Open Recommendations

(U) Rec. 5: Final Report is Classified.

Embassy Cairo should manage U.S. citizen services appointment wait times in accordance with Department standards.

Embassy Cairo, in coordination with the Bureau of Consular Affairs, should manage immediate relative immigrant visa interviews in accordance with Department standards.

Embassy Cairo should track and review its embassy housing commissioning and make ready costs in adherence with embassy standard operating procedures and Department standards.

Embassy Cairo should bring its fire protection program into compliance with Department standards.

Embassy Cairo should bring its safety, health, and environmental management program into compliance with Department standards.

Embassy Cairo should conduct a risk assessment and obtain an authorization to operate its cloud-based software application from the Bureau of Diplomatic Technology.

Embassy Cairo should inventory telephone parts and equipment in accordance with Department standards.

Develop and implement a remediation plan to address incomplete data migration and ensure all IT assets are captured accurately.

Configure the system to generate standardized inventory reports for audit, compliance, and management review.

Establish a process to perform regular reconciliations between procurement records, physical assets, and system data.

Provide user training to staff responsible for entering, maintaining, and reviewing asset records.

Develop and issue formal policies and procedures governing the use of the new IT inventory system, including asset entries, updates, retirements, and reconciliation.

Update and implement the Accountable Property Handbook to address returning IT assets that requires a secure chain of custody process, including IT assets subject to litigation holds.

Update the offboarding procedures to include instructions to employees to ensure exiting employees return their IT assets in accordance with the updated Accountable Property Handbook.

Improve the IT asset accountability process going forward to include historical IT asset tracking by employee and by addressing and implementing data access procedures for returned cell phones on litigation holds.

Develop and document implementation of a methodology to verify that CIG applicants that are subject to the TAM performance target progress requirement have made progress on established TAM performance targets before awarding CIG grants.

In coordination with OCFO and the OCIO, develop and implement a plan with defined milestones and timelines to resolve data discrepancies between Maximo and Odyssey and ensure property data are complete, accurate, and properly reconciled with the F/A module. As part of this plan, clarify roles, responsibilities, and coordination mechanisms between offices to ensure sustained accountability for property management and reconciliation activities.

Assess and, where feasible, enhance Maximo’s configuration to automate key property management controls. This assessment should include a cost–benefit analysis to determine viable improvements and identify compensating controls if system enhancements are not practical, to ensure consistent and accurate property data entry and reconciliation.

Finalize and issue updates to property management policies and procedures, including the DFMH, MS 511, and related guidance, to reflect the implementation of Maximo as the agency’s property management system and ensure alignment with current processes and controls.

Ensure all Posts receive and acknowledge updated property management guidance and expectations for the use of Maximo. This could include providing refresher training or written instructions on key processes, such as asset capitalization, status updates, and disposals, and obtaining confirmation from Posts that the information was reviewed and understood.

Reinforce the Annual Inventory Certification process as a data-quality control by providing targeted guidance and verification procedures to ensure that certifications accurately reflect property records in Maximo.

Continue performing monthly reconciliations between Maximo and Odyssey and enhance the reconciliation process, as appropriate, based on the results of the Maximo configuration assessment in Recommendation 2. Coordinate with the Compliance and Risk Office to ensure the reconciliation process is properly designed, consistently executed, and effective in identifying and resolving differences in a timely manner.

Confer with the Office of General Counsel regarding the potential recovery of the $3.6 million in manufacturer credits that were issued by manufacturers and retained by Pharma Logistics before the associated jobs were closed.

Confer with the Office of General Counsel regarding the potential recovery of unsupported discrepancies between the total credits received and the amounts disbursed.

Confer with the Office of General Counsel regarding the potential recovery of unsupported discrepancies between the total credits received and the amounts disbursed.

Confer with the Office of General Counsel regarding the potential recovery of the $3.6 million in manufacturer credits that were issued by manufacturers and retained by Pharma Logistics before the associated jobs were closed.

Office of Programs should Add reference to the Management Control Procedures Guide in the
Railroad Retirement Board’s Division of Programs Operating Manuals, Article 11.

Office of Programs should provide evidence that Policy and Systems staff have completed training
regarding management control review requirements, and roles and responsibilities.

Office of Programs should Inform staff of the 20 CFR §345.305(a) regulation requiring the RRB to send quarterly
notices to all railroad employers with their own experience rating.

Office of Programs should issue quarterly notices containing the railroad employer’s cumulative benefit balance
and net cumulative contribution balance to all employers with their own experience rating, in alignment with
requirements of 20 CFR §345.305(a).

Office of Programs should work with the Railroad Retirement Board developers to implement a system change for
Agency Enterprise General Information Support System-Z (IBM Mainframe environment) to maintain records
for at least three calendar years, or longer, if necessary, to align with other financial management practices and
information needed for the experience rating calculation for employers.

Office of Programs should update the Division of Programs Operating Manuals, Article 11
to reflect the implementation of recommendation 5.

Office of Programs should Update the Division of Programs Operating Manuals, Article 11
to reflect the requirements of 20 Code of Federal Regulations §345.305.

Office of Programs should Update Division of Programs Operating Manuals, Article 11
to reflect the required annual notification process.

Rec. 1.a: The DoD OIG recommended that the Commander of the U.S. Northern Command develop and implement a plan with milestones that ensures Soldiers assigned to the Joint Task Force"Southern Border have adequate housing conditions that meet the minimally required housing adequacy standards.

OIG recommends that the Peace Corps develops and implements formal policies and procedures for establishing and maintaining its target cybersecurity profile(s). (Metric 1)

OIG recommends that the Peace Corps implements formal processes to ensure externally sourced products, systems, components, and services comply with its cybersecurity and supply chain risk management requirements, including integration into procurement and vendor management activities. (Metric 5)

OIG recommends that the Peace Corps develops and implements formal policies and procedures for maintaining a comprehensive inventory of data and corresponding metadata. (Metric 10)

OIG recommends that the Peace Corps allocates the necessary resources to ensure that baseline configurations and associated deviations are reviewed and updated at least annually. (Metric 14)

OIG recommends that the Peace Corps prioritize the procurement and implementation of a Data Loss Prevention solution to enhance its ability to detect and prevent unauthorized data exfiltration. (Metric 22)

Assess where the company and its partners’ expectations of the company’s role differ. Based on this assessment, take steps to clarify the company’s role, as appropriate.

Work with GDC to ensure that the company has adequate, ongoing visibility into project risks on the construction packages it is not leading.

Identify and document all relevant internal stakeholders and their related HTP support activities, and assign accountable departments and individuals for each activity identified.

Finalize the HTP internal document management system and related guidance consistent with Capital Delivery procedures.

Verify that Ein Dor Museum corrects the two instances of material noncompliance detailed on pages 22 to 23 of the audit report.

Verify that EcoPeace Middle East Environmental NGO Forum corrects the two material weaknesses in internal control detailed on pages 17 to 19 of the audit report.

Verify that EcoPeace Middle East Environmental NGO Forum corrects the two instances of material noncompliance detailed on pages 23 to 25 of the audit report.

Rec. 1: The DoD OIG recommended that the Assistant Secretary of Defense for Manpower and Reserve Affairs issue clarifying guidance that permits the Military Services to recalculate the distribution of original Category IV enlistments only if operating a statutorily mandated future Servicemember preparatory course consistent with the requirements of section 520, title 10, United States Code.

Executive leaders ensure staff post safety risk assessment permits for all construction projects.