Open Recommendations

Rec. 2.a: The DoD OIG recommended that the Under Secretary of Defense for Personnel and Readiness direct the Office of Special Needs to coordinate with the Exceptional Family Member Program information technology work group to develop and implement a single DoD information technology system to maintain readily available, reliable data for oversight of the Exceptional Family Member Program.

Rec. 2.b: The DoD OIG recommended that the Under Secretary of Defense for Personnel and Readiness direct the Office of Special Needs to perform more in-depth data reliability tests of the data entered into the Exceptional Family Member Program Data Repository.

Conduct Federal and match grant close-out reconciliations for all grantees whose financial management systems did not support the Federal or match costs reported within their Federal Financial Reports. If the grantee’s financial management system records do not reconcile to the amounts reported or appear to include costs that are not allocable, reasonable, or allowable, take action accordingly

Require that grantees revise their existing financial management systems to ensure that the grantees can identify and reconcile all Federal and match costs reported within their Federal Financial Reports and that they can differentiate between expenses paid using Federal funds and expenses paid using other funding sources.

Recover the $42,945 in questioned Federal expenses that were not allowable, appropriately allocated, or adequately supported.

Require AmeriCorps Seniors grantees to develop and implement additional procedures and internal controls to ensure that costs are allowable, allocable, and adequately supported.

Require AmeriCorps Seniors grantees to develop and implement additional procedures and internal controls to ensure they appropriately and timely perform National Service Criminal History Checks

Verify that AmeriCorps Seniors grantees revise their financial management systems to ensure that the financial management systems can support comparisons of actual expenditures to amounts budgeted for each AmeriCorps Seniors grant.

Work with its grantees to revise their written policies and procedures to address Federal payment requirements and 2 C.F.R. § 200, Subpart E – Cost Principles.

That the agency update and finalize the travel policy, travel manual, and procurement office policies and procedures.

The Commissioner, Wage and Investment Division, should assess and implement, if possible, the capability to provide taxpayers with the option to transfer to the appointment line versus having to hang up and call a different number.

We recommend that the New York State Department of Health work with the New York State Office of Mental Health to improve monitoring activities by increasing the number of case files reviewed when conducting provider site visits to ensure that service plans and subsequent service plan reviews are timely signed and maintained, community rehabilitation claims meet Medicaid reimbursement standards, and services are appropriately authorized. We recommend that the New York State Department of Health work with the New York State Office of Mental Health to improve monitoring activities by providing formal guidance or training to providers to clarify requirements related…

We recommend that New York State Department of Health refund $19,888,031 to the Federal Government.

Use the death information already in its records to input death information on 2.5 million numberholders’ Numident records.

Use death information in Centers for Medicare & Medicaid Services and various state death data files to input death information on approximately 498,000 Numident records.

Develop a methodology to annotate death information onto the Numident records of the approximately 15.8 million remaining non-current payment status beneficiary numberholders identified by our audit.

We recommend that the Centers for Medicare & Medicaid Services work with the DME MACs to do the following, which if in effect during our audit period could have saved Medicare as much as $30,051,107 for wheelchair repairs: review accumulated costs for wheelchair repairs that exceed the federally recommended cost limit, and for those wheelchairs that the DME MACs determine will not remain serviceable for their entire 5-year RUL, enforce Federal requirements by requiring the suppliers that transferred ownership of the wheelchairs purchased on a rental basis to enrollees to furnish replacement wheelchairs to those enrollees at no cost to…

We recommend that the Centers for Medicare & Medicaid Services work with the DME MACs to do the following, which if in effect during our audit period could have saved Medicare as much as $30,051,107 for wheelchair repairs: implement system edits to identify for review claims for repairs made to wheelchairs during their 5-year RUL when the accumulated costs of repairs have exceeded a certain cost limit.

We recommend that the Centers for Medicare & Medicaid Services work with the DME MACs to do the following, which if in effect during our audit period could have saved Medicare as much as $30,051,107 for wheelchair repairs: strengthen Medicare requirements to ensure that DME MACs review accumulated costs of repairs made to wheelchairs (including wheelchairs purchased on a lump-sum basis) during their 5-year RUL that exceed a certain cost limit and use this cost limit as a basis for determining when wheelchairs furnished by suppliers will not remain serviceable for their entire 5-year RUL.

We recommend that the Centers for Medicare & Medicaid Services work with the DME MACs to do the following, which if in effect during our audit period could have saved Medicare as much as $30,051,107 for wheelchair repairs: take appropriate action for suppliers that consistently bill for repairs made to wheelchairs during their 5-year RUL that exceed the federally recommended cost limit or the cost limit used as the basis for determining when wheelchairs furnished by suppliers will not remain serviceable for their entire 5-year RUL (e.g., by educating suppliers on proper billing and recovering improper payments).

FMC should develop, document, and approve a Log Retention Policy.

The FMC should develop and document an approved Risk Assessment Policy that utilizes NIST SP 800-30 (Guide for Conducting Risk Assessments) in its development.

(U) Rec. 1: The DoD OIG recommended that the Under Secretary of Defense for Intelligence and Security, through the Defense Intelligence Enterprise Manager for Analysis, provide guidance to the combatant commands and the Defense Intelligence Enterprise on the requirement for a tradecraft evaluation program in order to comply with Intelligence Community Directive 203, "Analytic Standards."

(U) Rec. 3: The DoD OIG recommended that the Under Secretary of Defense for Intelligence and Security issue policy guidance to ensure that the Service intelligence centers and combatant command Joint Intelligence Operations Centers provide ICD 203 training to their respective command's senior analysts and staff members responsible for analytical and editorial review of junior analysts' production items.

Document in special management unit records the reason detainees refuse to return to general population to ensure facility staff do not use disciplinary segregation as a punitive measure for detainees who require protection.

Ensure health screenings are conducted within the first 12 hours after a detainee arrives at the facility, before classifying or determining housing assignment.

Establish a log to maintain a permanent record of all sick call requests, including but not limited to the detainee’s name, A number, a brief description of the complaint, and how the issue was resolved.

Establish and implement a peer review program for nursing staff, and onboard needed mental health staff to contribute to timely medical care.

We recommend that the FWS address the questioned costs related to unfunded retirement and retiree health totaling $2,250,417 (Federal share) in consultation with appropriate U.S. Department of the Interior offices to determine if the costs are allowable pursuant to Federal regulations and award terms and conditions.

Develop and communicate an organization-wide Supply Chain Risk Management strategy/plan to manage the supply chain risks associated with the research, development, design, manufacturing, acquisition, delivery, integration, operations, maintenance, and disposal of the CPSC systems, system components, or services.

Develop, implement, and disseminate processes to implement Trusted Internet Connection 3.0, including updating its network and system boundary policies, in accordance with Office of Management and Budget Memorandum 19-26, Update to the Trusted Internet Connections (TIC) Initiative. This includes, as appropriate, the incorporation of Trusted Internet Connection security capabilities catalog, Trusted Internet Connection use cases, and Trusted Internet Connection overlays.

Develop, implement, and disseminate an Identity and Access Management policy and procedures which are in accordance with the most recent National Institute of Standards and Technology guidance.

Finalize and implement the Awareness and Training policy which is currently in draft.

Implement Information Security Continuous Monitoring roles and responsibilities.

Develop mechanisms to ensure Information Security Continuous Monitoring stakeholder accountability.

Develop and implement policies and procedures for maintaining a Continuity of Operations Plan and conducting organizational and system level Business Impact Analyses in accordance with current federal guidance. (e.g., National Institute of Standards and Technology Special Publication 800- 34/53, Federal Continuity Directive 1, National Institute of Standards and Technology Cybersecurity Framework, and National Archive and Records Administration guidance).

Treasury OIG follow-up on the missing documentation and make a determination whether to conduct a full-scope audit of Point Hope. In addition, Treasury OIG personnel determine whether to take further action, up to and including recoupment of Point Hope’s CRF proceeds, based on the scope limitation and potential noncompliance with the records retention requirement.

Treasury’s Office of Capital Access will ensure that management decision letters are issued on the findings identified by the auditor in the Single Audit report

We recommend the Acting Assistant Secretary for Employment and Training specify within its policy the information states must include in their documentation to support compliance with the requirements to receive grant funds prior to disbursement of the funds.

We recommend the Acting Assistant Secretary for Employment and Training remedy the $136,353,567.50 in questioned costs.

Conduct a cost-benefit analysis of either appointing personnel with full travel authority and oversight responsibility or allowing travelers to be responsible for submitting, tracking, and supporting their travel actions and expenses in eTravel.

Update the travel policy to reflect the needs of the Postal Regulatory Commission and align with agency priorities.

Create a training program about the travel process and require employees that travel to complete this training and retake as needed when changes to the process occur.

FHFA should consider request for an extension or waiver in accordance with OMB M-22-18 and/or OMB M-23-16 if FHFA is unable to meet the requirements in OMB M-22-18 and/or OMB M-23-16 in a timely manner. If FHFA requests a waiver, FHFA should consider documenting a risk-based decision, and document any compensating controls.

FHFA should remediate past due exploitable vulnerabilities in accordance with CISA’s BOD 22-01 and the OTIM Vulnerability Management Process.

We recommend the Department of Homeland Security Under Secretary for Management update or create departmental policy for components to follow when a contractor requests extraordinary relief under Public Law 85-804.

State of Ohio management should provide missing supporting documentation and make necessary reporting corrections.

State of Ohio management should provide missing supporting documentation and make necessary reporting corrections.

State of Ohio management should provide missing supporting documentation and make necessary reporting corrections. Additionally, Treasury Office of Inspector General should obtain information to determine if there are other ineligible severance pay transactions in addition to those already identified as part of the desk review.

Establish and implement policies and procedures on how to use appropriate analysis techniques when determining prices are fair and reasonable when GSA scheduled list prices and rates are adjusted, in accordance with FAR 8.