Open Recommendations

The Oklahoma City VA Health Care System Director ensures that routine non-gynecological turnaround time corrective actions are documented and monitored for effectiveness, as required by the Veterans Health Administration.

The Oklahoma City VA Health Care System Director conducts a comprehensive review of the quality of care provided by the Chief of Pathology and Laboratory Medicine Service, identifies deficiencies, and takes action as warranted.

The Oklahoma City VA Health Care System Director reviews the Pathology and Laboratory Medicine Service event reporting requirements for variance events and ensures completion according to facility policy and Veterans Health Administration requirements.

The Oklahoma City VA Health Care System Director, in conjunction with the National Center for Patient Safety, evaluates patient safety event reporting processes within the Pathology and Laboratory Medicine Service, and ensures completion according to Veterans Health Administration requirements.

Perform and document a risk assessment over the Revenue Accounting & Reporting (RAR) tool to identify risks related to the completeness and accuracy of data being pulled as inputs and the validity of the tool's calculations.

Design and implement control activities to mitigate the risks identified and to ensure all inputs are accurate and the resulting calculations are correct, in accordance with Accounting Standards Codification No. 2014-09, Revenue from Contracts with Customers (Topic 606).

(U) Rec. 1: Report is Classified.

(U) Rec. 2: Report is Classified.

(U) Rec. 3: Report is Classified.

(U) Rec. 4: Report is Classified.

(U) Rec. 5: Report is Classified.

(U) Rec. 6: Report is Classified.

Implement vulnerability management processes to ensure all vulnerabilities are identified and plans of action and milestones are created for vulnerabilities that cannot be mitigated by VA deadlines.

Implement a more effective baseline configuration process to ensure network devices and databases are running authorized software that is configured to approved baselines and free of vulnerabilities.

Perform a cost-benefit analysis and implement appropriate controls within the federal Electronic Health Record to limit disclosure of veteran personally identifiable information based on job responsibility.

Segregate the duties of maintaining key stock and making keys.

Place network infrastructure equipment in a communications closet or approved enclosure to restrict access to only authorized personnel.

Complete the installation of grounding measures for all telecommunications closets to protect information technology equipment against electromagnetic pulse attack or electrostatic discharge. Ensure the work completed by contractors adheres to the requirements as defined in the work order.

Enforce the requirement for unit management to monitor fuel card purchases, including annotating all high-risk fuel transactions with an appropriate comment.

[Description omitted; CSOSA has determined that this recommendation contains information that is limited official use or classified.]

[Description omitted; CSOSA has determined that this recommendation contains information that is limited official use or classified.]

[Description omitted; CSOSA has determined that this recommendation contains information that is limited official use or classified.]

[Description omitted; CSOSA has determined that this recommendation contains information that is limited official use or classified.]

[Description omitted; CSOSA has determined that this recommendation contains information that is limited official use or classified.]

[Description omitted; CSOSA has determined that this recommendation contains information that is limited official use or classified.]