Recommendations
2079
| ID | Report Number | Report Title | Type | |
|---|---|---|---|---|
| 14-01883-371 | Audit of Fiduciary Program’s Management of Field Examinations | Audit | ||
1 We recommended the Under Secretary for Benefits implement a plan to ensure field examination workload is completed in compliance with timeliness standards.
Closure Date:
2 We recommended the Under Secretary for Benefits use the percentage of untimely field examinations in addition to the average days pending performance measure to better evaluate completion of field examinations.
Closure Date:
3 We recommended the Under Secretary for Benefits require hub managers to use Beneficiary and Fiduciary Field System reports to identify and correct unscheduled field examinations at least once per quarter.
Closure Date:
4 We recommended the Under Secretary for Benefits implement a plan to ensure the Beneficiary and Fiduciary Field System’s functionality is enhanced to require a date for scheduled field examinations be entered before exiting the system.
Closure Date:
| ||||
| 14-04494-347 | Administrative Investigation, Misuse of Position and Failure to Disclose and to Satisfy Financial Obligations, Veterans Benefits Administration, VA Regional Office, Philadelphia, PA | Administrative Investigation | ||
1 We recommend that the Eastern Area Director confer with the Offices of General Counsel (OGC) and Human Resources (OHR) to take appropriate administrative action, if any, against Ms. Filipov.
Closure Date:
2 We recommend that the Eastern Area Director confer with OGC and OHR to ensure that Ms. Filipov receives refresher ethics training.
Closure Date:
3 We recommend that the Eastern Area Director confer with the Offices of General Counsel (OGC) and Human Resources (OHR) to take appropriate administrative action, if any, against Mr. Hodge.
Closure Date:
4 We recommend that the Eastern Area Director confer with OGC and OHR to ensure that Mr. Hodges receives refresher ethics training.
Closure Date:
5 We recommend that the Eastern Area Director confer with OGC to ensure Mr. Hodge's Confidential Financial Disclosure Reports for past years are reviewed and any necessary action is taken as a result of that review.
Closure Date:
| ||||
| 15-00077-352 | Combined Assessment Program Review of the William Jennings Bryan Dorn VA Medical Center, Columbia, South Carolina | Comprehensive Healthcare Inspection Program | ||
1 We recommended that facility managers ensure that licensed independent practitioners who perform emergency airway management have the appropriate privileges.
Closure Date:
2 We recommended that the facility ensure that licensed independent practitioners' folders do not contain non-allowed information.
Closure Date:
3 We recommended that the Surgical Work Group document its review of National Surgical Office reports and surgery performance improvement activities.
Closure Date:
4 We recommended that the Surgical Work Group review all surgical deaths with identified problems or opportunities for improvement.
Closure Date:
5 We recommended that the Accident Review Board provide oversight of the safe patient handling program and gather, track, and share patient handling injury data.
Closure Date:
6 We recommended that the Medical Executive Board analyze reports of electronic health record quality review results at least quarterly and include most services in the review of electronic health record quality.
Closure Date:
7 We recommended that the facility document functionality checks of the community living center's elopement prevention system at least every 24 hours and that facility managers monitor compliance.
Closure Date:
8 We recommended that facility managersensure Emergency Department/urgent care center monthly medication storage area inspections are completed and monitor compliance.
Closure Date:
9 We recommended that the facility revisethe policy for safe use of automated dispensing machines to include oversight of overrides and minimum competency requirements for users and that facility managers monitor compliance.
Closure Date:
10 We recommended that requestorsconsistently select the proper consult title and that facility managers monitor compliance.
Closure Date:
11 We recommended that the facility ensure all designated Level 1 ancillary staff receive annual level-specific magnetic resonance imaging safety training and that facility managers monitor compliance.
Closure Date:
12 We recommended that clinicians complete National Institutes of Health stroke scales for each stroke patient within the expected timeframe and that facility managers monitor compliance.
Closure Date:
13 We recommended that facility managers post stroke guidelines on the medical intensive care unit/cardiac care unit, the surgical intensive care unit, 2 West - medicine/surgery, 4 West - medicine/surgery, and the progressive care unit.
Closure Date:
14 We recommended that clinicians provide printed stroke education to patients upon discharge and that facility managers monitor compliance.
Closure Date:
15 We recommended that the facility ensure that employees who are involved in assessing and treating stroke patients receive the training required by the facility and that facility managers monitor compliance.
Closure Date:
16 We recommended that the facility collect and report to the Veterans Health Administration the percent of eligible patients given tissue plasminogen activator, the percent of patients with stroke symptoms who had the stroke scale completed, and the percent of patients screened for difficulty swallowing before oral intake.
Closure Date:
17 We recommended that Radiology Service revise the computed tomography scan on-call policy to require a 30-minute reporting time.
Closure Date:
18 We recommended that the facility ensure initial clinician emergency airway management competency assessment includes evidence of successful demonstration of all required procedural skills on patients before placement on the out of operating room airway management coverage list and that facility managers monitor compliance.
Closure Date:
19 We recommended that the Facility Director ensure designated clinicians have properly completed and granted privileges or scopes of practice.
Closure Date:
20 We recommended that the facility ensure that subordinate committees report data to the appropriate oversight committee and that the oversight committee reviews and analyzes data, takes appropriate action, and tracks actions to completion.
Closure Date:
| ||||
| 14-04398-340 | Review of Community Based Outpatient Clinics and Other Outpatient Clinics of Beckley VA Medical Center, Beckley, West Virginia | Comprehensive Healthcare Inspection Program | ||
1 We recommended that managers ensure review of the hazardous materials inventory occurs twice within a 12-month period at the Greenbrier County CBOC.
2 We recommended that written procedures are available and staff are trained to properly disinfect non-critical medical equipment as required at the Greenbrier County CBOC.
3 We recommended that the information technology server closet at the Greenbrier County CBOC is maintained according to information technology safety and security standards.
4 We recommended that the staff at the Greenbrier County CBOC receive regular information/updates on their responsibilities in emergency response operations.
5 We recommended that the staff at the Greenbrier County CBOC participate in scheduled emergency management training and exercises.
6 We recommended that clinic staff consistently complete diagnostic assessments for patients with a positive alcohol screen.
7 We recommended that clinic staff document a plan to monitor the alcohol use of patients who decline referral to specialty care.
8 We recommended that Clinic Registered Nurse Care Managers receive motivational interviewing and health coaching training within 12 months of appointment to Patient Aligned Care Teams.
9 We recommended that providers and clinical associates in the outpatient clinics receive health coaching training within 12 months of appointment to Patient Aligned Care Teams.
10 We recommended that clinicians provide human immunodeficiency virus testing as part of routine medical care for patients and that compliance is monitored.
| ||||
| 13-04212-346 | Healthcare Inspection – Administrative and Quality of Care Concerns, Martinsburg VA Medical Center, Martinsburg, West Virginia | Hotline Healthcare Inspection | ||
1 We recommended that the Facility Director ensure that the facility comply with Veterans Health Administration’s and facility test results notification requirements.
Closure Date:
2 We recommended that the Facility Director ensure that the facility strengthen the root cause analysis process.
Closure Date:
3 We recommended that the Facility Director ensure that the facility evaluate the care of the subject patient with Regional Counsel for possible disclosure(s) to the surviving family member(s) of the patient.
Closure Date:
4 We recommended that the Facility Director ensure that the facility strengthen and monitor the peer review process.
Closure Date:
| ||||
| 14-04878-205 | Inspection of VA Regional Office Pittsburgh, Pennsylvania | Review | ||
1 We recommended the Pittsburgh VA Regional Office Director develop and implement a plan to ensure staff take timely action on reminder notifications for medical reexaminations.
Closure Date:
2 We recommended the Pittsburgh VA Regional Office Director conduct a review of the 352 temporary 100 percent disability evaluations remaining from our inspection universe and take appropriate actions.
Closure Date:
3 We recommended the Pittsburgh VA Regional Office Director implement a plan to ensure staff timely process claims related to benefits reductions to minimize improper payments to veterans.
| ||||
| 14-01820-355 | Federal Information Security Management Act Audit for Fiscal Year 2014 | Audit | ||
1 We recommended the Executive in Charge for Information and Technology fully develop policy to address Federal requirements and implement an agency-wide risk management governance structure, along with mechanisms to identify, monitor, and manage risks across the enterprise. (This is a repeat recommendation from prior years.)
Closure Date:
2 We recommended the Executive in Charge for Information and Technology implement mechanisms to ensure sufficient supporting documentation is captured in the central Governance Risk and Compliance tool to justify closure of Plans of Action and Milestones. (This is a modified repeat recommendation from last year.)
Closure Date:
3 We recommended the Executive in Charge for Information and Technology implement clear roles, responsibilities, and accountability for developing, maintaining, completing, and reporting Plans of Action and Milestones. (This is a modified repeat recommendation from prior years.)
Closure Date:
4 We recommended the Executive in Charge for Information and Technology implement mechanisms to ensure Plans of Action and Milestones are updated to accurately reflect current status information. (This is a repeat recommendation from prior years.)
Closure Date:
5 We recommended the Executive in Charge for Information and Technology develop mechanisms to ensure system security plans reflect current operational environments, including accurate system interconnections, boundary, and ownership information. (This is a modified repeat recommendation from last year.)
Closure Date:
6 We recommended the Executive in Charge for Information and Technology implement improved processes for updating key security documents such as risk assessments, Privacy Impact Assessments, and security control assessments on an annual basis and ensure all required information accurately reflects the current environment. (This is a modified repeat recommendation from last year.)
Closure Date:
7 We recommended the Executive in Charge for Information and Technology implement mechanisms to enforce VA password policies and standards on all operating systems, databases, applications, and network devices. (This is a repeat recommendation from prior years.)
Closure Date:
8 We recommended the Executive in Charge for Information and Technology implement periodic access reviews to minimize access by system users with incompatible roles, permissions in excess of required functional responsibilities, and unauthorized accounts. (This is a repeat recommendation from prior years.)
Closure Date:
9 We recommended the Executive in Charge for Information and Technology enable system audit logs and conduct centralized reviews of security violations on mission-critical systems. (This is a repeat recommendation from prior years.)
Closure Date:
10 We recommended the Executive in Charge for Information and Technology implement two-factor authentication for remote access throughout the agency. (This is a repeat recommendation from prior years.)
Closure Date:
11 We recommended the Executive in Charge for Information and Technology implement mechanisms to ensure all remote access computers have updated security patches and antivirus definitions prior to connecting to VA information systems. (This is a repeat recommendation from prior years.)
Closure Date:
12 We recommended the Executive in Charge for Information and Technology implement more effective automated mechanisms to continuously identify and remediate security deficiencies on VA¿s network infrastructure, database platforms, and Web application servers. (This is a modified repeat recommendation from last year.)
Closure Date:
13 We recommended the Executive in Charge for Information and Technology implement a more effective patch and vulnerability management program to address security deficiencies identified during our assessments of VA¿s Web applications, database platforms, network infrastructure, and work stations. (This is a modified repeat recommendation from last year.)
Closure Date:
14 We recommended the Executive in Charge for Information and Technology implement improved processes for monitoring standard security configuration baselines for all VA operating systems, databases, applications, and network devices. (This is a modified repeat recommendation from last year.)
Closure Date:
15 We recommended the Executive in Charge for Information and Technology implement improved network access controls to ensure medical devices and tenant networks are appropriately segregated from general networks and mission-critical systems. (This is a new recommendation)
Closure Date:
16 We recommended the Executive in Charge for Information and Technology consolidate the security responsibilities for tenant networks present under a common control for each site and ensure vulnerabilities are remediated in a timely manner. (This is a new recommendation)
Closure Date:
17 We recommended the Executive in Charge for Information and Technology implement procedures to enforce a standardized system development and change control framework that integrates information security throughout the life cycle of each system. (This is a modified repeat recommendation from last year.)
18 We recommended the Executive in Charge for Information and Technology implement processes to ensure information system contingency plans are updated with the required information. (This is a modified repeat recommendation from last year.)
Closure Date:
19 We recommended the Executive in Charge for Information and Technology develop and implement a process for ensuring the encryption of backup data prior to transferring the data offsite for storage. (This is a repeat recommendation from prior years.)
Closure Date:
20 We recommended the Executive in Charge for Information and Technology implement more effective agency-wide incident response procedures to ensure timely resolution of computer security incidents in accordance with VA set standards. (This is a repeat recommendation from prior years.)
Closure Date:
21 We recommended the Executive in Charge for Information and Technology identify all external network interconnections and implement improved processes for monitoring VA networks, systems, and exchanges for unauthorized activity. (This is a modified repeat recommendation from last year.)
Closure Date:
22 We recommended the Executive in Charge for Information and Technology implement and monitor incident response metrics to assist in tracking and remediating all cybersecurity events. (This is a new recommendation)
Closure Date:
23 We recommended the Executive in Charge for Information and Technology develop a listing of approved software and implement continuous monitoring processes to identify and prevent the use of unauthorized application software, hardware, and system configurations on its networks. (This is a repeat recommendation from prior years.)
Closure Date:
24 We recommended the Executive in Charge for Information and Technology develop a comprehensive software inventory process to identify major and minor software applications used to support VA programs and operations. (This is a repeat recommendation from prior years.)
Closure Date:
25 We recommended the Executive in Charge for Information and Technology implement procedures for overseeing contractor-managed, cloud-based systems and ensuring information security controls adequately protect VA sensitive systems and data. (This is a modified repeat recommendation from last year.)
Closure Date:
26 We recommended the Executive in Charge for Information and Technology implement mechanisms for updating the Federal Information Security Management Act systems inventory, including contractor-managed systems and interfaces, and annually review the systems inventory for accuracy. (This is a repeat recommendation from prior years.)
Closure Date:
27 We recommended the Executive in Charge for Information and Technology implement mechanisms to ensure all users with VA network access participate in and complete required VA-sponsored security awareness training. (This is a repeat recommendation from prior years.)
Closure Date:
28 We recommended the Executive in Charge for Information and Technology develop guidance and procedures to integrate information security costs into the capital planning process while ensuring traceability of Plans of Action and Milestones remediation costs to appropriate capital planning budget documents.
Closure Date:
29 We recommended the Assistant Secretary for Information and Technology develop mechanisms to ensure risk assessments accurately reflect the current control environment, compensating controls, and the characteristics of the relevant VA facilities.
Closure Date:
30 We recommended the Assistant Secretary for Information and Technology update all applicable position descriptions to better describe position sensitivity levels, and improve documentation of employee/contractor personnel records of ¿Rules of Behavior¿ and annual privacy training certifications.
Closure Date:
31 We recommended the Assistant Secretary for Information and Technology ensure appropriate levels of background investigations be completed for all applicable VA employees and contractors in a timely manner, implement processes to monitor and ensure timely reinvestigations on all applicable employees and contractors, and monitor the status of the requested investigations.
Closure Date:
32 We recommended the Assistant Secretary for Information and Technology reduce wireless security vulnerabilities by ensuring sites have up-to-date mechanisms to protect against interception of wireless signals and unauthorized access to the network, and ensure the wireless network is segmented from the general network.
Closure Date:
33 We recommended the Assistant Secretary for Information and Technology identify and deploy solutions to encrypt sensitive data and resolve clear text protocol vulnerabilities.
Closure Date:
| ||||
| 14-04876-204 | Inspection of VA Regional Office Indianapolis, Indiana | Review | ||
1 We recommended the Indianapolis VA Regional Office Director develop and implement a plan to ensure staff take timely action on reminder notifications to request medical reexaminations.
Closure Date:
2 We recommended the Indianapolis VA Regional Office Director conduct a review of the 353 temporary 100 percent disability evaluations remaining from their inspection universe as of September 2, 2014, and take appropriate action.
Closure Date:
3 We recommended the Indianapolis VA Regional Office Director implement plans to ensure the effectiveness of training conducted on processing claims for Special Monthly Compensation and ancillary benefits.
Closure Date:
4 We recommended the Indianapolis VA Regional Office Director implement a plan to ensure claims processing staff prioritize actions related to benefits reductions to minimize improper payments to veterans.
Closure Date:
| ||||
| 15-00075-351 | Combined Assessment Program Review of the VA St. Louis Health Care System, St. Louis, Missouri | Comprehensive Healthcare Inspection Program | ||
1 We recommended that the Facility Director continue to chair Quality Executive Board meetings.
Closure Date:
2 We recommended that when cases receive initial Level 2 or 3 ratings, the Peer Review Committee consistently invite involved providers to submit comments to and/or appear before the committee prior to the final level assignment.
Closure Date:
3 We recommended that the Medical Executive Board and the Facility Director consistently review and approve all privilege forms annually and all revised privilege forms and document the review.
Closure Date:
4 We recommended that facility managers ensure that licensed independent practitioners who perform emergency airway management have properly approved/signed privilege forms.
Closure Date:
5 We recommended that the facility ensure that licensed independent practitioners’ folders do not contain non-allowed information.
Closure Date:
6 We recommended that the facility implement a policy that defines Surgical Work Group membership.
Closure Date:
7 We recommended that the Surgical Work Group document its review of National Surgical Office reports and its review of all surgical deaths with identified problems or opportunities for improvement.
Closure Date:
8 We recommended that clinicians report all critical incidents through the facility’s adverse event reporting process.
Closure Date:
9 We recommended that the facility review the quality of entries in the electronic health record and analyze data at least quarterly.
Closure Date:
10 We recommended that the facility fully implement the new quality control policy for scanning and that facility managers monitor compliance.
Closure Date:
11 We recommended that Environment of Care Committee minutes include discussion regarding environment of care rounds deficiencies and that facility managers monitor compliance.
Closure Date:
12 We recommended that facility managers ensure patient care areas and public restrooms are clean and monitor compliance.
Closure Date:
13 We recommended that the facility repair damaged furniture in patient care areas or remove it from service.
Closure Date:
14 We recommended that the facility store oxygen tanks in a manner that distinguishes between empty and full tanks and that facility managers monitor compliance.
Closure Date:
15 We recommended that facility managers ensure all electrical gang boxes have the appropriate covers installed.
Closure Date:
16 We recommended that the facility store clean and dirty items separately and that facility managers monitor compliance.
Closure Date:
17 We recommended that the facility promptly remove outdated commercial supplies from sterile supply rooms and that facility managers monitor compliance.
Closure Date:
18 We recommended that the facility promptly remove expired medications from patient care areas and that facility managers monitor compliance.
Closure Date:
19 We recommended that the facility label medications in accordance with local policy and that facility managers monitor compliance.
Closure Date:
20 We recommended that the facility inspect alarm-equipped medical devices according to local policy and the manufacturers’ recommendations and that facility managers monitor compliance.
Closure Date:
21 We recommended that the facility document functionality checks of the community living center’s elopement prevention system at least every 24 hours and conduct and document annual complete system checks and that facility managers monitor compliance.
Closure Date:
22 We recommended that the facility inspect and tag critical medical equipment in the community living center and that facility managers monitor compliance.
Closure Date:
23 We recommended that facility managers ensure crash cart logs contain the correct lock numbers and monitor compliance.
Closure Date:
24 We recommended that the facility ensure the look-alike and sound-alike medication list is available for staff reference in all areas.
Closure Date:
25 We recommended that the facility ensure the high-alert medication list is available for staff reference.
Closure Date:
26 We recommended that the facility create/designate a committee to oversee consult management.
Closure Date:
27 We recommended that the Medicine, Mental Health, Surgical, and Rehabilitation Services’ Automated Data Processing Applications Coordinators provide training in the use of the computerized consult package and that facility managers monitor compliance.
Closure Date:
28 We recommended that Medicine, Mental Health, Surgical, and Rehabilitation Services designate an individual to review and manage consults.
Closure Date:
29 We recommended that requestors consistently select the proper consult title and that facility managers monitor compliance.
Closure Date:
30 We recommended that the facility complete secondary patient safety screenings immediately prior to magnetic resonance imaging and that facility managers monitor compliance.
Closure Date:
31 We recommended that radiologists and/or Level 2 magnetic resonance imaging personnel document resolution in patients’ electronic health records of all identified magnetic resonance imaging contraindications prior to the scan and that facility managers monitor compliance.
Closure Date:
32 We recommended that the facility ensure all designated Level 1 ancillary staff receive annual level-specific magnetic resonance imaging safety training and that facility managers monitor compliance.
Closure Date:
33 We recommended that the facility ensure all designated Level 2 magnetic resonance imaging personnel receive annual level-specific magnetic resonance imaging safety training and that facility managers monitor compliance.
Closure Date:
34 We recommended that the facility revise the stroke policy to address a stroke team and data gathering for analysis and improvement and that facility managers fully implement the revised policy.
Closure Date:
35 We recommended that clinicians complete and document National Institutes of Health stroke scales for each stroke patient and that facility managers monitor compliance.
Closure Date:
36 We recommended that the facility collect and report to the Veterans Health Administration the percent of patients with stroke symptoms who had the stroke scale completed and the percent of patients screened for difficulty swallowing before oral intake.
Closure Date:
37 We recommended that Radiology Service revise the computed tomography scan, magnetic resonance imaging/magnetic resonance angiograms, and radiology interpretation on-call policy to require a 30-minute reporting time.
Closure Date:
38 We recommended that the facility ensure initial clinician emergency airway management competency assessment includes all required elements and that facility managers monitor compliance.
Closure Date:
39 We recommended that the facility ensure clinician reassessment for continued emergency airway management competency is completed at the time of renewal of privileges or scope of practice and that facility managers monitor compliance.
Closure Date:
40 We recommended that the facility ensure clinician reassessment for continued emergency airway management competency includes completion of all required elements at the time of renewal of privileges or scope of practice and that facility managers monitor compliance.
Closure Date:
41 We recommended that the facility ensure that clinicians reassessed for continued emergency airway management have a statement related to emergency airway management included in an approved scope of practice.
Closure Date:
42 We recommended that the facility ensure a clinician with emergency airway management privileges or scope of practice or an anesthesiology staff member is available during all hours the facility provides patient care and that facility managers monitor compliance.
Closure Date:
43 We recommended that facility managers strengthen processes to minimize a repeat occurrence in which non-privileged providers perform intubations and in instances of occurrence, initiate root cause analyses.
Closure Date:
44 We recommended that facility managers ensure that only authorized patients, staff, and visitors access the Domiciliary Residential Rehabilitation Treatment Program.
Closure Date:
45 We recommended that facility managers ensure that the Domiciliary Residential Rehabilitation Treatment Program does not have closed circuit television in treatment areas.
Closure Date:
| ||||
| 15-00076-350 | Combined Assessment Program Review of the VA Nebraska-Western Iowa Health Care System, Omaha, Nebraska | Comprehensive Healthcare Inspection Program | ||
1 We recommended that the Accident Review Board gather, track and share patient handling injury data.
Closure Date:
2 We recommended that the facility include most services and program areas in the review of electronic health record quality.
Closure Date:
3 We recommended that the facility institute unique refrigerator bin storage practices for look-alike and sound-alike medications in all areas and that facility managers monitor compliance.
Closure Date:
4 We recommended that radiologists and/or Level 2 magnetic resonance imaging personnel document resolution in patients' electronic health records of all identified magnetic resonance imaging contraindications prior to the scan and that facility managers monitor compliance.
Closure Date:
5 We recommended that clinicians complete and document National Institutes of Health stroke scales for each patient and that facility managers monitor compliance.
Closure Date:
6 We recommended that clinicians provide printed stroke education to patients upon discharge and that facility managers monitor compliance.
Closure Date:
7 We recommended that the facility ensure that employees who are involved in assessing and treating stroke patients receive the training required by the facility and that facility managers monitor compliance.
Closure Date:
8 We recommended that the facility ensure clinician reassessment for continued emergency airway management competency includes reviews of clinician-specific emergency airway management data and that facility managers monitor compliance.
Closure Date:
9 We recommended that the facility ensure clinician reassessment for continued emergency airway management competency includes all required subject matter content elements and completion of a written test and that facility managers monitor compliance.
Closure Date:
10 We recommended that the facility ensure that clinician reassessment for continued emergency airway management competency includes one of the three required components and that facility managers monitor compliance.
Closure Date:
| ||||
15039