Open Recommendations

We recommend that OSMRE develop and provide to grant applicants guidance on information required for OSMRE to compile its Infrastructure Investment and Jobs Act report submission to Congress.

The Chief Information Officer should ensure that the cloud system immediately completes its pilot program and that an ATO memorandum is approved for the system to remain in production.

The FBI devise and implement a plan to ensure that it meets all of the requirements of the e-Recording Policy.

The ATF, DEA, FBI, and USMS provide their personnel refresher training on the e-Recording Policy, including the policy's allowable exceptions to recording.

This recommendation is Sensitive But Unclassified.

This recommendation is Sensitive But Unclassified.

This recommendation is Sensitive But Unclassified.

This recommendation is Sensitive But Unclassified.

This recommendation is Sensitive But Unclassified.

This recommendation is Sensitive But Unclassified.

We recommend that FWS require the Department to develop and implement controls to ensure WSFR and license revenue funding sources are recorded, to include updating language in Department policy accordingly.

We recommend that FWS require the Department to develop a control that requires current and any new Department employees to be trained on policies and procedures related to equipment management, to include maintaining complete and accurate information in the new fixed asset system and the proper use of equipment transfer and disposal forms.

We recommend that FWS require the Department to conduct independent inventory reviews, per Department policy, to proactively identify issues, such as equipment not being recorded in the fixed asset system or not being properly disposed of.

We recommend that FWS require the Department to update the new fixed asset system with the missing information identified in this finding, to the extent feasible.

The Chief Data and Analytics Officer should develop procedures to ensure that all CDW servers are included in configuration compliance scans as required.

As expeditiously as possible, the Commissioner of the Fiscal Service should ensure that the financial agency agreement (FAA) for Direct Express Program cardholder services includes adequate provisions to help ensure that open SR notices are reviewed timely and that investigations are concluded within 10 business days per Regulation E or that the cardholder receives provisional credit no later than the 10th business day; and as recommended in our July 2019 report, Fiscal Service should use banking regulator reports to monitor compliance with the FAA and service level requirements.

Implement a plan when deploying future
Matrix Regional Sorters to provide necessary training to maintenance staff
for a smooth and timely transition from contractor support.

Determine how to appropriately remedy its management and use of an improper personal services contract.

Evaluate the lapses that occurred in the FBI's management and oversight of this contract. This evaluation should include determining the best course of action for resolving the $4,928 payment discrepancy, while taking into consideration Contractor-1 receiving less than the firm-fixed-price amount on the relevant task orders. In addition, the FBI should analyze prior OIG reported contract issues to determine if additional action is needed to enhance the FBI's contracting practices due to similar issues occurring in this contract.

We recommend that the Assistant Secretary for OSERS require RSA to design and document procedures for its annualreview process. The procedures should be in the form of written policies and procedures or protocols, and designed toensure compliance with applicable requirements, including those covered in the Rehabilitation Act of 1973 and theDepartment’s “Guide for Managing Formula Grant Programs.”

We recommend that the Assistant Secretary for OSERS require RSA to strengthen its process for selecting State VRagencies to monitor by (a) incorporating a risk factor that accounts for an agency’s technical assistance needs (such asnumber of requests made or complexity of technical assistance needs) into the accountability model used to help selectagencies and (b) establishing a reasonable time period (for example, 8 to 10 years) during which all agencies must bemonitored (through periodic onsite monitoring or offsite monitoring) by RSA at least once.

CO make a determination regarding the allowability of questioned costs identified in this report, recover those amounts determined to be unallowable, and determine whether additional steps are needed to validate the allowability of costs.

Develop a tool to analyze the data in CBFish and identifying potential issues.

Identify the optimal size of the CO workforce to ensure that it is appropriate for the workload distribution.

Review the seven contracts that remain open as identified in the report, along with the expired contracts and agreements not included in our sample, and addressing the issues resulting in delayed closeout.

Develop and implement additional processes and controls to strengthen BPA’s oversight and monitoring of contracts such as training, tracking task status more accurately, and documenting justification for final disposition of task.

Update BPA’s policies and procedures to include a process for closing out IAAs and to establish specific closeout timeframes.

Evaluate the current design and operating effectiveness of the invoicing practices and revising, developing, or implementing a policy to strengthen and improve BPA’s overall approach to reviewing invoices.

Consider the use of a structured, documented self-assessment process to ensure compliance with applicable requirements and continuous improvement of the Program.

ACF should monitor whether States are conducting credit checks of all three CRAs for children aged 14 or older who are in foster care, as required.

ACF should further assist States in building their capacity to conduct credit checks and to interpret and resolve credit reports effectively.

ACF should seek to partner with other government agencies to develop strategies to address issues that States experienced working with CRAs.

Define the roles and responsibilities of the appropriate assistant under secretaries, program office staff, and regional and medical center staff in the implementation and monitoring of the substance use disorder hiring initiative and ensure the relative priority of the initiative is communicated; hiring progress is monitored; possible hiring challenges are addressed to the extent possible; and actions are taken as needed to meet the goals of the hiring initiative.

Remediate the 7 findings and 19 associated recommendations identified in Cloud Platform #1 and the applications built on Cloud Platform #1.

Remediate the 8 findings and 11 associated recommendations identified in Cloud Platform #2 and the applications built on Cloud Platform #2.

Remediate the 4 findings and 7 associated recommendations identified in Cloud Platform #5.

This recommendation is redacted.

Design and implement a plan to prevent, detect, and remediate security weaknesses on FDICcloud platforms and applications related to insecure coding practices, misconfigured securitysettings, least privilege violations, outdated software versions, and ineffective monitoring

OIG recommends that the Bureau of Administration develop and implement a process to formally designate and issue warrants to transportation officers responsible for authorizing tenders of service at overseas posts, as recommended by the Federal Management Regulation. The process should outline the training and experience requirements for obtaining a transportation officer authorization and the conditions for maintaining the authorization. The process should also include a mechanism for tracking and managing the requirements for maintaining the warrant.

OIG recommends that the Bureau of Administration develop and implement a training program for personnel responsible for executing transportation-related acquisitions using tenders of service, as recommended by the Federal Management Regulation. The program should outline baseline and continuing education training requirements for General Services Officers and locally employed transportation staff.

(U) Rec. A.1: The DoD OIG recommended that the Commander of Navy Munitions Command Atlantic emphasize the importance of providing the highest levels of materiel accountability and asset visibility for munitions to all officials at Navy Munitions Command Atlantic Detachment Bahrain who are responsible for munitions at Naval Support Activity Bahrain.

(U) Rec. A.2.a: The DoD OIG recommended that the Commander of Navy Munitions Command Atlantic, in coordination with the Commanding Officer of Helicopter Mine Countermeasures Squadron 15 conduct a review of Helicopter Mine Countermeasures Squadron 15's inventory procedures and implement required corrective actions.

(U) Rec. A.2.b: The DoD OIG recommended that the Commander of Navy Munitions Command Atlantic, in coordination with the Commanding Officer of Helicopter Mine Countermeasures Squadron 15 Update the "Memorandum of Understanding in Case of Ammunition and Explosives Accountability" to include responsibilities for providing oversight of inventory procedures for Helicopter Mine Countermeasures Squadron 15.

(U) Rec. B.1: The DoD OIG recommended that the Commander of Navy Munitions Command Atlantic emphasize the importance of providing the highest levels of materiel accountability and asset visibility for munitions to all Navy Munitions Command Atlantic Detachment Bahrain officials responsible for munitions at [Redacted].

(U) Rec. 2: The DoD OIG recommended that the Executive Director of the DoD Explosives Safety Board issue guidance for weapons safety managers to verify, at least quarterly, the net explosive weight totals in munitions storage structures located on installations within the U.S. Central Command area of responsibility.

We recommend the TSA Administrator, in coordination with the Secretary and the Office of Management and Budget, work with Congress and the Department to resolve funding shortfalls or request Congress amend or repeal the requirements identified in our report for which TSA did not receive sufficient funding.

We recommend the TSA Administrator, in coordination with the Secretary and the Office of Management and Budget, work with Congress to amend or repeal the requirements identified in our report that TSA indicated it did not plan to implement.

We recommend the TSA Administrator report to Congress on the requirements identified in our report as not fully implemented based on insufficient evidence where TSA disagreed with our assessment.

Update existing methods of resource allocation to account for system categorization.

Perform a cost benefit analysis of introducing automation to support a centralized view of cybersecurity risks, manage risk designations, maintain privileged accounts, and test system contingency plans; and apply the appropriate risk mitigation strategy.