Open Recommendations

OIG recommends that the Bureau of Diplomatic Security develop, implement, and distribute guidance to overseas posts on how to develop disposition plans, including emergency destruction plans, for special protective equipment, hazardous materials, and armored vehicles. The guidance should include details on key considerations to make during the planning process, such as determining which stakeholders to involve in the planning process; planning for a variety of evacuation scenarios; considering timelines and resources needed to ship items out of the country; calculating the timelines needed to destroy assets at post; ensuring security personnel have access to all materials, tools, equipment, and vendors…

Following the implementation of Recommendations 3 and 4, OIG recommends that the Bureau of Diplomatic Security develop and implement guidance requiring post Emergency Action Committees to periodically review and approve post disposition plans, including emergency destruction plans, and to determine whether updates or changes are needed.

OIG recommends that the Bureau of Diplomatic Security revise its emergency destruction procedures to describe all acceptable methods to destroy special protective equipment, including methods that can be employed in a limited evacuation timeframe, as well as the equipment and time needed to execute each step. The Bureau of Diplomatic Security should then distribute the updated guidance to all overseas posts.

OIG recommends that the Bureau of Diplomatic Security develop and implement guidance on the disposition of hazardous materials in an emergency evacuation scenario. The guidance should include steps that can be implemented in a limited evacuation timeframe and outline the equipment and time needed to execute each step. The Bureau of Diplomatic Security should then distribute the updated guidance to all overseas posts.

OIG recommends that the Bureau of Diplomatic Security revise its armored vehicle disposal procedures to better guide Department of State personnel on how to efficiently disable or destroy armored vehicles in an exigent evacuation scenario. These procedures should include details on the estimated time needed to complete each required step, which steps should be prioritized over others, and which steps may be skipped given limited time and resources. The procedures should also include guidance and visual aids applicable to all models of Department of State armored vehicles maintained worldwide.

OIG recommends that the Bureau of Diplomatic Security develop and implement training for post security personnel on acceptable practices for the disposition of special protective equipment, hazardous materials, and armored vehicles in an emergency evacuation scenario.

OIG recommends that the Bureau of Administration, in coordination with the Bureau of Diplomatic Security, define and implement a requirement in the Foreign Affairs Manual, that, in the event of a suspension of operations, a comprehensive reconciliation of post-assigned special protective equipment and armored vehicles must be conducted. The requirement should define who is responsible for conducting the reconciliation; define the time period following the suspension of operations in which the reconciliation should be completed; address the need to collect, analyze, and follow up on all available data about the status of a posts special protective equipment and armored vehicles…

OIG recommends that the Bureau of Administration, in coordination with the Bureau of Diplomatic Security, define and implement a requirement in the Foreign Affairs Manual to, in the event of a suspension of operations, issue a report to the Department's accountable property officer detailing the final status of a post's assets following a suspension of operations. The report would follow the completion of a comprehensive reconciliation of a post's special protective equipment and armored vehicles. The requirement should define who is responsible for drafting and issuing the report.

OIG recommends that the Bureau of Diplomatic Security develop and implement detailed guidance for overseas posts on how to establish and maintain records on the status of special protective equipment and armored vehicles assigned to post following a post's suspension of operations, including guidance on the types of information to record, how frequently and under what circumstances records should be updated, and options for using remotely accessible backup records.

The report requires safeguarding and dissemination controls and is not available to the public.

The report requires safeguarding and dissemination controls and is not available to the public.

OIG recommends that the Peace Corps develops and implements acybersecurity risk register to support the implementation of a fullyintegrated Risk Management and Information Security ContinuousMonitoring (ISCM) program (Metric 10).

OIG recommends that the Peace Corps develops component authenticitypolicies and procedures (Metric 15).

OIG recommends that the Peace Corps periodically evaluates, reviews,and updates its policies and procedures, as necessary, to align with anissued and approved ICAM strategy which includes assigning personnelrisk designations and performing appropriate screening prior to grantingaccess to its systems (Metric 28).

OIG recommends that the Peace Corps conducts, captures, and shareslessons learned in its implementation of the incident response program(Metric 54 and 55).

OIG recommends that the Peace Corps conducts agency-level BusinessImpact Assessments (BIA) and integrates the results into informationsecurity strategies and other plan development efforts (Metric 61).

Develop and implement inspector guidance on how to assess risk within Boeing manufacturing facilities.

Develop and implement a structured oversight approach for planning and performing audits to provide a comprehensive assessment of Boeing production.

Assess the Aircraft Certification Audit Information System to determine whether the system incorporates the functions that the inspectors need to plan and manage effective audits. Based on the assessment results, implement changes to the system as appropriate.

Clarify FAA Order 8120.23A defining isolated and systemic findings and how inspectors should categorize these findings.

Revise guidance to require inspectors to evaluate Boeing's risk assessments of suppliers, including subtier suppliers, and incorporate the results of those assessments into FAA's audit planning.

Enhance inspector guidance to account for the number of Boeing suppliers, including subtier suppliers; what each supplier manufactures; and the number of audits needed to ensure Boeing effectively controls its suppliers

Develop and implement procedures that require FAA to disposition recommendations from joint FAA and industry reviews related to Boeing production and manufacturing.

Develop and implement guidance requiring inspectors to evaluate Boeing's supplier control, including review of first article inspections, to verify suppliers can produce conforming parts.

Assess whether the Compliance and Enforcement Action system has the functionality that inspectors need to manage noncompliances, including the ability to track deadlines and identify potential repetitive issues. Implement changes to the system as appropriate based on the assessment results.

Develop and implement processes used by the Boeing oversight group to evaluate root causes of noncompliances and the associated corrective actions.

Train inspectors on updated guidance and system updates for the Aircraft Certification Audit Information System and the Compliance and Enforcement Action system.

Establish procedures to periodically evaluate Boeing's Safety Management System, including how it interfaces with Boeing's existing quality system.

Establish specific and measurable criteria for Boeing to meet before FAA can return delegation to Boeing's Organization Delegation Authorization (ODA), including criteria from the FAA team overseeing Boeing's ODA.

Enforce requirements for Boeing to report allegations of undue pressure with sufficient detail, in compliance with FAA Notice N 8100.18.

Evaluate the impact of ongoing policy revisions and additional internal review requirements on FAA inspectors' abilities to address allegations of undue pressure in a timely manner. Develop and implement corrective actions based on the evaluation.

Evaluate organizational changes promoting communication across FAA groups overseeing Boeing. Develop and implement corrective actions based on the evaluation.

Develop and implement a formal policy outlining the agency’s process for assessing the per-acrenational maximum payment rate limitations for CRP to determine if revisions are needed.

We recommend that the Massachusetts Department of Public Health follow up with the 20 nursing homes reviewed in this audit that demonstrated life safety, emergency preparedness, and infection control deficiencies to ensure that they have taken corrective actions.

We recommend that the Director for IES ensure that the Department continues to implement the covered agency requirements listed under section 759(a) of the Geospatial Data Act.

We recommend that the Director for IES ensure that the Department implements section 759(a)(6) once applicable guidance becomes available.

We recommend that the Director for IES assess whether the Department has allocated sufficient resources to NCES to support continued compliance with the Geospatial Data Act and advance the Department's geospatial work and take the appropriate responsive actions that are within NCES's direct responsibilities.

In collaboration with the Federal Aviation Administration, obtain reauthorizations for geospatial systems with expired authorizations to operate in accordance with DOT ITIM 2022-001 requirements and verify completion.

The Commission should continue its efforts to finalize ERM policies and procedures impacting and related to the Identify Function.

The Commission should Implement effective ERM reporting tools impacting and related to the Identify Function.

The Commission should ensure system-level Business Impact Analyses are integrated with the ERM program impacting and related to the Recover Function.

Create documented processes for ensuring all DOL’s geospatial data is included within the geospatial data inventory and processes to improve data accuracy and data quality.

Develop a training program that ensures DOL officials with system and data responsibilities are aware of the requirements when implementing Department of Labor Geospatial Data Strategy and the geospatial data inventory processes.

Create a plan to acquire sufficient funding to properly oversee and create data quality standards of geospatial data throughout DOL and its contracts.

Develop an approach for including pertinent financial (i.e., costs and savings) and sustainability impact data in its Vehicle Acquisition Strategy and related contingencies.

The Department of Energy Has Made Little Progress Implementing the Geospatial Data Act of 2021

We recommend that the Department of Health and Human Services fulfill the remaining seven covered agency responsibilities established in GDA section 759(a).

We recommend that the Department of Health and Human Services ensure that the HHS Office of the Chief Data Officer oversees, coordinates, and facilitates HHS's implementation of geospatial-related requirements, policies, and activities.

We recommend that the Department of Health and Human Services develop and maintain an inventory of all geospatial data assets in accordance with section 759(b) of the GDA.

We recommend that the Department of Health and Human Services prepare the required annual reports regarding the achievements of the covered agency in preparing and implementing the strategic plan for the National Spatial Data Infrastructure (section 759(a)(1)) and complying with the other requirements in section 759(a).