Open Recommendations

The Richard L. Roudebush VA Medical Center Director monitors to ensure that Joint Patient Safety Reporting system reports are included or rejected in accordance with Veterans Health Administration guidance.

The Richard L. Roudebush VA Medical Center Director ensures a comprehensive review of the patient’s care and transfer is completed to identify factors that contributed to the patient’s unnecessary transfer and takes action as warranted.

The Richard L. Roudebush VA Medical Center Director establishes a process to ensure that changes impacting the availability of clinical services to patients are clearly communicated to all relevant staff members.

The Richard L. Roudebush VA Medical Center Director ensures that residents, fellows, and clinical service leaders understand and follow the requirement to document complete and pertinent information, including assessments and recommendations, in patients electronic health records.

The Richard L. Roudebush VA Medical Center Director educates providers on the requirements related to completing a clinical disclosure when an adverse event occurs, such as a delay in care.

The Richard L. Roudebush VA Medical Center Director ensures the episode of care related to the patients transfer is reviewed to determine whether an institutional disclosure is needed in accordance with Veterans Health Administration requirements, and takes action as warranted.

The Richard L. Roudebush VA Medical Center Director monitors to ensure that Joint Patient Safety Reporting system reports are included or rejected in accordance with Veterans Health Administration guidance.

The Richard L. Roudebush VA Medical Center Director ensures a comprehensive review of the patients care and transfer is completed to identify factors that contributed to the patients unnecessary transfer and takes action as warranted.

We recommend that the NOAA Deputy Under Secretary for Operations direct the Assistant Administrator for the National Environmental Satellite, Data, and Information Service take measures to ensure that waivers of TAYF requirements are requested, fully evaluated, and approved as part of the waiver process.

We recommend that the NOAA Deputy Under Secretary for Operations direct the Assistant Administrator for the National Environmental Satellite, Data, and Information Service to consider taking the following actions for future programs update the SRR success criteria for rideshare missions to ensure that plans for disposition of any undefined requirement include an overestimated value for the requirement.

We recommend that the NOAA Deputy Under Secretary for Operations direct the Assistant Administrator for the National Environmental Satellite, Data, and Information Service to consider taking the following actions for future programs update the rideshare cost estimate for SWFO-L1 to support decision-making for future rideshare programs.

We recommend that the NOAA Deputy Under Secretary for Operations direct the Assistant Administrator for the National Environmental Satellite, Data, and Information Service to consider taking the following actions for future programs update policies to ensure that rideshare costs are tracked accurately.

We recommend that the NOAA Deputy Under Secretary for Operations direct the Assistant Administrator for the National Environmental Satellite, Data, and Information Service to consider taking the following actions for future programs conduct PaL sessions after completing project-level milestone reviews to elicit and capture lessons learned on a routine basis and in accordance with program plans.

We recommend that the NOAA Deputy Under Secretary for Operations direct the Assistant Administrator for the National Environmental Satellite, Data, and Information Service to consider taking the following actions for future programs ensure that the NESDIS SAE group develops a management control to provide reasonable assurance that programs under its purview execute their knowledge management responsibilities.

We recommend that the NOAA Deputy Under Secretary for Operations direct the Assistant Administrator for the National Environmental Satellite, Data, and Information Service to consider taking the following actions for future programs define the necessary space weather observations and satellite capabilities to ensure the continuity of satellite operations to meet PROSWIFT Act requirements.

USAID's Chief Information Officer conduct updated risk assessments for the two systems we identified

USAID's Chief Information Officer perform security controls assessments for the two systems we identified.

USAID's Chief Information Officer determine whether the Agency included cybersecurity duties in position descriptions and performance plans. If not, take corrective action, including addressing the causes for not doing so.

USAID's Chief Information Officer determine whether the Agency developed and implemented policies and procedures for maintaining data and metadata inventories for its various data types, including data from third-party providers. If not, take corrective action, including addressing the causes for not doing so.

USAID's Chief Information Officer determine whether the Agency implemented network monitoring and enforcement mechanisms to identify and disconnect or isolate noncompliant devices. If not, take corrective action, including addressing the causes for not doing so.

We recommend that the Grantee revise its procurement policies and procedures, to ensure strict adherence to competitive bidding requirements for future projects.

We recommend that the Grantee maintain adequate documentation justifying all sole-source vendor selection to ensure compliance with all applicable regulations.

We recommend that the Grantee work with ARC, to solve the $396,000 of questioned costs.

We recommend that the Grantee develop procedures to hold their partners accountable for preparing and submitting quarterly reports in a timely manner.

We recommend that USAID or other U.S. government officials responsible for the administration and oversight of the Dubai warehouse take the following actions: Update the warehouse contract to clarify requirements for temperature and humidity control, maintaining mechanical equipment, and inspecting commodities in the warehouse.

We recommend that USAID or other U.S. government officials responsible for the administration and oversight of the Dubai warehouse take the following actions: Update the statement of work for third-party inspections to clarify quarterly inspection requirements of Dubai warehouse conditions, such as pest control and temperature.

USAID or other U.S. government officials responsible for the administration and oversight of the direct budget support funds work with contractor KPMG to develop a plan to submit the required oversight deliverables to ensure U.S. government funds are being used as intended

USAID or other U.S. government officials responsible for the administration and oversight of the direct budget support funds develop and implement a plan to review the internally displaced persons expenditure category from June 2022 through December 2023 in the scope of work for future contracted audits of the Government of Ukraine to confirm that preventative controls screen beneficiaries for duplicate payments

USAID or other U.S. government officials responsible for the administration and oversight of the direct budget support funds work with the the Government of Ukraine to develop a plan to identify the extent to which payments were made to internally displaced persons living abroad between June 2022 and July 2023 that were reimbursed by USAID's contributions to the Public Expenditures for Administrative Capacity Endurance fund, and use the reconciliation process outlined in the World Bank's 2024 Project Operation Manual for any amounts determined to be ineligible

Verify that MCA Lesotho II Authority corrects the one material weakness in internal control detailed on pages 42 and 46 of the audit report.

Verify that MCA Lesotho II Authority corrects the one instance of material noncompliance detailed on pages 42 and 47 of the audit report.

We recommend the Vice President, Generation Tech Support, revise Generation’s Standard Operating Procedure 12.871, Cyber Security – Backup and Recovery, to address encryption to align with federal guidance and communicate the standard operating procedure requirements to plant personnel.

We recommend the Vice President, Generation Tech Support, develop backup and recovery plans for each plant in accordance with Generation’s Standard Operating Procedure 12.871, Cyber Security – Backup and Recovery.

Finalize implementation of controls within the new Automated Transaction Manager system to require all forms and supporting documentation associated with purchase card transactions be properly completed, verified, and retained in accordance with policy.

Identify and review recurring payments and assess whether establishing a contract would better serve the Postal Regulatory Commission.

Include controls within the Automated Transaction Manager system that requires the purchaser to submit justification if a non-preferred vendor is used, and requires the Credit Card Authorizing Official to conduct a formal evaluation of purchases when this occurs.

We recommend that USAID verify that Amref Health Africa corrects the one instance of material noncompliance detailed on pages 59 to 61 of the audit report.

Reiterate guidelines and policies to approving officials for proper management oversight and approval of officers', limited-term contract employees', and executive directors' travel and expense reimbursements to promote adherence to policies and verify reimbursement requests are properly supported.

Review and update applicable guidelines, as needed, to reflect policy exceptions, when appropriate, or document approved exceptions within the eTravel system.

Reconsider implementing the seat upgrade draft policy, and instead, reinforce current seat upgrade policy.

Create a process to periodically verify limited-term contract employees are included in the officer group within the eTravel system.

Conduct a full reconciliation of IT inventory records to ensure all assets are accurately documented and assigned.

Digitize all IT asset tracking forms and enable electronic submission by end-users and PAOs.

Implement an IT asset management lifecycle approach that documents the complete transaction history of an IT asset from its acquisition to its excess from service.

Expeditiously conduct a reconciliation of IT asset records for employees who have separated from NARA since January 1, 2025, or who remain on administrative leave awaiting separation.

Revise the Asset Management SOP to include procedures for conducting a monthly reconciliation of employee exit clearance reports to asset return data and ensure monthly reconciliations are performed.

Ensure that when IT assets are deployed to end-users those assets are moved from Information Services’ PAO codes to the respective PAOs for the end-users as outlined in NARA Directive 600 and the Supplement to Directive 600.

Revise NARA Directive 600 to reflect current organizational responsibilities.

Revise the Supplement to NARA Directive 600 to align with Federal regulations by designating government-issued cell phones as sensitive personal property.

Develop and implement standard operating procedures to ensure annual PAO training is created and made available to all relevant staff.