Open Recommendations

Develop a comprehensive communication strategy for a new loyalty program that promotes awareness of functionality for prospective, and once enrolled, ongoing customers.

Conduct an evaluation of customer spending requirements and discounts, related to any future loyalty program, to ensure the program's design promotes customer engagement and shipping growth

Involve all participating federal components in a review of its KPIs, revise those KPIs that need clarification, include disincentives where appropriate, retain supporting documentation on the development of the performance measures, and work with Leidos to modify the contract.

Implement procedures to conduct periodic assessments to determine how current KPIs could be modified and whether new KPIs should be added to adequately address the government's need.

Develop procedures for future acquisitions that fully engage federal components in ensuring their
concerns are adequately addressed prior to contract award and that includes controls to review and
ensure the contract structure meets participating components' mission requirements.

Work with Leidos to ensure its monthly status reports accurately summarize its performance,
technical progress, and challenges, as required.

Implement procedures to ensure federal components review and identify inaccuracies and
incompleteness in Leidos' monthly status reports.

Implement procedures to perform forecasting and risk assessments with the program owners
during the acquisition planning phase and throughout the task order performance, in compliance
with the FAR.

Document and implement a process to validate that server policies and/or related automated scripts are configured and running as desired when introducing a new server to the NCUA information technology environment.

We recommend that the NPS develop and implement policies and procedures that provide guidance for appropriately estimating the cost of maintenance projects.

We recommend that the NPS include accurate estimates for all existing and future work orders based on the guidance developed under Recommendation 5.

The auditors recommend that Chief Information Officer require the Department and FSA to take immediate correctiveactions to implement enhanced monitoring procedures to allow for timely review of system authorization packages andappropriate authorization prior to submission into CSAM.

The auditors recommend that the Chief Information Officer require the Department to develop and implement an effectivequality control review process for its policies and procedures.

The auditors recommend that the Chief Information Officer require the Department and Federal Student Aid to takeimmediate corrective actions to remove users from the PIV exempt list.

The auditors recommend that the Chief Information Officer require the Department to take immediate corrective actions forestablishing quality control policies, procedures, and additional processes to ensure that user onboarding, elevated andnon-elevated user access forms are properly completed, tracked, and maintained for records.

The auditors recommend that the Chief Information Officer require that the Department and FSA to take immediatecorrective actions to ensure appropriate resources and funding are available and dedicated to complete implementation ofthe required EL1 and EL2 event logging maturities.

The auditors recommend that the Chief Information Officer require the Department to update Department PIA processes,quality control procedures, and monitoring controls to validate, track, and enforce the timely completion and review ofPIAs.

Develop clear guidance on running business reports out of Community Affairs Reporting and Events System, including the use of filters.

We recommend that the Kentucky Cabinet for Health and Family Services, Department for Medicaid Services file invoices for and collect from manufacturers rebates totaling $15,611,770 ($11,209,642 Federal share) for single-source and top-20 multiple-source physician-administered drugs and refund the Federal share of rebates collected.

We recommend that the Kentucky Cabinet for Health and Family Services, Department for Medicaid Services strengthen its internal controls to ensure that all eligible physician-administered drugs are invoiced for rebate.

We recommend that the Kentucky Cabinet for Health and Family Services, Department for Medicaid Services ensure that all physician-administered drugs eligible for rebates after our audit period are processed for rebates.

We recommend that the Kentucky Cabinet for Health and Family Services, Department for Medicaid Services work with CMS to determine whether the other claims for multiple-source physician-administered drugs, totaling $5,967,128 ($4,281,678 Federal share), were eligible for rebates and, if so, determine the rebates due and, upon receipt of the rebates, refund the Federal share of the rebates collected.

We recommend that Novitas Solutions, Inc., work with CMS to ensure that its final settlement of contract costs reflects a decrease in Medicare nonqualified costs of $84,291 for CYs 2016 through 2018.

Bureau for Asia coordinate with USAID/Regional Development Mission for Asia, USAID/Central Asia Regional, and USAID/Philippines, Pacific Islands, and Mongolia to review and revise each mission's procedures to incorporate guidance on integrating C-TIP during strategy, project, and activity design.

Bureau for Asia coordinate with USAID/Regional Development Mission for Asia, USAID/Central Asia Regional, and USAID/Philippines, Pacific Islands, and Mongolia to review and revise each mission's mission orders to incorporate guidance on designating C-TIP Coordinators, assigning responsibilities, and using C-TIP Coordinators. As part of this review, each mission should (1) designate C-TIP Coordinator(s) in its mission orders and (2) insert C-TIP Coordinator responsibilities into the position descriptions and annual work objectives for designated C-TIP Coordinators.