Open Recommendations

We recommend that the PBS Regional Commissioner for the Northeast and Caribbean Region properly train regional PBS contracting staff on the proper management, usage, and oversight of drones and drone operators on PBS projects in accordance with applicable laws, regulations, and GSA policies.

We recommend that the PBS Regional Commissioner for the Northeast and Caribbean Region implement controls and training to ensure that PBS contracting staff provide adequate oversight and do not violate small business subcontracting limitations to create “pass- through” environments for large or ineligible businesses.

We recommend that the PBS Regional Commissioner for the Northeast and Caribbean Region ensure that PBS contracting staff comply with security clearance requirements and that contractors working on government contracts have the appropriate clearances.

We recommend that the PBS Regional Commissioner for the Northeast and Caribbean Region establish controls to ensure that CORs review certified payroll records and perform labor interviews, as appropriate, prior to approval of invoices to verify that contractor and subcontractor employees are paid in accordance with federal Construction Wage Rate Requirements.

We recommend that the PBS Regional Commissioner for the Northeast and Caribbean Region establish controls to ensure that PBS contracting staff properly evaluate independent government estimates to ensure the government is not overpaying for contractor services and provide oversight to ensure contractors perform required services.

We recommend that the PBS Regional Commissioner for the Northeast and Caribbean Region train PBS contracting staff on their responsibilities with respect to: closing out the contract files in accordance with the FAR; completing contractor performance assessment reports within 120 calendar days, in accordance with the CPARS guide; and preparing and implementing oversight procedures to ensure contract files include complete and accurate contract documentation in accordance with the FAR, GSAM, and other applicable policies.

We recommend that the GSA Chief Administrative Services Officer work with GSA’s Federal Acquisition Service program officials to implement messaging to travel cardholders on the proper use of government rideshare contracts.

We recommend that the GSA Chief Administrative Services Officer continue training related to use of the government travel card in rideshare applications.

We recommend that the GSA Chief Administrative Services Officer continue to remind travelers in training and in the Concur travel system to not pay sales or occupancy taxes in tax‐exempt states.

We recommend that the GSA Chief Administrative Services Officer create the questionable charges report according to the requirements of GSA’s Charge Card Management Plan to ensure that all charges are screened and that questionable charges are identified and investigated.

We recommend that the GSA Chief Administrative Services update the questionable charges report to ensure the results are complete. These updates should include a higher level of detail to ensure timely resolution and response, and capture employee name changes or separations from the Agency.

We recommend that the Assistant Secretary for the Office of Elementary and Secondary Education require Iowa torequire Southeast Polk to ensure that LEA officials responsible for making or reviewing and approving purchases receivesufficient training on Federal rules and regulations related to grant administration and management, particularly thoseaddressing procurement process and documentation requirements.

Establish a requirement in the RPT Program Plan for recurring right-size studies for the RPT capability portfolio and use the results to reexamine workforce and capability requirements for the future.

Ensure that cost models deployed at all RPT Centers include full recovery of applicable maintenance costs for the infrastructure and facilities being utilized, similar to that being piloted at Stennis.

Formally document and establish the FM&M process in the RPT Program Plan or RPTMB Operating Procedures.

Document the results and planned RPT actions following completion of the Commercial Capability Survey.

Ensure that the appropriate revisions are made to NPR and NPD 8600.1 to clarify the authority structure.

We recommend that the Chief Information Security Officer identify qualitative and quantitative metrics on service level agreements held with third parties, then perform an analysis with monthly reporting received from those third parties to identify metrics that can be measured and documented, on either a monthly or quarterly basis, to ensure that EAC is receiving all contracted services.

We recommend that the Chief Information Security Officer develop and implement procedures to leverage the Repository for Software Attestation and Artifacts to obtain sufficient assurance that the security and supply chain controls of systems or services provided by contractors or other entities on behalf of the organization meet FISMA requirements.

We recommend that the Chief Information Security Officer provide annual Anti-Counterfeit Training for IT staff with SCRM responsibilities.

We recommend that the Election Assistance Commission's Chief Information Officer implement EL3 logging requirements in accordance with Office of Management and Budget memorandum M-21-31.

We recommend that the Election Assistance Commission's Chief Information Officer establish and implement a formal Information Security Continuous Monitoring Strategy and an effective monitoring mechanism to track the progress of ongoing lessons learned.

We recommend that the Election Assistance Commission's Chief Information Officer identify and employ an automated notification mechanism to test its system level contingency plans thoroughly and effectively.

The CIO should develop and distribute a strategic plan that incorporates the requirement to update all networked systems and assets associated with these systems to fully enable IPv6-only operation.

The CIO should use an automated process to identify and document in the official IRS asset management system a comprehensive inventory of all assets at the IRS.