Open Recommendations

We recommend the Executive Associate Director for Management and Administration recover any monies, including the $408,875 identified in this report, determined to have been paid toward inaccurate charges or costs not supported by documentation.

We recommend the Executive Associate Directors for Enforcement and Removal Operations and Management and Administration determine the reasonableness of the amount and frequency of standby bus charges.

The Peace Corps develops a strategy and structure that integrates information security into the agency’s business operations. This should include an established responsibility for assessing information security risks in all agency programs and operations and providing this analysis to senior leadership, including the ERM Council, for decision-making.

The Peace Corps include the CISO at the ERM Council meetings to provide insights on cybersecurity risks.

The Peace Corps further define and implement the ERM program to ensure information security risks are communicated and monitored at the system, business process, and entity levels.

The Peace Corps improve its incident response process to ensure incidents are properly defined, promptly identified, and effectively remediated.

The Peace Corps consistently improve and implement its inventory management process to ensure information system, hardware, and software inventories are accurate, complete, and up to date.

The Peace Corps improve its vulnerability and patch management processes by consistent and timely remediation of critical and high vulnerabilities as well as patching.

The Peace Corps complete and fully implement an identity credential and access management program.

Review and recover the questioned CFAP payments of $1,286,786 resulting from inaccurate and/or unsupported producer certifications.

This recommendation contains sensitive information that should not be made public. Therefore, we are not including the wording for this recommendation.

This recommendation contains sensitive information that should not be made public. Therefore, we are not including the wording for this recommendation.

This recommendation contains sensitive information that should not be made public. Therefore, we are not including the wording for this recommendation.

This recommendation contains sensitive information that should not be made public. Therefore, we are not including the wording for this recommendation.

This recommendation contains sensitive information that should not be made public. Therefore, we are not including the wording for this recommendation.

We recommend the Principal Deputy Assistant Secretary for Employment and Training obtain direct access to unemployment insurance claims data from all State Workforce Agencies.

We recommend the Principal Deputy Assistant Secretary for Employment and Training create an integrity program that incorporates a data analytics capability and regularly monitors state unemployment insurance claims data to detect and prevent improper payments, including fraudulent payments, and to identify trends and emerging issues that could negatively impact the unemployment insurance program.

We recommend the Principal Deputy Assistant Secretary for Employment and Training establish effective controls, in collaboration with State Workforce Agencies, to mitigate fraud and other improper payments to ineligible claimants in high-risk age categories.

Assess the current regional banking organization supervision framework and determine whether adjustments should be made based on a supervised institution’s size and complexity, such as unique or concentrated business models or rapid growth. Based on the determination, develop and implement training for RBO Supervision staff that emphasizes the need for varying approaches based on an institution’s size, complexity, and business model.

Assess whether the Bank Exams Tailored to Risk models are appropriate for regional banking organizations, specifically those that are large or complex or that present unique risk factors such as concentrated business models or rapid growth, and determine whether a different approach to determining the scope and resources for examinations is needed.

Assess the current regional banking organization supervisory planning process and implement measures to tailor supervisory plans to better promote a timely focus on salient risks.

Develop an approach for transitioning institutions from the regional banking organization (RBO) portfolio to the large and foreign banking organization (LFBO) portfolio and determine how best to involve LFBO Supervision earlier, such as through joint reviews with RBO Supervision, and how to more timely form a dedicated supervisory team. Based on the approach developed, finalize and issue formal guidance on transitioning RBOs to the LFBO portfolio that includes steps and a timeline for forming a DST, approaches for the two Supervision sections to collaborate, and a list of potential RBO and LFBO joint reviews to conduct to better prepare an…

Reiterate to examination teams the purpose of the Risk and Surveillance Sections’ reports and the need to closely reflect on their contents to help inform their ongoing supervisory activities.

Implement technology improvements and demonstrate progress to ensure the accuracy and completeness of information on the hypertension summary sheet.

Implement an improved quality assurance process and monitor the results to ensure the accuracy of hypertension summary sheets and final decisions.