Open Recommendations

We recommend that the GSA Chief Administrative Services Officer enforce accountability with OAS personnel who did not comply with the FAR, the GSAM, and OIA internal policies in the award of the audited task order.

We recommend that the GSA Chief Administrative Services Officer revise OIA’s Internal Quality Assurance Review policy to reduce delays, and employ a risk-based sampling methodology when selecting contracts for review.

We recommend that the GSA Chief Administrative Services Officer establish an OAS policy to supplement GSA Order ADM 5000.4B, Office of General Counsel Legal Review, to reduce the monetary threshold for legal review commensurate with the monetary values of OIA contracts.

We recommend that BOR immediately suspend the awarding of Inflation Reduction Act funds using miscellaneous obligations.

We recommend that BOR identify and implement additional oversight controls for existing Bucket 2 agreements.

The Chief, Criminal Investigation, should reemphasize body-worn camera policies and procedures to its special agents, specifically highlighting that videos should be timely uploaded into the cloud-based storage platform and reviewed, including those marked for deletion. Also, special agents should be reminded of following pre-operation plans to not deactivate cameras prematurely and maintaining the required documentation certifying completion of training.

The OIG recommends facility leaders develop and implement a plan to address veterans’ unanswered phone calls.

The OIG recommends the Associate Director ensures staff identify environment of care trends and establish performance improvement plans with outcome measures to address them.

The OIG recommends the Associate Director ensures the manufacturer satisfies contractual requirements to perform preventive maintenance for beds and stretchers and documents the service.

The OIG recommends the Veterans Integrated Service Network Director works with facility and primary care leaders to address the network call center’s effect on primary care team efficiency and workload and reduce the risk of adverse patient safety events.

We recommend that the Chief Financial Officer consider incorporating into policy the requirement that justifications for "other special conveyances," such as car service, include clear and delineable reasoning as to why the selected option meets the FTR's "advantageous to the government" standard.

We recommend that USAID/Nigeria verify that Center for Clinical Care and Clinical Research corrects the one instance of material noncompliance detailed on page 23 of the audit report.

We recommend the NOAA Deputy Under Secretary for Operations direct the Assistant Administrators for the NWS and OAR to
develop a detailed implementation plan on how to achieve the TWIEP Plan’s activities using time-bound goals with clear resource expectations, relevant control activities, and performance measures.

We recommend the NOAA Deputy Under Secretary for Operations direct the Assistant Administrators for the NWS and OAR to
develop loss of life and economic loss performance metrics to support performance assessment.

We recommend the NOAA Deputy Under Secretary for Operations direct the Assistant Administrators for the NWS and OAR to
revise existing policies (e.g., Policy on Research and Development Transitions, Products and Services Change Management, Verification, and Termination of NWS Information Services) to evaluate the operational performance impacts associated with research investments that have transitioned to operations.

We recommend the NOAA Deputy Under Secretary for Operations direct the Assistant Administrators for the NWS and OAR to
conduct an assessment of how IDSS risk communication efforts for tornado watches and warnings affect the public’s actions to reduce loss of life or property, and revise the IDSS Policy Directive as appropriate.

We recommend the NOAA Deputy Under Secretary for Operations direct the Assistant Administrator for OAR to conduct an
assessment of existing processes for ensuring the consistent communication of key performance metrics and address identified gaps, such as the inaccurate public-facing GPRA tornado lead-time metric definition.

We recommend the NOAA Deputy Under Secretary for Operations direct the Assistant Administrator for OAR to conduct an
assessment of potential lead-time metrics and determine which approach, or combination of approaches, is best suited for
facilitating representative performance assessment and external oversight.

We recommend that the FEC OCIO update the agency’s SSPP documents and establish a privacy program plan that aligns with NIST SP 800-53, Rev.5.1.1 requirements as required by OMB.

We recommend that the FEC OCIO develop and implement a SCRM strategy, policies, and procedures that align with NIST and as OMB requires.

We recommend the FEC OCIO secure (redacted) by monitoring configuration settings to ensure compliance with STIG security configuration settings as required by the agency’s SSP.

We recommend the FEC OCIO review and monitor STIG security configuration settings for its Server 2 as required by the FECLAN SSP.

We recommend that the FEC OCIO implement STIG security configuration settings for Server 1 in accordance with the agency’s FECLAN SSP. If the agency cannot utilize its directory GPOs, we recommend that the agency use alternative methods.

We recommend that the FEC OCIO conduct regular security scans of Server 1 to verify compliance with STIG security configuration settings in accordance with the agency’s FECLAN SSP.

We recommend that the FEC OCIO reassess and reprioritize resources to identify opportunities to accelerate the remediation of urgent, critical, and high vulnerabilities.