Open Recommendations

Review all NARA facilities’ Plans annually to ensure they include allrequired minimum elements and that the Plans are reviewed annually by their respectivefacility director/administrator and Records Emergency Management Team (REMT)

Implement consistent controls across all facilities to maintain evidenceof annual review of the Plans by the facility director/administrator and REMT

Finalize and implement any remaining risk matrices for vulnerableaudio and video formats

We recommend that the Illinois Department of Healthcare and Family Services remediate the four security control findings identified by OIG.

We recommend that the Illinois Department of Healthcare and Family Services develop and implement flaw remediation policies and procedures for effectively identifying vulnerabilities, prioritizing them based on potential impact and exploitability, and remediating them within a defined timeframe as required by NIST SP 800-53, SI-2, Flaw Remediation, or other standards governing security of Federal systems and information.

We recommend that the Illinois Department of Healthcare and Family Services enhance its testing procedures to include performing more robust technical testing of web-facing systems and emulation of an adversary's tactics and techniques on a defined reoccurring basis, in order to better assess the effectiveness of NIST SP 800-53 controls.

Rec. 1.b: The DoD OIG recommended that the Commander of Naval Support Activity Naples monitor the contractor's execution of the contracted radon testing services for all Government-owned and Government-controlled unaccompanied housing and nonresidential facilities, including the 10 rooms with continued elevated radon levels, to ensure that adjustments to the radon mitigation systems resolve the elevated radon levels and the required testing is performed.

Rec. 3.a: The DoD OIG recommended that the Deputy Assistant Secretary of Defense for Housing develop and implement policy to ensure DoD personnel living in non-Government-Owned and Government-Controlled off-base housing are made aware of known elevated radon levels at installations outside the continental United States.

Rec. 3.b: The DoD OIG recommended that the Deputy Assistant Secretary of Defense for Housing conduct a review to determine whether the DoD has the authority to provide at-home radon test kits to DoD personnel living in non- Government-Owned and Government-Controlled off-base housing at installations outside the continental United States.

Rec. 3.c: The DoD OIG recommended that the Deputy Assistant Secretary of Defense for Housing, if the DoD determines it has the authority to provide at-home radon test kits, issue guidance to the Services on providing at-home radon test kits to DoD personnel living in non-Government-Owned and Government-Controlled off-base housing at installations outside the continental United States.

We recommend that FSA’s Acting Chief Operating Officer require FSA to establish objectives for returning borrowers torepayment in specific and measurable terms that are easily understood and allow for the assessment of performancetoward achieving objectives.

We recommend that FSA’s Acting Chief Operating Officer require FSA to establish effective quantitative or qualitativeperformance measures and indicators for returning borrowers to repayment.

We recommend that FSA’s Acting Chief Operating Officer require FSA to ensure that appropriate control activities aredesigned and implemented to assess FSA's performance in returning borrowers to repayment, such as reviews ofperformance measures and indicators; comparing achievements to plans, goals, and objectives; and comparing actualperformance to planned or expected results.

EXIM’s Office of Human Capital should conduct a staffing needs analysis for its office to determine the appropriate staffing levels needed to support a human capital function in alignment with federal regulations and guidance and develop a plan to implement the results of its assessment.

EXIM’s Office of Human Capital should establish an EXIM working group to research and provide recommended solutions to standardize, streamline, and track processes, including the hiring process.

EXIM’s Office of the Chair should identify the human capital functions that affect EXIM’s ability to achieve its mission and develop a plan to measure and mitigate risks.

EXIM’s Office of the Chair, in collaboration with EXIM’s Office of Human Capital, should conduct an agency-wide culture assessment to identify ways to improve EXIM’s culture, retention, and employee engagement.

EXIM’s Office of the Chair, in coordination with the Office of Human Capital, should direct an agency-wide organizational and workforce study used to develop a strategic workforce plan that accurately identifies and portrays actual, current, and future workforce needs that align to EXIM’s work requirements in furtherance of its mission.

EXIM’s Office of Human Capital should consolidate the agency’s Performance Management programs into a singular program according to federal benchmarks and organization design principles and develop a plan to expand the Performance Management program through programs that link human capital initiatives to organizational performance.

EXIM's Office of Human Capital should conduct an EXIM-wide workforce analysis, which may include analysis of grade distribution, career path opportunities, supervisory ratios, delayering, and position management to form the basis of a plan for career progression, pathways, and succession planning.

EXIM’s Office of the Chair, in cooperation with the Office of Human Capital, should establish a Workforce Development Plan, as outlined in the Office of Personnel Management’s Human Capital Framework, to provide structured pathways for EXIM employees to enhance their skills, advance their careers, and ultimately contribute more effectively to EXIM's mission and objectives.

EXIM’s Office of Chair, in coordination with its senior leadership and the Office of Human Capital, should develop an agency-wide succession plan, using relevant agency workforce data and evidence such as vacancy, hiring, retirement, and current and future skills gaps, which includes identifying and defining “key vacancies,” to ensure compliance with 5 CFR Part 412.

Determine the allowability of the questioned transactions and recover $2,576,852 if applicable.

Work with FTA to determine allowability of the questioned tribal transactions and recover $105,674, if applicable.

We recommend that the BIA develop and implement an action plan to ensure its radio infrastructure inventory is complete and accurate. This plan should include-at a minimum-steps to be taken, resources needed, and milestones.

We recommend that the BLM complete baseline condition assessments for any radio communication sites that have not been assessed, in accordance with the updated OCIO Directive.

We recommend that the FWS develop and implement an action plan to ensure its radio infrastructure inventory is complete and accurate. This plan should include-at a minimum-steps to be taken, resources needed, and milestones.

We recommend that the DOI OCIO develop a mechanism to enforce all radio communications site requirements (OCIO Directive No. 2010-008), including the requirement for bureaus to inventory their radio infrastructure and the requirements for bureaus to complete baseline condition assessments, annual condition assessments, and corrective actions of their radio infrastructure.

We recommend that the BIA complete baseline condition assessments for all radio communication sites in accordance with the updated OCIO Directive.

We recommend that the BIA develop and implement a comprehensive plan to ensure that, in compliance with the updated OCIO Directive, annual condition assessments of all radio infrastructure are completed and corrective actions are promptly taken.

We recommend that the BIA develop and implement a plan to bring the Wolf Mountain radio site into compliance with DOI radio communication standards.

We recommend that the BIA after the issuance of the updated OCIO Directive, develop and implement a policy that includes comprehensive procedures for recording radio infrastructure inventories, conducting condition assessments of radio infrastructure, and addressing identified corrective actions to ensure bureauwide and Departmentwide consistency and compliance with OCIO Directives.

We recommend that the BIA conduct a comprehensive assessment of its radio communications program to determine whether it has the internal controls, appropriate senior responsible official(s), staffing, funding, technology, systems, and other resources necessary to effectively manage radio communications.

We recommend that the BIA develop and implement an action plan with measurable goals and milestones to address gaps identified by the radio communication program assessment.

We recommend that the BLM develop and implement a comprehensive plan to ensure that, in compliance with the updated OCIO Directive, annual condition assessments of all radio infrastructure are completed, and corrective actions are promptly taken.

We recommend that the BLM conduct a comprehensive assessment of its radio communications program to determine whether it has the internal controls, appropriate senior responsible official(s), staffing, funding, technology, systems, and other resources necessary to effectively manage radio communications.

We recommend that the BLM develop and implement an action plan with measurable goals and milestones to address gaps identified by the radio communication program assessment.

We recommend that the FWS complete baseline condition assessments for all radio communication sites, in accordance with the updated OCIO Directive.

We recommend that the FWS develop and implement a comprehensive plan to ensure that, in compliance with the updated OCIO Directive, annual condition assessments of all radio infrastructure are completed and corrective actions are promptly taken.

We recommend that the FWS develop and implement a plan to bring the Eulonia radio site into compliance with DOI radio communication standards.

We recommend that the FWS after the issuance of the updated OCIO Directive, develop and implement a policy that includes detailed procedures for recording radio infrastructure inventories, conducting condition assessments of radio infrastructure, and addressing identified corrective actions to ensure bureauwide and Departmentwide consistency and compliance with OCIO Directives.

We recommend that the FWS conduct a comprehensive assessment of its radio communications program to determine whether it has the internal controls, appropriate senior responsible official(s), staffing, funding, technology, systems, and other resources necessary to effectively manage radio communications.

We recommend that the FWS develop and implement an action plan with measurable goals and milestones to address gaps identified by the radio communication program assessment.

We recommend that the NPS complete baseline condition assessments for all radio communication sites, in accordance with the updated OCIO Directive.

We recommend that the NPS develop and implement a comprehensive plan to ensure that, in compliance with the updated OCIO Directive, annual condition assessments of all radio infrastructure are completed, and corrective actions are promptly taken.

We recommend that the NPS after the issuance of the updated OCIO Directive, develop and implement a policy that includes detailed procedures for recording radio infrastructure inventories, conducting condition assessments of radio infrastructure, and addressing identified corrective actions to ensure bureauwide and Departmentwide consistency and compliance with OCIO Directives.

We recommend that the NPS develop and implement an action plan with measurable goals and milestones to address gaps identified by the radio communication program assessment.

Determine the allowability of the questioned costs of $34,805 ($34,368 ineligible and $437 unsupported), on pages 10-12 of the audit report and recover any amount that is unallowable.

Correct the six material weaknesses in internal control disclosed on page 17 of the audit report.

We recommend that the Massachusetts' Executive Office of Health and Human Services redetermine eligibility for the three sampled enrollees whose eligibility was incorrectly determined and take appropriate action.