Recommendations
2065
| ID | Report Number | Report Title | Type | |
|---|---|---|---|---|
| 17-05246-98 | Expendable Inventory Management System: Oversight of Migration from Catamaran to the Generic Inventory Package | Audit | ||
1 The Executive in Charge, Office of the Under Secretary for Health, implements controls to ensure VA medical centers comply with policy to accurately annotate distribution of supply items.
Closure Date:
2 The Executive in Charge, Office of the Under Secretary for Health, implements controls to ensure VA medical centers comply with policy to make supply logs available, include all required elements, and are used by VA medical center staff.
Closure Date:
3 The Executive in Charge, Office of the Under Secretary for Health, strengthens procedures for VA medical centers to sufficiently conduct and document physical inventory results and retain documentation as required by VHA policy.
Closure Date:
4 The Executive in Charge, Office of the Under Secretary for Health, strengthens controls at VA medical centers to ensure supplies are consistently secured.
Closure Date:
5 The Executive in Charge, Office of the Under Secretary for Health, ensures VA medical centers affix barcode labels for all expendable supplies at the locations where the inventory items are stored.
Closure Date:
6 The Executive in Charge, Office of the Under Secretary for Health, strengthens procedures for the Veteran Integrated Service Network Quality Control Review process, ensuring a thorough review is conducted and action plans are developed and executed to address identified deficiencies at the VAMCs. In addition, update the Quality Control Review document regarding VA medical center security, access requirements, and improper distribution of supplies.
Closure Date:
| ||||
| 18-01455-108 | Quality and Coordination of a Patient’s Care at the VA Eastern Colorado Health Care System, Denver, Colorado | Hotline Healthcare Inspection | ||
1 The VA Eastern Colorado Health Care System Director confirms that providers who perform patients’ clinical histories complete medication reconciliation to include non-VA medications.
Closure Date:
2 The VA Eastern Colorado Health Care System Director confirms that healthcare providers further evaluate patients when indicators of infection are present, including rising white blood cell counts, and that providers take action as appropriate.
Closure Date:
3 The VA Eastern Colorado Health Care System Director ensures that patient care teams verify that resources needed upon discharge, including family assistance, are available and meets patients’ needs.
Closure Date:
4 The VA Eastern Colorado Health Care System Director strengthens processes and documentation that is consistent with Veterans Health Administration Directive 1140.11 when elderly patients are transitioning in care.
Closure Date:
5 The VA Eastern Colorado Health Care System Director conducts a review of the interdisciplinary discharge planning team notes and patient discharge orders to identify and correct provider to patient communication deficiencies, and if deficiencies are noted, develop action plans to rectify the communication and mitigation issues identified.
Closure Date:
6 The VA Eastern Colorado Health Care System Director verifies that outpatient podiatry scheduling practices align with Veterans Health Administration and VA Eastern Colorado Health Care System podiatry scheduling policies and takes action as necessary.
Closure Date:
7 The VA Eastern Colorado Health Care System Director verifies that Wound Care Clinic practice aligns with VA Eastern Colorado Health Care System policy and takes action as necessary.
Closure Date:
8 The VA Eastern Colorado Health Care System Director ensures that a review is conducted of podiatry resident supervision and develop and implement corrective action plans with timelines and oversight of podiatry residency program as necessary.
Closure Date:
| ||||
| 18-05872-103 | Review of Opioid Monitoring and Allegations Related to Opioid Prescribing Practices and Other Concerns at the Tomah VA Medical Center | Hotline Healthcare Inspection | ||
1 The Tomah VA Medical Center Director continues efforts to educate providers and improve compliance with risk mitigation strategies.
Closure Date:
| ||||
| 17-05297-85 | Review of Hepatitis C Virus Care within the Veterans Health Administration | Hotline Healthcare Inspection | ||
1 The Under Secretary for Health ensures that patients with confirmed positive chronic hepatitis C infection have provider documentation to address treatment considerations entered in their EHRs.
Closure Date:
2 The Under Secretary for Health ensures that providers obtain posttreatment hepatitis C RNA tests to evaluate patient response to DAA treatment in alignment with VA National Viral Hepatitis Program Guidelines.
Closure Date:
| ||||
| 18-02127-64 | Federal Information Security Modernization Act Audit for Fiscal Year 2018 | Audit | ||
1 We recommended the Executive in Charge for Information and Technology consistently implement the agency-wide risk management governance structure, along with mechanisms to identify, monitor, and manage risks across the enterprise. (This is a modified repeat recommendation from prior years.)
Closure Date:
2 We recommended the Executive in Charge for Information and Technology implement mechanisms to ensure sufficient supporting documentation is captured to justify closure of Plans of Action and Milestones. (This is a repeat recommendation from prior years.)
Closure Date:
3 We recommended the Executive in Charge for Information and Technology implement improved processes to ensure that all identified weaknesses are incorporated into the Governance Risk and Compliance tool in a timely manner, and corresponding Plans of Action and Milestones are developed to track corrective actions and remediation. (This is arepeat recommendation from prior years.)
Closure Date:
4 We recommended the Executive in Charge for Information and Technology implement clear roles, responsibilities, and accountability for developing, maintaining, completing, and reporting on Plans of Action and Milestones. (This is a repeat recommendation from prioryears.)
Closure Date:
5 We recommended the Executive in Charge for Information and Technology develop mechanisms to ensure system security plans reflect current operational environments, include an accurate status of the implementation of system security controls, and all applicable security controls are properly evaluated. (This is a repeat recommendation from prior years.)
Closure Date:
6 We recommended the Executive in Charge for Information and Technology implement improved processes for reviewing and updating key security documents such as security plans and security control assessments on an annual basis and ensure the information accurately reflects the current environment. (This is a modified repeat recommendation from prior years.)
Closure Date:
7 We recommended the Executive in Charge for Information and Technology implement mechanisms to enforce VA password policies and standards on all operating systems, databases, applications, and network devices. (This is a repeat recommendation from prioryears.)
Closure Date:
8 We recommended the Executive in Charge for Information and Technology implement periodic reviews to minimize access by system users with incompatible roles, permissions in excess of required functional responsibilities, and unauthorized accounts. (This is a repeatrecommendation from prior years.)
Closure Date:
9 We recommended the Executive in Charge for Information and Technology enable system audit logs on all critical systems and platforms and conduct centralized reviews of security violations across the enterprise. (This is a repeat recommendation from prior years.)
Closure Date:
10 We recommended the Executive in Charge for Information and Technology fully implement two-factor authentication to the extent feasible for all user accounts throughout the agency. (This is a modified repeat recommendation from prior years.)
Closure Date:
11 We recommended the Executive in Charge for Information and Technology implement more effective automated mechanisms to continuously identify and remediate security deficiencies on VA’s network infrastructure, database platforms, and web application servers. (This is a repeat recommendation from prior years.)
Closure Date:
12 We recommended the Executive in Charge for Information and Technology implement a more effective patch and vulnerability management program to address security deficiencies identified during our assessments of VA’s web applications, database platforms, network infrastructure, and workstations. (This is a repeat recommendation from prior years.)
Closure Date:
13 We recommended the Executive in Charge for Information and Technology maintain a complete and accurate security baseline configuration for all platforms and ensure all baselines are appropriately implemented for compliance with established VA security standards. (This is a repeat recommendation from prior years.)
Closure Date:
14 We recommended the Executive in Charge for Information and Technology implement improved network access controls to restrict medical devices from the general network and ensure that databases, file shares, and management devices, are adequately secured prior to connecting to VA’s network. (This is a modified repeat recommendation from prior years.)
Closure Date:
15 We recommended the Executive in Charge for Information and Technology consolidate thesecurity responsibilities for networks not managed by the Office of Information and Technology, under a common control for each site and ensure vulnerabilities are remediated in a timely manner. (This is a repeat recommendation from prior years.)
Closure Date:
16 We recommended the Executive in Charge for Information and Technology implement improved processes to ensure that all devices and platforms are evaluated using credentialed vulnerability assessments. (This is a repeat recommendation from prior years.)
Closure Date:
17 We recommended the Executive in Charge for Information and Technology implement improved procedures to enforce a standardized system development and change control framework that integrates information security throughout the life cycle of each system. (Thisis a repeat recommendation from prior years.)
Closure Date:
18 We recommended the Executive in Charge for Information and Technology implement improved processes for ensuring that backup data is adequately secured in accordance with organizational policy. (This is a repeat recommendation from prior years.)
Closure Date:
19 We recommended the Executive in Charge for Information and Technology implement improved processes for the review of system outages and disruptions for contingency plan improvements in accordance with defined policy. (This is a modified repeat recommendationfrom prior years.)
Closure Date:
20 We recommended the Executive in Charge for Information and Technology identify all external network interconnections and implement improved processes for monitoring VA networks, systems, and connections for unauthorized activity. (This is a repeatrecommendation from prior years.)
Closure Date:
21 We recommended the Executive in Charge for Information and Technology implement more effective agency-wide incident response procedures to ensure timely reporting, updating, and resolution of computer security incidents in accordance with VA standards. (This is arepeat recommendation from prior years.)
Closure Date:
22 We recommended the Executive in Charge for Information and Technology ensure that VA’s Cybersecurity Operations Center has full access to all security incident data to facilitate anagency-wide awareness of information security events. (This is a repeat recommendationfrom prior years.)
Closure Date:
23 We recommended the Executive in Charge for Information and Technology implement improved safeguards to identify and prevent unauthorized vulnerability scans on VA networks. (This is a modified repeat recommendation from prior years.)
Closure Date:
24 We recommended the Executive in Charge for Information and Technology fully develop a comprehensive list of approved and unapproved software and implement continuous monitoring processes to prevent the use of prohibited software on agency devices. (This is amodified repeat recommendation from prior years.)
Closure Date:
25 We recommended the Executive in Charge for Information and Technology develop a comprehensive inventory process to identify connected hardware, software, and firmware used to support VA programs and operations. (This is a modified repeat recommendationfrom prior years.)
Closure Date:
26 We recommended the Executive in Charge for Information and Technology implement improved procedures for overseeing contractor-managed systems and ensure information security controls adequately protect VA sensitive systems and data. (This is a modified repeat recommendation from prior years.)
Closure Date:
27 We recommended the Executive in Charge for Information and Technology implement mechanisms for updating their systems inventory, including contractor-managed systems and interfaces, and provide this information in accordance with Federal reporting requirements. (This is a repeat recommendation from prior years.)
Closure Date:
28 We recommended the Executive in Charge for Information and Technology ensure appropriate levels of background investigations be completed for all personnel in a timely manner, implement processes to monitor and ensure timely reinvestigations on all applicable employees and contractors, and monitor the status of the requested investigations.
Closure Date:
| ||||
| 18-00980-84 | Delayed Radiology Test Reporting at the Dwight D. Eisenhower VA Medical Center, Leavenworth, Kansas (VA Eastern Kansas Health Care System) | Hotline Healthcare Inspection | ||
1 The VA Eastern Kansas Health Care System Director ensures providers communicate abnormal test results to patients and update the VA Eastern Kansas Health Care System policy in accordance with Veterans Health Administration Directive 1088 and monitors for compliance.
Closure Date:
2 The VA Eastern Kansas Health Care System Director ensures radiologists receive training for the national diagnostic codes and the software that triggers view alerts.
Closure Date:
3 The VA Eastern Kansas Health Care System Director ensures that peer reviews are initiated in accordance with Veterans Health Administration Directive 2010-025 and monitors for compliance.
Closure Date:
4 The VA Eastern Kansas Health Care System Director ensures that an administrative investigation of the primary care provider involved in the patient’s care is conducted in accordance with VA Handbook 0700 and takes any action necessary.
Closure Date:
5 The VA Eastern Kansas Health Care System Director considers initiating an institutional disclosure consistent with Veterans Health Administration Directive 1004.08 and takes action as necessary.
Closure Date:
| ||||
| 18-01766-78 | Delays in Processing Community-Based Patient Care at the Orlando VA Medical Center, Florida | Hotline Healthcare Inspection | ||
1 The Orlando VA Medical Center Director ensures that the nurse practitioner referenced in this report has appropriate competencies to perform current duties.
Closure Date:
2 The Orlando VA Medical Center Directoridentifies and implements a reliable tool for coordinating the non-VA care coordination process and monitors the tool for consistency.
Closure Date:
3 The Orlando VA Medical Center Directorconducts a compliance review of the clinically indicated dates used by providers referring patients to Integrated Health Service to determine adherence to Veterans Health Administration Directive 1232 (1), Consult Processes and Procedures, and implements a plan for improvement, if warranted.
Closure Date:
4 The Orlando VA Medical Center Directorensures that non-VA care coordination appointments are scheduled within 30 days of the clinically indicated date and monitors performance.
Closure Date:
5 TheOrlando VA Medical Center Director conducts a review of Integrated Health Services workload demand and available staff and takes action, as appropriate, to ensure staffing allows for consults to be acted upon within Veterans Health Administration consult timeliness standards.
Closure Date:
6 The Orlando VA Medical Center Director implements a process for measuring the timeliness of approvals for requests for additional services and monitors compliance.
Closure Date:
| ||||
| 17-05742-66 | Medication Management, Dispensing, and Administration Deficiencies at the VA Maryland Health Care System, Perry Point, Maryland | Hotline Healthcare Inspection | ||
1 The Veterans Integrated Service Network Director ensures evaluation of inaccuracies and risks involved with use of bulk bottles of controlled liquid solutions, takes actions as needed to reduce risks, and monitors effectiveness of actions taken.
Closure Date:
2 The VA Maryland Health Care System Director ensures the interdisciplinary review of unit dose and multi-dose oxycodone solution dispensing and administration, takes actions as appropriate, and monitors effectiveness of actions.
Closure Date:
3 The VA Maryland Health Care System Director consults with the Office of Chief Counsel regarding whether an institutional disclosure is appropriate for this patient’s death and takes actions as needed.
Closure Date:
4 The VA Maryland Health Care System Director conducts a quality review of the patient’s death and takes actions as needed.
Closure Date:
5 The VA Maryland Health Care System Director ensures that nursing staff follow facility policy in the hiring of nurses.
Closure Date:
6 The VA Maryland Health Care System Director ensures evaluation and revision as needed of facility nurse competency processes on the hospice unit for high-alert medications and monitors effectiveness of actions taken.
Closure Date:
7 The VA Maryland Health Care System Director evaluates the care provided to other patients by the nurse who administered the potential overdose for other possible practice issues.
Closure Date:
8 The VA Maryland Health Care System Director ensures evaluation by nursing leaders to determine the need for reporting the nurse who administered the potential overdose to the State Licensing Board and takes steps as appropriate.
Closure Date:
| ||||
| 16-04396-44 | Lost Opportunities for Efficiencies and Savings During Data Center Consolidation | Audit | ||
1 The Assistant Secretary for Information and Technology consults with the Office of Management and Budget for additional guidance on determining whether servers the Office of Information Technology excluded from inventories were subject to the Data Center Optimization Initiative guidance in its June 2017 policy memo, Data Center Development Freeze.
Closure Date:
2 The Assistant Secretary for Information and Technology ensures the facility Chief Information Officers effectively communicate Data Center Optimization Initiative requirements to all staff responsible for VA data centers.
Closure Date:
3 The Assistant Secretary for Information and Technology develops a mechanism for validating the accuracy and completeness of reported data center information to the Office of Information and Technology National Data Center Program team.
Closure Date:
4 The Assistant Secretary for Information and Technology establishes a process to facilitate a VA-wide inventory of data centers, including those outside the direct control and ownership of the Office of Information Technology.
Closure Date:
5 The Assistant Secretary for Information and Technology ensures VA’s Data Center Optimization Initiative strategic plan is complete and includes a timeline for achieving OMB’s cost savings targets, data center closures targets, and optimization performance metrics for energy metering and power usage effectiveness.
Closure Date:
| ||||
| 18-05410-62 | Falsification of Blood Pressure Readings at the Danville Community Based Outpatient Clinic, Salem, VA | Hotline Healthcare Inspection | ||
1 The Salem VA Medical Center Director ensures that patients impacted by blood pressurefalsifications are evaluated and receive follow-up as clinically indicated.
Closure Date:
2 The Salem VA Medical Center Director develops processes to ensure the integrity of VeteransHealth Administration Support Service Center data that supports performance metrics.
Closure Date:
3 The Salem VA Medical Center Director directs the development of policies and proceduresthat ensure compliance with clinical quality reporting requirements as outlined in the Danvillecommunity based outpatient clinic contract.
Closure Date:
4 The Salem VA Medical Center Director evaluates the adequacy of the Chief of Staff’s andChief of Primary Care’s responsiveness to the VA Office of Inspector General’s concerns andtakes action as appropriate.
Closure Date:
5 The Salem VA Medical Center Director ensures the Contracting Officer’s Representativereceives the necessary training to fulfill all required functions and oversight responsibilities.
Closure Date:
| ||||
14957