Open Recommendations

We recommend that the Assistant Secretary for the Office of Elementary and Secondary Education require the Governor of Wisconsin and Wisconsin’s State Superintendent of Public Instruction to return the $21,312 in CRRSA EANS funds that were expended improperly for services and assistance for a nonpublic school.

We recommend that the Assistant Secretary for the Office of Elementary and Secondary Education require the Governor of Wisconsin and Wisconsin’s State Superintendent of Public Instruction to require the contractor to provide sufficient support for the $297,477 of unsupported CRRSA and ARP EANS-funded expenditures or return funds to the Department.

We recommend that the Assistant Secretary for the Office of Elementary and Secondary Education require the Governor of Wisconsin and Wisconsin’s State Superintendent of Public Instruction to conduct a full review of the contractor’s vendor service fees to determine reasonableness. Return EANS funds for any vendor service fees deemed to be unreasonable.

We recommend that the Assistant Secretary for the Office of Elementary and Secondary Education require the Governor of Wisconsin and Wisconsin’s State Superintendent of Public Instruction to ensure that assets purchased with EANS funds are tracked in accordance with Federal requirements.

FHFA's DBR Deputy Director should ensure that ORAM evaluates its current internal model risk management practices in line with FHFA’s model risk management supervisory expectations (defined in AB 2013-07 and AB 2022-03) and design controls to (1) periodically review and maintain its model risk inventory (to include a risk-based validation schedule), (2) engage external resources to perform independent model validations in accordance with the validation schedule, and (3) conduct model performance tracking. Further, ORAM should update and finalize its policies and procedures to reflect the internal model risk management practices adopted.

Rec 1.a: The DoD recommended that the Under Secretary of Defense for Research and Engineering develop or revise their existing procedures to require that implementation plans be developed based on industry best practices and include, at a minimum, timelines with specific milestones, roles and responsibilities, and metrics for evaluating and monitoring progress.

Rec 1.b: The DoD recommended that include in the procedures developed in accordance with Recommendation 1.a, a requirement to review and update implementation plans, at a minimum of once each year.

Rec. 2.a: The DoD recommended that the DoD Chief Information Officer review and update the 5G Implementation Plan to include timelines with specific milestones, roles and responsibilities, and metrics for evaluating and monitoring the DoDs progress toward implementing 5G.

Rec. 2.b: The DoD recommended that the DoD Chief Information Officer periodically reassess and update the 5G Implementation Plan, as needed.

We recommend the Director of CISA evaluate Automated Indicator Sharing and its associated costs and benefits to determine whether to maintain the system’s information-sharing capabilities beyond September 30, 2025.

Ensure facility staff audio visually record all use of force incidents and maintain the recordings for a minimum of 6 years.

Ensure facility staff produce an audiovisual recording before each calculated use of force incident where the faces of all team members appear (with helmets removed and heads uncovered), one at a time, with staff identifying themselves by name and title.

Ensure that ICE and facility staff provide responses to detainee requests in a language detainees can understand.

Ensure computers intended for legal work have the necessary software to draft legal documents and conduct legal research.

Ensure facility and ICE staff promptly place detainee grievances in detention files.

Ensure facility staff responsible for reviewing detainee grievances respond in a timely manner.

Provide detainees in SMU access to commensurate recreational areas as are available to detainees housed in general population, specifically areas that include exercise opportunities and equipment.

Revise and implement the Retail Green Bag Audit, Store Register Audit, and Retail Safe Fund procedures to:
a) assign specific positions with the responsibility to conduct audits and daily safe counts,
b) require retail directors and group managers to document their review of monthly audits, and
c) require retail directors to document their quarterly review of daily safe count sheets.

EXIM’s Office of the Chairman, in coordination with the Office of Policy Analysis and International Relations, the Office of Board Authorized Finance, and Office of General Counsel, should propose updated Environmental and Social Due Diligence Procedures and Guidelines for Board review and approval that incorporates, as necessary, revisions of applicable international standards.

EXIM’s Office of the Chairman, in coordination with the Office of Policy Analysis and International Relations, the Office of Board Authorized Finance, and the Office of General Counsel, should produce updated Environmental and Social Due Diligence Procedures and Guidelines for Board review and approval that clarify whether and, if so, how the ESPG relates to domestic transactions.

The Office of General Counsel should produce a written opinion on the circumstances under which Board members may withhold or approve transaction based upon environmental effects.

EXIM’s Office of Board Authorized Finance should develop a written policy or procedure that outlines the process for addressing when a project’s implementation does not align with EXIM’s Environmental and Social Due Diligence Procedures and Guidelines after the Board has approved the transaction.

EXIM’s Office of Board Authorized Finance should develop a written policy or procedure that defines when an environmental and/or social due diligence review is necessary for any restructuring or modifications requiring Board re-approval.

Develop and implement a contingency plan to address potential future staffing challenges that may arise, to mitigate delays in implementing necessary improvements across the applicable FISMA domains.

Establish and execute a monitoring plan to make sure that all information technology policies and procedures, including referenced standards and guidance, are reviewed and updated in accordance with the timeliness requirements defined by EAC policy.

Implement a continuous monitoring governance, risk, and compliance tool that enables the integration of cybersecurity risk management into the enterprise risk management reporting tool. Capture lessons learned to make any necessary adjustments to the process.

Implement a process to detect and prevent the use of untrusted removable media on the EAC’s network.

Fully document and implement a process that includes a clear business reason for risk acceptance in the event that untrusted removable media must be introduced on the EAC’s network.

Develop compensating controls to reduce the risk that vulnerabilities can be exploited that are caused by the use of untrusted removable media on the EAC’s network.

Schedule and complete annual contingency planning tests. Retain supporting documentation to demonstrate compliance during audits.

We recommend the Assistant Secretary for Employment and Training establish and implement data verification checks to ensure participants reported are unique individuals who obtained services through Workforce Innovation and Opportunity Act programs while strengthening controls to properly exit participants after 90 days without services.

We recommend the Assistant Secretary for Employment and Training establish and implement a plan to improve monitoring activities to ensure grant recipients and sub-recipients are properly documenting eligibility and ensuring participant-level services are delivered by each program in which the participant is co-enrolled.

We recommend the Assistant Secretary for Employment and Training remedy the $19,639,718 in questioned costs associated with the contractual service contracts awarded in non-compliance with federal requirements.

We recommend the Assistant Secretary for Employment and Training remedy the $5,751,502 in questioned costs associated with payroll and non-payroll costs.

We recommend the Assistant Secretary for Employment and Training establish and implement a plan to increase the level of technical assistance and monitoring for grant recipients and sub-recipients to ensure they comply with the general procurement standards.

We recommend the Assistant Secretary for Employment and Training develop and implement a formal comprehensive Conflict of Interest Policy to ensure staff are actively monitoring, identifying and resolving conflict of interest issues.

Develop a plan to ensure manual journal vouchers are justified, documented, and approved before they are entered into the Financial Management System and that they are reviewed after posting to verify accuracy and support compliance, transparency, and audit readiness.

Require ongoing training for all staff who prepare, review, or approve manual journal vouchers, including a process to ensure that new employees complete initial training and that refresher courses are provided when policies or tools are updated.

Clarify expectations for using macro-enabled journal voucher tools by defining when the standardized macro must be used; establishing a process to communicate macro tool updates and prompt the adoption of newly released versions; and providing guidance, training, and user support to promote correct and consistent application of the tools.

Define and communicate clear oversight responsibilities for Veterans Integrated Service Network financial managers by requiring routine monitoring of documentation and compliance at facilities.

(U) Rec. 1: The DoD OIG recommended that the Assistant Director for the Office of Strategy, Plans, and Policy, Defense Security Cooperation Agency, review and update the Security Assistance Management Manual to incorporate efficiencies identified while supporting a contingency environment in Ukraine that could improve the overall Foreign Military Sales process, including unique circumstances or exceptions to requirements needed during contingency operations.

Ensure privileged user access reviews for the [redacted] system are performed in accordance with FDIC policy.

The Chief Information Officer ensures that the actions shared with the agency in the detailed technical report are taken to properly configure and fully utilize anti-phishing protections.

The Chief Information Officer ensures that the actions shared with the agency in the detailed technical report are taken to properly configure and fully utilize anti-phishing protections.

The Chief Information Officer implements continuous improvement and emphasize a “Zero Click” mindset throughout the organization to reduce the threat from phishing campaigns.

Work with states to strengthen waiver approval processes to prevent the improper waiving of UI overpayment recoveries when federal dollars are at stake.

Work with the Office of the Chief Financial Officer (OCFO) to develop and implement a specific process designed to detect when states have improperly waived UI overpayment recoveries, providing time for states to course correct and minimize the risk of financial loss.

Work with Michigan to ensure proper post-investigative actions are taken for the five confirmed fraud cases identified in this report.

Remedy the $240,973,884 in questioned costs.

Work with state workforce agencies to ensure they retroactively submit accurate and complete information related to overpayment recovery waiver amounts for FPUC, PUA, and PEUC, for all pandemic-related reporting periods.