All Reports

Date Issued
|
Report Number
23-00876-74
|
Topics:  Community Care

Open Recommendation Image, SquareOpenClosed and Implemented Recommendation Image, CheckmarkClosed-ImplementedNot Implemented Recommendation Image, X character'Closed-Not Implemented
No. 1
Open Recommendation Image, Square
to Veterans Health Administration (VHA)

Holds future third-party administrators accountable for operational readiness and provider network adequacy at each facility by the time the contracts are implemented.

No. 2
Open Recommendation Image, Square
to Veterans Health Administration (VHA)

Develops a process to make sure the third-party administrators regularly update their Community Care Network provider lists to reflect accurate provider contact information and annotate providers who are not currently accepting VA patients.

No. 3
Open Recommendation Image, Square
to Veterans Health Administration (VHA)

Develops a mechanism for facilities to effectively report, track, and monitor challenges with access to specialty care services; trains all relevant staff on how to use the mechanism; make sure facilities use the mechanism routinely; and then helps facilities resolve access challenges.

No. 4
Open Recommendation Image, Square
to Veterans Health Administration (VHA)

Develops and communicates to facilities a standard process to request and document their needs for additional providers.

No. 5
Open Recommendation Image, Square
to Veterans Health Administration (VHA)

Evaluates the effectiveness of the third-party administrators’ quarterly and monthly reports for assessing network adequacy and then, if needed, modifies the language in its current contracts and makes changes to the applicable contract language for future Community Care Network contracts.

No. 6
Open Recommendation Image, Square
to Veterans Health Administration (VHA)

Develops its own network adequacy performance reports for each facility and communicates the results to the facilities monthly.

No. 7
Open Recommendation Image, Square
to Veterans Health Administration (VHA)

Conducts Advanced Medical Cost Management Solution training for community care staff at each facility on evaluating network adequacy through the tool.

No. 8
Open Recommendation Image, Square
to Veterans Health Administration (VHA)

Routinely evaluates the third-party administrator’s network adequacy performance reports to ensure the reports are sufficiently reliable and comply with contract requirements, and then holds third-party administrators accountable for resolving identified issues.

Date Issued
|
Report Number
21-03255-02
|
Topics:  Contract Integrity

Open Recommendation Image, SquareOpenClosed and Implemented Recommendation Image, CheckmarkClosed-ImplementedNot Implemented Recommendation Image, X character'Closed-Not Implemented
No. 1
Open Recommendation Image, Square
to Office of the Secretary (SVA)

Mediate the two offices’ collaboration to develop and publish updates to the personnel security policies and procedures for vetting contractor employees to include appropriate roles and responsibilities; standard contract language to communicate the requirements for vetting contractor employees, including whether a fingerprint check or background investigation is required, that can be used across the department; and a requirement that the VA organization requesting a contract provide the position designation record in the acquisition package submitted to the contracting office.

No. 2
Open Recommendation Image, Square
to Human Resources and Administration/Operations, Security, and Preparedness (HRA/OSP)

Perform and document compliance inspections of the procedures for vetting contractor employees and the issuance of VA identification credentials at medical facilities supported by Network Contracting Office 23, including the St. Cloud VA Medical Center.

No. 3
Open Recommendation Image, Square
to Acquisitions, Logistics, and Construction (OALC)

Update and publish the Veterans Affairs Acquisition Regulation and Veterans Affairs Acquisition Manual to direct the department’s acquisition professionals to the correct guidance for vetting contractor employees, which should include VA’s personnel security and suitability program policy.

No. 4
Closed and Implemented Recommendation Image, Checkmark
to Acquisitions, Logistics, and Construction (OALC)

Update and publish or rescind Acquisition Policy Flash 16-13, “Use of VA Handbook 6500.6, Appendix A, Checklist for Information Security in VA Service Acquisitions,” to ensure VA acquisition professionals understand that VA Handbook 6500.6 is not the only personnel security policy they must comply with.

No. 5
Open Recommendation Image, Square
to Information and Technology (OIT)

Update and publish VA Handbook 6500.6, Contract Security, in collaboration with the Office of Acquisition, Logistics, and Construction and the Office of Human Resources and Administration/Operations, Security, and Preparedness, including retitling it to better correspond to its content and removing any personnel security steps that should only be discussed in VA personnel security and suitability program policies.

No. 6
Closed and Implemented Recommendation Image, Checkmark
to Veterans Health Administration (VHA)

Review the actions of the officials responsible for planning, awarding, and administering contract 36C26320A0021, which included vetting procedures that did not comply with federal or VA policies, and take administrative action if appropriate.

Date Issued
|
Report Number
22-03909-19
|
Topics:  Information Technology and Security

Open Recommendation Image, SquareOpenClosed and Implemented Recommendation Image, CheckmarkClosed-ImplementedNot Implemented Recommendation Image, X character'Closed-Not Implemented
No. 1
Open Recommendation Image, Square
to Information and Technology (OIT)

Develop and implement a strategy with milestones for identifying all VA websites, confirm their inclusion in VA’s Web Registry as the current system designated by policy, and certify the accuracy of entries annually or as changes occur.

No. 2
Open Recommendation Image, Square
to Information and Technology (OIT)

Establish a mechanism for web communication offices across VA to enforce the implementation of VA Handbook 6102 related to Section 508 compliance.

No. 3
Open Recommendation Image, Square
to Information and Technology (OIT)

Coordinate with VA under secretaries and other assistant secretaries to ensure system owners are educated on VA Directive 6221 and its accompanying handbook requirements to request accessibility audits.

No. 4
Open Recommendation Image, Square
to Information and Technology (OIT)

Institute a mechanism to ensure information technology system accessibility designations are accurate in the VA Systems Inventory.

No. 5
Open Recommendation Image, Square
to Information and Technology (OIT)

Update, recertify, and republish VA Directives 6221 (accessible information and communications technology) and 6404 (systems inventory).

No. 6
Open Recommendation Image, Square
to Public and Intergovernmental Affairs (OPIA)

Update, recertify, and publish VA Directive 6515 (use of web-based collaboration technologies).

Date Issued
|
Report Number
22-02934-208
|
Topics:  Clinical Care Services Operations ● Contract Integrity

Open Recommendation Image, SquareOpenClosed and Implemented Recommendation Image, CheckmarkClosed-ImplementedNot Implemented Recommendation Image, X character'Closed-Not Implemented
No. 1
Open Recommendation Image, Square
to Asset Enterprise Management (OAEM)

Develop specific policy and procedures to ensure the contractor’s investment grade audit, which includes the contractor’s energy baseline and cost savings estimates, are witnessed and validated per Federal Energy Management Program guidelines.

No. 2
Open Recommendation Image, Square
to Asset Enterprise Management (OAEM)

Publish criteria for payments for energy savings performance contracts to ensure compliance with federal law and Department of Energy Federal Energy Management Program guidance.

No. 3
Open Recommendation Image, Square
to Veterans Health Administration (VHA)

Develop procedures to ensure contracting officer’s representatives or other contracting officer designees have independently witnessed and validated the contractor’s energy baseline and savings estimates prior to negotiating energy savings performance contracts’ guaranteed savings amounts.

No. 4
Open Recommendation Image, Square
to Veterans Health Administration (VHA)

Develop oversight procedures to ensure documentation that demonstrates the contractor’s energy baseline and energy savings estimates were witnessed and validated is maintained in the official contracting records.

Total Monetary Impact of All Recommendations
Open: $ 68,000,000.00
Closed: $ 0.00
Date Issued
|
Report Number
22-00410-197
|
Topics:  Maintenance and Construction

Open Recommendation Image, SquareOpenClosed and Implemented Recommendation Image, CheckmarkClosed-ImplementedNot Implemented Recommendation Image, X character'Closed-Not Implemented
No. 1
Open Recommendation Image, Square
to Acquisitions, Logistics, and Construction (OALC)

The executive director of VA’s Office of Construction and Facilities Management should confirm seismic evaluations are done for all critical and essential buildings in high and very high seismic zones immediately to ensure they meet life, safety, and occupancy performance standards

No. 2
Open Recommendation Image, Square
to Acquisitions, Logistics, and Construction (OALC)

The executive director of the Office of Construction and Facilities Management should review the Capital Asset Inventory and work with Veterans Health Administration Office of Capital Asset Management, Veterans Integrated Service Network capital asset managers, and VA medical facility engineers to update and correct inaccurate seismic data in the Capital Asset Inventory.

No. 3
Open Recommendation Image, Square
to Acquisitions, Logistics, and Construction (OALC)

The executive director of the Office of Construction and Facilities Management should submit change requests to the Capital Asset Inventory so that critical and essential designations are visible to medical center engineers and Veterans Integrated Service Network capital asset managers.

No. 4
Open Recommendation Image, Square
to Asset Enterprise Management (OAEM)

The executive director of the Office of Asset Enterprise Management should ensure facilities and Veterans Integrated Service Networks review critical and essential designations as part of their annual certifications of the Capital Asset Inventory.

Date Issued
|
Report Number
22-02739-210
|
Topics:  Supplies and Equipment

Open Recommendation Image, SquareOpenClosed and Implemented Recommendation Image, CheckmarkClosed-ImplementedNot Implemented Recommendation Image, X character'Closed-Not Implemented
No. 1
Open Recommendation Image, Square
to Acquisitions, Logistics, and Construction (OALC)

Implement oversight, monitoring, and quality assurance mechanisms that routinely ensure all goods received by the Denver Logistics Center are accurately and promptly recorded in the inventory management system at the time of receipt.

No. 2
Open Recommendation Image, Square
to Acquisitions, Logistics, and Construction (OALC)

Properly record all apnea stock in the inventory management system.

No. 3
Open Recommendation Image, Square
to Acquisitions, Logistics, and Construction (OALC)

Ensure Denver Logistics Center management routinely assess the appropriateness of manual adjustments to the inventory system and document the findings and causes, review trends in error codes, and develop action plans to minimize inaccuracies in future physical counts.

No. 4
Open Recommendation Image, Square
to Acquisitions, Logistics, and Construction (OALC)

Strengthen controls over inventory adjustments to ensure the accountable officer or designee reviews and approves supply variances above an established threshold.

No. 5
Open Recommendation Image, Square
to Acquisitions, Logistics, and Construction (OALC)

Establish and implement policy that clearly defines roles and responsibilities for Denver Logistics Center logistics and warehouse employees, separates duties to avoid conflicts of interest, and enhances the quality assurance function.

No. 6
Open Recommendation Image, Square
to Acquisitions, Logistics, and Construction (OALC)

Establish and implement formal policies and procedures specific for inventory management operations at the Denver Logistics Center, to include cycle counts, regular inventory audits, adjustments and forecasting demand, safety levels, reordering, and tools to allow for automated scanning.

No. 7
Open Recommendation Image, Square
to Acquisitions, Logistics, and Construction (OALC)

Develop and deliver formal training to logistics and warehouse staff on inventory management policies, procedures, and tools.

No. 8
Open Recommendation Image, Square
to Acquisitions, Logistics, and Construction (OALC)

Implement routine reporting of all Denver Logistics Center inventory adjustments to the National Acquisition Center and the Office of Acquisition, Logistics, and Construction.

No. 9
Open Recommendation Image, Square
to Acquisitions, Logistics, and Construction (OALC)

Ensure the Denver Logistics Center staff complete reports of survey for adjustments to inventory in accordance with VA logistics management policy, and communicate such information to the National Acquisition Center.

No. 10
Open Recommendation Image, Square
to Acquisitions, Logistics, and Construction (OALC)

Address the physical security issues identified and develop, implement, and provide initial and recurring training and guidance to Denver Logistics Center’s logistics, distribution, and contract staff on proper physical security controls and procedures, including the proper disposal of personally identifiable information.

No. 11
Open Recommendation Image, Square
to Acquisitions, Logistics, and Construction (OALC)

Conduct an independent, comprehensive, and multiyear financial audit that includes wall-to-wall inventory assessments of the Denver Logistics Center.

No. 12
Open Recommendation Image, Square
to Acquisitions, Logistics, and Construction (OALC)

Transfer the stewardship and responsibility for Denver Logistics Center systems to the Office of Information and Technology.

No. 13
Open Recommendation Image, Square
to Acquisitions, Logistics, and Construction (OALC)

In collaboration with the Office of Information and Technology, establish information system controls for user access, segregation of duties designations, permission access, and privilege access for the inventory management systems and data.

No. 14
Open Recommendation Image, Square
to Acquisitions, Logistics, and Construction (OALC)

Establish and perform routine reviews of the access levels for users with direct access to the inventory management systems and ensure that access is limited to those who have a defined business purpose.

No. 15
Open Recommendation Image, Square
to Acquisitions, Logistics, and Construction (OALC)

In collaboration with the Office of Information and Technology, ensure the Denver Logistics Center meets physical access, security, and contingency planning requirements for its information management systems.

No. 16
Open Recommendation Image, Square
to Acquisitions, Logistics, and Construction (OALC)

Establish a connection for Denver Logistics Center inventory data to VA’s Corporate Data Warehouse.

No. 17
Open Recommendation Image, Square
to Acquisitions, Logistics, and Construction (OALC)

In collaboration with the Office of Information and Technology, ensure the information technology system application does not bypass internal control restrictions, has a complete audit trail, and does not introduce errors in the information system.

No. 18
Open Recommendation Image, Square
to Acquisitions, Logistics, and Construction (OALC)

Ensure the Denver Logistics Center develops and maintains comprehensive documentation of the information system to support operations and train information resource management staff.

No. 19
Open Recommendation Image, Square
to Acquisitions, Logistics, and Construction (OALC)

Ensure security documentation accurately supports the proper controls are implemented, tested, and representative of the system security.

Date Issued
|
Report Number
21-03102-201
|
Topics:  Community Care ● Patient Care Services Operations

Open Recommendation Image, SquareOpenClosed and Implemented Recommendation Image, CheckmarkClosed-ImplementedNot Implemented Recommendation Image, X character'Closed-Not Implemented
No. 1
Open Recommendation Image, Square
to Veterans Health Administration (VHA)

Clarify guidance to ensure it includes local dialysis contract options and specifically defines when they should be used.

No. 2
Open Recommendation Image, Square
to Veterans Health Administration (VHA)

Establish roles and responsibilities to ensure dialysis coordinators follow required procedures when referring veterans to dialysis care in the community.

No. 3
Open Recommendation Image, Square
to Veterans Health Administration (VHA)

Develop and implement a plan to regularly examine and validate dialysis provider information in the Provider Profile Management System for accuracy and completeness.

No. 4
Open Recommendation Image, Square
to Veterans Health Administration (VHA)

Develop and implement a strategy to ensure that any new dialysis service contracts follow the John S. McCain III, Daniel K. Akaka, and Samuel R. Johnson VA Maintaining Internal Systems and Strengthening Integrated Outside Networks Act of 2018 payment rate requirements.

Date Issued
|
Report Number
22-03522-209

Open Recommendation Image, SquareOpenClosed and Implemented Recommendation Image, CheckmarkClosed-ImplementedNot Implemented Recommendation Image, X character'Closed-Not Implemented
No. 1
Open Recommendation Image, Square
to Veterans Benefits Administration (VBA)

Establish a process to identify and track veterans’ files for those determined to have fire-damaged or destroyed records, such as adding a corporate flash, and update the Adjudication Procedural Manual indicating when veterans service representatives should apply such procedures.

No. 2
Open Recommendation Image, Square
to Veterans Benefits Administration (VBA)

Instruct veterans service representatives on the process for requesting service treatment and military service records for fire-related records, which includes more specific guidance on what information is required for the National Personnel Records Center to locate veterans’ records.

No. 3
Open Recommendation Image, Square
to Veterans Benefits Administration (VBA)

Ensure veterans service representatives are made aware of and follow steps as outlined in the manual for when to send required forms and conduct follow-up contact with veterans.

Date Issued
|
Report Number
22-03247-198

Open Recommendation Image, SquareOpenClosed and Implemented Recommendation Image, CheckmarkClosed-ImplementedNot Implemented Recommendation Image, X character'Closed-Not Implemented
No. 1
Open Recommendation Image, Square
to Veterans Health Administration (VHA)
The assistant under secretary for health for support should establish certification procedures for Veterans Integrated Service Networks to ensure medical facilities’ healthcare-associated Legionella disease prevention plans for buildings comply with Veterans Health Administration Directive 1061 requirements.
No. 2
Open Recommendation Image, Square
to Veterans Health Administration (VHA)
The assistant under secretary for health for support should develop and ensure Veterans Integrated Service Networks perform and document quality control and quality assurance checks of their requirements for oversight and enforcement of the Veterans Health Administration Directive 1061 quarterly Legionella water testing procedures conducted by the facility.
No. 3
Open Recommendation Image, Square
to Veterans Health Administration (VHA)
The assistant under secretary for health for operations should monitor Veterans Integrated Service Network officials fulfillment of their oversight responsibilities found in Veterans Health Administration Directive 1061 regarding Legionella water sampling, testing, remediation efforts, and reporting of Legionella water testing data, including the post-remediation test results.
No. 4
Open Recommendation Image, Square
to Veterans Health Administration (VHA)
The director of the Office of Healthcare Engineering should consider alternative measures, such as adding dedicated resources, to provide expertise and support for medical facilities experiencing persistent positive Legionella in facility water supply systems after applying the remediation efforts prescribed by Veterans Health Administration Directive 1061.
No. 5
Open Recommendation Image, Square
to Veterans Health Administration (VHA)
The director of the Office of Healthcare Engineering should assist the Salem VA medical center with their persistent positive Legionella in the facility water supply system, and, with consideration of the ongoing water supply system renovations, develop an action plan to mitigate remediation challenges.
No. 6
Open Recommendation Image, Square
to Veterans Health Administration (VHA)
The director of the Office of Healthcare Engineering should clarify the responsibility section of Veterans Health Administration Directive 1061 to clearly define oversight responsibilities for ensuring required remediation steps are completed when facilities received positive Legionella water test results.
No. 7
Closed and Implemented Recommendation Image, Checkmark
to Veterans Health Administration (VHA)

The director of the Office of Healthcare Engineering should revise the Water Safety Management Tool to alert Veterans Integrated Service Network and medical facility oversight officials when quarterly testing data is not posted.

No. 8
Closed and Implemented Recommendation Image, Checkmark
to Veterans Health Administration (VHA)

The assistant under secretary for health for operations should take actions to confirm that Veterans Integrated Service Network officials are ensuring front-line staff are routinely notified by responsible medical facility officials when elevated Legionella water sample levels require diagnostic awareness and additional clinical surveillance of veterans to detect Legionnaires’ disease.

Date Issued
|
Report Number
22-03525-195

Open Recommendation Image, SquareOpenClosed and Implemented Recommendation Image, CheckmarkClosed-ImplementedNot Implemented Recommendation Image, X character'Closed-Not Implemented
No. 1
Open Recommendation Image, Square
to Information and Technology (OIT)
The assistant secretary for information technology develop a timeline for updating the security and privacy guidance to reflect the latest revisions to the National Institute of Standards and Technology Special Publication 800-53, Security and Privacy Controls for Federal Information Systems and Organizations, and address identified weaknesses with personally identifiable information and supply chain management.
No. 2
Open Recommendation Image, Square
to Information and Technology (OIT)
The assistant secretary for information technology eEstablish a mechanism to ensure continuous monitoring of VA Enterprise Cloud systems to include having and testing contingency, incident response, and disaster recovery plans and conducting scanning as required.
No. 3
Open Recommendation Image, Square
to Information and Technology (OIT)
The assistant secretary for information and technology ensure VA Directive and Handbook 6517 are updated to reflect the revised National Institute of Standards and Technology requirements.
No. 4
Closed and Implemented Recommendation Image, Checkmark
to Information and Technology (OIT)

The assistant secretary for information and technology continue to improve criteria and processes for submitting claims for recoupment of service credits.

No. 5
Closed and Implemented Recommendation Image, Checkmark
to Information and Technology (OIT)

The assistant secretary for information and technology assign roles and responsibilities for submitting claims for service credits and monitoring outcomes.

Date Issued
|
Report Number
22-00414-113

Open Recommendation Image, SquareOpenClosed and Implemented Recommendation Image, CheckmarkClosed-ImplementedNot Implemented Recommendation Image, X character'Closed-Not Implemented
No. 1
Open Recommendation Image, Square
to Veterans Health Administration (VHA)
Clarify roles and responsibilities of the Office of Integrated Veteran Care and third-party administrators with respect to ensuring non-VA providers receive and certify they have reviewed Opioid Safety Initiative guidelines in accordance with the John S. McCain III, Daniel K. Akaka, and Samuel R. Johnson VA Maintaining Internal Systems and Strengthening Integrated Outside Networks Act of 2018 and collaborate with the contracting office to modify the contracts as appropriate.
No. 2
Open Recommendation Image, Square
to Veterans Health Administration (VHA)
Ensure the Office of Integrated Veteran Care strengthens controls to monitor the third-party administrators to ensure non-VA providers’ completion of the VA Opioid Safety Initiative training module.
No. 3
Open Recommendation Image, Square
to Veterans Health Administration (VHA)
Ensure the Office of Integrated Veteran Care strengthens controls to monitor the third-party administrators to ensure non-VA providers’ completion of required prescription drug monitoring program queries
Date Issued
|
Report Number
21-03718-189

Open Recommendation Image, SquareOpenClosed and Implemented Recommendation Image, CheckmarkClosed-ImplementedNot Implemented Recommendation Image, X character'Closed-Not Implemented
No. 1
Open Recommendation Image, Square
to Human Resources and Administration/Operations, Security, and Preparedness (HRA/OSP)
Establish robust oversight of the personnel suitability program within responsible office(s) that includes verifying background investigations are initiated and adjudicated within prescribed timelines and that documentation is filed as required.
No. 2
Open Recommendation Image, Square
to Human Resources and Administration/Operations, Security, and Preparedness (HRA/OSP)
Reimplement the monitoring program specifically required by VA Handbook 0710 as part of VA’s oversight efforts, or an appropriate equivalent, to identify and prevent systemic weaknesses in the personnel suitability program.
No. 3
Open Recommendation Image, Square
to Human Resources and Administration/Operations, Security, and Preparedness (HRA/OSP)
Assess program resources and allocate staff as needed to prioritize oversight of the personnel suitability program within responsible office(s).
No. 4
Open Recommendation Image, Square
to Veterans Health Administration (VHA)
Establish a plan to implement the updated staffing metrics for the Veterans Health Administration’s suitability function and consider using available hiring flexibilities.
No. 5
Open Recommendation Image, Square
to Human Resources and Administration/Operations, Security, and Preparedness (HRA/OSP)
Incorporate formal data-testing procedures (and data-matching as appropriate) of HR Smart and the VA Centralized Adjudication Background Investigation System (or any replacement systems) into the monitoring program discussed in recommendation 2.
No. 6
Open Recommendation Image, Square
to Human Resources and Administration/Operations, Security, and Preparedness (HRA/OSP)
Develop and execute a plan to collect, maintain, and access sufficient and appropriate data through a single system to support the tracking of background investigations from initiation to adjudication.
No. 7
Open Recommendation Image, Square
to Human Resources and Administration/Operations, Security, and Preparedness (HRA/OSP)
Establish a plan to ensure that future systems support the functionality needed to effectively oversee and manage the background investigation process, including addressing limitations identified in the current systems and incorporating the fields necessary to track timeliness metrics.
Date Issued
|
Report Number
22-02293-188

Open Recommendation Image, SquareOpenClosed and Implemented Recommendation Image, CheckmarkClosed-ImplementedNot Implemented Recommendation Image, X character'Closed-Not Implemented
No. 1
Closed and Implemented Recommendation Image, Checkmark
to Veterans Benefits Administration (VBA)

Develop and implement procedures to ensure the Veteran Readiness and Employment Service has properly researched and clearly understands changes to the laws and regulations that govern Chapter 31–only schools and training programs.

No. 2
Closed and Implemented Recommendation Image, Checkmark
to Veterans Benefits Administration (VBA)

Review the existing manual requirements for waivers and coordinate with appropriate officials to ensure amendments to 38 United States Code § 3104(b) have been properly implemented and included in the manual.

No. 3
Closed and Implemented Recommendation Image, Checkmark
to Veterans Benefits Administration (VBA)

Train all appropriate Veteran Readiness and Employment Service regional office staff to ensure waivers are obtained for each veteran with the required documentation in accordance with the manual before approval to attend a Chapter 31–only school or training program.

No. 4
Open Recommendation Image, Square
to Veterans Benefits Administration (VBA)

Coordinate with appropriate officials to determine whether the existing manual guidance for compliance surveys meets the requirements of 38 United States Code § 3693 as it applies to Chapter 31–only schools and training programs, and if necessary, update the manual and train appropriate Veteran Readiness and Employment Service regional office staff accordingly.

No. 5
Open Recommendation Image, Square
to Veterans Benefits Administration (VBA)

Develop and implement monitoring processes—to include veteran waivers, compliance surveys, and completeness of electronic folders—to provide Veteran Readiness and Employment Service reasonable assurance that Chapter 31–only schools and training programs are used as intended by law and regulations.

Total Monetary Impact of All Recommendations
Open: $ 13,000,000.00
Closed: $ 0.00
Date Issued
|
Report Number
21-01295-149

Open Recommendation Image, SquareOpenClosed and Implemented Recommendation Image, CheckmarkClosed-ImplementedNot Implemented Recommendation Image, X character'Closed-Not Implemented
No. 1
Closed and Implemented Recommendation Image, Checkmark
to Veterans Benefits Administration (VBA)

The OIG recommended the under secretary for benefits assess the loan comparison statement controls implemented in December 2021 and 2022 to ensure they operate as planned and confirm borrowers receive these statements as required.

No. 2
Closed and Implemented Recommendation Image, Checkmark
to Veterans Benefits Administration (VBA)

The OIG recommended the under secretary for benefits seek a legal opinion from the VA’s Office of General Counsel on the allowability of fees initially charged as itemized fees to be retroactively accepted as part of the 1 percent flat charge if unsupported, and then review the potential overcharges identified in the audit sample to determine if action is needed to make the borrowers whole.

No. 3
Open Recommendation Image, Square
to Veterans Benefits Administration (VBA)
The OIG recommended the under secretary for benefits develop and update policies and procedures to ensure invoices or bills are obtained for all third-party charges and lenders report itemized closing costs at the lowest level of detail.
No. 4
Open Recommendation Image, Square
to Veterans Benefits Administration (VBA)
The OIG recommended the under secretary for benefits develop and update policies and procedures for the state deviation process and requirements, assess the extent of missing VA authorizations on the schedule of state deviations and obtain the necessary documentation, and obtain a legal opinion from the VA’s Office of General Counsel on the allowability of state deviation charges in excess of the state-published amounts, and then review the potential overcharges identified in the audit sample to determine if action is needed to make the borrowers whole.
No. 5
Closed and Implemented Recommendation Image, Checkmark
to Veterans Benefits Administration (VBA)

The OIG recommended the under secretary for benefits revise policies and procedures to comply with federal regulations on the itemization of costs charged under the 1 percent flat charge to ensure closing costs are properly charged.

No. 6
Closed and Implemented Recommendation Image, Checkmark
to Veterans Benefits Administration (VBA)

The OIG recommended the under secretary for benefits obtain a legal opinion from the VA’s Office of General Counsel on the allowability of mortgage brokerage fees charged under the 1 percent flat charge, and then review the potential overcharge identified in the audit sample to determine if action is needed to make the borrower whole.

No. 7
Closed and Implemented Recommendation Image, Checkmark
to Veterans Benefits Administration (VBA)

The OIG recommended the under secretary for benefits provide lenders at least annual communication about the importance of providing justifications for any loans not reported within 60 days.

No. 8
Open Recommendation Image, Square
to Veterans Benefits Administration (VBA)
The OIG recommended the under secretary for benefits modify policies and procedures for full-file loan reviews to include detailed steps for loan specialists to conduct reviews, as well as the risk factors and methodology for loan selection.
No. 9
Closed and Implemented Recommendation Image, Checkmark
to Veterans Benefits Administration (VBA)

The OIG recommended the under secretary for benefits update policies and procedures to ensure the borrower is reimbursed for any overcharges identified during regional loan center quality reviews.

Date Issued
|
Report Number
21-03544-111

Open Recommendation Image, SquareOpenClosed and Implemented Recommendation Image, CheckmarkClosed-ImplementedNot Implemented Recommendation Image, X character'Closed-Not Implemented
No. 1
Closed and Implemented Recommendation Image, Checkmark
to Veterans Health Administration (VHA)

Implement consistent data entry, standardized organizational codes, and periodic reviews for HR Smart community care data.

No. 2
Closed and Implemented Recommendation Image, Checkmark
to Veterans Health Administration (VHA)

Develop staffing reports that can be searched by service departments to ensure appropriate resources to meet their assigned missions.

No. 3
Open Recommendation Image, Square
to Veterans Health Administration (VHA)
Improve usability of the staffing assessment tool by implementing policy to address the inconsistencies with staffing data entry and review the reported data for accuracy.
No. 4
Open Recommendation Image, Square
to Veterans Health Administration (VHA)
Assess whether consolidated community care units would more broadly support veterans’ access to community care and help mitigate the impact of staffing shortages, and, if so, develop a project management plan for implementing those units.
No. 5
Closed and Implemented Recommendation Image, Checkmark
to Veterans Health Administration (VHA)

Assess the use of monetary and nonmonetary incentives to evaluate whether they are effective in recruiting and retaining administrative staff within community care departments.

Date Issued
|
Report Number
22-01576-72
|
Topics:  FISMA

Open Recommendation Image, SquareOpenClosed and Implemented Recommendation Image, CheckmarkClosed-ImplementedNot Implemented Recommendation Image, X character'Closed-Not Implemented
No. 1
Open Recommendation Image, Square
to Information and Technology (OIT)
We recommended the Assistant Secretary for Information and Technology consistently implement an improved continuous monitoring program in accordance with the NIST Risk Management Framework. Specifically, implement an independent security control assessment process to evaluate the effectiveness of security controls prior to granting authorization decisions. (This is a repeat recommendation from prior years.)
No. 2
Open Recommendation Image, Square
to Information and Technology (OIT)
We recommended the Assistant Secretary for Information and Technology implement improved mechanisms to ensure system stewards and Information System Security Officers follow procedures for establishing, tracking, and updating Plans of Action and Milestones for all known risks and weaknesses including those identified during security control assessments. (This is a repeat recommendation from prior years.)
No. 3
Open Recommendation Image, Square
to Information and Technology (OIT)
We recommended the Assistant Secretary for Information and Technology implement controls to ensure that system stewards and responsible officials obtain appropriate documentation prior to closing Plans of Action and Milestones. (This is a repeat recommendation from prior years.)
No. 4
Open Recommendation Image, Square
to Information and Technology (OIT)
We recommended the Assistant Secretary for Information and Technology develop mechanisms to ensure system security plans reflect current operational environments, include an accurate status of the implementation of system security controls, and all applicable security controls are properly evaluated. (This is a repeat recommendation from prior years.)
No. 5
Open Recommendation Image, Square
to Information and Technology (OIT)
We recommended the Assistant Secretary for Information and Technology implement improved processes for reviewing and updating key security documents such as security plans, risk assessments, and interconnection agreements on an annual basis and ensure the information accurately reflects the current environment. (This is a repeat recommendation from prior years.)
No. 6
Open Recommendation Image, Square
to Information and Technology (OIT)
We recommended the Assistant Secretary for Information and Technology implement improved processes to ensure compliance with VA password policy and security standards on domain controls, operating systems, databases, applications, and network devices. (This is a repeat recommendation from prior years.)
No. 7
Open Recommendation Image, Square
to Information and Technology (OIT)
We recommended the Assistant Secretary for Information and Technology implement periodic reviews to minimize access by system users with incompatible roles, permissions in excess of required functional responsibilities, and unauthorized accounts. (This is a repeat recommendation from prior years.)
No. 8
Open Recommendation Image, Square
to Information and Technology (OIT)
We recommended the Assistant Secretary for Information and Technology enable system audit logs on all critical systems and platforms and conduct centralized reviews of security violations across the enterprise. (This is a repeat recommendation from prior years.)
No. 9
Open Recommendation Image, Square
to Information and Technology (OIT)
We recommended the Office of Personnel Security, Human Resources, and Contract Offices implement improved processes for establishing and maintaining accurate data within VA’s authoritative system of record for background investigations. (This is a modified repeat recommendation from prior years.)
No. 10
Open Recommendation Image, Square
to Information and Technology (OIT)
We recommended the Office of Personnel Security, Human Resources, and Contract Offices strengthen processes to ensure appropriate levels of background investigations are completed for applicable VA employees and contractors. (This is a modified repeat recommendation from prior years.)
No. 11
Open Recommendation Image, Square
to Information and Technology (OIT)
We recommended the Assistant Secretary for Information and Technology implement more effective automated mechanisms to continuously identify and remediate security deficiencies on VA’s network infrastructure, database platforms, and web application servers. (This is a repeat recommendation from prior years.)
No. 12
Open Recommendation Image, Square
to Information and Technology (OIT)
We recommended the Assistant Secretary for Information and Technology implement a more effective patch and vulnerability management program to address security deficiencies identified during our assessments of VA’s web applications, database platforms, network infrastructure, and workstations. (This is a repeat recommendation from prior years.)
No. 13
Open Recommendation Image, Square
to Information and Technology (OIT)
We recommended the Assistant Secretary for Information and Technology maintain a complete and accurate security baseline configuration for all platforms and ensure all baselines are appropriately monitored for compliance with established VA security standards. (This is a repeat recommendation from prior years.)
No. 14
Open Recommendation Image, Square
to Information and Technology (OIT)
We recommended the Assistant Secretary for Information and Technology implement improved network access controls that restrict medical devices from systems hosted on the general network. (This is a repeat recommendation from prior years.)
No. 15
Open Recommendation Image, Square
to Information and Technology (OIT)
We recommended the Assistant Secretary for Information and Technology consolidate the security responsibilities for networks not managed by the Office of Information and Technology, under a common control for each site and ensure vulnerabilities are remediated in a timely manner. (This is a repeat recommendation from prior years.)
No. 16
Open Recommendation Image, Square
to Information and Technology (OIT)
We recommended the Assistant Secretary for Information and Technology implement improved processes to ensure that all devices and platforms are evaluated using credentialed vulnerability assessments. (This is a repeat recommendation from prior years.)
No. 17
Open Recommendation Image, Square
to Information and Technology (OIT)
We recommended the Acting Assistant Secretary for Information and Technology implement improved procedures to enforce standardized system development and change control processes that integrates information security throughout the life cycle of each system. (This is a repeat recommendation from prior years.)
No. 18
Open Recommendation Image, Square
to Information and Technology (OIT)
We recommended the Assistant Secretary for Information and Technology review system boundaries, recovery priorities, system components, and system interdependencies and implement appropriate mechanisms to ensure that established system recovery objectives can be measured and met. (This is a modified repeat recommendation from prior years.)
No. 19
Open Recommendation Image, Square
to Information and Technology (OIT)
We recommended the Assistant Secretary for Information and Technology ensure that contingency plans for all systems are updated to include critical inventory components and are tested in accordance with VA requirements. (This is a repeat recommendation from prior years.)
No. 20
Open Recommendation Image, Square
to Information and Technology (OIT)
We recommended the Assistant Secretary for Information and Technology implement more effective agency-wide incident response procedures to ensure timely notification, reporting, updating, and resolution of computer security incidents in accordance with VA standards. (This is a repeat recommendation from prior years.)
No. 21
Open Recommendation Image, Square
to Information and Technology (OIT)
We recommended the Assistant Secretary for Information and Technology ensure that VA’s Cybersecurity Operations Center has full access to all security incident data to facilitate an agency-wide awareness of information security events. (This is a repeat recommendation from prior years.)
No. 22
Open Recommendation Image, Square
to Information and Technology (OIT)
We recommended the Assistant Secretary for Information and Technology implement improved safeguards to identify and prevent unauthorized vulnerability scans on VA networks. (This is a repeat recommendation from prior years.)
No. 23
Open Recommendation Image, Square
to Information and Technology (OIT)
We recommended the Assistant Secretary for Information and Technology implement improved measures to ensure that all security controls are assessed in accordance with VA policy and that identified issues or weaknesses are adequately documented and tracked within POA&Ms. (This is a repeat recommendation from prior years.)
No. 24
Open Recommendation Image, Square
to Information and Technology (OIT)
We recommended the Assistant Secretary for Information and Technology fully develop a comprehensive list of approved and unapproved software and implement continuous monitoring processes to prevent the use of prohibited software on agency devices. (This is a repeat recommendation from prior years.)
No. 25
Open Recommendation Image, Square
to Information and Technology (OIT)
We recommended the Assistant Secretary for Information and Technology develop a comprehensive inventory process to identify connected hardware, software, and firmware used to support VA programs and operations. (This is a repeat recommendation from prior years.)
No. 26
Open Recommendation Image, Square
to Information and Technology (OIT)
We recommended the Assistant Secretary for Information and Technology implement improved procedures for monitoring contractor-managed systems and services and ensure information security controls adequately protect VA sensitive systems and data. (This is a repeat recommendation from prior years.)
Date Issued
|
Report Number
21-03101-73

Open Recommendation Image, SquareOpenClosed and Implemented Recommendation Image, CheckmarkClosed-ImplementedNot Implemented Recommendation Image, X character'Closed-Not Implemented
No. 1
Closed and Implemented Recommendation Image, Checkmark
to Office of Management (OM)
Assess the iFAMS configuration to determine whether integration with the payroll subsystems can be accomplished to resolve some of the payroll-related issues that require the need for expenditure transfers.
No. 2
Closed and Implemented Recommendation Image, Checkmark
to Veterans Health Administration (VHA)

Establish guidance that outlines the type of documentation required to support the amounts identified in the manual journal vouchers when processing expenditure transfers.

No. 3
Open Recommendation Image, Square
to Veterans Health Administration (VHA)
Require medical facility staff have documented authority, through proper delegation, to make purchases.
No. 4
Open Recommendation Image, Square
to Veterans Health Administration (VHA)
Verify that medical facility staff segregate duties so that the same person is not both authorizing and receiving goods and services.
No. 5
Open Recommendation Image, Square
to Veterans Health Administration (VHA)
Make certain the purchase card holder is not the requestor or approver for the purchase.
No. 6
Open Recommendation Image, Square
to Veterans Health Administration (VHA)
Ensure contracting officer’s representatives know and understand their duties and responsibilities for the certification and payment of invoices.
No. 7
Open Recommendation Image, Square
to Veterans Health Administration (VHA)
Check vendors’ compliance with contract terms to include the comparison of invoiced amounts with the contract line-item unit costs.esponse to the pandemic and develop appropriate action plans to integrate oversight roles, responsibilities, and clear guidance into the use of supplemental funds.
No. 8
Open Recommendation Image, Square
to Veterans Health Administration (VHA)
Ensure that medical facility staff track the receipt of goods to make certain they are the correct quantity.
No. 9
Closed and Implemented Recommendation Image, Checkmark
to Veterans Health Administration (VHA)
Conduct an assessment of lessons learned from the emergency response to the pandemic and develop appropriate action plans to integrate oversight roles, responsibilities, and clear guidance into the use of supplemental funds.
Total Monetary Impact of All Recommendations
Open: $ 187,200,000.00
Closed: $ 0.00
Date Issued
|
Report Number
21-03133-48

Open Recommendation Image, SquareOpenClosed and Implemented Recommendation Image, CheckmarkClosed-ImplementedNot Implemented Recommendation Image, X character'Closed-Not Implemented
No. 1
Open Recommendation Image, Square
to Veterans Health Administration (VHA)
Ensure medical facilities monitor resilient high-frequency radio network training and staffing levels and maintain enough trained staff to operate the resilient high-frequency radio network.
No. 2
Open Recommendation Image, Square
to Veterans Health Administration (VHA)
Ensure that the appropriate stakeholders know the program office responsible for the resilient high-frequency radio network and understand the roles and responsibilities for the Veterans Health Administration’s Resilient High-Frequency Radio Network program.
No. 3
Open Recommendation Image, Square
to Veterans Health Administration (VHA)
Finalize the Veterans Health Administration High-Frequency Radio Operations Plan.
No. 4
Closed and Implemented Recommendation Image, Checkmark
to Veterans Health Administration (VHA)
If additional resilient high-frequency radio network equipment is purchased, work with the contracting officer to provide guidance to facility representatives to ensure they verify radios are fully functional before acceptance.
No. 5
Open Recommendation Image, Square
to Veterans Health Administration (VHA)
Conduct a risk assessment and provide guidance for the placement of resilient high-frequency radio networks within facilities and any needed monitoring schedules.
No. 6
Open Recommendation Image, Square
to Veterans Health Administration (VHA)
Ensure sites can obtain repairs for broken or inoperable resilient high-frequency radio network equipment.
Date Issued
|
Report Number
21-01997-69

Open Recommendation Image, SquareOpenClosed and Implemented Recommendation Image, CheckmarkClosed-ImplementedNot Implemented Recommendation Image, X character'Closed-Not Implemented
No. 1
Closed and Implemented Recommendation Image, Checkmark
to Office of Management (OM)

Implement controls to mitigate the risk that data are unreliable and inconsistently recorded between eCMS and iFAMS when staff deobligate funds for converted contracts.

No. 2
Open Recommendation Image, Square
to Office of Management (OM)
Establish and implement a methodology to prioritize user feedback into the risk management process.
No. 3
Closed and Implemented Recommendation Image, Checkmark
to Office of Management (OM)
Use the risk register to document and assess the risks associated with the manual deobligation process.
No. 4
Open Recommendation Image, Square
to Office of Management (OM)
Ensure that converted contracts are included in integrated system testing and user acceptance testing.
No. 5
Closed and Implemented Recommendation Image, Checkmark
to Office of Management (OM)

Implement a process that provides formal acknowledgment on whether requests related to high-priority business intelligence reports have been accepted as requirements.