Open Recommendations

Develop controls to ensure required contractor performance evaluations are completed.

We recommend that the DNFSB finalize its project plan and procedures for developing and maintaining current and target CSF profiles.

We recommend that the DNFSB develop current and target CSF profiles.

We recommend that the DNFSB coordinate with its software producers to obtain Secure Software Development Attestation Forms. If the DNFSB is unable to obtain the attestation forms, it should request POA&Ms from the software producers, in accordance with OMB Memorandum M-23-16.

We recommend that the DNFSB submit POA&Ms and risk-based waiver requests to OMB for approval in accordance with OMB Memorandum M-23-16.

We recommend that the DNFSB document policies and procedures for developing and maintaining a comprehensive and accurate inventory of data and the corresponding metadata for the DNFSB’s data types.

We recommend that the DNFSB create and maintain a comprehensive inventory of data and corresponding metadata.

We recommend that the DNFSB prioritize and conduct an annual security control assessment and update the GSS’ System Security Plan, Security Assessment Report, Privacy Impact Assessment, and Information System Contingency Plan in accordance with the DNFSB Risk Management Framework Handbook.

The OIG recommends that the Executive Director for Operations establish policies, procedures, and a centralized information system to consistently manage, track, and monitor staff qualifications records.

The OIG recommends that the Executive Director for Operations update inspection manual chapters and office instruction(s) addressing qualification programs to include guidance about reminding staff of required refresher training.

The OIG recommends that the Executive Director for Operations implement a centralized, automated information system to ensure compliance with mandatory refresher training requirements.

We recommend the Vice President, Planning and Investor Relations, verify back testing is performed annually.

We recommend the Vice President, Pricing and Contracts, evaluate the program objective to balance operational and financial risks to determine if it should be eliminated or rewritten to clarify intent.

We recommend the Vice President, Pricing and Contracts, report annually the financial hedging program’s impact on fuel rate volatility and its hedging gains/losses in a more transparent manner to the Tennessee Valley Authority Board of Directors, Tennessee Valley Public Power Association, and Tennessee Valley Industrial Committee.

The IRS Human Capital Officer should Update the quality review process and enhance training to ensure that misconduct cases involving potential FTCP violations are correctly coded and resolved according to IRS policies and procedures.

The IRS Human Capital Officer should review the 19 miscoded issues (16 cases) to ensure that a proper analysis of the potential FTCP violations is conducted and discuss the results with the impacted managers and employees to promote awareness and improve future results.

The OIG recommends the under secretary for health implement procedures to monitor the data used to measure productivity to ensure the data accurately reflect the complete work of clinical resource hub physicians.

The OIG recommends the under secretary for health work with appropriate officials, such as Office of Primary Care and clinical resource hub leaders, to determine whether hub physicians should be subject to existing productivity measures. If so, issue clear hubs guidance requiring adherence; if not, clearly define what should be used, and issue thorough guidance on the steps hubs must take to measure physician productivity consistently.

The OIG recommends the under secretary for health clarify oversight responsibilities for monitoring productivity measures, including detailed procedures and actions that should be taken when thresholds are not met.

Conduct a feasibility study of capturing cost savings resulting from the Regional Transfer Hub initiative and, based on the results, implement tracking of costs related to the initiative.

Implement controls to enforce all required scanning at Regional Transfer Hubs in coordination with the Vice President of Processing Operations.

Enforce corrective actions for contracted transportation with late departing transportation.

Establish quantifiable key performance indicators (in coordination with Vice President Processing Operations), including acceptable impacts to service and a trailer utilization target, specific to the Regional Transfer Hub initiative.

Monitor performance of the Regional Transfer Hubs against established goals.

Verify that Leo Baeck Education Center corrects the instances of material noncompliance detailed on pages 22 to 25 of the audit report.