Open Recommendations

(U) Rec. 4.a: Recommendation is Classified.

(U) Rec. 4.b: Recommendation is Classified.

(U) Rec. 4.c: Recommendation is Classified.

We recommend that GHC continue to remediate the specific technical weaknesses discovered during this audit as outlined in the vulnerability scan audit inquiry.

We recommend that GHC implement a routine process to audit security configuration settings of its servers to ensure compliance with approved security configuration settings.

We recommend that the Office of Policy work with the Bureau for Africa and missions in sub-Saharan Africa to establish performance goals and measurable targets that missions can use to help the Agency assess its progress toward meeting goals in its efforts to respond to Chinese influence.

Develop and implement adequate procedures to ensure that confirmed EBLL cases, unconfirmed EBLL cases, and environmental investigations are reported to HUD.

Develop and implement adequate procedures and controls to ensure that environmental investigations are completed when required.

Perform a search for historical documentation to support the lead-free status of the 15 units and the associated developments. If adequate documentation is not found to support that all lead-based paint was identified and abated and clearance was achieved as required, the Authority should complete a lead-based paint inspection of the developments to determine whether they are lead free.

Develop a quality control process to ensure that records for the remaining 1,385 units contain evidence of lead-free status. If adequate documentation is not found to support that all lead-based paint was identified and abated and clearance was achieved as required, the Authority should complete a lead-based paint inspection of the developments to determine whether they are lead free.

Implement procedures that align with HUD's requirements and controls to ensure that visual assessments for lead-based paint are completed at least every 12 months.

Implement policies and procedures that align with HUD's requirements and controls to ensure that reevaluations are completed when required.

Implement controls to ensure that accurate lead disclosures are provided to prospective and current tenants.

Work with HUD's Office of Lead Hazard Control and Healthy Homes to assess whether the lead-based paint inspections and risk assessments with missing elements are sufficient to support the lead-based paint status of the Authority's properties. If it is determined that the lead-based paint and risk assessment reports are not sufficient, HUD should require the Authority to perform new assessments.

We recommend OCFO and responsible program officials review supporting documentation to verify the accuracy and completeness of reported information prior to publication. Any fatal flaws identified should be communicated timely to OMB to remediate the incorrectly reported information.

Embassy Bucharest should implement a coordination process for the oversight of foreign assistance programming in Romania in accordance with Department guidelines.

Embassy Bucharest should create a fraud prevention strategy in accordance with Department standards.

Embassy Bucharest should maintain and destroy immigrant visa files in accordance with Department standards.

Embassy Bucharest should implement a process to regularly review and update its management policies.

Embassy Bucharest should close out procurement files in accordance with Department standards.

Embassy Bucharest should bring its contracting officer's representative program into compliance with Department standards.

Embassy Bucharest should bring its property management program into compliance with Department standards.

Embassy Bucharest should bring its cashier operations into compliance with Department standards.

The Bureau of European and Eurasian Affairs should provide instructions to Embassy Bucharest on the submittal of financial reports documenting its use of Ukraine supplemental funding.

Embassy Bucharest, in coordination with the Bureau of Administration, should require the Bucharest Employees Recreation Association to request authorization to update the association charter to include processing for official residence expenses payroll and expenses as an approved service.