Open Recommendations

Develop and implement guidance for intelligence reporting in the field.

Develop and implement a formal mechanism for reviewing I&A intelligence reporting from the field, including a logging and tracking process.

Develop and implement guidance for field officials granting them local release authority for intelligence reporting.

Review and update the reachback policy for the CGF program to be consistent with actual practice and reduce the need for waivers. In reviewing and updating the reachback policy, the Bank should analyze the case-by-case determination of a reachback relative to the average policy date (i.e., operative date); consider establishing limits on the utilization of the facility for reachback transactions; set requirements for communicating analysis of reachback issues to decision makers including the Board; and establish procedures for consideration of waivers to the policy. This would include documenting the supporting evidence in the credit file.

We recommend that OSMRE obtain authoritative Federal guidance from GAO for the disposition of interest earned.

We recommend that OSMRE ensure appropriate treatment of interest earned.

We recommend that OSMRE resolve the $2.1 million in earned interest.

Identity and Access Management.

The NARA CIO should conduct and document a risk assessment specific to NARA’s implementation of cloud computing in coordination with NARA's Chief Risk Officer.

The NARA CIO should establish and approve a centralized reporting point for cloud computing inventory and develop, implement and communicate a written mechanism to standardize tracking cloud computing inventory across NARA’s business area lines.

The NARA CIO should coordinate with the Chief Acquisitions Officer, and General Counsel to establish a working group to evaluate and monitor recommendations and best practices for cloud computing procurement in order to improve the content and effectiveness of the CPIC Business Case Form.

Evaluate the results of its actions for the 77 beneficiaries and determine whether it should review the remaining population of 224,164 beneficiaries we identified.

The Executive Committee should direct Railroad Retirement Board management to elevate Railroad Retirement Board - Office of Inspector General auditor concerns regarding application of authoritative guidance and laws and regulations for Executive Committee determinations when Railroad Retirement Board management disagrees with Railroad Retirement Board - Office of Inspector General auditor assessments.

The Executive Committee should develop and implement Executive Committee procedures for enforcement of Railroad Retirement Board management responsibilities when Railroad Retirement Board management does not take appropriate corrective actions in regard to the application of authoritative guidance and laws and regulations.

Chief of Management and Administration or designee develops a detailed implementation plan with remaining work to be completed, critical tasks, roles and responsibilities of key personnel, milestones for critical tasks, costs, locations, and any other necessary documentation that would allow the agency to successfully implement HSPD-12.

Chief of Management and Administration or designee uses existing budgetary resources to fully implement HSPD-12. 

Chief of Management and Administration or designee establishes a reasonable date to fully implement HSPD-12.

With guidance from the assigned Department-level entity, FSA, RMA, and NRCS need to revise the plan, with a timeline, to show when and how ACRSI will be fully implemented to include the ability of producers in all States to report acreage data, geospatial data, and production data for all crops.