Open Recommendations

We recommend that BIE develop and implement a plan to resolve deficiencies identified in annual safety and health inspections with prescribed abatement timelines.

We recommend that BIE develop guidance to ensure that safety and health reports and associated work orders include detailed location information so BIE staff can easily find the deficiencies.

We recommend that BIE require Riverside Indian School to ensure that all components of the emergency management program are fully implemented and emergency management plans and continuity of operations plans are submitted as required.

We recommend that BIE develop a strategy to monitor future catastrophic deficiencies until corrected, and if a deficiency cannot be fixed within the abatement period, identify and implement mitigating measures.

We recommend that BIE provide Riverside Indian School's facilities and maintenance staff with access and training on BIE's facility management system, with emphasis on the importance of accurate and complete recordkeeping.

We recommend that BIE ensure that all safety and health deficiency work orders have the correct status either in an open status awaiting correction or as closed confirming that BIE has corrected the deficiency.

We recommend that BIE require Riverside Indian School to develop and implement a security plan as required by DOI policy.

We recommend that BIE require Riverside Indian School to train the school's collateral duty safety officer on the position's roles and responsibilities in advising management on issues related to the development and implementation of a safety and health program in accordance with Indian Affairs policy.

We recommend that BIE ensure all schools have submitted the required emergency management plans and continuity of operations plans.

The Veterans Integrated Service Network Director, in conjunction with facility directors, ensures staff import all community care documents into patients’ electronic health records within five business days of receipt.

The Veterans Integrated Service Network Director, in conjunction with facility directors, ensures facility community care staff make two additional attempts to obtain community providers’ medical documents within 90 days of the appointment following administrative closure of non-low-risk consults.

The Veterans Integrated Service Network Director, in conjunction with facility directors, ensures facility community care staff process community providers’ requests for additional services within three business days of receipt.

The Veterans Integrated Service Network Director, in conjunction with facility directors, ensures facility community care staff send approval or denial letters to community providers for requests for additional services.

The Veterans Integrated Service Network Director, in conjunction with facility directors, ensures facility community care staff send approval or denial letters to patients for requests for additional services.

The Veterans Integrated Service Network Director, in conjunction with facility directors, ensures facility community care staff confirm patients attended their scheduled community care appointments and received care.

Develop and implement a method to identify and report separate quality statistics for the Military Sexual Trauma Operations Center.

Update the existing two-signature review process for claims processors and designated reviewers to include an increased focus on military sexual trauma denials.

Develop and implement a process to assess designated reviewers competency in processing denied military sexual trauma claims and monitor effectiveness.

Update the existing two-signature review process for claims processors and designated reviewers to include an increased focus on military sexual trauma denials.

Review GPO Instructions 810.5B, Organization and Functions of the Board of Survey, and 810.11B, GPO Property Management Program, for applicability and update or replace them with policies and standard operating procedures that align with the
current organizational structure and business operations.

Develop and implement comprehensive procedures for conducting inventory counts, regardless of physical storage location. These procedures should include, but not be limited to:
a. Establish accountability and responsibilities for the overall physical count.
b. Standardize the frequency of counts and the method of selecting individual items or locations for count.
c. Document the count and supervisor review.
d. Assess production paper and materials for obsolete, damaged, and slow-moving items for action.

Take appropriate action to pursue potential revenue opportunities for the 155 non-moving inventory items, valued at nearly $304,000, in funds be put to better use, identified in this audit.

Take appropriate action to remedy the $39,000 overstatement in the inventory management system for the 44 inventory items identified in this audit.

FHFA’s Chief Information Officer should establish and implement guidance for performing National Institute of Standards and Technology Cybersecurity Framework 2.0 activities through policies and procedures.

FHFA’s Chief Information Officer should ensure that Privileged Account Request eWorkflows are fully completed and approved for all privileged FHFA General Support System user accounts prior to granting access.

FHFA’s Chief Information Officer should ensure all applicable Organizational Units are included in the automated process that disables inactive accounts after 35 days.

FHFA’s Chief Information Officer should disable inactive Active Directory accounts after a period of 35 days of inactivity.

FHFA’s Chief Information Officer should create a Plan of Action and Milestones to establish when the annual Disaster Recovery Procedures for FHFA Production Systems exercise will be conducted and when the new system owners will be assigned and trained on their roles and responsibilities related to FHFA General Support System, Office of General Counsel Matter Management Tracking System, and the FHFA Status Tracking and Reporting system.

FHFA’s Chief Information Officer should schedule and conduct an annual Disaster Recovery Procedures for FHFA Production Systems exercise for the FHFA General Support System, Office of General Counsel Matter Management Tracking System, and the FHFA Status Tracking and Reporting system, and ensure new system owners are trained to execute them.

Rec. 1.a: The DoD OIG recommended that the Under Secretary of Defense (Comptroller)/Chief Financial Officer, DoD, update the anomaly guidance to establish parameters to limit the number of anomaly requests developed and submitted by each Service.

Rec. 1.a.2: The DoD OIG recommended that the Under Secretary of Defense (Comptroller)/Chief Financial Officer, DoD, clarify how the new start constraint applies to existing programs undergoing administrative changes.

Rec. 1.b.1: The DoD OIG recommended that the Under Secretary of Defense (Comptroller)/Chief Financial Officer, DoD, direct the Planning, Programming, Budgeting, and Execution Reform implementation Team to coordinate with the Services, including officials from the program offices, on the current budget execution review process and provide a formal assessment on whether the obligation and expenditure benchmarks should be re-baselined to account for appropriation levels under a continuing resolution.

Rec. 1.b.2: The DoD OIG recommended that the Under Secretary of Defense (Comptroller)/Chief Financial Officer, DoD, direct the Planning, Programming, Budgeting, and Execution Reform implementation Team to develop a process for the Department of Defense to track and communicate to Congress the actual impacts that continuing resolutions have on acquisition programs.

Establish policies and procedures for administrative and financial management including determining the allowability and allocability of costs, record retention, procurement, internal control, tracking of costs by approved budget categories, reconciliation of costs to financial reports, and timely submission of performance progress and financial reports in accordance with the Uniform Guidance and grant agreement.

Work with ARC to resolve the questioned cost totaling $456,942 for ARC funded costs.

Work with ARC to resolve the questioned cost totaling $75,000 for non-ARC matching cost share.

Revise and resubmit the SF-270 and the related reimbursement table to reflect the accurate budget category of Contractual cost instead of Personnel.

Work with ARC to resolve the questioned cost totaling $1,167 for non-ARC Matching cost share

We recommend that the Grantee develop and implement formal written policies and procedures surrounding the management of Federal awards, in accordance with the Uniform Guidance.

We recommend that the Grantee work with ARC, to resolve the $45,000 of questioned costs.

We recommend that the Grantee work with ARC, to resolve the $35,000 of questioned costs.

We recommend that the Grantee work with ARC to resolve $12,775 of unallowed pre-award cost following the resolution of Recommendation 3 as the funds are included as part of the $35,000 questioned in Finding 2025-002.

We recommend that the Grantee develop and implement written policies and procedures surrounding the management of Federal awards; specifically addressing the reasonableness, allocability, and allowability of costs incurred and charged to grants, as required by Federal regulations.

We recommend that the Grantee work with ARC, to resolve the $5,134.

The OIG recommends that the DNFSB update the agency’s DFW Plan to reflect current practices.

The OIG recommends that the DNFSB create supporting implementation guidance with emphasis on staff roles and responsibilities.

The OIG recommends that the DNFSB engage the testing contractor to improve communications with program staff and supervisors regarding random test site selections.

Update its policy to include monitoring Federal Protective Service’s physical security inspections of Agency offices.

Regularly reconcile its list of offices to the Agency's official list of offices to ensure all applicable offices are periodically inspected.

Work with office management to properly resolve the 101 security findings that were improperly remediated.