure it consists of an Executive Committee thatmeets at least semi-annually and a Steering Committee that meets at least quarterly, as required.

We recommend that the Centers for Medicare & Medicaid Services update its PDE guidance to address margin under sponsor delivery models in which a sponsor owns a pharmacy.

Develop information reports to identify beneficiaries in death suspense for prolonged periods and instruct management to ensure technicians take appropriate actions on the cases.

Verify and post death information, where appropriate, for the remaining beneficiaries in the State Death population.

Instruct technicians to take appropriate actions on the remaining beneficiaries in the Death Suspense population.

Establish systems criteria to identify Old-age, Survivors and Disability Insurance beneficiaries in Address Suspense who are likely deceased, such as identifying beneficiaries suspended for prolonged periods who do not have activity on any Social Security Administration (SSA) records since their suspension. Once established, SSA should update policy to instruct technicians to search for death information.

Develop systems controls to alert technicians when SSA receives death information from sources, such as Centers for Medicare and Medicaid Services and the Department of the Treasury (Treasury), for beneficiaries in suspended payment status.

Revise policy to instruct technicians to conduct additional searches for death information when developing suspension actions.

Clarify policy for establishing dates of death for beneficiaries suspended based on a report from Treasury of a returned payment for death.

Review the SCRM NIST guidance and update the SCRM plan, policies, and procedures to fully address supply chain risk management controls and practices.