Open Recommendations

We recommend the Chief Information Officer perform a cybersecurity resource assessment to identify any technology, people, or tool gaps.

Ensure that a process is in place to validate that all audit trail data elements, including investigative elements provided by TIGTA Office of Investigations, are being captured and can be provided by Login.gov prior to using its identity proofing services for IRS IAL2 applications.

The Chief Information Officer should ensure that appropriate IRS management works in conjunction with Login.gov management to assess the extent and impact that the critical vulnerability had on the users who authenticated via Login.gov to access IRS applications and may have had their Personally Identifiable Information sent to unauthorized locations outside of the United States.

We recommend that the PBS Commissioner provide appropriate oversight to ensure water is safe to occupants in its buildings by defining roles and responsibilities for maintaining water quality in GSA-controlled facilities.

We recommend that the PBS Commissioner provide appropriate oversight to ensure water is safe to occupants in its buildings by ensuring that: water quality is maintained through consistent policies and practices nationwide; deviations to PBS’s Drinking Water Quality Management policy and the PBS water safety guidance are approved by PBS’s Central Office; and any water safety policies or guidance developed by regional offices do not contradict policies and guidance issued at the national level.

We recommend that the PBS Commissioner provide appropriate oversight to ensure water is safe to occupants in its buildings by ensuring that PBS’s water safety activities are incorporated into O&M contracts, recorded in PBS’s National Computerized Maintenance Management System, and overseen by PBS personnel.

We recommend that the PBS Commissioner provide appropriate oversight to ensure water is safe to occupants in its buildings by incorporating PBS’s water safety oversight responsibilities into quality assurance surveillance plans for O&M contracts to ensure contractor compliance with water safety activities.

We recommend that the PBS Commissioner provide appropriate oversight to ensure water is safe to occupants in its buildings by ensuring that PBS personnel and O&M contractors have access to tenant spaces so flushing can be performed.

We recommend that the PBS Commissioner provide appropriate oversight to ensure water is safe to occupants in its buildings by amending O&M and other contracts to ensure that energy efficiency and water conservation requirements do not conflict with PBS’s Drinking Water Quality Management policy and the PBS water safety guidance.

We recommend that the PBS Commissioner provide appropriate oversight to ensure water is safe to occupants in its buildings by ensuring that water is tested in GSA’s child care centers as required by PBS’s Drinking Water Quality Management policy.

We recommend that the PBS Commissioner provide appropriate oversight to ensure water is safe to occupants in its buildings by ensuring water quality test results—especially those above EPA action levels—are communicated timely to building tenants, GSA child care center operators, and parents and guardians of affected children.

We recommend that the PBS Commissioner provide appropriate oversight to ensure water is safe to occupants in its buildings by amending and implementing PBS’s Drinking Water Quality Management policy to: include reduced occupancy or decreased water usage as additional criteria for lead, copper, Legionella bacteria, and other contaminant testing; ensure requirements in PBS’s Drinking Water Quality Management policy, its companion Desk Guide for Drinking Water Quality Management, and the PBS water safety guidance are incorporated into the amended policy, unless there are safety reasons why such requirements cannot or should not be incorporated; and formalize its requirement to complete additional…

We recommend that USGS reassess the Bureau Quality Management System implementation approach and prepare a framework to fully implement the Bureau Quality Management System at all laboratories on a more rapid timeline than December 2025.

We recommend that USGS develops an oversight function with clearly delineated roles and responsibilities to ensure that all laboratories are implementing the Bureau Quality Management System appropriately.

We recommend that USGS ensure that all required Federal internal control standards are incorporated into individual laboratory quality management systems.

We recommend that USGS develop and maintain an inventory of all information systems in U.S. Geological Survey laboratories.

We recommend that USGS require the Office of Science Quality and Integrity to clarify Bureau Quality Management System minimum requirements needed to ensure that the Bureau Quality Management System is designed, implemented, and operating effectively, including monitoring the system for necessary changes.

We recommend that USGS update risk assessment guidance to laboratories to incorporate a more comprehensive risk assessment to include other potential risks, such as staffing needs or information systems.

We recommend that USGS assess controls over all identified information systems and implement controls necessary to protect system data and comply with Federal regulations.

We recommend that FWS require the Department to develop a mechanism for associating the funding source for equipment purchased with Federal grant and license revenue in the official inventory system.

We recommend that FWS require the Department to develop guidance to ensure the Department notifies FWS as soon as it learns of problems, delays, or adverse conditions that will materially impair the ability to meet Federal award objectives.

We recommend that FWS require the Department to develop controls with the State Procurement Office to ensure the proceeds from the sale of license revenue-funded or grant-funded equipment are returned to the Department.

We recommend that FWS require the Department to suspend the sale of equipment until Recommendations 1 and 2 have been implemented.

We recommend that FWS require the Department to develop a mechanism to ensure salaries and wages are charged to the relevant Federal awards and are accurate, allowable, and properly allocated to funded activities.

We recommend that FWS require the Department to develop guidance to ensure the Department provides adequate explanations for why an approved project or objective is not performed, including a disclosure statement of actions taken or contemplated to resolve the performance shortfall.