Open Recommendations

We recommend that USAID's Chief Information Officer establish and implement a process to track the progress of conducting annual reviews and related lessons learned from the implementation of its Information Security Continuous Monitoring Strategy.

We recommend that USAID's Chief Information Officer update the
event logging checklist to include details of event logging level 3 (advanced) applicability and implement requirements as specified by Office of Management and Budget Memorandum M-21-31.

(U) Rec. A.1: Report is Classified.

(U) Rec. A.2: Report is Classified.

(U) Rec. A.4: Report is Classified.

(U) Rec. B.1: Report is Classified.

(U) Rec. B.2: Report is Classified.

(U) Rec. C.1: Report is Classified.

(U) Rec. 1.b: The DoD OIG recommended that the Assistant Secretary of the Navy (Research, Development, and Acquisition) direct PMA-231 to evaluate all unresolved operational test deficiencies, determine whether action was taken to correct the deficiencies, and if not, determine if the deficiencies should stay unresolved. If the deficiencies should be resolved, develop and implement a plan to correct the deficiencies that impact mission accomplishment. PMA-231 should request that the Operational Test and Evaluation Force, confirm the correction of deficiencies.

(U) Rec. 1: Report is Classified.

(U) Rec. 2: Report is Classified.

(U) Rec. 3: Report is Classified.

CMS should implement additional safeguards to ensure that remote patient monitoring is used and billed appropriately in Medicare.

CMS should require that remote patient monitoring be ordered and that information about the ordering provider be included on claims and encounter data for remote patient monitoring.

CMS should develop methods to identify what health data are being monitored.

CMS should conduct provider education about billing of remote patient monitoring.

CMS should identify and monitor companies that bill for remote patient monitoring.

1. We recommend that the Department's Senior Agency Official for Geospatial Information coordinate with NOAA and Census to review our test results, determine which missing metadata content is most significant for current users of geospatial data, and develop a plan (with goals and timeframes) to ensure more consistent completion of those fields.

We recommend the Director of CISA develop and implement a risk-based national strategic plan that addresses current and evolving risks, to enhance the security and resilience of the Nation’s election infrastructure, including disinformation and the use of artificial intelligence.

We recommend the I&A Deputy Under Secretary for Management develop and implement a resource strategic plan to ensure the Security Branch is staffed to adequately schedule and conduct security inspections of its offices that handle classified information.

We recommend the I&A Deputy Under Secretary for Management update the Security Standard Operating Procedure to require the following:a risk-based methodology for selecting offices to inspect annually; and• a process to confirm inspected offices implemented corrective actions and recommendations.

Review the 100 beneficiaries with payee discrepancies we identified in both samples of our audit and determine whether further action is necessary.

Evaluate the results of its review of the 100 beneficiaries and determine whether it should review the remaining population of 57,412 beneficiaries we identified.

Remind employees to create and process payee applications and updates in the Electronic Representative Payee System (eRPS); take necessary manual actions to transfer the payee information to the payment records; and follow up on their actions and resolve alerts.

Establish a process or ad-hoc workload to ensure employees resolve inconsistencies between the Electronic Representative Payee System (eRPS )and the payment records, including, but not limited to, removing active payees in eRPS that are not on the payment records and establishing active payees in eRPS, when necessary.

The Chief Taxpayer Experience Officer should oversee all customer satisfaction surveys to help ensure that the IRS follows existing Federal guidance for tracking survey feedback.

The Chief Taxpayer Experience Officer should collaborate with division management to ensure that the concerns raised by the survey results are: 1) shared Service-wide; 2) considered in system and process improvements; and 3) evaluated to determine the effects of the improvements on the customer experience, including customer satisfaction.

The Chief Taxpayer Experience Officer should coordinate with division management to administer surveys on consistent delivery and reporting schedules throughout the IRS, when applicable.

The Chief Taxpayer Experience Officer should coordinate with division management to monitor and improve survey quality to reduce nonresponse bias as well as ensure that taxpayers have access to customer satisfaction surveys.

The Commissioner, TE/GE Division, should assess evolving technologies and customer preferences for survey delivery.

The Chief Taxpayer Experience Officer should collaborate with division management to develop and track customer satisfaction survey goals to reflect the priorities outlined in the Balanced Performance Measurement System.

The Chief Taxpayer Experience Officer should coordinate with division management to establish an enterprise-wide approach to provide an easy, direct way for taxpayers to alert management about unprofessional IRS employee behavior.

The IRS Human Capital Officer should require the ongoing periodic quality review of contractor employee separation actions performed by the CORs to ensure that they 1) timely prepare and submit Form 14604, 2) complete all steps specified on the Form, and 3) document all required separation steps in the SCC record.

Establish policies and procedures for Grant and Per Diem liaisons to obtain reliable discharge information from grantees when veterans exit from the Grant and Per Diem Program.

Implement controls, including enhanced medical facility and grantee guidance and training, to ensure grantee files and VA medical record documentation of veteran housing outcomes are consistent with Homeless Operations, Management, and Evaluation System data definitions and support the data in the Homeless Operations, Management, and Evaluation System.

Implement controls, such as quality reviews, to ensure Homeless Operations, Management, and Evaluation System outcome data are supported by and consistent with veteran medical records and grantee files.

Develop procedures to securely store all defective U.S. passportbooks until they are destroyed.

Obtain Federal Information Security Modernization Act compliance for the passport production database system or work with the Department of State to reassess if the Memorandum of Understanding, section V.C., provisions should be amended.

Some or all of the recommendation is not publicly available due to concerns with information protected under the Freedom of Information Act.

Establish procedures to complete annual safety inspections, remediate deficiencies, and document the results for the blue collection boxes.

Ensure the Mi'kmaq Nation creates and implements written policies and procedures with the necessary guidance to assist staff in preparing accurate progress reports.

Ensure the Mi'kmaq Nation creates and implements written policies and procedures with the necessary guidance to assist staff in preparing accurate progress reports.

Ensure the Mi'kmaq Nation confirms that the missing required checks on current employees who may work with minors have been conducted and are documented, to include searches of public sex
offender and child abuse websites/registries and updated checks on employees who have been employed longer than 5 years.

Ensure the Mi'kmaq Nation confirms that the missing required checks on current employees who may work with minors have been conducted and are documented, to include searches of public sex
offender and child abuse websites/registries and updated checks on employees who have been employed longer than 5 years.

Ensure the Mi'kmaq Nation trains staff on adhering to the established policies and procedures related to the Determination of Suitability special condition and retains documentation of the required checks.

Ensure the Mi'kmaq Nation trains staff on adhering to the established policies and procedures related to the Determination of Suitability special condition and retains documentation of the required checks.

Ensure the Mi'kmaq Nation improves its written policies and procedures to instruct staff on how to calculate indirect costs using the correct base and how to retain appropriate supporting documentation.

Ensure the Mi'kmaq Nation improves its written policies and procedures to instruct staff on how to calculate indirect costs using the correct base and how to retain appropriate supporting documentation.

Remedy the unsupported indirect costs of $10,919 in grant number 15JOVW-22-GG-03352-TRIB.

Remedy the unsupported indirect costs of $6,189 in the 2018-VO-GX-0125 grant and $709 in the 2020-JP-FX-0007 grant, totaling $6,898.