Open Recommendations

(U) Rec 1.a: This recommendation is Controlled Unclassified Information

(U) Rec 1.b: This recommendation is Controlled Unclassified Information

(U) Rec 1.c: This recommendation is Controlled Unclassified Information

(U) Rec 2.a: This recommendation is Controlled Unclassified Information

(U) Rec 2.b: This recommendation is Controlled Unclassified Information

(U) Rec 3: This recommendation is Controlled Unclassified Information

(U) Rec 4.a: This recommendation is Controlled Unclassified Information

(U) Rec 4.b: This recommendation is Controlled Unclassified Information

We recommend the Vice President, Major Projects, develop procedures to ensure an assessment of risk is completed and Project Approval Board and/or Project Review Board approval is obtained prior to purchasing or providing pre payments for long-lead procurements.

We recommend the Vice President, Major Projects, verify emerging risks are included in the Project Risk and Contingency Tool prior to requesting any additional project funding approvals from the Project Approval Board and/or Project Review Board.

We recommend the Vice President, Major Projects, develop procedures to ensure that emerging risks are included in the Risk and Readiness Review prior the presentation to the Project Approval Board and Project Review Board.

We recommend the Director of the Office of Workers’ Compensation Programs develop policies and procedures for the monthly quality control review, provide training to the control operators, and monitor that the reviews are performed in accordance with such policies and procedures.

We recommend the Deputy Chief Financial Officer develop policies and procedures to ensure all non-GAAP policies are identified and reported to the Division of Financial Reporting timely.

We recommend the Director of the Division of Federal Employees’, Longshore and Harbor Workers’ Compensation design and implement monitoring procedures to periodically review control activities for effectiveness and develop action steps as appropriate based on such results.

We recommend the Assistant Secretary for ETA design and implement monitoring controls to ensure Federal Project Officer responses are obtained and reviewed for all delinquent cost reports.

We recommend the Assistant Secretary for ETA design and implement monitoring controls to enforce current policies and procedures for Federal Project Officers to timely review cost reports.

We recommend the Acting Chief Information Officer perform an analysis of the other operating system servers within the U.S. Department of Labor environment to determine if other servers were incorrectly configured.

We recommend the Acting Chief Information Officer implement the proper configurations for the impacted operating system servers.

We recommend the Acting Chief Information Officer configure the systems to adhere to the password requirements from the U.S. Department of Labor Cybersecurity Policy Portfolio.

We recommend the Acting Chief Information Officer implement monitoring controls to periodically assess security configurations in the systems to determine adherence to the U.S. Department of Labor Cybersecurity Policy Portfolio.

We recommend the Assistance Secretary for Administrations and Management and the Acting Chief Information Officer perform risk assessments in order to design and implement procedures for effective internal communication over access provisioning controls.

We recommend the Assistance Secretary for Administrations and Management and the Acting Chief Information Officer design and implement controls to ensure the completeness and accuracy of the users and user roles used in the semi-annual privileged access reviews and reauthorizations.

We recommend the Assistance Secretary for Administrations and Management and the Acting Chief Information Officer design and implement controls to monitor the deprovisioning of system users access to ensure such access is removed in accordance with DOL policies, and enforce adherence to DOL’s policies over the timely removal of inactive accounts.

The Under Secretary for Health ensures that required suicide risk and intervention training includes suicide risk identification screening and evaluation requirements, procedures, and instruction.

The Under Secretary for Health considers establishing benchmarks for suicide risk screening and evaluation that reflect the clinical importance of suicide risk identification requirements and takes action as warranted.

The Under Secretary for Health ensures monitoring of adherence to suicide risk identification screening and evaluation setting-specific requirements.

The Under Secretary for Health ensures actions taken to address barriers to completing suicide risk screening and evaluation are effective to increase adherence to annual and setting-specific requirements in all clinical settings.

The Under Secretary for Health ensures non-mental health clinical specialty leaders are aware of and adherent to the suicide risk identification screening and evaluation requirements.

The Under Secretary for Health ensures clearly identified responsibilities for suicide risk identification screening and evaluation adherence monitoring and oversight.

Conduct outreach to affected customers notifying them of the changes to optimized offices and impacts to service.

Develop and maintain detailed documentation outlining the cost savings resulting from the Local Transportation Optimization implementation for each region and include a comparison to planned savings.

we recommend that USAID:
Communicate with APL CEVA Government Logistics and establish a mechanism to reemphasize and clarify the safety provisions in its contract that it must adhere to for Bureau for Humanitarian Assistance operations at the Dubai warehouse, including the use of personal protective equipment for eye, head, and hand protection.

We recommend that the Centers for Medicare & Medicaid services require the MACs to include, as part of the normal desk review or audit process, a review of reporting and disclosure of related-party costs.

We recommend that the Centers for Medicare & Medicaid Services develop and implement guidance for skilled nursing facilities on the appropriate methods for providers to determine their allowable related-party costs.

We recommend that the Centers for Medicare & Medicaid Services provide guidance to reeducate Medicare Administrative Contractors on the need to review, grant, and document requests from skilled nursing facilities for exceptions to cost reporting requirements in compliance with 42 CFR § 413.17(d).

We recommend that the Centers for Medicare & Medicaid services require the MACs to include, as part of the normal desk review or audit process, a review of reporting and disclosure of related-party costs.

We recommend that the Centers for Medicare & Medicaid Services develop and implement guidance for skilled nursing facilities on the appropriate methods for providers to determine their allowable related-party costs.

We recommend that the Centers for Medicare & Medicaid Services provide guidance to reeducate Medicare Administrative Contractors on the need to review, grant, and document requests from skilled nursing facilities for exceptions to cost reporting requirements in compliance with 42 CFR § 413.17(d).

Enhance procedures to ensure COR designation letters are appropriately created and signed by all parties upon award of the contract or modification to change the COR.

Update procedures to ensure the signed COR designation letters are maintained in the required locations to evidence the acceptance of COR appointments.

PBGC should provide guidance and training to workflow developers and business testers to ensure that workflows supporting internal control over financial systems are configured to automatically reject rather than approve workflow items when all required elements are not met.

Management should review existing OEM jobs and ensure that each job logs, detects, and alerts on job failures where there is potential impact to system processing routines. Further, a job monitoring process with escalation parameters and resolution paths should be developed and followed to ensure consistency of control execution.

We recommend that the Grantee develop written policies and procedures surrounding the management of federal awards, in accordance with the Uniform Guidance.

We recommend that the Grantee take appropriate internal control measure to ensure adequate segregation of duties in its invoice preparation process.

We recommend that the Grantee work with ARC, to resolve the $33,614 of questioned costs.

Castro recommends that Treasury Office of Inspector General (OIG) follow-up with New Hampshire's management to confirm if the $14,027,288 noted as unsupported expenditures within the Direct Payments greater than or equal to $50,000 payment type can be supported. If support is not provided, Treasury OIG should recoup the funds or request New Hampshire management to provide support for replacement expenses, not previously charged, that were eligible during the CRF period of performance. ' In addition, Castro recommends that Treasury OIG request New Hampshire management to provide support for replacement expenses, not previously charged, that were eligible during the CRF period…

Treasury Office of Inspector General (OIG) should follow up with Oklahoma County's management to confirm if the $91,218 noted as unsupported expenditures within the Transfers greater than or equal to $50,000, Aggregate Reporting less than $50,000, and Aggregate Payments to Individuals payment types can be supported. If support is not provided, Treasury OIG should recoup the funds or request Oklahoma County management to provide support for replacement expenses, not previously charged, that were eligible during the CRF period of performance. In addition, Treasury OIG should request Oklahoma County management to provide support for replacement expenses, not previously charged, that were…

Treasury OIG should follow-up with Oklahoma's management to confirm if the $35,499,181 noted as unsupported expenditures within the Grants greater than or equal to $50,000, Transfers greater than or equal to $50,000, Direct Payments greater than or equal to $50,000, Aggregate Reporting less than $50,000, and Aggregate Payments to Individuals payment types can be supported. If support is not provided, Treasury OIG should recoup the funds or request Oklahoma management to provide support for replacement expenses, not previously charged to CRF, that were incurred during the period of performance. In addition, Treasury OIG should request Oklahoma management to provide support…

Develop data quality controls for the WTTS, create/update detailed guidance for implementing these controls, and train staff to perform these controls properly, especially with regard to the dates and information expected in key WTTS data fields.

Update the format of WTTS reports to ensure they clearly capture the information required for internal reviews and external reporting.