Open Recommendations

The OIG recommends that executive leaders ensure all directories are accurate and provide specific details so veterans can easily navigate the facility.

The OIG recommends that executive leaders implement additional features to aid veterans with sensory impairments to navigate the facility.

The OIG recommends that executive leaders ensure staff train patient escorts on how to effectively communicate with sensory-impaired veterans.

The OIG recommends facility leaders ensure staff secure all medications and the supplies used to administer medications in the Emergency Department.

Confirm timely completion of required training courses for Florida 3 District postmasters and supervisors.

Ensure that FMC Devens Executive Leadership and the Central Office's Human Resource Management Division discuss the staffing projection tool methodology and how it compares with FMC Devens Executive Leadership's understanding of its current and potential future mission needs to ensure greater alignment between stakeholder staffing projections.

Ensure that FMC Devens follows BOP guidance for buprenorphine and naloxone administration and observation and that all FMC Devens employees who administer medication receive training on BOP guidance and policies for medication administration.

Implement a plan to address the medical record backlog at FMC Devens.

Ensure that FMC Devens develops a consistent and accurate medical record tracking procedure with the contracted company that includes regular and recurring reconciliation of outside inmate medical records between FMC Devens and the contracted company.

Ensure that FMC Devens follows the BOP Patient Care Policy for sick call and provides training to all FMC Devens Health Services Department employees on the policy, as well as on FMC Devens sick call procedures.

Ensure that FMC Devens follows the BOP's Clinical Practice Guidelines for Preventive Healthcare Screening to establish a local preventive healthcare program and utilize all members of the healthcare team in preventive healthcare.

Ensure that all FMC Devens inmates over age 50 are receiving preventive healthcare screenings, including cognitive impairment screening.

Ensure that FMC Devens verifies the credential files of all providers prior to allowing them to administer care to inmates, and ensure that FMC Devens completes peer reviews in accordance with BOP policy.

Ensure that inmates admitted to and housed in the Memory Disorder Unit are appropriately placed in accordance with FMC Devens's established criteria.

Ensure that FMC Devens adheres to BOP policy on medical inmate companion screening and hiring and that FMC Devens employees screening and hiring these companions are trained on the policies and procedures.

Ensure that FMC Devens evaluates the roles and responsibilities of medical inmate companions to ensure that they are not performing duties outside the scope of the inmate companion program.

We recommended the CIO: Develop and implement an unambiguous standard operating procedure, utilizing Federal Risk and Authorization Management Program guidance and leading practices, to monitor cloud service providers and escalate non-compliance effectively to the agency Authorizing Official, including defined risk management deficiency triggers.

We recommended the CIO: Develop and implement a validation of the provisioned exemptions to ensure all provisioned exemptions are provisioned appropriately.

We recommended the CIO: Complete in progress efforts to modernize impacted systems and subsequently enable multi-factor authentication.

We recommended the CIO: Enhance the validation process for the quarterly Chief Information Officer FISMA Metrics to ensure all metrics are reported accurately and are in accordance with applicable guidance and standards.

We recommended the CIO: Assign appropriate resources to perform the audit log reviews as required by the system security plan.

We recommended the CIO: Develop, implement, and track privacy-focused, role-based training for employees and contractors with significant privacy responsibilities.

We recommended the CIO: Develop and implement validation controls to ensure users are properly onboarded to LearningLink and assigned required trainings.

Complete a review of Postal Vehicle Service transportation schedules and verify related actions are implemented at the Boston Processing and Distribution Center.

Meet load and unload scan goals consistently at the Boston Processing and Distribution Center.