Open Recommendations

GPO strengthens controls related to the review and certification of printing vendor invoices and reinforce the requirements in SOP 12-0023, Examination of Printing Invoices, specifically as it relates to supporting documentation requirements for vendor invoices.

It is recommended that GPO design and implement effective monitoring controls related to the review and approval for the processing of new hire employee actions and reinforce the requirements in OPM's Guide to Processing Personnel Actions, specifically as it relates to the timeliness of supervisor authorizations.

It is recommended that GPO design and implement monitoring controls related to the review and certification of employee timesheets and reinforce the requirements in GPO Directive 440.12C, specifically as it relates to the separation of duties between the timekeeper and certifying official roles.

It is recommended that GPO establish procedures within its review control for the OWCP liability adjustment to independently assess the reliability of data received from DOL. This may include performing reasonableness checks such as detailed trend/variance analysis, reconciliations, or reviewing supporting documentation.

Strengthen RD’s continuous review and monitoring controls to identify and timely deobligate ULOs that are not properly authorized and supported by appropriate documentation; that have been completed and not closed out; and under which no future expenditures are expected.

Determine whether the identified undocumented grant is valid, and properly document review and approval thereof.

Deobligate the identified invalid ULOs that are outstanding.

Identify key balances, such as high-risk balances or high dollar value items and ensure that supporting schedules agree with stated balances

Develop a plan for completing the FY 2026 internal controls assessment and resulting assurance statements, including the timing and who is responsible for completing the assessment

Perform the FY 2026 internal controls assessment and prepare the resulting assurance statements in accordance with Federal requirements and within the required due date

Establish and implement a financial reporting process to ensure timely preparation of an OMB Circular A-136-compliant AMR that is appropriate for its current size, staffing levels, and mission

Develop procedures to analyze systems, controls, and legal compliance to the extent necessary to prepare management's assurances related to FMFIA

For material transactions that sample support cannot be located, obtain alternative evidence such as confirmations from vendors, grantees or banks

Develop and document retention controls that take into consideration USADF's current structure

Establish and implement a financial reporting process to ensure timely preparation of quarterly and annual financial statements in compliance with OMB Circular A-136 that is appropriate for its current size, staffing levels, and mission

Determine personnel gaps in its financial reporting function and determine whether these roles can be filled by existing USADF personnel

Implement monitoring mechanisms to ensure adherence to federal financial management requirements and timely corrective action for deficiencies

Consider implementing alternative solutions, to provide internal control support, including FMFIA/A-123 testing and documentation updates

Develop and implement a streamlined internal control and risk assessment plan focused on the drawdown of operations, prioritizing high-risk areas such as disbursements, funds held outside of treasury (FHOT), grants, and closeout procedures to maintain compliance and financial integrity

Strengthen communication and accountability by issuing clear written guidance on roles and responsibilities for remaining personnel and establishing a simple escalation process for unresolved control issues

Strengthen their risk assessment process by considering the gap period between the last SOC 1 reports and PBGC’s fiscal year end to determine the sufficiency of internal controls relevant to PBGC’s financial reporting processed by the service organizations. Such considerations should be documented.

Design and implement additional controls based on the results of PBGC’s risk assessment process.

Due to the sensitive nature of the findings and recommendations in this report, its disclosure has been restricted.

Due to the sensitive nature of the findings and recommendations in this report, its disclosure has been restricted.

Due to the sensitive nature of the findings and recommendations in this report, its disclosure has been restricted.