Open Recommendations

Analyze MidFirst's resolution of the manual process issues identified during its 2022 quality control review to verify that it remedied the borrowers or HUD and corrected the issues identified related to manual processing.

Require MidFirst to update its policies and procedures to comply with HUD requirements by placing foreclosure holds for loss mitigation requests made before the first legal filing.

We recommend that USAID/Zimbabwe verify that Mavambo Orphan Care Trust corrects the four instances of material noncompliance detailed on pages 28, and 33 to 36 of the audit report.

We recommend that the Acting Chief Operating Officer for FSA—Develop and implement controls to ensure policies and procedures related to the time frames for draft final audit determination letters for close-out audits, Missing Audit PRRs, and PRRs for closed school loan discharges are followed and completed timely, including updating policies and procedures to reflect the risk-based approach FSA uses to prioritize its oversight of IHEs participating in Title IV programs.

We recommend that the Acting Chief Operating Officer for FSA— Establish and review performance measures and indicators for the timely issuance of draft final audit determination letters for close-out audits of closed IHEs, Missing Audit PRRs, and PRRs for closed school loan discharges.

We recommend that the Acting Chief Operating Officer for FSA—Evaluate whether the staffing level assigned to final audit determinations for close-out audits of closed IHEs, Missing Close-Out Audit Program Reviews, and Closed School Loan Discharge Program Reviews is sufficient to timely and effectively assess liabilities for IHEs that close, and if not, develop and implement a plan of action to address the issue.

We recommend that the Acting Chief Operating Officer for FSA—Develop and implement controls to ensure SPD closed school analysts provide FSA closed school stakeholders with required notifications, including the Acknowledgement of Intent to Close notice and the Closed School Email Alert; or specify in its policies and procedures situations that do not require the notifications.

We recommend that the Acting Chief Operating Officer for FSA—Evaluate whether the staff assigned to issue the Acknowledgement of Intent to Close notice, Closed School Email Alert, and Close-Out Reminder letter is sufficient to timely and effectively notify FSA closed school stakeholders and closed IHEs, and if not, develop and implement a plan of action to address the issue, including updating the policies and procedures to align with FSA’s priorities, available staffing levels, and prescribed time frames as necessary.

We recommend that the Acting Chief Operating Officer for FSA—Establish and review performance measures and indicators for the timely issuance of the Acknowledgement of Intent to Close notice, Closed School Email Alert, and Close-Out Reminder letters.

Develop and execute a comprehensive plan to improve the transportation performance at the Richmond Regional Processing and Distribution Center and monitor progress.

Work directly with Richmond Regional Processing and Distribution Center processing and logistics managers to develop and execute a plan to improve scanning compliance and monitor progress.

Direct the Richmond Regional Processing and Distribution Center plant manager to enforce Postal Service attendance policy. In addition, monitor the progress and actions taken to address attendance.

We recommend that the NRC OCIO management, in coordination with OCHCO and ADM, evaluate the NRC’s separation policies and procedures and re-engineer the related business processes and the automation used to disable separated employees’ accounts to ensure that the NRC terminates these accounts in a timely manner.

We recommend that the NRC’s TTC management install a server cage on the second floor of the facility for the NRC Information Technology Infrastructure Patch Panel.

We recommend that NRC management define and implement a risk-based process for regularly reviewing users who have badged access to the NRC general access group and restricting badged access to the Regions based on business needs.

We recommend that NRC management perform a risk-based analysis of the practice of allowing users to have general badge access to multiple NRC facilities. As a part of this risk-based analysis, NRC management should define, document, and implement mitigating controls that reduce the potential impact of having users with badged access to multiple facilities.

The Carl T. Hayden Medical Center Director ensures that supervisory staff take effective actions to correct clinical deficiencies.

The Carl T. Hayden Medical Center Director identifies electronic health records containing the dermatologists misuse of copy and paste and takes action as warranted to ensure the safety of patients.

The Carl T. Hayden Medical Center Director ensures that service chiefs and patient safety staff report instances of misuse of copy and paste to Health Information Management System staff.

The Carl T. Hayden Medical Center Director ensures a comprehensive review is conducted to determine if the dermatologist documented electrodesiccation and curettage procedures that were not performed and takes action as warranted, including providing patients with clinical care and disclosures if needed, and notifying the Office of Inspector General.

The Carl T. Hayden Medical Center Director ensures that the Chief of Staff is aware of and addresses pervasive deficiencies, when they exist, in clinical care provided at the facility.

The Desert Pacific Healthcare System Network Director evaluates reasons for noncompliance with the state licensing board reporting policy with regard to the dermatologist, and takes action as needed.

The Carl T. Hayden Medical Center Director ensures that a dermatologist conducts a review of the dermatologists patients with consideration of the concerns laid out in this report, to identify patients who may need follow-up care and disclosures, and takes action as warranted.

The Carl T. Hayden Medical Center Director reviews with facility leaders, disclosure requirements outlined in VHA Directive 1004.08, Disclosure of Adverse Events to Patients.

[Description omitted; CSOSA has determined that this recommendation contains information that is limited official use or classified.]