Recommendation Dashboard

OIG makes recommendations in our reports to improve the efficiency and effectiveness of agency programs and help agencies identify questioned costs and funds that could be put to better use. The aim is to spur our audited agencies to take corrective actions, which allow us to close the recommendations.

This dashboard identifies current open recommendations along with the associated questioned costs.  Open recommendations may be resolved or unresolved:

  • A recommendation is resolved when OIG agrees with the agency's plan of action.
  • A recommendation is unresolved when the agency has yet to share a plan of action or OIG disagrees with the plan.

The dashboard below may not reflect accurate numbers due to temporarily unavailable resources. We apologize for any inconvenience. Please check back soon.

 

Total Open Recommendations (As of 7/10/25)

315

Open Financial Recommendations (As of 7/10/25)

$54,597,729


Please see an updated list of recommendations with their corresponding report below.

2016

Oct 21, 2015
Audit Report
1-521-16-001-P
Recommendation
1

USAID/Haiti, through the Feed the Future North Project contracting officer, identify activities that will have the greatest impact on project objectives given the remaining time and resources in the base implementation period, and reduce the scope of the contract accordingly.

Questioned Cost
0
Close Date
Oct 21, 2015
Recommendation
2

USAID/Haiti direct Development Alternatives Inc. to revise its strategy for implementing Feed the Future North Project activities to address the dearth of capable local organizations in the northern corridor.

Questioned Cost
0
Close Date
Oct 21, 2015
Recommendation
3

USAID/Haiti formally communicate to Development Alternatives Inc. the actual opportunities that exist for local organizations to bid on and receive direct USAID funding.

Questioned Cost
0
Close Date
Oct 21, 2015
Recommendation
4

USAID/Haiti report problems staffing its contracting office in its next Federal Manager's Financial Integrity Act of 1982 annual certification.

Questioned Cost
0
Close Date
Oct 21, 2015
Recommendation
5

USAID/Haiti, through the Feed the Future North Project contracting officer, amend the contract to define deliverables and results.

Questioned Cost
0
Close Date
Oct 21, 2015
Recommendation
6

USAID/Haiti establish criteria for determining
whether to exercise the option years for the Feed the Future North Project.

Questioned Cost
0
Close Date
Oct 21, 2015
Recommendation
7

USAID/Haiti, through the Feed the Future North Project contracting officer, realign the remaining fixed fee attributed to intermediate results 1, 2, and 3 to demonstrating "best-effort" toward achieving the deliverables and results defined in response to Recommendation 5.

Questioned Cost
0
Close Date
Oct 21, 2015
Recommendation
8

USAID/Haiti, through the Feed the Future North Project contracting officer, determine whether the fixed fee attributed to intermediate result 4 should allow for making 2 local organizations eligible for direct USAID funding and 12 local organizations eligible for fixed-obligation grants, and modify the contract if necessary.

Questioned Cost
0
Close Date
Oct 21, 2015
Recommendation
9

USAID/Haiti reflect concerns with project implementation, schedule, and staffing in its contractor performance assessment reports for Development Alternatives Inc. for the Feed the Future North Project, including revising the previous report as necessary, and maintain documentation to support the assessments.

Questioned Cost
0
Close Date
Oct 21, 2015
Recommendation
10

USAID/Haiti begin a performance evaluation of the Feed the Future North Project by September 30, 2015.

Questioned Cost
0
Close Date
Sep 28, 2016
Recommendation
11

USAID/Haiti remind contracting officer's representatives of their designated responsibilities to document performance concerns,
elevate the concerns to the contracting officer for timely resolution, and maintain complete documentation in the official project file.

Questioned Cost
0
Close Date
Oct 21, 2015
Recommendation
12

USAID/Haiti document clear procedures, responsibilities, and timelines for requesting and approving waivers for restricted goods.

Questioned Cost
0
Close Date
Nov 21, 2016
Recommendation
13

USAID/Haiti document clear procedures, responsibilities, and timelines for requesting and approving waivers for restricted goods.

Questioned Cost
0
Close Date
Oct 21, 2015
Recommendation
14

USAID/Haiti document clear procedures designating the contracting officer's representative, or alternate contracting officer's representative as applicable, as the sole liaison between USAID and contractor staff unless otherwise specified, with procedures to document justification for any exceptions.

Questioned Cost
0
Close Date
Oct 21, 2015
Recommendation
15

USAID/Haiti document clear roles and responsibilities for managing complex Feed the Future projects, and implement a plan to make sure these roles and responsibilities are respected and enforced.

Questioned Cost
0
Close Date
Oct 21, 2015
Recommendation
16

USAID/Haiti set a deadline for Development
Alternatives Inc. to correct critical staffing deficiencies for the Feed the Future North Project and take formal corrective action if this deadline is not met.

Questioned Cost
0
Close Date
Oct 21, 2015
Recommendation
17

USAID/Haiti review its requirement to approve all professional staff positions for the Feed the Future North Project, determine whether the requirement is in the best interests of the U.S. Government, and, through the project contracting officer, revise the requirement in the contract if necessary.

Questioned Cost
0
Close Date
Oct 21, 2015
Recommendation
18

USAID/Haiti set a deadline for Development Alternatives Inc. to finalize the project-level environmental assessment for the Feed the Future North Project and take formal corrective action if the deadline is not met.

Questioned Cost
0
Close Date
Oct 21, 2015
Recommendation
19

USAID/Haiti identify ongoing Feed the Future North Project activities that do not comply with environmental requirements and direct Development Alternatives Inc. to stop all identified activities until the required level of environmental review is completed.

Questioned Cost
0
Close Date
Sep 19, 2016
Recommendation
20

USAID/Haiti incorporate procedures in Mission Order 204-1 to document, at the start of the award, agreement between the contracting officer's representative; mission-, regional-, and bureau-level environmental officers; and the contractor on procedures and timelines to meet environmental compliance requirements.

Questioned Cost
0
Close Date
Jul 28, 2016
Recommendation
21

USAID/Haiti modify its initial environmental examination for the food security and economic growth portfolio to remove any ambiguity about the required level of environmental review for its projects, programs, and activities, and request approval of the initial environmental examination from the bureau environmental officer.

Questioned Cost
0
Close Date
Sep 19, 2016
Recommendation
22

USAID/Haiti develop a timeline with milestones for Development Alternatives Inc. to complete irrigation activities for the Feed the Future North Project and take formal corrective action if they are not met.

Questioned Cost
0
Close Date
Sep 19, 2016
Recommendation
23

USAID/Haiti develop procedures to make sure contracts for infrastructure projects include clear specifications for cost-benefit analyses.

Questioned Cost
0
Close Date
Nov 21, 2016
Recommendation
24

USAID/Haiti, through the Feed the Future North Project contracting officer, modify the contract to remove road rehabilitation activities and put $9.93 million to better use.

Questioned Cost
0
Close Date
Oct 21, 2015
Recommendation
25

USAID/Haiti include an in-depth review of Development Alternative Inc.'s internal controls for procurement and distribution of project materials in its upcoming financial review of the Feed the Future North Project.

Questioned Cost
0
Close Date
Oct 21, 2015
Recommendation
26

USAID/Haiti, through the Feed the Future North Project contracting officer, determine the allowability of $10,028 in unsupported questioned costs ($9,746 from unsupported distributions in our test sample and $264 from the banana plants delivered to cacao farmers) and recover from Development Alternatives Inc. any amount determined to be unallowable.

Questioned Cost
10028
Close Date
Oct 21, 2015
Recommendation
27

USAID/Haiti implement alternative measures to estimate the impact of the Feed the Future North Project and the progress of outcome indicators in the absence of a valid baseline study.

Questioned Cost
0
Close Date
Nov 21, 2016
Recommendation
28

USAID/Haiti implement a plan to confirm that its future Feed the Future projects establish valid baselines at the start of the awards.

Questioned Cost
0
Close Date
Sep 28, 2016
Recommendation
29

USAID/Haiti establish a timeline with milestones for Development Alternatives Inc. to bring performance data for the Feed the Future North Project in line with USAID's data quality standards and take formal corrective action if they are not met.

Questioned Cost
0
Close Date
Sep 19, 2016
Recommendation
30

USAID/Haiti determine whether its strategy for increasing food security in Haiti should include water, sanitation, and hygiene activities, document the decision, and modify the strategy accordingly.

Questioned Cost
0
Close Date
Sep 19, 2016
Recommendation
31

USAID/Haiti, in consultation with the contracting officer for the Feed the Future North Project, determine whether the contract should be modified to meet criteria for the water, sanitation, and hygiene earmark, document the decision, and modify the contract accordingly.

Questioned Cost
0
Close Date
Oct 21, 2015
Recommendation
32

USAID/Haiti incorporate reporting progress toward meeting earmarks into its biannual portfolio reviews, add a section on earmarks to its portfolio review project data sheet template, and include earmark criteria in the guidance disseminated to mission staff in preparation for its biannual portfolio reviews.

Questioned Cost
0
Close Date
Sep 19, 2016
Recommendation
33

USAID/Haiti provide to USAID/Washington details on its water, sanitation, and hygiene earmark allocations for fiscal years 2012 and 2013 so that USAID/Washington can notify Congress as appropriate as to overall Agency execution of the earmark.

Questioned Cost
0
Close Date
Oct 21, 2015
Oct 06, 2015
Audit Report
5-497-16-001-P
Recommendation
1

USAID/Indonesia, through the responsible contracting officer, modify the Higher Education Leadership and Management Project contract to identify clearly in section C.4.4 which results Chemonics International Inc. will be required to deliver and report on.

Questioned Cost
0
Close Date
Oct 06, 2015
Recommendation
2

USAID/Indonesia work with Chemonics International Inc. to revise indicator definitions in the project's monitoring and evaluation plan to clarify calculation methodology and disclose data limitations for seven indicators.

Questioned Cost
0
Close Date
Oct 06, 2015
Recommendation
3

USAID/Indonesia require Chemonics International Inc. to document the rationale for the project target for every indicator in the monitoring and evaluation plan.

Questioned Cost
0
Close Date
Oct 06, 2015
Recommendation
4

USAID/Indonesia review and verify the accuracy of three baseline studies completed in January 2015.

Questioned Cost
0
Close Date
Oct 06, 2015
Recommendation
5

USAID/Indonesia direct Chemonics International Inc. to strengthen oversight and controls over data verification and reporting by creating written procedures that clearly describe responsibilities of the project's monitoring and evaluation staff, consultants, and technical staff.

Questioned Cost
0
Close Date
Oct 06, 2015
Recommendation
6

USAID/Indonesia require Chemonics International Inc. to create written procedures for database management that include periodic data integrity checks.

Questioned Cost
0
Close Date
Oct 06, 2015
Recommendation
7

USAID/Indonesia provide additional training in performance monitoring to the contracting officer's representative and the alternate contracting officer's representative.

Questioned Cost
0
Close Date
Jun 30, 2016
Recommendation
8

USAID/Indonesia require contracting officer's representatives to track accruals by contract line item number in their quarterly reports.

Questioned Cost
0
Close Date
Feb 23, 2016
Recommendation
9

USAID/Indonesia clarify branding requirements for subcontracts under the Higher Education Leadership and Management Project.

Questioned Cost
0
Close Date
Feb 23, 2016
Recommendation
10

USAID/Indonesia require Chemonics International Inc. to determine the allowability of approximately $85,275 in costs for the subcontract to create webinars for the Higher Education Leadership and Management Project and collect from Gadjah Mada University any amount determined to be unallowable.

Questioned Cost
85275
Close Date
Oct 06, 2015

2015

Sep 25, 2015
Audit Report
A-000-15-010-P
Recommendation
1

The Chief Information Officer document and implement procedures to review active network accounts that have not logged in over a specified period of time, as defined by Automated Directives System Chapter 545, "Systems Security Policy," or that have never logged into the system to determine whether accounts are necessary and disable or delete accounts that are unnecessary.

Questioned Cost
0
Close Date
Jun 30, 2016
Recommendation
2

The Director of the Office of Management Policy, Budget, and Performance, in coordination with the Chief Information Officer, the Chief Human Capital Officer, and the Director of the Office of Acquisition and Assistance, document and implement procedures to promptly remove system accounts associated with people no longer at USAID.

Questioned Cost
0
Close Date
Mar 31, 2016
Recommendation
3

The Chief Information Officer implement improved procedures to make sure approved access request forms are maintained for anyone with access to the network.

Questioned Cost
0
Close Date
Jun 30, 2016
Recommendation
4

The Chief Information Officer work with the AIDtracker system owner to update AIDtracker security settings for user inactivity to comply with policy, or issue a written authorization for deviations.

Questioned Cost
0
Close Date
Mar 31, 2016
Recommendation
5

The Chief Information Officer work with the AIDtracker system owner to document and implement procedures to make sure approved access request forms are maintained for anyone with access to the system.

Questioned Cost
0
Close Date
Mar 31, 2016
Recommendation
6

The Director for the Office of Security document and implement procedures to review Partner Vetting System accounts that have not logged in over a specified period of time, as defined by USAID, or that have never logged into the system to determine whether accounts are necessary.

Questioned Cost
0
Close Date
Sep 29, 2016
Recommendation
7

The Chief Information Officer work with the State Department's Director for the Office of U.S. Foreign Assistance Resources to implement procedures to complete, approve, and maintain approved access request forms for privileged users with access to the Foreign Assistance Coordination and Tracking System Info as required in accordance with policies.

Questioned Cost
0
Close Date
Jun 30, 2016
Recommendation
8

The Chief Information Officer work with the State Department's Director for the Office of U.S. Foreign Assistance Resources to document and implement procedures to review active Foreign Assistance Coordination and Tracking System Info accounts that have not logged in over a specified period of time or that have never logged into the system to determine whether accounts are necessary.

Questioned Cost
0
Close Date
Jun 30, 2016
Recommendation
9

The Chief Information Officer work with the State Department's Director for the Office of U.S. Foreign Assistance Resources to document and implement procedures to review Foreign Assistance Coordination and Tracking System Info accounts periodically for appropriateness.

Questioned Cost
0
Close Date
Jun 30, 2016
Recommendation
10

The Chief Information Officer conduct a full system reauthorization for the AIDtracker system in accordance with USAID's policy.

Questioned Cost
0
Close Date
Mar 31, 2016
Recommendation
11

The Chief Information Officer conduct a full system reauthorization for the Partner Vetting System in accordance with USAID's policy.

Questioned Cost
0
Close Date
Feb 28, 2017
Recommendation
12

The Chief Information Officer implement a documented validation process to confirm that continuous monitoring activities-such as updating system security plans, risk assessments, security assessments, and plans of action and milestones-are occurring for all USAID systems on a periodic basis, as defined by USAID, and as significant system changes occur.

Questioned Cost
0
Close Date
Sep 22, 2016
Recommendation
13

The Chief Information Officer document and implement a process to confirm that the role-based training program is implemented as applicable for all employees and contractors requiring role-based training, and be sure the training is tracked and documented.

Questioned Cost
0
Close Date
Sep 29, 2016
Recommendation
14

The Chief Information Officer update the AIDNet system security plan to fully document the system's security controls.

Questioned Cost
0
Close Date
Jun 30, 2016
Recommendation
15

The Director for the Office of Security implement a documented validation process to confirm that the Partner Vetting System contingency plan is reviewed, updated, and tested annually.

Questioned Cost
0
Close Date
Aug 12, 2016
Recommendation
16

The Chief Information Officer document a formal memorandum of understanding with the alternate processing vendor.

Questioned Cost
0
Close Date
Mar 31, 2016
Recommendation
17

The Director for the Office of Security document, implement, test, and maintain a current, accurate baseline configuration for the Partner Vetting System.

Questioned Cost
0
Close Date
Sep 29, 2016
Sep 23, 2015
NFA Transmittal
7-620-15-001-N
Recommendation
1

USAID/Nigeria determine the allowability of $5,672,236 in unsupported questioned costs (page 6 of the audit report) and recover from Hope Worldwide Nigeria the amount determined to be unallowable.

Questioned Cost
5672236
Funds for Better Use
0
Recommendation
2

USAID/Nigeria determine the allowability of $399,198 in ineligible questioned costs (page 6 of the audit report) and recover from Hope Worldwide Nigeria the amount determined to be unallowable.

Questioned Cost
399198
Funds for Better Use
0
Recommendation
3

USAID/Nigeria verify that Hope Worldwide Nigeria correct the internal control material weakness and the significant deficiency identified on page 15 of the audit report relating to its inabilities to reconcile subsidiary accounting books to the trial balance and provide a detail transactions list for lump sum amounts recorded in the general ledger.

Close Date
Sep 19, 2016
Recommendation
4

USAID/Nigeria determine the allowability of $1,411,996 in unsupported questioned costs relating to costsharing contribution, and recover from Hope Worldwide Nigeria the amount determined to be unallowable (page 12 of the audit report).

Questioned Cost
1411996
Close Date
Sep 19, 2016
Recommendation
5

USAID/Nigeria verify that Hope Worldwide Nigeria implement the outstanding prior year audit recommendations identified on page 32 of the management letter.

Questioned Cost
0
Close Date
Sep 19, 2016
Recommendation
6

USAID/Nigeria verify that Hope Worldwide Nigeria liquidate the advances identified on page 4 of the report and recover from Hope Worldwide Nigeria the amount determined to be unallowable.

Questioned Cost
100942
Funds for Better Use
0
Sep 23, 2015
Audit Report
4-649-15-005-P
Recommendation
1

USAID/East Africa implement a plan to provide supervisory oversight to contracting officer's representatives in charge of managing its monitoring programs in Somalia.

Questioned Cost
0
Close Date
Sep 23, 2015
Recommendation
2

USAID/East Africa train the staff responsible for managing its Somalia programs about the monitoring and evaluation resources available to them.

Questioned Cost
0
Close Date
Sep 23, 2015
Recommendation
3

USAID/East Africa obtain written acknowledgement from International Business and Technical Consultants Inc. that all deliverables are understood during the implementation of monitoring and evaluation activities under the Somalia Program Support Services award.

Questioned Cost
0
Close Date
Sep 23, 2015
Recommendation
4

USAID/East Africa give International Business & Technical Consultants Inc. a written outline of its management structure to ensure familiarity.

Questioned Cost
0
Close Date
Jun 28, 2016
Recommendation
5

USAID/East Africa identify a contracting officer's representative for the Somalia Program Support Services award who has, or can be taught, the skills needed to manage the program
effectively.

Questioned Cost
0
Close Date
Sep 21, 2016
Recommendation
6

USAID/East Africa implement a monitoring plan that includes reviews of award deliverables to confirm that International Business & Technical Consultants Inc. is meeting its deliverables
under Somalia Program Support Services.

Questioned Cost
0
Close Date
Sep 23, 2015
Recommendation
7

USAID/East Africa offer training to USAID staff to boost awareness, participation, and cohesiveness between USAID staff managing programs in Somalia and the Somalia Program Support Services award.

Questioned Cost
0
Close Date
Sep 23, 2015
Recommendation
8

USAID/East Africa define standard operating procedures for the use of the clearinghouse, which includes roles, responsibilities, and time frames.

Questioned Cost
0
Close Date
Sep 23, 2015
Recommendation
9

USAID/East Africa develop and issue a mission order that is relevant to monitoring needs for programming in Somalia.

Questioned Cost
0
Close Date
Jun 28, 2016
Recommendation
10

USAID/East Africa work with International Business & Technical Consultants Inc. to evaluate possible conflicts of interest caused by subcontractor relationships and document its resolution of those conflicts.

Questioned Cost
0
Close Date
Jun 28, 2016
Sep 22, 2015
Audit Report
4-656-15-004-P
Recommendation
1

USAID/Mozambique determine whether a portion of the fixed fee for activities not started or completed under the AgriFUTURO contract should be withheld from payment to Abt Associates Inc.

Questioned Cost
0
Close Date
Sep 28, 2016
Recommendation
2

USAID/Mozambique determine the allowability of $141,183 in ineligible questioned costs arising from missing or stolen equipment and recover any amounts determined to be unallowable.

Questioned Cost
141183
Close Date
Sep 28, 2016
Recommendation
3

USAID/Mozambique's Office of Agriculture, Trade, and Business implement tools, such as project management software, that identify key milestones and deadlines to improve its portfolio management.

Questioned Cost
0
Close Date
Mar 31, 2016
Recommendation
4

USAID/Mozambique determine the allowability of $214,353 in ineligible questioned costs and recover from Development Alternatives Inc. the amount determined to be unallowable.

Questioned Cost
214353
Close Date
Nov 01, 2016
Recommendation
5

USAID/Mozambique's Office of Agriculture, Trade, and Business, in coordination with its contracting officer, prepare a schedule of
overdue contractor performance assessments and those that must be done within the next year, and make sure they are completed in accordance with federal requirements.

Questioned Cost
0
Close Date
Sep 22, 2015
Recommendation
6

USAID/Mozambique's Office of Agriculture, Trade, and Business, in coordination with the contracting officer, institute an effective
control, such as including a review of contracting officer's representatives' files as part of the annual Federal Managers' Financial Integrity Act of 1982 review, to make sure that
files are complete in accordance with administrative requirements.

Questioned Cost
0
Close Date
Sep 28, 2016
Recommendation
7

USAID/Mozambique's Office of Agriculture, Trade, and Business institute a control to make sure that responsible staff actively monitor the implementation of branding and marking plans for its projects.

Questioned Cost
0
Close Date
Sep 22, 2015
Recommendation
8

USAID/Mozambique's Office of Agriculture, Trade, and Business ask the agreement officer's representative for PARTI to make a determination about branding requirements for USAID's agricultural research projects supported by its public international organization agreement and disseminate appropriate branding guidance to all participating USAID missions.

Questioned Cost
0
Close Date
Mar 31, 2016
Sep 18, 2015
Audit Report
5-386-15-008-P
Recommendation
1

USAID/India work with Public Health Foundation of India to conduct a feasibility assessment of all project activities to determine whether the project will meet its goal and, based on the results, amend the cooperative agreement to implement only those activities that are achievable.

Questioned Cost
0
Close Date
Mar 31, 2016
Recommendation
2

USAID/India implement a plan to build the Public Health Foundation of India's capacity to submit comprehensive implementation plans and progress reports for the project that meet the requirements stated in the cooperative agreement.

Questioned Cost
0
Close Date
Sep 18, 2015
Recommendation
3

USAID/India require Public Health Foundation of India to implement a gender monitoring plan, along with gender-sensitive performance indicators, to measure the impact project activities have on gender equality, as stated in the cooperative agreement.

Questioned Cost
0
Close Date
Mar 31, 2016
Recommendation
4

USAID/India require the agreement officer's representative to track all the project's deliverables to validate whether the Public Health Foundation of India complies with all requirements stated in the cooperative agreement.

Questioned Cost
0
Close Date
Mar 31, 2016
Recommendation
5

USAID/India require Public Health Foundation of India to implement an action plan to strengthen its monitoring and evaluation staffing in its field and head offices.

Questioned Cost
0
Close Date
Mar 31, 2016
Recommendation
6

USAID/India conduct a comprehensive data quality assessment on the project to verify its data integrity at Public Health Foundation of India's field office as well as at its head office.

Questioned Cost
0
Close Date
Mar 31, 2016
Recommendation
7

USAID/India require the Public Health Foundation of India to implement a transition plan for the project that includes a comprehensive assessment of all technical support units and state AIDS control societies in the eight focus states and their capacity and readiness for integration.

Questioned Cost
0
Close Date
Mar 31, 2016
Recommendation
8

USAID/India update its April 5, 1999, mission order on management controls and annual FMFIA reviews to include a policy prohibiting the use of any other resources as the replacement for the annual risk assessment of its operations and programs as required by Federal Manager Financial Integrity Act and stated in Office of Management and Budget Circular A-123.

Questioned Cost
0
Close Date
Mar 31, 2016
Sep 17, 2015
Audit Report
A-OPC-15-009-P
Recommendation
1

The Overseas Private Investment Corporation's Chief Information Officer implement a documented process for periodically reviewing service accounts to determine whether accounts are necessary, and disable accounts no longer required.

Questioned Cost
0
Close Date
Nov 12, 2015
Recommendation
2

The Overseas Private Investment Corporation's Chief Information Security Officer implement a documented process for verifying that all personnel receive security and privacy training annually, and document the results.

Questioned Cost
0
Close Date
Nov 12, 2015
Recommendation
3

The Overseas Private Investment Corporation's Chief Information Security Officer develop and implement documented, role-based information technology and security training for personnel.

Questioned Cost
0
Close Date
Oct 05, 2015
Recommendation
4

The Overseas Private Investment Corporation's Chief Information Officer obtain and implement a memorandum of understanding for its Oracle E-Business Suite System.

Questioned Cost
0
Close Date
Oct 05, 2015
Recommendation
5

The Overseas Private Investment Corporation's Chief Information Officer obtain and implement a documented interconnection security agreement for its Oracle E-Business Suite System.

Questioned Cost
0
Close Date
Oct 05, 2015
Recommendation
6

The Overseas Private Investment Corporation's Chief Information Officer implement multifactor authentication for network user accounts and document the results. If management determines that using such controls is not feasible, document that decision formally and implement mitigating controls.

Questioned Cost
0
Close Date
Mar 23, 2016
Recommendation
7

The Overseas Private Investment Corporation's Chief Information Officer document a risk assessment for OPIC Insight.

Questioned Cost
0
Close Date
Oct 13, 2015
Recommendation
8

The Overseas Private Investment Corporation's Chief Information Officer document a system security plan for OPIC Insight.

Questioned Cost
0
Close Date
Oct 05, 2015
Recommendation
9

The Overseas Private Investment Corporation's Chief Information Officer complete a security control assessment for OPIC Insight and document the results.

Questioned Cost
0
Close Date
Oct 13, 2015
Recommendation
10

The Overseas Private Investment Corporation's Chief Information Officer document OPIC Insight's authorization to operate based on security assessments and acknowledging any operating risks.

Questioned Cost
0
Close Date
Oct 13, 2015
Sep 15, 2015
Audit Report
8-OPC-15-002-P
Recommendation
4

The Overseas Private Investment Corporation require U.S. sponsors to be eligible (take ownership or risk) before it grants project clearance.

Questioned Cost
0
Funds for Better Use
0
Close Date
Mar 31, 2017
Recommendation
5

The Overseas Private Investment Corporation amend its policy to require policy clearance in advance of board approval.

Questioned Cost
0
Funds for Better Use
0
Close Date
Mar 31, 2017
Sep 11, 2015
Audit Report
A-IAF-15-008-P
Recommendation
1

Inter-American Foundation's Chief Information Officer either remediate vulnerabilities in the network identified by the Office of Inspector General's contractor, as appropriate, and document the results or document acceptance of the risks of those vulnerabilities.

Questioned Cost
0
Close Date
Feb 23, 2016
Recommendation
2

The Inter-American Foundation's Chief Information Officer implement a documented process to validate the completeness of the vulnerability scans to determine whether all applicable vulnerabilities are identified and either remediated or accepted in a timely manner.

Questioned Cost
0
Close Date
Feb 23, 2016
Recommendation
3

The Inter-American Foundation's Chief Information Officer document and implement procedures to review active network accounts that have not logged in over a specified period of time, as defined by the foundation, to determine whether accounts are necessary.

Questioned Cost
0
Close Date
Feb 23, 2016
Recommendation
4

The Inter-American Foundation's Chief Information Officer document and implement a process to review service and administrator accounts to determine whether passwords are changed within defined periods.

Questioned Cost
0
Close Date
Oct 16, 2015
Recommendation
5

The Inter-American Foundation's Chief Information Officer update and implement the Information System Security Program Standard Operating Procedures to reflect NIST Special Publication 800-53, Revision 4, Security and Privacy Controls for Federal Information Systems and Organizations.

Questioned Cost
0
Close Date
Mar 30, 2016
Recommendation
6

The Inter-American Foundation's Chief Information Officer implement a documented process to review and update the IAF Enterprise Network and Software Applications System Security Plan annually. At a minimum, this should include a determination whether the security requirements and controls for the system are documented adequately and reflect the current information system environment.

Questioned Cost
0
Close Date
Mar 30, 2016
Recommendation
7

The Inter-American Foundation's Chief Information Officer implement multi-factor authentication with one factor separate from the system gaining access for the foundation's use of Google Mail.

Questioned Cost
0
Close Date
Oct 16, 2015
Recommendation
8

The Inter-American Foundation's Chief Information Officer implement monitoring controls of humidity levels in the computer room and document the results.

Questioned Cost
0
Close Date
Feb 23, 2016
Recommendation
9

The Inter-American Foundation's Chief Information Officer update the privacy notice on the foundation's public Web site to include: The choices, if any, individuals may have regarding how the organization uses personally identifiable information (PII) and the consequences of exercising or not exercising those choices. The ability to access and have PII amended or corrected if necessary. PII the organization collects and the purpose(s) for which it collects that information; How the organization uses PII internally. Whether the organization shares PII with external entities, the categories of those entities, and the purposes for such sharing. Whether individuals have the ability to consent to specific uses or sharing of PII and how to exercise any such consent. How individuals may obtain access to PII and how the PII will be protected.

Questioned Cost
0
Close Date
Feb 23, 2016