Open Recommendations

Develop and implement Buy America policies or guidance detailing when to initiate Buy America rolling stock compliance reviews and apply the corrective actions (i.e., specific conditions and remedies for noncompliance) described in the Uniform Grant Guidance.

Update relevant policies and procedures for appraiser roster management so that they align with each other and with regulations and reflect HUD practice. At a minimum, the policies and procedures should clearly cover appraiser roster status, license expiration, disciplinary actions, removals, data accuracy, and documentation.

Maintain historical data for each appraiser record, including history on expiration dates, when appraisers are moved on or off the appraiser roster and when they are and are not allowed to be assigned to conduct appraisals.

Improve quality assurance processes by adding steps to verify that the appraiser roster is accurate and reliable over time through testing of its logic-based system controls and data fields.

Evaluate the postmarking policy and adjust as necessary to ensure that all mail-in ballots receive a postmark.

Develop qualitative and quantitative performance measures to evaluate the effectiveness of the following: Configuration Management plan and change control activities.

Perform a cost benefit analysis of introducing automation to support the testing of system contingency plans; and apply the appropriate risk mitigation strategy.

Fully implement its processes for information system back up for General Support System Cloud.

Include controls in future debt management system modernization efforts to address system limitations causing overpayments to not be recovered via Cross-Program Recovery or transferred to another liable individual for recovery.

Pending automation improvements, remind employees of circumstances when a manual action is needed to initiate cross-program recovery or transfer a debt to another liable individual for recovery.

FHFA should develop and implement policies and procedures to oversee FHFA’s background reinvestigation process, including oversight controls over FHFA’s service provider.

FHFA should update the service level agreement between FHFA and the service provider to include requirements for the service provider to provide background reinvestigation status reports on a regular basis.

FHFA should implement a process to monitor and ensure that background reinvestigations for relevant employees and contractors are conducted timely in accordance with FHFA and OPM standards.

FHFA-OIG's Chief Information Officer should implement a process to monitor and ensure that background reinvestigations for relevant employees and contractors are conducted timely in accordance with FHFA-OIG and OPM standards.

FHFA-OIG's Chief Information Officer should establish and implement a process to make suitability adjudicative determinations and take suitability actions for covered positions in accordance with OPM’s regulation under Title 5 CFR, Part 731.103.

FHFA should disable accounts of nonprivileged users who have been inactive for over 365 days, as required by the FHFA customer controls for the cloud system.

FHFA should work with the cloud system’s vendor to implement software updates that automatically disable user accounts after 365 days of inactivity, as required by the FHFA customer controls for the cloud system.

FHFA should update the customer controls for the cloud system to include a procedure for regular reviews of non-privileged users’ access.

FHFA should complete the review and update of overdue SSPPs and Customer Control Plans in accordance with the existing related plans of action and milestones (POA&Ms).

FHFA should complete the review, update, and testing of the Capital Models (PolyPaths) ISCP in accordance with the existing related POA&M

Evaluate and document all accounting policies within the combined financial statements to ensure non-GAAP policies are identified and monitored at least annually for quantitative and qualitative impacts.

Evaluate and document the accounting implications of all unusual arrangements within the Federal Government, including alternative financing arrangements and regulatory assets and liabilities.

Enhance existing Southwestern processes to ensure that all substantially completed projects are transferred from CWIP to PP&E for financial reporting purposes.

Work with the Corps to enhance existing CWIP monitoring processes to ensure the timely transfer of CWIP to PP&E.

3. We recommend that the NOAA Administrator direct the Office of Space Commerce Director to modify the TraCSS staffing plan to include roles, responsibilities, and priority for each position and strategies for attrition management.