Open Recommendations

Update the program’s risk register to include contingency plans for high impact risks.

Establish and implement a method to track the amount of CALR S&E funds expended separately from other IIJA NFS S&E funds.

The CDO should coordinate with HUD's Records Office, Privacy Office, and program offices to develop data policies and procedures for data inventory, categorization, and labeling in support of zero trust architecture.

Status

HUD is working on a plan to address the recommendation. HUD OIG anticipates receiving a corrective action plan no later than April 11, 2025, with a plan for resolving this recommendation.

Analysis

HUD OCIO should develop system policies and procedures for dynamic access controls that include just-in-time and just-enough access tailored to individual actions and individual resource needs.

HUD's Privacy Office should require program offices to periodically review systems in all environments (testing, development, production) for unnecessary disclosure of personally identifiable information (PII).

HUD OCIO should capture risks that are associated with zero trust architecture implementation and document these risks in its risk register.

The Under Secretary for Health works with the Women’s Program Office to gain an understanding of barriers to osteoporosis clinical reminder use and based on results, implement action as needed.

That the FBI assess the processes and procedures it uses to prepare for events that it determines present potential domestic security issues-but have not been designated as NSSE or SEAR events by DHS-to ensure that its processes and procedures set forth with clarity the division of responsibilities between and within the relevant FBI field office and FBI headquarters; clearly define a mechanism for making a formal determination whether and what kind of a nationwide intelligence and CHS canvass is necessary and appropriate under FBI policies; and provide sufficient guidance to ensure that relevant intelligence can be timely shared among the…

Ensure that NWDCS establishes written policies and procedures specific to the performance reporting of VOCA-funded services and distributes this guidance to relevant personnel.

Ensure that NWDCS establishes written policies and procedures specific to the payroll process and distributes this guidance to relevant personnel.

Ensure that NWDCS develop and implement an incentive compensation policy that adheres to the requirements of the Uniform Guidance.

Rec. A.1.a: The DoD OIG recommended that Deputy Assistant Secretary of the Navy for Civilian Personnel ensure the Office of Civilian Human Resources reviews the circumstances for the 120 entry level engineers we identified who received an accelerated promotion before the Office of Personnel Managements approval of the Accelerated Promotion Program on December 22, 2016, and determines the appropriate actions to take regarding those circumstances.

Embassy Berlin should bring its contracting officer's representative program into compliance with Department and federal requirements.

Embassy Berlin should use the Integrated Logistics Management System to account for all expendable property in accordance with Department standards.

Embassy Berlin should transition Consulate General Frankfurt's OpenNet operations to the Department-provided Enterprise Converged Platform and put up to $100,000 to better use.

Embassy Berlin should perform its local information technology configuration control board responsibilities in accordance with Department standards.

Embassy Berlin should assign responsibility for records management, including liaison with the post records coordinator and retiring records, to an individual in each of the mission's offices, and bring the records management program into compliance with Department standards.

Embassy Berlin should upload all diplomatic notes it prepares and receives to the State Messaging and Archive Retrieval Toolset in accordance with Department standards.

Embassy Berlin should correct the network cabling infrastructure issues at Embassy Berlin, Clay Annex, and Consulate General Munich to comply with Department standards concerning switch cable management.

BEP management should update LAN WAN password configuration settings to comply with policy requirements or formally document a risk acceptance with mitigating controls.

Department of the Treasury (Treasury) Office of Inspector General (OIG) follow-up with Fresno's management to confirm the transactions noted as unsupported expenditures within the Contracts greater than or equal to $50,000 and Aggregate Payments to Individuals payment types are recouped or replaced by other eligible expenditures, not previously charged to CRF, that were incurred during the period of performance. Based on Fresno's responsiveness to Treasury OIG's requests and management's ability to provide sufficient documentation, Castro recommends Treasury OIG determine the feasibility of conducting an audit for the Contracts greater than or equal to $50,000 and Aggregate Payments to Individuals payment…

Treasury Office of Capital Access follow-up on any CRF specific questioned costs reported in the fiscal year 2020 and 2021 Single Audit Act reports.

Castro also recommends that Treasury's Office of Capital Access to ensure that management decision letters are issued on the CRF specific findings identified by the auditor in the Single Audit Act reports noted in the finding.

Treasury Office of Inspector General (OIG) follow-up with Dallas County's management to confirm the transactions noted as unsupported or ineligible expenditures within the Contracts greater than or equal to $50,000, Grants greater than or equal to $50,000, Direct Payments greater than or equal to $50,000, and Aggregate Payments to Individuals payment types are recouped or replaced by other eligible expenditures, not previously charged to CRF, that were incurred during the period of performance. Based on Dallas County management's responsiveness to Treasury OIG's requests and management's ability to provide sufficient documentation, Treasury OIG determine the feasibility of conducting an audit for…

Treasury OIG follow-up with Mississippi's management to confirm if the $1,324,066 noted as unsupported expenditures within the Direct Payments greater than or equal to $50,000 and Aggregate Payments to Individuals payment types can be supported. If support is not provided, Treasury OIG should recoup the funds or request Mississippi management to provide support for replacement expenses, not previously charged, that were eligible during the CRF period of performance. Further, based on Mississippi's responsiveness to Treasury OIG's requests and its ability to provide sufficient documentation and/or replace unsupported transactions charged to CRF with valid expenditures, Castro recommends Treasury OIG determine the…