Recommendation Dashboard

We recommend that USAID/Zimbabwe determine the allowability of $122,077 in ineligible questioned costs on pages 13 to 15 of the audit report and recover any amount that is unallowable.

We recommend that USAID/Zimbabwe verify that Organization for Public Health Interventions and Development corrects the one instance of material noncompliance detailed on page 28 of the audit report.

USAID's Chief Information Officer should implement a process to document and implement mitigating controls for vulnerabilities that cannot be remediated in accordance with the timeframes defined by Agency policy.

USAID's Chief Information Officer should collaborate with the Office of Human Capital and Talent Management to document and implement a process to verify that separated employees' accounts are disabled in a timely manner in accordance with Agency policy.

USAID's Chief Human Capital Officer should implement a process to maintain records electronically for onboarding and off boarding staff.

USAID's Chief Information Officer should implement a process to validate that all privileged personnel receive the required specialized training prior to gaining system access.

USAID's Chief Information Officer should update the mobile device policy to specify the time period users must apply security and operating system updates on Agency mobile devices, and implement a process to deny access to Agency enterprise services for mobile devices that have not been updated within the prescribed period.

USAID's Chief Information Officer should develop and implement a process to block unauthorized applications from installing on Agency mobile devices.

USAID's Chief Information Officer should enhance the Agency's tracking process to include early warning indicators when testing of information system contingency plans will not be completed in the timeframes defined by USAID policy, and take corrective action.

We recommend that USAID/Management/Office of Acquisition and Assistance/Cost, Audit, and Support Division determine the allowability of $48,378 in ineligible direct questioned costs on page 39 of the audit report and recover any amount that is unallowable.

We recommend that USAID/Bosnia and Herzegovina corrects the two instances of material noncompliance detailed on pages 25 and 26 of the audit report.

USADF's Chief Information Security Officer document and implement scan configuration reviews to analyze, detect and remediate vulnerabilities.

USADF's Chief Information Security Officer document and implement a process to verify USADF's Authorizing Officials review the authorization packages from provider organizations as a fundamental basis for determining risk and issue the respective Authorizations to Use for USADF's external systems and/or services.

USADF's Chief Information Security Officer design and implement a process, such as a periodic reconciliation of access agreements on file with a listing of new hires, to validate that all new information system users complete USADF system access agreements.

We recommend that USAID/Zambia determine the allowability of $43,012 in total questioned costs ($40,904 ineligible, $2,108 unsupported) on pages 24 and 27 of the audit report and recover any amount that is unallowable.

We recommend that USAID/Zambia verify that Development Aid From People to People corrects the four material weaknesses in internal control detailed on pages 39 to 42 and 44 to 45 of the audit report.

We recommend that USAID/Zambia verify that Development Aid From People to People corrects the three instances of material noncompliance detailed on pages 48 to 50 of the audit report.

We recommend that USAID/Zambia verify that Development Aid From People to People provides Society for Family Health with a copy of the finding raised in BDO's audit report for their review to (a) determine the allowability the ineligible questioned costs of $355 identified on page 43 and recover the amounts determined to be unallowable; and (b) take any appropriate action regarding the one material weakness related to the subaward identified on page 43.

USAID's Office of Acquisition and Assistance, Cost, Audit and Support Division verify that the Centre for International Studies and Cooperation corrects the three instances of material noncompliance detailed on pages III-1 and III-2 of the audit report.

USAID/West Bank and Gaza verify that Akko Center for Arts and Technology corrects the instance of material noncompliance detailed on page 15 of the audit report.

USAID/Management/Office of Acquisition and Assistance/Cost, Audit and Support Division determine the allowability of $1,002,792 in questioned direct costs ($109,921 ineligible, $892,871 unsupported) on pages 4, and 43 through 55 of the audit report and recover any amount that is unallowable.

USAID's Acting Deputy Administrator develop and codify implementation guidance that addresses gaps for developing and managing private sector engagement activities in a directory or other medium that captures all private sector engagement-related material and requirements.

USAID's Acting Deputy Administrator develop a workforce plan for dedicated private sector engagement staff with appropriate competencies across the Agency, including a team established in the Bureau for Development, Democracy, and Innovation, that has adequate resources, such as staffing and leadership, to support the Agency's implementation of the private sector engagement policy.

USAID's Acting Deputy Administrator incorporate into USAID's Automated Directives System guidance on the process and responsibilities for coordinating development activities with the U.S. International Development Finance Corporation.

USAID's Acting Deputy Administrator develop a plan on how to best capture and distribute the worldwide knowledge associated with private sector engagement approaches so missions and staff can better access and share information with each other to learn and adapt and achieve optimal development results associated with private sector engagement.

USAID's Acting Deputy Administrator implement a process and timeline for assessing the reliability and accuracy of private sector partnerships data from prior fiscal years. Elements to consider for the assessment could include: (1) the usefulness and reliability of data that is aggregated for private sector engagement results; (2) conducting a review of mission data submitted as appropriate; and (3) determining whether to communicate information externally, taking into consideration the completeness and accuracy of data.

USAID's Acting Deputy Administrator develop a plan for a whole-of-Agency process for collecting, analyzing, and disseminating private sector engagement data that results in the ability to actively manage private sector engagement and inform timely decision making. Elements to consider for this improved data collection process could include data and information related to: (1) programmatic private sector engagement efforts, (2) capacity of missions and staff to engage the private sector, and (3) private sector relationship management.

USAID's Acting Deputy Administrator clearly document in guidance to missions and bureaus an Agency approach to identifying and implementing consistent, useful metrics that further the Agency's goals for private sector engagement.