Open Recommendations

Rec. 1: The DoD OIG recommended that the Commander of the 408th Contracting Support Brigade review and take administrative action, including requiring additional training as necessary, to hold the administrative contracting officer accountable for failing to properly designate contracting officers representatives in accordance with DoD Instruction 5000.72, DoD Standard for Contracting Officers Representative (COR) Certification, March 26, 2015, (Incorporating Change 2, November 6, 2020).

Rec. 2.a: The DoD OIG recommended that the Executive Director of the Army Contracting Command"Rock Island request that the Defense Contract Audit Agency review the allowability, allocability, and reasonableness of the $293.4 million in payments identified in this report, and any subsequent payments made to the contractor for the Logistics Civil Augmentation Program services in support of the Coordinator for Afghan Relocation Efforts Doha.

Rec. 2.b: The DoD OIG recommended that the Executive Director of the Army Contracting Command"Rock Island request a refund from the contractor for any excess payment or arrange for payment to the contractor for any under-billed costs identified by the Defense Contract Audit Agency.

Rec. 2.d: The DoD OIG recommended that the Executive Director of the Army Contracting Command"Rock Island direct and verify that the procuring contracting officer is monitoring the contractors voucher submissions to ensure that they do not exceed the payment requirements outlined in Federal Acquisition Regulation 52.216-7.

Rec. 2.e: The DoD OIG recommended that the Executive Director of the Army Contracting Command"Rock Island review the procuring contracting officers actions for authorizing the contractor to submit additional vouchers without the authority to waive requirements of Federal Acquisition Regulation 52.216-7 or obtaining proof that the contractor had a valid need for additional payments, and take administrative action, as appropriate.

Rec. 2.f: The DoD OIG recommended that the Executive Director of the Army Contracting Command"Rock Island direct the procuring contracting officer to conduct a review of all payments related to telemedicine services, including the $442,294 identified in this report, and determine whether those charges were allowable, allocable, and reasonable. Based on the results of the review, request a refund from the contractor for any excess payment or arrange for payment to the contractor for any under-billed costs identified by the procuring contracting officer and the Defense Contract Audit Agency.

Rec. 3: The DoD OIG recommended that the Commanding General of the Army Materiel Command ensure that the Executive Director of the Army Contracting Command"Rock Island develops and implements procedures to ensure vouchers are reviewed before payment on the Logistics Civil Augmentation Program contract in support of the Coordinator for Afghan Relocation Efforts Doha.

(U) Rec. 1: Recommendation is Classified.

Distribute the 658 PII losses in Sampling Frame 1 to the appropriate component(s) for review to determine whether any losses are moderate, high, or major and, if so, identify and take the proper actions to mitigate those losses.

To prevent future employee errors related to reporting, assessing, and closing PII losses, evaluate the effectiveness of the processes and controls implemented by the Office of Privacy and Disclosure and implement changes as needed.

Update the Breach Response Plan to clearly explain all actions relevant to OIG referrals, such as when managers should use forms related to lost or stolen equipment.

Take appropriate action for the 80 records we identified.

Identify the factors contributing to employee errors during this process and implement appropriate corrective actions.

The Chief, IRS Independent Office of Appeals, should ensure that Appeals employees identify unlawful levies in CDP hearings and revise procedures to direct hearing officers through account research to identify, address and document unlawful levies as part of the verification process.

The Chief, IRS Independent Office of Appeals, should establish procedures requiring hearing officers to compare the posting date of the CDP hearing transaction code with the actual date of the taxpayer’s written request for a CDP hearing. This will assist the hearing officers comply with Recommendation 1.

Provide adequate staff to the O'Fallon Main Post Office, Ballwin Main Post Office, Maryville Gardens Station, Southwest Station, and Clayton Branch to process and deliver all committed mail daily.

Rec. 1: The DoD OIG recommended that the Commander, Air Force Life Cycle Management Center, evaluate the current and future need for the Air Force to provide the delayed missiles to the UAF and institute all appropriate contract actions, which might include modification or termination of the contract, to ensure that all funds, including the $63.7 million allocated to the contract, are put to their best use.

Rec. 2: The DoD OIG recommended that the Commander, Air Force Life Cycle Management Center, require contracting personnel incorporate contractual remedies into production contracts and delivery orders, which might include financial disincentives.

FHFA's DBR should assess the extent to which FHLBanks are relying on redacted ROEs when reviewing membership applications or performing ongoing monitoring.

FHFA's DBR should clarify and reinforce DBR’s expectation to the FHLBanks that they should request and receive from federal and state regulators ROEs that are not substantively redacted, and that other relevant supervisory reports should be collected when necessary.

FHFA's DBR should conduct outreach to federal financial regulators to reinforce the need for compliance with 12 U.S.C. § 1442(a)(1), which requires their production of reports, records, and information relating to the condition of any member of any FHLBank upon request by an FHLBank. As part of this outreach, make clear that such materials extend beyond ROEs, and that materials produced in response to an FHLBank requests should be provided without substantive redactions.

FHFA's DBR should assess the extent to which restrictions on access to state-issued ROEs may hinder the FHLBanks in making fully informed decisions when evaluating applications for membership and when making determinations to limit or deny member requests for advances in accordance with applicable FHFA regulations.

FHFA's DBR should, if applicable, continue to pursue outreach with the Conference of State Bank Supervisors and state regulators to assist FHLBanks in accessing state-issued ROEs.

FHFA's DBR should complete its assessment of the extent of weaknesses in the FHLBanks’ enforcement of members’ material adverse change notification requirements, and provide guidance to FHLBanks on best practices, such as issuing periodic reminders of notification requirements, to help ensure members’ compliance with the FHLBanks’ contractual requirements.

Establish a process to periodically update training with the correct information and links to reports, systems, and tools.

Create a plan to provide recurring refresher training regarding managing workloads for all management staff, including field and regional offices.

Update written training materials with standardized steps and/or checklists for management to follow to ensure they are properly managing workloads and using the correct reports, systems, and tools.

Create one consolidated resource, which includes reports, trainings, systems, and tools, for information used to manage workloads.

Update systems and tools to reflect workload and software/application version changes and improve their compatibility with other systems and tools.

We recommend that the Office of the Chief Information Officer require DOI bureaus and offices to prioritize vulnerability remediation according to risk as defined by the system owner and ensure that all overdue known exploited vulnerabilities are validated and remediated.

We recommend that the Office of the Chief Information Officer review and analyze DOI bureau and office vulnerability scan results against their internal procedures to identify and implement overall improvements across DOI.

We recommend that the Office of the Chief Information Officer query bureaus and offices for all current systems with publicly available interfaces and develop a DOI?wide inventory that maintains IP addressing and service ports, system ownership, and point of contact information.

We recommend that the Office of the Chief Information Officer develop a process whereby all changes to publicly available systems and newly deployed systems are updated in a DOI-wide inventory and included in any security assessments and monitoring.

We recommend that the Office of the Chief Information Officer conduct regular reviews of all open vulnerabilities that are older than the required completion timeframes and ensure that any vulnerabilities that have not been closed are tracked in accordance with Federal requirements.

We recommend that the Office of the Chief Information Officer establish a vulnerability management process that includes using historical data to identify and report vulnerabilities that have persisted beyond required remediation timeframes and sharing the data with bureaus and offices.

We recommend that the Office of the Chief Information Officer require bureaus and offices use available tools to periodically evaluate for vulnerabilities persisting beyond approved timelines and prioritize their remediation.

We recommend that the Office of the Chief Information Officer require bureaus and offices remediate any vulnerabilities persisting beyond the timeframes required by Federal guidelines and Department policies.

We recommend that the Office of the Chief Information Officer require bureaus and offices use updated guidance and resources provided by the Office of the Chief Information Officer, in response to Recommendation 4 of this report, to evaluate and prioritize remediation of vulnerabilities persisting beyond approved timelines.

The Director, Field Collection, SB/SE Division, should issue a memorandum to revenue officers emphasizing the importance of preseizure actions, such as those identified during our review.

The Director, Collection Policy, SB/SE Division, should establish seizure log reconciliation procedures and a uniform set of defined seized property classifications for Form 13719 and the seizure log.

Develop a mechanism to identify all applicable charges when calculating postage due to incorporate into its automated calculations.

Incorporate large and oversized package charges into postage due calculations for return-to-sender packages.

Retroactively invoice return addressees for large package charges that should have been paid.

Electronically link the payment of postage due to the specific packages for which the payments are based.

Further automate the postage due calculation and collection process for undeliverable packages, using weights and dimensions captured by mail processing equipment.

Assess which delivery units need additional equipment, including scales, and provide it to efficiently process return-to-sender packages.

Institute and enforce a policy requiring clerks and managers to restrict access to return packages that exceed the facility's interior capacity or develop other mitigation strategies.

Verify that Tomorrow Youth Organization corrects the instance of material noncompliance detailed on page 18 of the audit report.

Rec. 1.b: The DoD OIG recommended that the Naval Supply Systems Command Assistant Commander for Contracting Management update post-award review checklists that includes clauses to prevent the procurement of seafood from foreign sources and forced or child labor.

Rec. 3: The DoD OIG recommended that the Principal Director, Defense Pricing, Contracting, and Acquisition Policy, develop and implement policy for the DoD acquisition community directing contracting officers to check existing contract vehicles and document exceptions to satisfying requirements through the DoD Coordinated Acquisition Program during acquisition planning for food procurements.