Open Recommendations

(U) Rec.10.a2: This recommendation is classified

(U) Rec. 10.b1: This recommendation is classified

(U) Rec. 10.b2: This recommendation is classified

(U) Rec. 11: This recommendation is classified

(U) Rec. 12: This recommendation is classified

(U) Rec: 13.1: This recommendation is classified

(U) Rec. 13.2: This recommendation is classified

(U) Rec. 14.a1: This recommendation is classified

(U) Rec. 14.a2: This recommendation is classified

(U) Rec. 14.a3: This recommendation is classified

(U) Rec. 14.b1: This recommendation is classified

(U) Rec. 14.b2: This recommendation is classified

(U) Rec. 14.b3: This recommendation is classified

(U) Rec. 15.1: This recommendation is classified

(U) Rec. 15.2: This recommendation is classified

(U) Rec B.1: Recommendation is classified.

(U) Rec B.2: Recommendation is classified.

Rec. 1.b: The DoD OIG recommended that the Chief Digital and Artificial Intelligence Officer coordinate with the Director of Administration and Management to review existing guidance to determine which should be canceled or incorporated into DoD Directive 5105.UW and DoD Instruction 8410.dd, and then approve DoD Directive 5105.UW and DoD Instruction 8410.dd.

We recommend that EAC management document policies and procedures for all significant process areas; including outlining the responsibilities of EAC personnel and the responsibilities of EAC’s service providers.

We recommend that EAC management ensure that all management and personnel, directly and indirectly responsible for performing processes outlined, have read, and understand the documented policies and procedures.

We recommend that EAC management perform periodic review of policies and procedures, and policies and procedures are updated in a timely manner.

We recommend that EAC management develop process narratives to assist new and transitioning personnel in understanding their scope of responsibilities and job function as well as help management perform review.

The assistant secretary for information and technology and chief information officer improve vulnerability management processes to ensure all vulnerabilities are identified and that plans of action and milestones are created for vulnerabilities that cannot be mitigated by VA deadlines.

We recommend that USAID/Uganda verify that The AIDS Support Organization Uganda Limited provides Uganda Protestant Medical Bureau with a copy of the audit report for their review and to take any corrective action regarding the one instance of material noncompliance identified on pages 37 and 38 of the audit report related to the subawards.

We recommend that USAID/West Africa verify that West African Health Organisation corrects the two material weaknesses in internal control detailed on pages 17 and 18 of the audit report.