Open Recommendations

We recommend that the Kansas Department of Health and Education improve its use of the EVV system by verifying that exceptions are reviewed and remedied,  requiring that providers use the scheduling function within the EVV system or else directing the EVV contractor to remove the corresponding exception for instances when the scheduling function is not used, training providers on how to address and minimize the occurrence of informational exceptions, and establishing formal requirements governing service workers' use of the web portal.

We recommend that the Kansas Department of Health and Education verify that providers are complying with the State agency's established policies and procedures to maintain documentation showing that service workers are registered, screened, and employable pursuant to background check requirements.

We recommend that the Kansas Department of Health and Education verify that MCOs are complying with the State agency's established policies and procedures to complete and reassess functional needs assessments, including the needs evaluation tool, every 12 months, and upload these documents into the care management system for retention.

We recommend the Deputy Director and Senior Official Performing theDuties of the Director for ICE evaluate the use of manual processes for information sharing within ICE and with other stakeholders, such as the Department of Justice; identify funding; then develop and implement an automated system to document court appearances and maintain address information of unaccompanied migrant children.

We recommend the Deputy Director and Senior Official Performing theDuties of the Director for ICE develop and implement a formal process to identify unaccompanied migrant children who fail to appear for immigration hearings, and share this information internally within ICE and externally with the U.S. Department of Health and Human Services.

We recommend that the Centers for Medicare & Medicaid Services instruct the SSAs to follow up with the 24 nursing homes that may not have complied with Federal requirements to verify that they have taken corrective actions.

We recommend that the Centers for Medicare & Medicaid Services instruct the SSAs to follow up with the 24 nursing homes that may not have complied with Federal requirements to verify that they have taken corrective actions.

We recommend that the Centers for Medicare & Medicaid Services share the results of this audit with the SSAs and encourage them to focus their oversight on verifying that nursing homes designate an IP and that the IPs complete specialized training prior to filling that position.

Revise the initial contact letters to provide taxpayers the option to submit the requested returns electronically.

We recommend that EAC confirm that the Georgia Secretary of State’s Office implements corrective action to address recommendation 8 in Report Number 21-11 issued by the Georgia Department of Audits and Accounts.

We recommend that EAC calculate lost interest due to the untimely deposit of 2018 and 2020 Election Security funds and ensure any amounts due are deposited into to the election fund.

We recommend that EAC require the Georgia Secretary of State’s Office to reconcile interest earned reported by the Georgia Office of the State Treasurer and interest earned recorded on the general ledger and correct any impacted financial reports for the reissued Section 101, reissued Section 251, and Election Security awards.

We recommend that the FEMA Administrator direct FEMA Regions to:• begin administrative closeout of the 26 grant programs we identified with expired periods of performance to the extent permitted by the Stafford Act, for those with no pending requests for extension or lacking acceptable justifications for extension, and deobligate the associated $9.4 million in remaining funds;• assess and close, as appropriate, the 42 grant programs in our scope representing $7 billion in unliquidated funding; and• conduct a review of all authorized grant programs with expired periods of performance to determine whether to administratively closeout and deobligate remaining fund balances, to…

We recommend that the FEMA Administrator consistently apply FEMA Manual 205-0-1, Grants Management requirements, including that the recipient’s request and FEMA’s determination for extensions must be in writing and signed, and that FEMA’s determination include the rationale for the decision, including how the facts meet the applicable guidelines.

We recommend that the designated personnel complete training in detecting counterfeit system components (including hardware, software, and firmware) and best practices for counterfeit component prevention.

Revise regulations to require documents that can be verified to ensure firms complied with 13 CFR § 126.200(d)(3), that a legacy employee resided in a HUBZone for at least 180 days following the most recent certification (or recertification).

Update and implement standard operating procedures to request documents, as permitted under 13 CFR 126.304(b)(1), to verify during program examinations that firms meet size standards in the North American Industry Classification System code in which they perform on HUBZone contracts.

Improve the HCTS system notification module to ensure recertification notifications are sent timely and consistently to all HUBZone firms.

In the interim, establish procedures to verify completion of annual recertifications by defining parameters, timing, and other requirements as needed, including expected OCIO response times when the HUBZone program office requires manual HCTS processing.

Develop a plan that includes a timeline within which a preservation review will be performed of all NARA owned or leased records storage facilities to mitigate potential risks and ensure the long-term preservation and accessibility of valuable records;

Update policies and procedures to include established frequency ofreviews

Develop contingency plans for assigning responsibilities if a key role inthe entity is vacated. In addition, contingency plans should include implementation ofalternative procedures for preservation reviews when on-site visit is not possible or curtailedin the future. As an alternative, consider performing part of the preservation reviews remotewhere possible (i.e. review of preservation plans, inquiries of facility personnel, etc.)

Develop and implement a comprehensive SOP that can help mitigatethe above effects by providing clear guidelines, promoting consistency, and ensuringpreservation activities are conducted effectively, uniformly, and systematically across theorganization

Develop a prioritization method for preservation actions. BudgetRequests should be submitted for any additional resources necessary to complete prioritizedpreservation actions

Review all NARA facilities’ Plans annually to ensure they include allrequired minimum elements and that the Plans are reviewed annually by their respectivefacility director/administrator and Records Emergency Management Team (REMT)

Implement consistent controls across all facilities to maintain evidenceof annual review of the Plans by the facility director/administrator and REMT

Finalize and implement any remaining risk matrices for vulnerableaudio and video formats

We recommend that the Illinois Department of Healthcare and Family Services remediate the four security control findings identified by OIG.

We recommend that the Illinois Department of Healthcare and Family Services develop and implement flaw remediation policies and procedures for effectively identifying vulnerabilities, prioritizing them based on potential impact and exploitability, and remediating them within a defined timeframe as required by NIST SP 800-53, SI-2, Flaw Remediation, or other standards governing security of Federal systems and information.

We recommend that the Illinois Department of Healthcare and Family Services enhance its testing procedures to include performing more robust technical testing of web-facing systems and emulation of an adversary's tactics and techniques on a defined reoccurring basis, in order to better assess the effectiveness of NIST SP 800-53 controls.

We recommend that FSA’s Acting Chief Operating Officer require FSA to establish objectives for returning borrowers torepayment in specific and measurable terms that are easily understood and allow for the assessment of performancetoward achieving objectives.

We recommend that FSA’s Acting Chief Operating Officer require FSA to establish effective quantitative or qualitativeperformance measures and indicators for returning borrowers to repayment.

We recommend that FSA’s Acting Chief Operating Officer require FSA to ensure that appropriate control activities aredesigned and implemented to assess FSA's performance in returning borrowers to repayment, such as reviews ofperformance measures and indicators; comparing achievements to plans, goals, and objectives; and comparing actualperformance to planned or expected results.

EXIM’s Office of Human Capital should conduct a staffing needs analysis for its office to determine the appropriate staffing levels needed to support a human capital function in alignment with federal regulations and guidance and develop a plan to implement the results of its assessment.

EXIM’s Office of Human Capital should establish an EXIM working group to research and provide recommended solutions to standardize, streamline, and track processes, including the hiring process.

EXIM’s Office of the Chair should identify the human capital functions that affect EXIM’s ability to achieve its mission and develop a plan to measure and mitigate risks.

EXIM’s Office of the Chair, in collaboration with EXIM’s Office of Human Capital, should conduct an agency-wide culture assessment to identify ways to improve EXIM’s culture, retention, and employee engagement.

EXIM’s Office of the Chair, in coordination with the Office of Human Capital, should direct an agency-wide organizational and workforce study used to develop a strategic workforce plan that accurately identifies and portrays actual, current, and future workforce needs that align to EXIM’s work requirements in furtherance of its mission.

EXIM’s Office of Human Capital should consolidate the agency’s Performance Management programs into a singular program according to federal benchmarks and organization design principles and develop a plan to expand the Performance Management program through programs that link human capital initiatives to organizational performance.

EXIM's Office of Human Capital should conduct an EXIM-wide workforce analysis, which may include analysis of grade distribution, career path opportunities, supervisory ratios, delayering, and position management to form the basis of a plan for career progression, pathways, and succession planning.

EXIM’s Office of the Chair, in cooperation with the Office of Human Capital, should establish a Workforce Development Plan, as outlined in the Office of Personnel Management’s Human Capital Framework, to provide structured pathways for EXIM employees to enhance their skills, advance their careers, and ultimately contribute more effectively to EXIM's mission and objectives.

EXIM’s Office of Chair, in coordination with its senior leadership and the Office of Human Capital, should develop an agency-wide succession plan, using relevant agency workforce data and evidence such as vacancy, hiring, retirement, and current and future skills gaps, which includes identifying and defining “key vacancies,” to ensure compliance with 5 CFR Part 412.

Determine the allowability of the questioned transactions and recover $2,576,852 if applicable.

Work with FTA to determine allowability of the questioned tribal transactions and recover $105,674, if applicable.

We recommend that the BIA develop and implement an action plan to ensure its radio infrastructure inventory is complete and accurate. This plan should include-at a minimum-steps to be taken, resources needed, and milestones.

We recommend that the BLM complete baseline condition assessments for any radio communication sites that have not been assessed, in accordance with the updated OCIO Directive.

We recommend that the FWS develop and implement an action plan to ensure its radio infrastructure inventory is complete and accurate. This plan should include-at a minimum-steps to be taken, resources needed, and milestones.

We recommend that the DOI OCIO develop a mechanism to enforce all radio communications site requirements (OCIO Directive No. 2010-008), including the requirement for bureaus to inventory their radio infrastructure and the requirements for bureaus to complete baseline condition assessments, annual condition assessments, and corrective actions of their radio infrastructure.

We recommend that the BIA complete baseline condition assessments for all radio communication sites in accordance with the updated OCIO Directive.

We recommend that the BIA develop and implement a comprehensive plan to ensure that, in compliance with the updated OCIO Directive, annual condition assessments of all radio infrastructure are completed and corrective actions are promptly taken.