Recommendation Dashboard

Assess country-specific capacity needs for local partners and develop a plan to address critical capacity gaps to inform an updated analysis of risks and mission-level local partner funding goals for the U.S. President's Emergency Plan for AIDS Relief.

Develop and implement a plan to update mission-level local partner funding goals for future U.S. President's Emergency Plan for AIDS Relief funding at its critical missions considering the Agency's current progress, the COVID-19 operating environment, and the Office of the U.S. Global AIDS Coordinator and Health Diplomacy's intentions for the local partner initiative.

Implement a process to automatically disable system user accounts after 90 days of inactivity or implement a daily review process to ensure that accounts are disabled after 90 days of inactivity.

Address the management of system components requiring repair or service in its Supply Chain Risk Management Standard Operating Procedures.

We recommend that USAID Office of Acquisition and Assistance, Cost, Audit and Support Division determine the allowability of $50,000 in questioned costs ($50,000 Ineligible) on page 35 of the audit report and recover any amount that is unallowable.

Verify that El Hawakeer corrects the 2 material weaknesses in internal control detailed on pages 15 and 16 of the audit report.

Verify that El Hawakeer corrects the 2 material instances of noncompliance detailed on pages 18 and 19 of the audit report.

We recommend that MCC's Chief Information Officer develop and implement processes to document and implement lessons learned related to risk management, configuration management and identity and access management

We recommend that MCC's Chief Information Officer develop and document supply chain policies, procedures and strategies

We recommend that MCC's Chief Information Officer revise and implement MCC's Vulnerability Patch Compliance Policy to align with timeframes in the Department of Homeland's Fiscal Year 2021 Inspector General Federal Information Security Modernization Act of 2014 Reporting Metrics

We recommend that MCC's Chief Information Officer develop and implement a process to conduct an independent periodic review of MCC's privacy program.

We recommend that MCC's Chief Information Officer fully develop and implement a security awareness training strategy.

We recommend that MCC's Chief Information Officer document and implement a process to monitor and enforce MCC's procedures for security training

We recommend that MCC's Chief Information Officer document and implement a written process for obtaining and evaluating feedback on MCC's privacy and security training content, including role-based training

Develop and implement a process to include compensating controls to
mitigate risk when accepting the risk of known vulnerabilities.

Document and implement a process to verify that laptops are encrypted and remediate instances of nonencrypted laptops.

Document and implement a strategy, policy, and procedures to manage supply chain risks with suppliers, contractors, and systems.

We recommend that USAID/Senegal determine the allowability of $278,007 in questioned costs ($33,636 ineligible, $244,371 unsupported) identified on pages 14, 15, 17, and 19 of the audit report and recover any amount that is unallowable.

We recommend that USAID/Senegal verify that Ministry of Health and Social Welfare Senegal corrects the three material weaknesses in internal control detailed on pages 35 to 37 of the audit report.

We recommend that USAID/Senegal verify that Ministry of Health and Social Welfare Senegal corrects the two instances of material noncompliance detailed on pages 41 to 48 of the audit report.

Determine the allowability of $31,431 in ineligible questioned costs detailed on page 22 of the audit report and recover any amount that is unallowable.

Verify that Development Solution NGO corrects the instance of material noncompliance detailed on pages 22 through 23 of the audit report.

We recommend that MCC Chief Risk Officer verify that Millennium Development Authority corrects the two instances of material noncompliance detailed on pages 42 through 43 of the audit report.

Verify that University of the Philippines Public Administration Research and Extension Services Foundation, Inc. corrects the instance of material noncompliance detailed on page 19 of the audit report.