Open Recommendations

(U) Rec. 5.b: The DoD OIG recommended the Defense Security Cooperation Agency Director: Revise the Security Assistance Management Manual to reflect the role that the Security Cooperation Information Portal-End Use Monitoring Help Desk plays in maintaining responsibility for updating the Security Cooperation Information Portal-End Use Monitoring database with barcode scanner data, in accordance with current procedures and authorities.

(U) Rec. 5.c: The DoD OIG recommended the Defense Security Cooperation Agency Director revise the Security Cooperation Information Portal-End Use Monitoring database to verify whether the next inventory accurately populated as annual rather than initial when inventories are conducted before the serial number is provided by the Military Department implementing agencies.

We recommend the CISA Director establish and implement a written Memorandum of Understanding with EPA to fully document each agency’s roles and responsibilities and mechanisms for collaboration.

We recommend the CISA Director develop and implement comprehensive policies and procedures regarding its collaboration with EPA and other Water and Wastewater Systems Sector stakeholders. These policies and procedures should address: • the Water Sector Liaison’s roles and responsibilities; • what information should be shared with stakeholders; • how often and when divisions should coordinate their communications; and • how best to facilitate information sharing about cyber threats, vulnerabilities, incidents, potential protective measures, and best practices, in both routine and urgent circumstances.

We recommend the CISA Director have an agency-wide requirement to develop and implement standard operating procedures to improve regular communication among CISA divisions relevant to the Water and Wastewater Sector or other critical infrastructure Sectors and share that information and updates on projects, decisions, and lead roles and responsibilities related to the Water and Wastewater Systems Sector and other sectors as appropriate.

Strengthen the Parcel Return Service manifest verification process by incorporating the facility type as a required parameter.

Develop and maintain an accurate list of active return delivery units in the Facilities Database.

Enhance the Parcel Return Service refund review process to include an automated validation to verify that refunds are warranted, including an assessment of whether the return delivery units that received the packages were active at the time of mailing.

The Chief, FMSS, should ***** **** *** ** **** *** *************** ** ******* ****** ***** ******** ******** *************** *** ********* ******* *** **********

The Chief, FMSS, ****** ********** **** *** ******* ******** ************** ****** *********** **** ** ********* ********** *** *** ******** ****** ** *** *** * *** ** ******* ******** ** **** *** ** *** ******** *** *** ********* * *** **** ** *** ******** ** ******* *** ******* ******* ******* ** ******** **** ***********

The Chief, FMSS, ****** ********** **** *** *** ** ******** ****** ******** ******* ******** ****** **** *** ****** ** ********* ***** *** ******* ******* ****** **************** *** **** ******* **** ********** ** ******** *** *********** ****** *** ***** ********** **** ************ ******* ************ ** ******** **** ***********

The Chief, FMSS, should ****** **** ************ ****** **** *** *** *** *** ******** ****** ** ******* ** ********** ****** ******* ****** ** **** ****** ****** ** ******* ******** *** ******** ****** ** ******** ***** *** ******* ********* ** *** ***** ** ******** **** ***********

The Chief, FMSS, should ****** **** ************ ****** **** *** *** *** *** ******** ****** ** ******* ** ********** ****** ******* ****** ** *** ****** ***** ** *** ******** ********* ** ******* ******** *** ******** ****** ** *** ******** **** *** ******* ** ******** **** ***********

CDC should take further steps to ensure the quality of nursing home reporting of COVID-19 data to NHSN.

CDC should consider how quality assurance checks can be enhanced to ensure data accuracy, as appropriate.

CDC should improve the user support the NHSN Help Desk provides to nursing homes.

Risk Management

Risk Management

Identity and Access Management

Identity and Access Management

We recommend that Cahaba Government Benefits Administrators, LLC, work with CMS to ensure that its final settlement of contract costs reflects a decrease in Medicare PRB costs of $1,085,470 for CYs 2017 through 2019.

We recommend that Cahaba Safeguard Administrators, LLC, work with CMS to ensure that its final settlement of contract costs reflects a decrease in Medicare PRB costs of $9,806 for CYs 2017 through 2019.

The Under Secretary for Health ensures the identified national program office responsible for oversight of alcohol withdrawal management consider requiring the development and implementation of written guidance for the management of alcohol withdrawal across all inpatient settings, to include: (a) expectations for determining alcohol withdrawal severity, level of care, and when transfer of care is indicated; (b) expected actions of nurses to communicate with prescribers based on patients’ changes in symptoms or alcohol withdrawal severity and when that communication should be followed by a prescribers face-to-face evaluation of a patient; (c) expectations for the evaluation of co-occurring conditions, expert consultation…

The Under Secretary for Health consider the implementation of training for inpatient staff on the administration of standardized alcohol withdrawal severity scales.

Re-evaluate aged seized digital assets to consider whether risks of misstatement related to accurate valuation, existence, and ownership of assets have been adequately addressed considering the evolving nature of digital asset seizures. Based on the results of the evaluation, design and implement processes, procedures, and controls to appropriately account for aged digital assets. (New)