Open Recommendations

Ensure that FDC SeaTac adheres to BOP policy for sanitation and organization in the Health Services Department.

Verify that Our Generation Speaks corrects the instances of material noncompliance detailed on pages 22 to 26 of the audit report.

We recommend that the Grantee develop and implement formal written policies and procedures surrounding the management of Federal awards, in accordance with the Uniform Guidance.

We recommend the Vice President, Chief Information and Digital Officer, Information Technology, implement, assess, and maintain common secure configuration settings for all information systems.

We recommend the Vice President, Chief Information and Digital Officer, Information Technology, incorporate vulnerability scanning into the Continuous Diagnostics and Mitigation dashboard in accordance with Binding Operational Directive 23-01, in coordination with Department of Homeland Security as necessary.

We recommend the Vice President, Chief Information and Digital Officer, Information Technology, refine the profiles periodically based on known risk exposure and residual risk, align cybersecurity profiles with risk strategy, and periodically monitor and report on progress in reaching TVA’s target profile.

We recommend the Vice President, Chief Information and Digital Officer, Information Technology, verify the data and corresponding metadata in the data inventories are subject to the monitoring processes defined within TVA’s Information Security Continuous Monitoring strategy.

The facility Director ensures staff review primary care panel sizes and capacity levels to ensure they are accurate.

The facility Director ensures staff review primary care panel sizes and capacity levels to ensure they are accurate.

Develop a formal contingency plan to mitigate service impacts during major, known disruptions in operations, such as Mardi Gras.

Develop and implement, when needed, a localized retention and succession plan to ensure leadership and operational continuity.

Strengthen oversight to prevent and identify split purchases.

Develop stronger purchase card controls over donated funds to prevent improper purchases.

NSF review the details of the split purchases to determine whether the violations were a
result of a lack of knowledge/misunderstanding or intentional misconduct; and that NSF
address the root cause appropriately.

Document lessons learned from the APMC Chair’s decision to begin Phase C development work prior to formally passing KDP-C and establishing an ABC to the Office of Management and Budget and Congress.

Update Dragonfly’s project plan to reflect baseline commitments.

Ensure SMD maintains adequate levels of UFE to support the Dragonfly project through Phase D.

If DCMA determines that APL’s EVM data is not sufficiently reliable, ensure APL timely implements any recommendations needed to bring the EVM System into compliance.

Ensure the science community is informed of updates to the expected scope and cadence for future New Frontiers missions.

We recommend that USDA re-review the 3,019 applications without documented concurrence and take appropriate action. As appropriate, recover any of the $5,369,000 unsupported questioned costs awarded to the 563 flagged applicants that are determined to be unallowable.

We recommend that USDA recover $914,810 of the remaining $2 million in questioned costs disbursed to applicants that were identified as improper payments during its reconciliation review.

We recommend that USDA identify and incorporate lessons learned and best practices for future programs that may require a non-governmental entity to administer the program. This should include modifying its contracts to receive Treasury approval prior to spending $3,687,272 in questioned costs to disburse Federal program funds by a third-party bank.

Sensitive But Unclassified

Verify that Hand in Hand: Center for Jewish-Arab Education in Israel corrects the two instances of material noncompliance detailed on pages 24 to 26 of the audit report.

Recommendation 1a
We recommend the Architect of the Capitol perform an independent risk assessment to identify
and evaluate potential risks within the agency’s supply chain, including risks related to cybersecurity, geopolitical factors, vendor reliability, and compliance with regulatory requirements. This assessment will allow the agency to determine whether a formal Supply Chain Risk Management program is necessary based on the agency’s unique risk profile.

Recommendation 1b
If deemed necessary based on the outcomes of the assessment performed, develop and
implement a Supply Chain Risk Management program tailored to the identified risks. This may
include implementing or enhancing appropriate controls, vendor…