Open Recommendations

The Executive Director ensures staff evaluate the best place to store cleaning supplies, staff store them there, and leaders monitor compliance.

The Executive Director ensures staff remove expired medical supplies and patient food items from patient care areas.

The Executive Director ensures doors in patient care areas have signs to indicate what is stored inside.

Rec 1.a: The DoD recommended that the Under Secretary of Defense (Comptroller)/Chief Financial Officer, DoD, require the Defense Finance and Accounting Service to perform all future accounting adjustments at a level that ensures the system or file impacted can be identified.

Rec 1.b: The DoD recommended that the Under Secretary of Defense (Comptroller)/Chief Financial Officer, DoD assess whether artificial intelligence software could assist the Defense Finance and Accounting Service in reviewing previously recorded accounting adjustments made to balances required for Treasury reporting to identify the impacted systems or files, making it easier to identify the impact of systems that are retiring.

Rec 1.c: The DoD recommended that the Under Secretary of Defense (Comptroller)/Chief Financial Officer, DoD, coordinate with the DoD Chief Information Officer; Director, Defense Finance and Accounting Service; and data owners to fully support all unmigrated balances from retired financial management systems that are required for Treasury reporting and migrate those balances to an active financial management system for inclusion in current files submitted to the Defense Departmental Reporting System.

Rec 1.d: The DoD recommended that the Under Secretary of Defense (Comptroller)/Chief Financial Officer, DoD, coordinate with the DoD Chief Information Officer; Director, Defense Finance and Accounting Service; and data owners to develop and implement policies and procedures to fully support and migrate all balances required for Treasury reporting to an active financial management system before each financial management system retirement occurs in the future.

Rec 2.a: The DoD recommended that the Director, Defense Finance and Accounting Service implement system change requests in the Defense Departmental Reporting System to stop performing accounting adjustments on balances that are not required for Treasury reporting and archive these balances.

Rec 2.b: The DoD recommended that the Director, Defense Finance and Accounting Service develop a plan to discontinue the use of obsolete files in their compilation of the DoD Component or Agency?Wide Financial Statements.

We recommend that the Under Secretary for Minority Business Development incorporate the actions provided in the conclusion section of this report when implementing changes to the Business Center program.

The VA Boston Healthcare System Director assesses the timeliness of appointment setting for VA direct and community care referrals and ensures facility staff establish appointments within required time frames.

The VA Boston Healthcare System Director reviews consult management practices and ensures the proper use of consults for VA direct care referrals.

The VA Boston Healthcare System Director reviews appointment wait times and acts on identified opportunities for improvement.

We recommend the Vice President, Safety and Shared Services, perform a review to identify active contracts without completed Site-Specific Safety and Health Plans and expedite completion of the plans by the contractors.

We recommend the Vice President, Safety and Shared Services, perform a review to identify active contracts without a Contractor Oversight Representative and assign individuals to fill those roles and complete the required responsibilities.

We recommend the Vice President, Safety and Shared Services, continue taking steps to enhance identification and awareness of the Contractor Oversight Representatives’ roles and responsibilities.

We recommend the Vice President, Safety and Shared Services, take steps to verify audits of safety performance are completed and documented in compliance with the Tennessee Valley Authority Standard Programs and Processes 18.004, Contractor Safety Management.

Update relevant policies or procedures to include processes for transitioning assets through the inventory life cycle, including
a. identifying IT assets that have completed their life cycle as ready for disposal or requiring a justification for retaining those assets.
b. establishing a schedule for asset disposal, implementing measures to monitor the asset disposal schedule, and reporting on the agency’s progress for fulfilling disposal expectations once established.

Update relevant policies or procedures to establish systematic methods for storing and organizing IT assets, including
a. formally designating rooms for certain assets and defining and implementing security measures for each storage room based on the room’s designated assets.
b. organizing rooms to ensure that in stock assets containing hard drives are not mixed with those designated as pending disposal and creating a plan to systematically stage and prepare IT assets for disposal, including confirmation that the assets designated as pending disposal do not contain hard drives before disposing of them.

We recommend that the Grantee develop and implement written policies and procedures surrounding the management of federal awards, in accordance with the Uniform Guidance.

We recommend that the Grantee retain documentation that substantiates travel expenses and the basis for determining the value of in-kind match contribution.

We recommend that the Grantee works with ARC, to resolve the $2,562 of questioned cost.

Develop and maintain cybersecurity profile(s) that define key elements of the Board’s current and target cybersecurity program in alignment with the Board’s organizational risk tolerance, mission objectives, and threat environment.

Evaluate the dual-use model for the Board’s mobile devices, in accordance with the Board’s security objectives and risk tolerance, and review and update the Information Technology Resources Use policy as appropriate.

Strengthen mobile device security controls to enforce content and data protection policies.