Open Recommendations

Develop plans that reflect potential cost savings measures and anticipated reductions in operations for ISS decommissioning.

Update the controlled deorbit plan and ensure the plan includes key commitments, technical, schedule, and cost challenges impacting the 2031 deorbit time frame.

We recommend that the Peace Corps develops a plan to implement automation of the Quality Improvement Unit’s update process and management of Technical Guidelines and to assess its impact on the efficiency and effectiveness in managing and updating Technical Guidelines.

We recommend that the Peace Corps develops a process or mechanism for Peace Corps Medical Officers and other users to report Technical Guidelines that need review, to include a procedure for how the issues will be systematically addressed.

The Chief Program Officer should seek reimbursement of the $250,713 overpayment of PSP1 financial assistance.

The Chief Program Officer should review Wing Aviation Charter Services' requested amount for unallowable expenses under PSP2 and PSP3, and seek reimbursement for the overpayment, if applicable.

The Chief Program Officer should seek reimbursement of the $187,752 overpayment of PSP1 financial assistance.

The Chief Program Officer should review STA's requested amount for unallowable expenses under PSP2 and PSP3, and seek reimbursement for the overpayment, if applicable.

We recommend that the Director of CISA develop and implement a strategy and performance metrics to actively recruit and retain Automated Indicator Sharing participants, including Federal data producers.

We recommend the Director of CISA, in conjunction with its Chief Information Officer and Chief Financial Officer, maintain spend plans for documenting future costs related to the Automated Indicator Sharing capability.

We recommend that the ICE Office of the Chief Information Officer implement all necessary mobile device security settings per guidance from DHS and the Defense Information Systems Agency’s Security Technology Implementation Guides.

We recommend that the ICE Office of the Chief Information Officer develop and implement policies and procedures to ensure source code scans are performed on ICE-developed applications as required.

We recommend that the ICE Office of the Chief Information Officer develop and implement policies and procedures to improve the vulnerability management process to ensure:• credentialed scans are completed and assessed, per DHS guidance;• limitations posed by non-credentialed scans are properly and promptly reported per DHS guidance;• plans to address vulnerabilities are created and implemented promptly, per DHS guidance; and• formal acceptance of, or mitigate the risk of, noncompliant enterprise-level system settings.

We recommend that the ICE Office of the Chief Information Officer develop and implement policies and procedures to monitor and block unauthorized network access attempts from mobile devices in foreign locations.

We recommend that the ICE Office of the Chief Information Officer revise and implement policies and procedures to protect ICE-issued mobile devices that have been authorized for use on international travel, per DHS and National Institute of Standards and Technology guidance.

We recommend that the ICE Office of the Chief Information Officer develop and implement policies and procedures to protect ICE-issued mobile devices used by employees permanently stationed outside the United States.

We recommend that the ICE Office of the Chief Information Officer update and implement policies and procedures to ensure mobile devices are sanitized before they are released from ICE custody for disposal.

We recommend that the ICE Office of the Chief Information Officer update and implement clear policies and procedures to ensure all lost and stolen mobile devices are treated as security incidents and the associated incident tickets are routed to the ICE Security Operations Center.

For future projects using the CMc delivery method, strengthen the PCO review policies and procedures to ensure that the Cost Engineer properly reviews the details included in subcontractor and CMc proposals submitted for PCOs so that they do not allow the reimbursement of costs that are covered by contractual markups. Additionally, the policies and procedures should be modified to ensure that the Cost Engineer documentsthe review of proposals.

Determine, and document, the allowability of the questioned costs of $137,522 for direct costs that were also covered by contractual markups, and recover any amount determined to be unallowable.

Update the Change Management Plan for situations where the CCB’s decisions or directives overrule current guidance.

Document and complete CRFs as required by the Change Management Plan for future projects using the CMc delivery method.

For the questioned PCOs and future projects using the CMc delivery method, require the COTR to request the supporting documentation for proposed credits owed to SI that contains sufficient detail to detmine with the CMc and/or subcontractor applied overhead and profit markup used for their proposed price.

Determine, and document, the allowability of the questioned costs of $7,915 (or less if the proposed price used a markup that was less than 21 percent) in overhead and profit markup costs from the CMc and/or subcontractors that were not included in the $37,692 in credits from PCOs 810082, 810228 and 810310, and recover any amount determined to be unallowable.

Determine whether to modify existing directives that will authorize the COTR or Contracting Officer to allow the CMc and/or subcontractors to retain a certain amount of profit from credits on future projects using the CMc delivery method, depending on the size or complexity of the change.