Open Recommendations

Train management at all delivery units in the district on the proper procedures for reporting delayed mail and monitoring scan locations.

The report requires safeguarding and dissemination controls and is not available to the public.

The report requires safeguarding and dissemination controls and is not available to the public.

OIG recommends that the Peace Corps develops and implements acybersecurity risk register to support the implementation of a fullyintegrated Risk Management and Information Security ContinuousMonitoring (ISCM) program (Metric 10).

OIG recommends that the Peace Corps develops component authenticitypolicies and procedures (Metric 15).

OIG recommends that the Peace Corps periodically evaluates, reviews,and updates its policies and procedures, as necessary, to align with anissued and approved ICAM strategy which includes assigning personnelrisk designations and performing appropriate screening prior to grantingaccess to its systems (Metric 28).

OIG recommends that the Peace Corps conducts, captures, and shareslessons learned in its implementation of the incident response program(Metric 54 and 55).

OIG recommends that the Peace Corps conducts agency-level BusinessImpact Assessments (BIA) and integrates the results into informationsecurity strategies and other plan development efforts (Metric 61).

Develop and implement a formal policy outlining the agency’s process for assessing the per-acrenational maximum payment rate limitations for CRP to determine if revisions are needed.

We recommend that the SAOP develop and implement a process to monitor the completion of mandatory annual privacy training including the notification of supervisors.

We recommend that the SAOP obtain an up-to-date and accurate FLRA Users roster for tracking compliance.

We recommend that the SAOP review FLRA’s Policy No. 1312, Protection of Personally Identifiable Information, to ensure it is up-to-date with current OMB guidance and update if necessary.

We recommend that the Director for IES ensure that the Department continues to implement the covered agency requirements listed under section 759(a) of the Geospatial Data Act.

We recommend that the Director for IES ensure that the Department implements section 759(a)(6) once applicable guidance becomes available.

We recommend that the Director for IES assess whether the Department has allocated sufficient resources to NCES to support continued compliance with the Geospatial Data Act and advance the Department's geospatial work and take the appropriate responsive actions that are within NCES's direct responsibilities.

The Commission should continue its efforts to finalize ERM policies and procedures impacting and related to the Identify Function.

The Commission should establish a training component related to the Identify Function.

The Commission should Implement effective ERM reporting tools impacting and related to the Identify Function.

The Commission should ensure system-level Business Impact Analyses are integrated with the ERM program impacting and related to the Recover Function.

Develop an approach for including pertinent financial (i.e., costs and savings) and sustainability impact data in its Vehicle Acquisition Strategy and related contingencies.

We recommend that the Senior Official Performing the Duties of the Commissioner of CBP conduct a comprehensive analysis of the risks associated with releasing noncitizens into the country without identification and develop and implement policies and procedures to mitigate those risks.

We recommend that the Director of ICE conduct a comprehensive analysis of the risks associated with releasing noncitizens without identification from ICE custody and develop and implement policies and procedures to mitigate those risks.

We recommend that the TSA Administrator use the results of the Requirements and Capabilities Analysis office’s updated CBP OneTM risk assessment to develop and implement policy and procedural changes needed to mitigate risks

We recommend the Secretary direct the Office of Strategy, Policy, and Plans to ensure the timely development and updates of Department and component strategic guidance.

We recommend the Under Secretary for Strategy, Policy, and Plans:• conduct an inventory of all required Department and component strategic guidance documents and mandated updates; and• implement and track the updates to all strategic guidance documents, and ensure they remain current.