Open Recommendations

5. We recommend that the Under Secretary for International Trade require staff to consistently track and update case information in Salesforce to ensure that it is accurate and complete.

6. We recommend that the Under Secretary for International Trade develop and publish policies and procedures reauiring supervisors to validate that sufficient evidence exists in Salesforce to warrant reporting as a Written Impact Narrative.

7. We recommend that the Under Secretary for International Trade establish objective performance measures to accurately assess and report ITA's progress in preventing, reducing, and removing foreign trade barriers.

8. We recommend that the Under Secretary for International Trade include a separate performance measure for reporting trade barriers that were prevented, reduced, and removed each fiscal year to show stakeholders ITA's effectiveness in assisting U.S. companies in resolving foreign trade barriers.

We recommend ICE’s Chief Information Officer require the immediate removal of applications that are prohibited by DHS policy, as well as risky and unneeded applications.

We recommend ICE’s Chief Information Officer immediately assess whether and to what extent risky applications resulted in breaches of sensitive information.

We recommend ICE’s Chief Information Officer immediately implement a process to assess and reduce risks of user-installed applications on ICE-managed devices.

We recommend ICE’s Chief Information Officer develop and implement a process to ensure all third-party messenger applications allowed to be used for official duties are up to date with the latest security updates.

We recommend ICE’s Chief Information Officer update ICE’s mobile device use policy to align with current DHS requirements and industry best practices.

We recommend the DHS Chief Information Security Officer determine whether similar issues exist for other DHS agencies and take immediate appropriate actions as appropriate.

The Under Secretary for Health evaluates whether low-dose computed tomography lung cancer screenings sent through VA community care have quality assurance practices in place that ensure timely reporting of results to VA facilities consistent with other cancer screenings that are sent through the community care program and takes corrective action to address any identified deficiencies.

We recommend the Plan update its system and procedural controls for its claims processing system.

We recommend that the Plan ensure that appropriate copayments are applied to claims as defined in the FEHBP benefit brochure.

We recommend that the Plan ensure that benefits are properly coordinated, when applicable, with Medicare benefits.

We recommend that the Health Resources and Services Administration perform postpayment reviews of 108 renal dialysis providers that attested to and kept automatic PRF payments totaling $58 million and recoup any outstanding overpayments from these providers.

We recommend that the Health Resources and Services Administration perform postpayment reviews of 58 providers with multiple subsidiary organizations that attested to and kept automatic PRF payments totaling $130 million and recoup any outstanding overpayments from these providers.

We recommend that the Health Resources and Services Administration perform postpayment reviews of 642 providers that attested to and kept $165 million in automatic PRF payments for which they were not eligible and recoup any outstanding overpayments from these providers.

We recommend that the Health Resources and Services Administration commit to strengthening its procedures that may apply to future programs of a similar nature to better ensure that; providers receive their intended share of financial assistance; financial assistance payments are properly calculated; data and data sources are appropriate, current, complete, and accurate, and revisions are made when necessary for calculating financial assistance; and all available data sources are utilized to identify ineligible providers and prevent them from receiving financial assistance.

Sensitive information redacted

Sensitive information redacted

We recommend that the CBP Senior Official Performing the Duties of the Commissioner designate an official or group to be responsible for implementing the requirements of the Synthetic Opioid Exposure Prevention and Training Act and: • issue a component-wide policy to the CBP workforce to safely handle potential synthetic opioids; • make personal protective equipment and opioid receptor antagonists, including naloxone, available and readily accessible to all personnel at risk of exposure to opioids; and • require initial and recurrent training for all at-risk personnel on the risk of opioid exposure and how to access and administer naloxone.

We recommend that the Deputy Assistant Secretary instruct PRDOH to implement a process to regularly conduct fraud risk assessments and determine a fraud risk profile. The fraud risk profile should include key findings and conclusions from the risk assessment, including the analysis of the types of fraud risks, their perceived likelihood and impact, risk tolerance, and the prioritization of risks.

We recommend that the Deputy Assistant Secretary for Grant Programs evaluate PRDOH's risk exposure and tolerance as part of HUD's program-specific fraud risk assessment for disaster grant programs.

We recommend that the Deputy Assistant Secretary for Grant Programs coordinate with HUD's Chief Risk Officer to (1) provide training and technical assistance to PRDOH with a focus on the design, implementation, and performance of fraud risk assessments, and (2) establish a fraud risk management framework for the organization.

We recommend that the Deputy Assistant Secretary for Grant Programs assess whether grantees have mature fraud risk management programs within the disaster recovery and mitigation programs.