Recommendation Dashboard

We recommend that USAID Office of Acquisition and Assistance, Cost, Audit and Support Division determine the allowability of $50,000 in questioned costs ($50,000 Ineligible) on page 35 of the audit report and recover any amount that is unallowable.

Verify that El Hawakeer corrects the 2 material weaknesses in internal control detailed on pages 15 and 16 of the audit report.

Verify that El Hawakeer corrects the 2 material instances of noncompliance detailed on pages 18 and 19 of the audit report.

Implement a process to automatically disable system user accounts after 90 days of inactivity or implement a daily review process to ensure that accounts are disabled after 90 days of inactivity.

Address the management of system components requiring repair or service in its Supply Chain Risk Management Standard Operating Procedures.

We recommend that MCC's Chief Information Officer develop and implement processes to document and implement lessons learned related to risk management, configuration management and identity and access management

We recommend that MCC's Chief Information Officer develop and document supply chain policies, procedures and strategies

We recommend that MCC's Chief Information Officer revise and implement MCC's Vulnerability Patch Compliance Policy to align with timeframes in the Department of Homeland's Fiscal Year 2021 Inspector General Federal Information Security Modernization Act of 2014 Reporting Metrics

We recommend that MCC's Chief Information Officer develop and implement a process to conduct an independent periodic review of MCC's privacy program.

We recommend that MCC's Chief Information Officer fully develop and implement a security awareness training strategy.

We recommend that MCC's Chief Information Officer document and implement a process to monitor and enforce MCC's procedures for security training

We recommend that MCC's Chief Information Officer document and implement a written process for obtaining and evaluating feedback on MCC's privacy and security training content, including role-based training

We recommend that USAID/Senegal determine the allowability of $278,007 in questioned costs ($33,636 ineligible, $244,371 unsupported) identified on pages 14, 15, 17, and 19 of the audit report and recover any amount that is unallowable.

We recommend that USAID/Senegal verify that Ministry of Health and Social Welfare Senegal corrects the three material weaknesses in internal control detailed on pages 35 to 37 of the audit report.

We recommend that USAID/Senegal verify that Ministry of Health and Social Welfare Senegal corrects the two instances of material noncompliance detailed on pages 41 to 48 of the audit report.

Develop and implement a process to include compensating controls to
mitigate risk when accepting the risk of known vulnerabilities.

Document and implement a process to verify that laptops are encrypted and remediate instances of nonencrypted laptops.

Document and implement a strategy, policy, and procedures to manage supply chain risks with suppliers, contractors, and systems.

Determine the allowability of $31,431 in ineligible questioned costs detailed on page 22 of the audit report and recover any amount that is unallowable.

Verify that Development Solution NGO corrects the instance of material noncompliance detailed on pages 22 through 23 of the audit report.

Verify that University of the Philippines Public Administration Research and Extension Services Foundation, Inc. corrects the instance of material noncompliance detailed on page 19 of the audit report.

We recommend that MCC Chief Risk Officer verify that Millennium Development Authority corrects the two instances of material noncompliance detailed on pages 42 through 43 of the audit report.

Coordinate with USAID/Nepal to determine the course of action to address the $25.4 million in ineligible questioned costs relating to cost-sharing contributions of the National Early Grade Reading Program.

Coordinate with the Bureau for Policy, Planning, and Learning to develop and issue additional guidance to missions in the region on how to monitor cost sharing to ensure compliance with Federal regulations and Agency directives.

Coordinate with all missions in the region to develop a plan to provide training to (i) mission staff on how to monitor cost sharing to ensure compliance with Federal regulations and Agency directives and (ii) external auditors on reviewing cost sharing in accordance with the relevant statements of work.