Open Recommendations

FHFA’s Chief Information Officer should disable inactive Active Directory accounts after a period of 35 days of inactivity.

FHFA’s Chief Information Officer should create a Plan of Action and Milestones to establish when the annual Disaster Recovery Procedures for FHFA Production Systems exercise will be conducted and when the new system owners will be assigned and trained on their roles and responsibilities related to FHFA General Support System, Office of General Counsel Matter Management Tracking System, and the FHFA Status Tracking and Reporting system.

FHFA’s Chief Information Officer should schedule and conduct an annual Disaster Recovery Procedures for FHFA Production Systems exercise for the FHFA General Support System, Office of General Counsel Matter Management Tracking System, and the FHFA Status Tracking and Reporting system, and ensure new system owners are trained to execute them.

Rec. 1.a: The DoD OIG recommended that the Under Secretary of Defense (Comptroller)/Chief Financial Officer, DoD, update the anomaly guidance to establish parameters to limit the number of anomaly requests developed and submitted by each Service.

Rec. 1.a.2: The DoD OIG recommended that the Under Secretary of Defense (Comptroller)/Chief Financial Officer, DoD, clarify how the new start constraint applies to existing programs undergoing administrative changes.

Rec. 1.b.1: The DoD OIG recommended that the Under Secretary of Defense (Comptroller)/Chief Financial Officer, DoD, direct the Planning, Programming, Budgeting, and Execution Reform implementation Team to coordinate with the Services, including officials from the program offices, on the current budget execution review process and provide a formal assessment on whether the obligation and expenditure benchmarks should be re-baselined to account for appropriation levels under a continuing resolution.

Rec. 1.b.2: The DoD OIG recommended that the Under Secretary of Defense (Comptroller)/Chief Financial Officer, DoD, direct the Planning, Programming, Budgeting, and Execution Reform implementation Team to develop a process for the Department of Defense to track and communicate to Congress the actual impacts that continuing resolutions have on acquisition programs.

Establish policies and procedures for administrative and financial management including determining the allowability and allocability of costs, record retention, procurement, internal control, tracking of costs by approved budget categories, reconciliation of costs to financial reports, and timely submission of performance progress and financial reports in accordance with the Uniform Guidance and grant agreement.

Work with ARC to resolve the questioned cost totaling $456,942 for ARC funded costs.

Work with ARC to resolve the questioned cost totaling $75,000 for non-ARC matching cost share.

Revise and resubmit the SF-270 and the related reimbursement table to reflect the accurate budget category of Contractual cost instead of Personnel.

Work with ARC to resolve the questioned cost totaling $1,167 for non-ARC Matching cost share

We recommend that the Grantee develop and implement formal written policies and procedures surrounding the management of Federal awards, in accordance with the Uniform Guidance.

We recommend that the Grantee work with ARC, to resolve the $45,000 of questioned costs.

We recommend that the Grantee work with ARC, to resolve the $35,000 of questioned costs.

We recommend that the Grantee work with ARC to resolve $12,775 of unallowed pre-award cost following the resolution of Recommendation 3 as the funds are included as part of the $35,000 questioned in Finding 2025-002.

We recommend that the Grantee develop and implement written policies and procedures surrounding the management of Federal awards; specifically addressing the reasonableness, allocability, and allowability of costs incurred and charged to grants, as required by Federal regulations.

We recommend that the Grantee work with ARC, to resolve the $5,134.

The OIG recommends that the DNFSB update the agency’s DFW Plan to reflect current practices.

The OIG recommends that the DNFSB create supporting implementation guidance with emphasis on staff roles and responsibilities.

The OIG recommends that the DNFSB engage the testing contractor to improve communications with program staff and supervisors regarding random test site selections.

Update its policy to include monitoring Federal Protective Service’s physical security inspections of Agency offices.

Regularly reconcile its list of offices to the Agency's official list of offices to ensure all applicable offices are periodically inspected.

Work with office management to properly resolve the 101 security findings that were improperly remediated.

Revise policy to require that managers document corrective actions.