Open Recommendations

We recommend that the Peace Corps develops a process or mechanism for Peace Corps Medical Officers and other users to report Technical Guidelines that need review, to include a procedure for how the issues will be systematically addressed.

We recommend that the ICE Office of the Chief Information Officer implement all necessary mobile device security settings per guidance from DHS and the Defense Information Systems Agency’s Security Technology Implementation Guides.

We recommend that the ICE Office of the Chief Information Officer develop and implement policies and procedures to ensure source code scans are performed on ICE-developed applications as required.

We recommend that the ICE Office of the Chief Information Officer develop and implement policies and procedures to monitor and block unauthorized network access attempts from mobile devices in foreign locations.

We recommend that the ICE Office of the Chief Information Officer revise and implement policies and procedures to protect ICE-issued mobile devices that have been authorized for use on international travel, per DHS and National Institute of Standards and Technology guidance.

We recommend that the ICE Office of the Chief Information Officer develop and implement policies and procedures to protect ICE-issued mobile devices used by employees permanently stationed outside the United States.

We recommend that the ICE Office of the Chief Information Officer update and implement policies and procedures to ensure mobile devices are sanitized before they are released from ICE custody for disposal.

We recommend that the ICE Office of the Chief Information Officer update and implement clear policies and procedures to ensure all lost and stolen mobile devices are treated as security incidents and the associated incident tickets are routed to the ICE Security Operations Center.

This recommendation is Sensitive But Unclassified.

This recommendation is Sensitive But Unclassified.

Office of Capital Access management should require Houston's and Harris County's management to take appropriate and timely corrective actions to (a) determine if payments related to the total population of 1,797'ERA1 household address groupings with potential duplicative assistance totaling approximately $20'million as of December 31, 2021, from which TOIG identified $98,242 in questioned costs from a sample, were made to eligible beneficiaries in the correct amounts, (b)'identify whether additional ERA1 ineligible and duplicate payments occurred after December 31, 2021 and, if applicable, provide the amount of such payments, and (c)'identify whether ineligible and duplicate payments were made during the entire…

Review and take corrective action as needed for the 83 beneficiaries whose payee applications the Social Security Administration had not resolved in the electronic Representative Payee System; 65 beneficiaries who have payees in the payment record that the Social Security Administration had not recorded in the electronic Representative Payee System; and 63 beneficiaries whose payees’ Social Security numbers were missing on the payment records.

Improve controls to ensure employees resolve electronic Representative Payee System alerts, resolve pending representative payee applications in the electronic Representative Payee System, and properly establish or record the payees in the electronic Representative Payee System, such as establishing a timeframe for resolving alerts and management controls such as supervisory review to monitor unresolved alerts.

Note: We did not make a formal recommendation for this report. However, we are claiming cost savings. The following is the language we used in the Tracking Sheet we submitted to the agency. We identified 189 beneficiaries in current, suspended or terminated payment status whose names and ages were consistent with individuals listed as missing persons in the National Missing and Unidentified Persons System (NamUs). SSA issued the beneficiaries approximately $11.9 million in payments after the individuals’ dates of last contact reported in NamUs and we estimate SSA will issue an additional $2.1 million in payments to the beneficiaries in…

Revise its risk-management policy to include specific guidelines requiring that Agile teams manage risks at the team, workstream, and product levels. The policy should align with the principles of transparency, traceability, and responsiveness that are essential for Agile methodologies. The Agency should place special emphasis on ensuring the timely and accurate dissemination of emerging risks throughout the project.

Ensure teams use the risk management capabilities in the Agile project management software to cover all identified risks and provide comprehensive access and a view of all risks identified in the Investment Management Tool to all team members.

Evaluate and update Agile quality assurance checklists to include product backlog health, risk/issue traceability, and data integrity in the Agile project management software. Checklists should focus on quality assurance indicators for all areas, including user stories, that are more outcome-based and drive continuous improvement.

Update the quality assurance checklist for sprint planning to review low-level tasks for multiple owners if they occur frequently. This does not apply to other product backlog item types, such as user stories.

VHA chief financial officer establish and implement guidance for quality assurance measures over the data used to develop and justify the ambulatory care budget estimate.

The under secretary for health ensure the deputy under secretary for health provides oversight and holds the Office of Finance accountable for developing, documenting, and implementing standard operating procedures to include defining roles and responsibilities and requirements for oversight and quality assurance for development of the ambulatory care budget estimate.

The under secretary for health implement the Veterans Health Administration Data Governance Council, to include developing policies and processes for data management across the Veterans Health Administration.

The under secretary for health ensure Veterans Health Administration Data Governance Council identifies authoritative data sources and nominates data stewards for approval by the VA Data Governance Council.

Recover approximately $3.7 million from the contractor for transportation overcharges.

Develop a training for all sorting and delivery center supervisors specific to the network changes/impacts, including techniques to properly supervise route performance, and require all sorting and delivery center supervisors to complete.

We recommend the Natural Resources Conservation Service, in coordination with the EnterpriseGeospatial Management Office, develop and use an applicable geospatial data standard for the National Cooperative Soil Survey Soil Characterization database dataset.