Open Recommendations

The Director, Collection Policy, SB/SE Division, should revise the Internal Revenue Manual (IRM) to require revenue officers to check their mail and faxes for any CDP levy hearing requests prior to issuing levies.

The Director, Collection Policy, SB/SE Division, should provide training to remind revenue officers that for manually created balance due modules within the ICS, they must manually verify the CDP levy notice was timely issued and that the modules are not part of an open CDP hearing prior to levy. In addition, revise the IRM to require that revenue officers document the ICS history with confirmation that required notices were provided prior to issuing a levy on a manually created balance due module.

The Director, Field Collection, SB/SE Division, should ensure that the taxpayers who were not given the opportunity for a CDP hearing are given their CDP rights, if appropriate; and obtain authorization to retain any improper levy proceeds or refund the proceeds to the taxpayer.

Establish procedures for Appeals managers conducting case reviews to specifically review the law and administrative review performed by the Appeals officer to determine if it was conducted appropriately.

(U) Rec. 1: Report is Classified.

(U) Rec. 1: Report is Classified.

(U) Rec. 2: Report is Classified.

Update its DHS I&A Contract Management Guidebook and checklists to include specific contracting functions in support of OCPO and clearly delineate the contract administration responsibilities between DHS I&A and OCPO.

Develop a process to ensure that all closeout modifications are signed on the same date that the contract action is released in the contract writing system.

Update NRC Form 176A to include the required anti-gag language.

Treasury OIG should confirm if the transactions noted as unsupported expenditures within Aggregate Reporting less than $50,000 can be supported. If support is not provided, Treasury OIG should recoup the funds or request that Bergen County management provide support for replacement expenses, not previously charged, that were eligible during the CRF period of performance. Further, based on Bergen County's responsiveness to Treasury OIG's requests and its ability to provide sufficient documentation and/or replace unsupported transactions charged to the CRF with valid expenditures, we recommend Treasury OIG determine the feasibility of conducting an audit for the Aggregate Reporting less than $50,000…

We recommend that USAID's Chief Information Officer request its
cognizant Management Council on Risk and Internal Control to report and track as a significant deficiency to the Agency the risk of not timely disabling network accounts for separated employees and contractors, as identified in Office of Inspector General Report No. A-000-21-004-C, Recommendation 2.

We recommend that USAID's Chief Human Capital Officer request its
cognizant Management Council on Risk and Internal Control to report and track as a significant deficiency to the Agency the risk of not maintaining records evidencing that staff have been offboarded in accordance with Agency policy, as identified in Office of Inspector General Report
No. A-000-21-004-C, Recommendation 3.

We recommend that USAID's Chief Information Officer develop and
implement procedures to document deviations from Agency policy on security control assessments, including acceptance of the risk of such deviations.

We recommend that USAID's Chief Information Officer establish and implement a process to track the progress of conducting annual reviews and related lessons learned from the implementation of its Information Security Continuous Monitoring Strategy.

(U) Rec. A.1: Report is Classified.

(U) Rec. A.2: Report is Classified.

(U) Rec. A.4: Report is Classified.

(U) Rec. B.1: Report is Classified.

(U) Rec. B.2: Report is Classified.

(U) Rec. C.1: Report is Classified.

(U) Rec. 1: Report is Classified.

(U) Rec. 2: Report is Classified.

(U) Rec. 3: Report is Classified.

CMS should implement additional safeguards to ensure that remote patient monitoring is used and billed appropriately in Medicare.

CMS should require that remote patient monitoring be ordered and that information about the ordering provider be included on claims and encounter data for remote patient monitoring.

CMS should develop methods to identify what health data are being monitored.

CMS should conduct provider education about billing of remote patient monitoring.

CMS should identify and monitor companies that bill for remote patient monitoring.

1. We recommend that the Department's Senior Agency Official for Geospatial Information coordinate with NOAA and Census to review our test results, determine which missing metadata content is most significant for current users of geospatial data, and develop a plan (with goals and timeframes) to ensure more consistent completion of those fields.

We recommend the Director of CISA develop and implement a risk-based national strategic plan that addresses current and evolving risks, to enhance the security and resilience of the Nation’s election infrastructure, including disinformation and the use of artificial intelligence.

We recommend the I&A Deputy Under Secretary for Management develop and implement a resource strategic plan to ensure the Security Branch is staffed to adequately schedule and conduct security inspections of its offices that handle classified information.

We recommend the I&A Deputy Under Secretary for Management update the Security Standard Operating Procedure to require the following:a risk-based methodology for selecting offices to inspect annually; and• a process to confirm inspected offices implemented corrective actions and recommendations.

The Chief Taxpayer Experience Officer should oversee all customer satisfaction surveys to help ensure that the IRS follows existing Federal guidance for tracking survey feedback.

The Chief Taxpayer Experience Officer should collaborate with division management to ensure that the concerns raised by the survey results are: 1) shared Service-wide; 2) considered in system and process improvements; and 3) evaluated to determine the effects of the improvements on the customer experience, including customer satisfaction.

The Chief Taxpayer Experience Officer should coordinate with division management to administer surveys on consistent delivery and reporting schedules throughout the IRS, when applicable.

The Chief Taxpayer Experience Officer should coordinate with division management to monitor and improve survey quality to reduce nonresponse bias as well as ensure that taxpayers have access to customer satisfaction surveys.

The Chief Taxpayer Experience Officer should collaborate with division management to develop and track customer satisfaction survey goals to reflect the priorities outlined in the Balanced Performance Measurement System.

The Chief Taxpayer Experience Officer should coordinate with division management to establish an enterprise-wide approach to provide an easy, direct way for taxpayers to alert management about unprofessional IRS employee behavior.

The IRS Human Capital Officer should require the ongoing periodic quality review of contractor employee separation actions performed by the CORs to ensure that they 1) timely prepare and submit Form 14604, 2) complete all steps specified on the Form, and 3) document all required separation steps in the SCC record.

Establish policies and procedures for Grant and Per Diem liaisons to obtain reliable discharge information from grantees when veterans exit from the Grant and Per Diem Program.

Implement controls, including enhanced medical facility and grantee guidance and training, to ensure grantee files and VA medical record documentation of veteran housing outcomes are consistent with Homeless Operations, Management, and Evaluation System data definitions and support the data in the Homeless Operations, Management, and Evaluation System.

Implement controls, such as quality reviews, to ensure Homeless Operations, Management, and Evaluation System outcome data are supported by and consistent with veteran medical records and grantee files.

Develop procedures to securely store all defective U.S. passportbooks until they are destroyed.

Obtain Federal Information Security Modernization Act compliance for the passport production database system or work with the Department of State to reassess if the Memorandum of Understanding, section V.C., provisions should be amended.

Establish procedures to complete annual safety inspections, remediate deficiencies, and document the results for the blue collection boxes.

The Bureau of Diplomatic Security should amend its guidance regarding the Information Facilities and Access Restriction (IFAR) process to include criteria as to which type of IFAR should be issued and to emphasize that a Typical IFAR allows the employee continued access to a substantial amount of Sensitive But Unclassified information.

The Bureau of Diplomatic Security should amend its processes to ensure that supervisors and colleagues are notified when an employees security clearance is suspended and the employee is permitted to continue working in the same position in order to ensure that classified information is not shared.

CMS should pursue further actions to help States share knowledge with eachother and coordinate internally regarding strategies to ensure needed care for Medicaid enrollees with HIV.

CMS should take additional steps to help States leverage the State Data Resource Center to access and use Medicare data for dually eligible enrollees with HIV.