Open Recommendations

Consider increased implementation of technologies to improve records processing once received to reduce the manual renaming of electronic files and uploading of records into the electronic health record.

Evaluate which staff should have access to and should update the Consult Toolbox when records are requested or received and update the Consult Business Rules and Uses of the Consult Package Standard Operating Procedure to reflect necessary changes.

Include controls within the Consult Toolbox to prevent errors and improve data quality, including controls on administrative closure of low-risk consults and documenting the records-retrieval method.

Determine if there are mechanisms to identify standardization opportunities and increase efficiency for improving records return processes.

Ensure community care staff follow procedures to reduce duplicate records received.

The Medical Center Director ensures staff store clean and soiled utility items separately, maintain cleanliness, and dispose of expired items.

The Medical Center Director ensures staff store clean and soiled utility items separately, maintain cleanliness, and dispose of expired items.

Ensure YouthBuild develops and implements written subrecipient monitoring policies and procedures to: (1) review background checks for individuals with close contact with minors, (2) validate subrecipient performance data to source documentation, and (3) include documentation of corrective actions and resolution on all significant developments that negatively affect the subaward.

Ensure YouthBuild enhances its existing conflict of interest policies to include the necessary procedures, including satisfying the requirement to disclose in writing any potential conflicts of interest to OJP.

Finalize and implement policies and procedures for creating and maintaining current and target cybersecurity profiles in alignment with National Institute of Standards and Technology Cybersecurity Framework Guidance.

Finalize and implement a comprehensive Risk Management Strategy that defines roles and responsibilities, enterprise risk priorities, objectives, and communication protocols, including third-party risk considerations.

Continue to develop and implement an Enterprise Risk Management program based on National Institute of Standards and Technology and Enterprise Risk Management Playbook (Office of Management and Budget Circular A- 123, Section II requirement) guidance.

Develop and implement policies and procedures for developing and maintaining a comprehensive and accurate inventory of data and corresponding metadata for the Consumer Product Safety Commission data types.

Fully implement, assess, and maintain secure configuration settings in accordance with defined configuration management policy and security configuration baseline procedures.

Update all relevant Information Security Continuous Monitoring policies, procedures, and supporting documentation based on latest National Institute of Standard and Technology guidance.

(U) Rec. 4.a.1: The DoD OIG recommended that the Commander, U.S. Central Command direct the U.S. Central Command Joint Munitions Office to coordinate with the Services and the Israel Defense Forces to finalize and disseminate an updated War Reserve Stock for Allies"Israel Peacetime Operating Procedures that includes alternative accountability controls to ensure that the War Reserve Stock for Allies"Israel inventory is accounted for in the event the Services cannot travel to perform inventories.

(U) Rec. 4.a.2: The DoD OIG recommended that the Commander, U.S. Central Command direct the U.S. Central Command Joint Munitions Office to coordinate with the Services and the Israel Defense Forces to finalize and disseminate an updated War Reserve Stock for Allies"Israel Peacetime Operating Procedures that includes specific requirements for the U.S. Central Command Joint Munitions Office to monitor and enforce the requirements of the War Reserve Stock for Allies"Israel program.

(U) Rec. 4.a.3: The DoD OIG recommended that the Commander, U.S. Central Command direct the U.S. Central Command Joint Munitions Office to coordinate with the Services and the Israel Defense Forces to finalize and disseminate an updated War Reserve Stock for Allies"Israel Peacetime Operating Procedures that includes roles and responsibilities for all the commands responsible for the accountability of the War Reserve Stock for Allies"Israel inventory.

(U) Rec. 4.b: The DoD OIG recommended that the Commander, U.S. Central Command report is Classified. Direct the U.S. Central Command Joint Munitions Office to conduct a review of the War Reserve Stock for Allies"Israel Peacetime Operating Procedures, Service-specific requirements, and the current conditions of the War Reserve Stock for Allies"Israel inventory to determine the appropriate frequency for required inventories and incorporate those changes into the updated War Reserve Stock for Allies"Israel Peacetime Operating Procedures.

(U) Rec. 1.a: The DoD OIG recommended that the Director of the Defense Security Cooperation Agency revise the Security Assistance Management Manual to clarify its description of the third-party transfer authorization process for the transfer of defense articles designated as requiring enhanced end use monitoring from partner nations to non-state entities.

(U) Rec. 1.b: The DoD OIG recommended that the Director of the Defense Security Cooperation Agency in coordination with the Department of State Bureau of Political and Military Affairs Office of Regional Security and Arms Transfers, develop procedures for DoD program executive offices to confirm that a foreign government that acquired U.S.-origin defense articles subject to enhanced end use monitoring obtained the appropriate written consent of the U.S. Government to transfer defense articles to non-government entities through those program offices.

This recommendation contains sensitive information that should not be made public. Therefore, we are not including the wording for this recommendation.

This recommendation contains sensitive information that should not be made public. Therefore, we are not including the wording for this recommendation.

This recommendation contains sensitive information that should not be made public. Therefore, we are not including the wording for this recommendation.

This recommendation contains sensitive information that should not be made public. Therefore, we are not including the wording for this recommendation.

This recommendation contains sensitive information that should not be made public. Therefore, we are not including the wording for this recommendation.

This recommendation contains sensitive information that should not be made public. Therefore, we are not including the wording for this recommendation.

This recommendation contains sensitive information that should not be made public. Therefore, we are not including the wording for this recommendation.

This recommendation contains sensitive information that should not be made public. Therefore, we are not including the wording for this recommendation.

This recommendation contains sensitive information that should not be made public. Therefore, we are not including the wording for this recommendation.

This recommendation contains sensitive information that should not be made public. Therefore, we are not including the wording for this recommendation.

This recommendation contains sensitive information that should not be made public. Therefore, we are not including the wording for this recommendation.

This recommendation contains sensitive information that should not be made public. Therefore, we are not including the wording for this recommendation.

This recommendation contains sensitive information that should not be made public. Therefore, we are not including the wording for this recommendation.

Update and maintain a complete Critical Software Inventory that staff may utilize to fulfill their responsibilities and provide transparency and tracking.

Create or update guidance to implement policies and procedures to guide and govern supply chain risk management activities related to attestations.

(U) Rec. A.1: Recommendation is Classified.

(U) Rec. A.2.a: Recommendation is Classified.

(U) Rec. A.2.b: Recommendation is Classified.

(U) Rec. A.2.c: Recommendation is Classified.

(U) Rec. A.2.d: Recommendation is Classified.

(U) Rec. A.2.e: Recommendation is Classified.

(U) Rec. A.3: Recommendation is Classified.

(U) Rec. A.3: Recommendation is Classified.

(U) Rec. B.1: Report is Classified

Incorporate Office of Strategic Infrastructure LMD representatives with property expertise
into the programs and projects at the contract’s onset to ensure procurement officials receive
sufficient support.

Review Artemis-related contracts that are not delegated to DCMA for contractor-held property
management to determine whether NASA can leverage the delegations already in place to
consolidate government property administration tasks.

District leaders and the Detroit, Escanaba, and Cincinnati Vet Center Directors collaborate with the supporting VA medical facility to determine reasons for noncompliance with staff participation on the mental health executive council, take action as indicated, and monitor compliance.

District leaders and the Fort Wayne, Escanaba, and Cincinnati Vet Center Directors determine reasons for noncompliance with completing four hours of external clinical consultation for clinically complex cases per month, ensure a process is implemented, and monitor compliance.

District leaders and the Fort Wayne, Detroit, and Escanaba Vet Center Directors determine reasons for noncompliance with having an annual risk and vulnerability assessment completed by VA police or local law enforcement, ensure completion, and monitor compliance.