Open Recommendations

Develop, implement, and regularly monitor quality assurance mechanisms at the Santa Teresa station to ensure compliance with standards related to providing hygiene items, sleeping mats, and medical care to detainees.

Oversee a data integrity review at the El Paso Hardened Facility to verify that staff are accurately recording custodial actions. If the problem we identified persists, implement a quality assurance plan, and continue to monitor data integrity.

We recommend the CISA Chief Information Officer immediately mitigate the control deficiencies or cease operation of the Federal Virtual Training Environment system.

We recommend the FLETC Chief Information Officer immediately mitigate the control deficiencies or cease operation of the eFLETC system.

Implement controls to allow for the capability to identify and monitor potential scheduling delays and to ensure family preferences are being met at national cemeteries.

Improve schedule management for charging station construction by using a project management system and related analytics to record dynamic updates, centralize information, and analyze performance to inform future construction baselines.

We recommend that GHC continue to remediate the specific technical weaknesses discovered during this audit as outlined in the vulnerability scan audit inquiry.

We recommend that GHC implement a routine process to audit security configuration settings of its servers to ensure compliance with approved security configuration settings.

We recommend that the Office of Policy work with the Bureau for Africa and missions in sub-Saharan Africa to establish performance goals and measurable targets that missions can use to help the Agency assess its progress toward meeting goals in its efforts to respond to Chinese influence.

Develop and implement adequate procedures to ensure that confirmed EBLL cases, unconfirmed EBLL cases, and environmental investigations are reported to HUD.

Develop and implement adequate procedures and controls to ensure that environmental investigations are completed when required.

Perform a search for historical documentation to support the lead-free status of the 15 units and the associated developments. If adequate documentation is not found to support that all lead-based paint was identified and abated and clearance was achieved as required, the Authority should complete a lead-based paint inspection of the developments to determine whether they are lead free.

Develop a quality control process to ensure that records for the remaining 1,385 units contain evidence of lead-free status. If adequate documentation is not found to support that all lead-based paint was identified and abated and clearance was achieved as required, the Authority should complete a lead-based paint inspection of the developments to determine whether they are lead free.

Implement procedures that align with HUD's requirements and controls to ensure that visual assessments for lead-based paint are completed at least every 12 months.

Implement policies and procedures that align with HUD's requirements and controls to ensure that reevaluations are completed when required.

Implement controls to ensure that accurate lead disclosures are provided to prospective and current tenants.

Work with HUD's Office of Lead Hazard Control and Healthy Homes to assess whether the lead-based paint inspections and risk assessments with missing elements are sufficient to support the lead-based paint status of the Authority's properties. If it is determined that the lead-based paint and risk assessment reports are not sufficient, HUD should require the Authority to perform new assessments.

Embassy Bucharest should implement a coordination process for the oversight of foreign assistance programming in Romania in accordance with Department guidelines.

Embassy Bucharest should create a fraud prevention strategy in accordance with Department standards.

Embassy Bucharest should maintain and destroy immigrant visa files in accordance with Department standards.

Embassy Bucharest should implement a process to regularly review and update its management policies.

Embassy Bucharest should close out procurement files in accordance with Department standards.

Embassy Bucharest should bring its contracting officers representative program into compliance with Department standards.

Embassy Bucharest should bring its property management program into compliance with Department standards.

Embassy Bucharest should bring its cashier operations into compliance with Department standards.

The Bureau of European and Eurasian Affairs should provide instructions to Embassy Bucharest on the submittal of financial reports documenting its use of Ukraine supplemental funding.

Embassy Bucharest, in coordination with the Bureau of Administration, should require the Bucharest Employees Recreation Association to request authorization to update the association charter to include processing for official residence expenses payroll and expenses as an approved service.

Embassy Bucharest, in coordination with the Office of the Legal Adviser, should determine whether the reimbursement of the employee association’s concierge fees as official residence expenses is allowable according to Department guidelines and regulations.

Embassy Bucharest should obtain approval for its OpenNet extensions or implement the use of Department enterprise laptops to access OpenNet from the official residences.

We recommend the FAMS Executive Assistant Administrator/Director conduct a risk assessment to quantify and measure the operational impacts when deploying air marshals to the Southwest border.

We recommend that Coast Guard’s Cyber Command and Office of Port and Facility Compliance develop and implement a plan of action with established benchmarks for the Cyber Protection Team and the Maritime Cyber Readiness Branch to work with Marine Transportation Security Specialists–Cyber to enhance coordination and to build working relationships with private industry stakeholders.

We recommend that Coast Guard’s Office of Port and Facility Compliance establish standardized cybersecurity training on enforceable authorities.

We recommend that Coast Guard’s Assistant Commandant for Prevention Policy complete and publish cybersecurity-specific regulations providing enforcement authority for facility and vessel inspections.

Assess the administrative impact of the Appropriation Act earmarks and determine and implement all necessary response actions.

Coordinate with the Office of the Chief Financial Officer to ensure that LRP funds are properly accounted for and tracked separately from other McGovern-Dole Program funds for agreements issued in FYs 2021 and 2022. As applicable, remediate or consult with OGC on any potential Antideficiency Act violations noted and, if applicable, include any nonconformance in the agency’s Federal Managers’ Financial Integrity Act Annual Certification Statement.

Revise current agreement closeout policies and procedures to reflect regulatory requirements.

Establish and implement a formalized plan to resolve the historical backlog and close out these agreements.

Analyze whether FAS’ existing closeout process (including the agency’s existing resources and distribution of responsibilities) is effective to meet its objectives, and implement closeout process revisions, if needed, based on the results.

The LB&I Division, SB/SE Division Examination, Criminal Investigation, RAAS, and the Digital Assets Initiative Project Office analyze ************2****************** ***************2****************************** of digital assets.

The LB&I Division, SB/SE Division Examination, RAAS, and the Digital Assets Initiative Project Office leverage data pertaining to ***************2****************** *************************2********************************************** compliance activity.

The LB&I Division, SB/SE Division Examination, Criminal Investigation, RAAS, and the Digital Assets Initiative Project Office develop a compliance plan that includes the use of Form 1099-DA data, case identification, and case selection of digital asset cases.

Resolve key Integrated Financial and Acquisition Management System challenges and ongoing concerns identified by officials from the Office of Acquisition, Logistics, and Construction and the Office of Acquisition and Logistics before further deployment of the acquisition module.

Take immediate action to review 1,818 SVOG awards that we identified as high-risk of potential ineligibility and recover any funds from recipients who did not meet the requirements.

Finalize and implement updated guidance dated April 18, 2024, to terminate the award for unresponsive recipients and initiate actions to recover funds within the stated timeline.

Assess staffing and procedures to ensure post-award reviews are conducted in a prompt manner. Use the results of the assessment to improve processing times to ensure reviews are completed in time to accommodate relevant statute of limitations.

Determine the allowability of $3,098,895 in questioned direct labor costs on pages 6-7 of the audit report and recover any amount that is unallowable.

Require World Vision to develop and implement policies and procedures to periodically record and review time worked and any proportional allocation of the costs for greater accuracy.

Require World Vision to develop and implement policies and procedures to establish a requirement to document the basis of the allocation percentages.

Require World Vision to develop and implement policies and procedures to ensure that management is verifying and documenting the percentage of labor hours that employees charged to awards.

Require World Vision to develop processes and establish controls to ensure each of World Vision offices are submitting the Value-Added-Tax reports by April 16 of the preceding year.