Open Recommendations

FHFA-OIG's Chief Information Officer should update the service level agreement between FHFA-OIG and the service provider to include requirements for the service provider to provide background reinvestigation status reports on a regular basis.

FHFA-OIG's Chief Information Officer should implement a process to monitor and ensure that background reinvestigations for relevant employees and contractors are conducted timely in accordance with FHFA-OIG and OPM standards.

FHFA-OIG's Chief Information Officer should establish and implement a process to make suitability adjudicative determinations and take suitability actions for covered positions in accordance with OPM’s regulation under Title 5 CFR, Part 731.103.

FHFA should disable accounts of nonprivileged users who have been inactive for over 365 days, as required by the FHFA customer controls for the cloud system.

FHFA should work with the cloud system’s vendor to implement software updates that automatically disable user accounts after 365 days of inactivity, as required by the FHFA customer controls for the cloud system.

FHFA should update the customer controls for the cloud system to include a procedure for regular reviews of non-privileged users’ access.

FHFA should complete the review and update of overdue SSPPs and Customer Control Plans in accordance with the existing related plans of action and milestones (POA&Ms).

FHFA should complete the review, update, and testing of the Capital Models (PolyPaths) ISCP in accordance with the existing related POA&M

The PBS Commissioner should complete a thorough and accurate inventory of all fuel storage tanks across GSA’s facilities and ensure that the inventory is updated in the National Computerized Maintenance Management System, to include the proper asset type description in the database.

The PBS Commissioner should develop Fuel Storage Tank Management Plans in accordance with GSA policies and procedures.

The PBS Commissioner should develop a quality control system to ensure that the required actions and documentation to maintain fuel storage tanks are completed and included in the National Computerized Maintenance Management System as required by GSA policies.

The PBS Commissioner should ensure compliance with National Fire Protection Association marking standards.

1. We recommend that the NOAA Administrator direct the Office of Space Commerce Director to revise the TraCSS program timeline using agile best practices to include realistic dates, capabilities, and actual progress.

2. We recommend that the NOAA Administrator direct the Office of Space Commerce Director to develop and communicate a plan to ensure stakeholders stay informed of changes to the TraCSS timeline.

3. We recommend that the NOAA Administrator direct the Office of Space Commerce Director to modify the TraCSS staffing plan to include roles, responsibilities, and priority for each position and strategies for attrition management.

4. We recommend that the NOAA Administrator direct the Office of Space Commerce Director to define and document OSC's approach for STM-related responsibilities in the near and long terms to address current and future operational risks and include items such as guidelines, safety standards, behavioral norms, and conjunction prevention protocols.

5. We recommend that the NOAA Administrator direct the Office of Space Commerce Director to develop and regularly update a plan to implement OSC's approach to fulfiling the Department's STM-related responsibilities set in SPD-3.

We recommend the FEMA Administrator, in coordination with DHS and OMB, take action to issue final regulations implementing the State-Administered Direct Housing Grant Program authorized by Section 1211(a) of the Disaster Recovery Reform Act of 2018.

We recommend the FEMA Administrator provide quarterly briefings, consistent with House Report 117-87, to congressional Appropriations Committees on the status of the component’s DRRA implementation efforts, including the State-Administered Direct Housing Grant Program.

We recommend the FEMA Administrator continue to evaluate challenges associated with implementing the State-Administered Direct Housing Grant Program, and then develop and implement new authorities or program changes to address those challenges.

Identify and remove unapproved applications and outdated operating systems on smartphones and/or quarantine noncompliant smartphones.

Update the Postal Service's quarantine enforcement process and policy to include provisions for quarantining both iOS and Android smartphones with operating systems missing current security updates, on a recurring basis.

Develop a documented plan to fully utilize the capabilities of its mobile device management platform to 1) prohibit employees from installing unapproved applications, 2) identify and remove unapproved applications, 3) force operating system updates to smartphones, and 4) quarantine all smartphones using outdated operating systems.

USDA OIG has determined that this recommendation contains sensitive information and will not be publicly released due to privacy concerns.

USDA OIG has determined that this recommendation contains sensitive information and will not be publicly released due to privacy concerns.