Open Recommendations

We recommend that CBP (related to seized property) redesign and implement controls over the completeness and accuracy of the data used for reporting purposes.

We recommend that CBP (related to seized property) redesign and implement controls, in coordination with ICE, to validate that weights and measures entered into the seized property system are complete and accurate.

We recommend that FEMA implement a continuous quality assurance and grants monitoring process, including review of corrective actions resulting from procedures over obtaining, timely reviewing, and reconciling required quarterly grantee reports and procedures to create and track comprehensive lists of FEMA grants eligible for closeout.

We recommend that DHS continue its corrective actions to address internal control deficiencies in order to ensure full compliance with FMFIA and its OMB Circular No. A-123 approved plan for FY 2019.

We recommend that FEMA implement the recommendations in Comment II-F, Grants Management.

We recommend that DHS reinforce existing policies and procedures through training to strengthen the implementation and effectiveness of preventative controls.

We recommend that DHS define succession and contingency plans for key roles involved in internal control over financial reporting to mitigate risks due to employee turnover.

We recommend that DHS improve the process for identification, analysis, and response to risks related to financial reporting.

We recommend that DHS strengthen monitoring controls over remediating internal control deficiencies.

timely review and approval of SVs; and

The Commissioner, Wage and Investment Division, and the National Taxpayer Advocate should formally develop and document a vision and specific goals for their VSD programs and develop performance measures to monitor and evaluate the performance of the individual programs.

The Commissioner, Wage and Investment Division, and the National Taxpayer Advocate should both conduct public awareness activities to increase taxpayers’ knowledge of the VSD program.

(U) Rec. 1: The DoD OIG recommended that the DoD Chief Information Officer, in coordination with the Under Secretary of Defense for Policy, issue DoD-wide policy implementing the Cybersecurity Information Sharing Act of 2015 requirements, including a requirement for the DoD Components to document barriers to sharing cyber threat indicators and defensive measures and take appropriate actions to mitigate the identified barriers.

Develop and implement a process to assess the knowledge, skills, and abilities of Board staff with significant security responsibilities and establish plans to close identified gaps.

Determine whether established processes and procedures for management of user-access agreements and rules-of-behavior forms for privileged users are effective and adequately resourced and make changes as needed.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

The OIG has determined that the contents of this recommendation would not be appropriate for public disclosure and has therefore limited its distribution to selected officials.

Obtain the necessary OMB approval for the updated FDS 2.0 funds control process.

Obtain the necessary OMB approval for the updated FDS 2.0 funds control process.

The Office of the Chief Information Officer enforce the policy to remediate patch and configuration related vulnerabilities within agency defined timeframes.

The Office of the Chief Information Officer implement a process to detect and migrate unsupported software to supported platforms before support for the software ends.

The Bureau of Consular Affairs, Office of Passport Services, in conjunction with the Bureau of Diplomatic Security, should develop centralized, searchable databases to track and manage passport revocation cases, as well as retentions of passports and other documents seized on suspicion of fraud when citizens apply for consular services, or under other circumstances, and to track confiscations of such documents if they are seized on grounds other than retention authority.