Open Recommendations

We recommend that the Director of the HUD's Buffalo Office of Community Planning and Development instruct City officials to reprogram unexpended funds of $2,516 on a subgrantee agreement that expired June 30, 2015, for use by other eligible CDBG activities so that these funds are put to better use.

We recommend that the Director of the HUD's Buffalo Office of Community Planning and Development instruct City officials to spend program income of $113,733 on eligible CDBG activities before drawing down additional CDBG entitlement funds, thus ensuring that these funds are put to better use.

We recommend that the Director of the HUD's Buffalo Office of Community Planning and Development instruct City officials to implement procedures to ensure that program income received by subgrantees is properly reported in HUD's integrated Disbursement and Information System and spent before funds are drawn down from the U.S. Treasury.

We recommend that the Director of the HUD's Buffalo Office of Community Planning and Development instruct City officials to strengthen subgrant procedures to ensure that all required documents are received, explanations are obtained when prior performance does not meet goals, and subgrants are executed in a timely manner.

Submit a plan for how it will proceed with respect to the multipurpose facility project, including a schedule that HUD can track to ensure its completion. HUD must reevaluate the feasibility of the activity and determine the eligibility of the $8,111,304 already invested. (Footnote 4: Total investments of $8,232,388 were adjusted to account for $109,084 questioned in recommendation 2A and $12,000 in recommendation 2B.) If HUD determines that the activity has been canceled or is not feasible, the Municipality must commit any unused loan proceeds for future loan repayments.

Submit a plan for how it will proceed with respect to the municipal cemetery project, including a schedule that HUD can track to ensure its completion. HUD must reevaluate the feasibility of the activity and determine the eligibility of the $1,454,801 already invested. If HUD determines that the activity has been canceled or is not feasible, the Municipality must commit any unused loan proceeds for future loan repayments.

Provide supporting documentation showing that it complied with all environmental requirements. If the Municipality does not provide evidence that it complied with all environmental requirements, HUD must initiate appropriate sanctions under 24 CFR 58.77(d)(1)(v) for noncompliance.

Develop and implement a financial management system in accordance with HUD requirements to ensure that program funds can be traced to a level, which ensures that such funds have not been used in violation of the restrictions and prohibitions of applicable statutes.

Update existing MAOs in accordance with established timelines.

The Office of Administration should implement a control to ensure program integrity of the Financial Management Integrated System key vendor data files on an ongoing basis.

The Office of Administration should correct the discrepant vendor information identified during the ongoing program integrity reviews.

The Bureau of Fiscal Operations should implement updated Accounts Payable procedures to coincide with the deployment of the Financial Management Integrated System enhancements for the Invoice Processing Platform.

(U) Rec. 1: The DoD OIG recommended that the Commander of U.S. Cyber Command, the Chiefs of Staff for the U.S. Army and U.S. Air Force, the Chief of Naval Operations, and the Commandant of the Marine Corps develop a doctrine, organization, training, materiel, leadership and education, personnel, facilities, and policy framework that addresses strategies to build, grow, and sustain the Cyber Mission Force.

Contact all other HUD program offices to determine whether any other programs authorize or are aware of grantees holding funds in advance of their immediate disbursement needs and determine financial statement impact on and compliance with Treasury cash management requirements of any found.

KPMG recommends that the OCIO document and map access rights in OPM systems to personnel roles and functions, following the principle of 'least privilege'.

KPMG recommends that the OCIO enhance OPM’s information security control monitoring program to detect information security control weaknesses by: • Implementing and monitoring procedures to ensure system access is appropriately granted to new users, consistent with the OPM access approval process; and Monitoring the process for the identification and removal of separated users to ensure that user access is removed timely upon separation; implementing procedures to ensure that user access, including user accounts and associated roles, are reviewed on a periodic basis consistent with the nature and risk of the system, and modifying any necessary accounts identified.

The CIO develop a process for managing access to shared user accounts.

The CIO should implement the annual compliance check required by the User Account Management Standard Operating Procedure for Administrator accounts to the shared user accounts.

Develop and implement system-based evaluation criteria and risk-based tools to aid ODA team members in targeting their oversight.

Rec. 2.a: The DoD OIG recommended that the Under Secretary of Defense for Personnel and Readiness, based on the results of Recommendation 1, revise current policies and procedures and integrate existing programs to develop a comprehensive DoD-wide approach to address prevention and response to workplace violence.

Rec. 2.b: The DoD OIG recommended that the Under Secretary of Defense for Personnel and Readiness develop and issue interim, comprehensive DoD-wide policy for the prevention and response to workplace violence until the publication of final policies and procedures.

Rec. 3: The DoD OIG recommended that the Defense Procurement and Acquisition Policy Director for the Office of the Under Secretary of Defense for Acquisition, Technology, and Logistics, in coordination with the Under Secretary of Defense for Personnel and Readiness, direct the Defense Acquisition Regulations Council to revise the Defense Federal Acquisition Regulation Supplement to address interim and final contractor requirements for the prevention of workplace violence.

We recommend that, to the extent possible, NARA revisit all site locations and ensure that appropriate and consistent PE, infrastructure, and cabling controls are implemented.  At a minimum, NARA should take the following appropriate steps to remediate the issues identified above, which represent the present risks and flaws applicable to NARA ensure that neat cable management and labeling mechanisms are employed for all sites.

We recommend that, to the extent possible, NARA revisit all site locations and ensure that appropriate and consistent PE, infrastructure, and cabling controls are implemented. At a minimum, NARA should take the following appropriate steps to remediate the issues identified above, which represent the present risks and flaws applicable to NARA Ensure that all server racks, switches, and network equipment are adequately secured from unauthorized access via locked racks.

Reimburse FHA borrowers $25,700 for fees that were not customary or reasonable and $46,510 in discount fees that did not represent their intended purpose.

Reimburse $13,726 to FHA borrowers for the fees that were not customary or reasonable.

Remedy $32,034,623 in unallowable expenditures associated with excessive building sizes for Grant Numbers 2009-ST-B9-0089 and 2009-ST-B9-0100.

Rec. I.1: The DoD OIG recommended that the Assistant Secretary of the Army for Installations, Energy, and Environment review and update its policy to ensure that Army publications properly and consistently address radon assessment and mitigation requirements.

USAID/Nigeria determine the allowability of $5,672,236 in unsupported questioned costs (page 6 of the audit report) and recover from Hope Worldwide Nigeria the amount determined to be unallowable.