Open Recommendations

Facility leaders ensure staff label opened multidose medications with expiration dates.

Facility leaders ensure staff store clean and dirty items separately.

The Director ensures staff implement processes to prevent repeat environment of care findings.

The OIG recommends facility leaders ensure the facility has a policy for the communication of test results and staff develop service-level workflows that align with VHA requirements.

Veterans Integrated Service Network 19 leaders assess the staffing needs for the facilitys radiology service and provide additional resources to ensure services are readily available to patients.

Veterans Integrated Service Network 19 leaders evaluate the reasons for delays in uploading images and reporting test results and assist the facilitys community care leaders to mitigate future delays.

Executive leaders monitor root cause analysis improvement actions through completion, monitor outcome measures, and ensure staff implement processes to sustain the improvements.

[Description omitted; DOJ has determined that this recommendation contains information that is limited official use or classified.]

[Description omitted; DOJ has determined that this recommendation contains information that is limited official use or classified.]

[Description omitted; DOJ has determined that this recommendation contains information that is limited official use or classified.]

[Description omitted; DOJ has determined that this recommendation contains information that is limited official use or classified.]

[Description omitted; DOJ has determined that this recommendation contains information that is limited official use or classified.]

[Description omitted; DOJ has determined that this recommendation contains information that is limited official use or classified.]

Conduct a comprehensive review of IAF's software and hardware inventories and update them to ensure that they are accurate and complete.

IAF's Chief Information Security Officer update IAF's procedures to include all elements for tracking the Agency's software and hardware assets. At a minimum these elements should include device type, location, and software license information.

IAF's Chief Information Security Officer conduct a security controls assessment for the two systems identified.

IAF's Chief Information Security Officer develop and implement procedures to hold system owners accountable for conducting security controls assessments and completing system security plans, and document which security controls are assessed and when.

IAF's Chief Information Security Officer update security plans for the two systems identified to include all required components as outlined in NIST Special Publication 800-53.

IAF's Chief Information Security Officer document the controls IAF is responsible for implementing for the external system identified and develop and implement a security plan for the system.

Design and implement monitoring controls to help ensure that password configurations for the FMS-NG
application are in compliance with the FMS-NG Operations Manual [language withheld based on applicable Freedom of Information Act exemptions].

Develop a process for ensuring that all initial and subsequent benefits coverage changes requested by employees are processed timely and accurately.

Develop policies and procedures that include the performance of periodic reviews of employees' Official Personnel Folders to ensure that they are complete and accurate.

Create and enforce written procedures to review all employee onboarding documents, including documentation received for transferred employees and individuals returning to Federal civilian service, to ensure that the documentation is complete and accurate.

Perform and document routine reviews of employees' Official Personnel Folders to verify that payroll and benefits elections are correct, including retirement plan assignments and benefit elections. Take action to correct any errors, including the collection or return of excess employee contributions, when warranted.

Verify that all accountable and sensitive property has been located during the agency's annual self-audit process, including educating employees regarding their responsibility to report damaged, lost, and stolen property immediately after a loss has been identified.