Open Recommendations

We recommend that the FEC OCIO conduct regular security scans of Server 1 to verify compliance with STIG security configuration settings in accordance with the agency’s FECLAN SSP.

We recommend that the FEC OCIO reassess and reprioritize resources to identify opportunities to accelerate the remediation of urgent, critical, and high vulnerabilities.

We recommend that the FEC OCIO regularly conduct risks assessments in accordance with OMB Circular A-130, Managing Information as a Strategic Resource, to help identify other corrective actions to improve the timeliness of vulnerability remediation.

We recommend that the FEC develop and implement SLA policy and procedures and define KPMs for managing the performance of third-party service contracts.

We recommend that the FEC OCIO ensure (redacted) logs are forwarded to and actively monitored by the agency’s centralized SIEM system, in accordance with the agency’s system security plan.

Review, and take appropriate corrective action for, the 67 remittance exceptions that employees processed incorrectly.

Using a risk-based approach, review, and take appropriate actions on, remaining unissued remittance funds.

Provide targeted training to Program Service Center employees who process remittance exceptions on the policy-compliant procedures to address the errors we identified.

Remind employees who process remittance exceptions of the required steps to process them and the potential effects of not following policies.

We recommend that FSIS update its policy to include applicable legal requirements and financial processes pertaining to its Cooperative Interstate Shipment program.

We recommend the DHS Secretary designate a DHS component or office to oversee parole expiration for parolees under the reviewed parole processes who are no longer authorized to remain in the United States, and report on the prevalence of this issue.

We recommend the Commissioner of CBP and the Director of USCIS develop and implement a process to identify parolees under the reviewed parole processes who are no longer authorized to remain in the United States.

We recommend that the Commissioner of CBP and the Director of USCIS develop and implement a process to ensure ICE receives timely, accurate data regarding parolees under the reviewed parole processes who are no longer authorized to remain in the United States.

The St. Cloud VA Medical Center Director completes a comprehensive review of surgical service credentialing and privileging processes, ensures facility policy and practice in alignment with Veterans Health Administration policy, and as necessary, consults with Veterans Integrated Service Network leaders, and monitors for compliance.

The St. Cloud VA Medical Center Director reviews the processes specific to ongoing professional practice evaluations, ensures alignment with Veterans Health Administration policy, including surgical service chief consideration of the use of specialty-specific metrics, including surgical procedures performed in the operating room, and monitors compliance.

The St. Cloud VA Medical Center Director completes a review of Medical Staff Executive Council meeting minutes, specific to focused and ongoing professional practice evaluations for the surgical service chief, identifies deficiencies, and takes action as warranted to ensure completion according to Veterans Health Administration requirements.

Update their methodology to evaluate merchant data compliance to include analyzing the volume of packages without unique data for each platform.

Reiterate existing compliance policies to supervisors to drive consistent and effective implementation by staff.

Some or all of the recommendation is not publicly available due to concerns with information protected under the Freedom of Information Act.

Identify and address Merchant Rate Card platforms' technical compliance issues to improve rate accuracy.

Require quarterly business reviews to include data analytics to validate the platforms charge accurate postage and fees and resolve platform issues.

Coordinate with platforms to collect previously undetected short-payments resulting from postage discrepancies identifiable based on package information transmitted to the Postal Service.

Coordinate with platforms to refund previously undetected over-payments resulting from postage discrepancies identifiable based on package information transmitted to the Postal Service.

Review current outreach strategies, including staffing assignments, and make appropriate changes to optimize resources, ensuring maximum awareness of available assistance to disaster survivors.

Implement processes to gather feedback from applicants that would assist the agency in monitoring the effectiveness of its outreach methods.