Open Recommendations

Develop a formal, role-based training program with a focus on first time members in SRB roles

Determine the optimal method(s) and frequency required to keep an SRB appropriately
engaged and informed of program and project status between life-cycle reviews and implement
an applicable procedure in the SRB Handbook or other policy or guidance

Identify obstacles that inhibit programs and projects from providing timely information to SRBs
and implement solutions so that timelines agreed to for data deliverables are met

Implement a process for mission directorates to facilitate the collection and sharing of lessons
learned and document that process in the SRB Handbook

We recommend that the Grantee establish policies and procedures for the timely submission of progress reports in accordance with the Uniform Guidance and ARC grant agreement requirements.

Develop and implement a method to identify and report separate quality statistics for the Military Sexual Trauma Operations Center.

Update the existing two-signature review process for claims processors and designated reviewers to include an increased focus on military sexual trauma denials.

Develop and implement a process to assess designated reviewers’ competency in processing denied military sexual trauma claims and monitor effectiveness.

Review GPO Instructions 810.5B, Organization and Functions of the Board of Survey, and 810.11B, GPO Property Management Program, for applicability and update or replace them with policies and standard operating procedures that align with the
current organizational structure and business operations.

Develop and implement comprehensive procedures for conducting inventory counts, regardless of physical storage location. These procedures should include, but not be limited to:
a. Establish accountability and responsibilities for the overall physical count.
b. Standardize the frequency of counts and the method of selecting individual items or locations for count.
c. Document the count and supervisor review.
d. Assess production paper and materials for obsolete, damaged, and slow-moving items for action.

Take appropriate action to pursue potential revenue opportunities for the 155 non-moving inventory items, valued at nearly $304,000, in funds be put to better use, identified in this audit.

Take appropriate action to remedy the $39,000 overstatement in the inventory management system for the 44 inventory items identified in this audit.

FHFA’s Chief Information Officer should establish and implement guidance for performing National Institute of Standards and Technology Cybersecurity Framework 2.0 activities through policies and procedures.

FHFA’s Chief Information Officer should ensure that Privileged Account Request eWorkflows are fully completed and approved for all privileged FHFA General Support System user accounts prior to granting access.

FHFA’s Chief Information Officer should ensure all applicable Organizational Units are included in the automated process that disables inactive accounts after 35 days.

FHFA’s Chief Information Officer should disable inactive Active Directory accounts after a period of 35 days of inactivity.

FHFA’s Chief Information Officer should create a Plan of Action and Milestones to establish when the annual Disaster Recovery Procedures for FHFA Production Systems exercise will be conducted and when the new system owners will be assigned and trained on their roles and responsibilities related to FHFA General Support System, Office of General Counsel Matter Management Tracking System, and the FHFA Status Tracking and Reporting system.

FHFA’s Chief Information Officer should schedule and conduct an annual Disaster Recovery Procedures for FHFA Production Systems exercise for the FHFA General Support System, Office of General Counsel Matter Management Tracking System, and the FHFA Status Tracking and Reporting system, and ensure new system owners are trained to execute them.

Establish policies and procedures for administrative and financial management including determining the allowability and allocability of costs, record retention, procurement, internal control, tracking of costs by approved budget categories, reconciliation of costs to financial reports, and timely submission of performance progress and financial reports in accordance with the Uniform Guidance and grant agreement.

Work with ARC to resolve the questioned cost totaling $456,942 for ARC funded costs.

Work with ARC to resolve the questioned cost totaling $75,000 for non-ARC matching cost share.

Revise and resubmit the SF-270 and the related reimbursement table to reflect the accurate budget category of Contractual cost instead of Personnel.

Work with ARC to resolve the questioned cost totaling $1,167 for non-ARC Matching cost share

We recommend that the Grantee develop and implement formal written policies and procedures surrounding the management of Federal awards, in accordance with the Uniform Guidance.

We recommend that the Grantee work with ARC, to resolve the $45,000 of questioned costs.