Recommendation Dashboard

We recommend that USAID/Management/Office of Acquisition and Assistance/Cost, Audit and Support Division determine the allowability of $29,508 of total direct costs ($3,532, ineligible and $25,976, unsupported) on pages 20 and 25 of the audit report and recover any amount that is unallowable.

We recommend that USAID/Management/Office of Acquisition and Assistance/Cost, Audit and Support Division verify that Integra Government Services International, LLC corrects the 10 instances of material noncompliance detailed on page 4 of the audit report.

We recommend that the USAID's Office of Acquisition and Assistance Cost, Audit and Support Division: determine the allowability of $314,149 ($28,930 ineligible, $285,219 unsupported) in direct questioned costs on pages 2 and 19 through 26 of the report and recover any amount that is unallowable.

We recommend that the USAID's Office of Acquisition and Assistance Cost, Audit and Support Division: verify that EnCompass, LLC corrects the eleven instances of material noncompliance detailed on pages 4 and 5 of the audit report.

We recommend that USAID's Office of Acquisition and Assistance Cost, Audit and Support Division verify that The Mentor Initiative corrects the material instance noncompliance detailed on page 23 of the audit report.

We recommend that USAID/Zimbabwe determine the allowability of $122,077 in ineligible questioned costs on pages 13 to 15 of the audit report and recover any amount that is unallowable.

We recommend that USAID/Zimbabwe verify that Organization for Public Health Interventions and Development corrects the one instance of material noncompliance detailed on page 28 of the audit report.

USAID's Chief Information Officer should implement a process to document and implement mitigating controls for vulnerabilities that cannot be remediated in accordance with the timeframes defined by Agency policy.

USAID's Chief Information Officer should collaborate with the Office of Human Capital and Talent Management to document and implement a process to verify that separated employees' accounts are disabled in a timely manner in accordance with Agency policy.

USAID's Chief Human Capital Officer should implement a process to maintain records electronically for onboarding and off boarding staff.

USAID's Chief Information Officer should implement a process to validate that all privileged personnel receive the required specialized training prior to gaining system access.

USAID's Chief Information Officer should update the mobile device policy to specify the time period users must apply security and operating system updates on Agency mobile devices, and implement a process to deny access to Agency enterprise services for mobile devices that have not been updated within the prescribed period.

USAID's Chief Information Officer should develop and implement a process to block unauthorized applications from installing on Agency mobile devices.

USAID's Chief Information Officer should enhance the Agency's tracking process to include early warning indicators when testing of information system contingency plans will not be completed in the timeframes defined by USAID policy, and take corrective action.

We recommend that USAID/Management/Office of Acquisition and Assistance/Cost, Audit, and Support Division determine the allowability of $48,378 in ineligible direct questioned costs on page 39 of the audit report and recover any amount that is unallowable.

We recommend that USAID/Bosnia and Herzegovina corrects the two instances of material noncompliance detailed on pages 25 and 26 of the audit report.

We recommend that USAID/Zambia determine the allowability of $43,012 in total questioned costs ($40,904 ineligible, $2,108 unsupported) on pages 24 and 27 of the audit report and recover any amount that is unallowable.

We recommend that USAID/Zambia verify that Development Aid From People to People corrects the four material weaknesses in internal control detailed on pages 39 to 42 and 44 to 45 of the audit report.

We recommend that USAID/Zambia verify that Development Aid From People to People corrects the three instances of material noncompliance detailed on pages 48 to 50 of the audit report.

We recommend that USAID/Zambia verify that Development Aid From People to People provides Society for Family Health with a copy of the finding raised in BDO's audit report for their review to (a) determine the allowability the ineligible questioned costs of $355 identified on page 43 and recover the amounts determined to be unallowable; and (b) take any appropriate action regarding the one material weakness related to the subaward identified on page 43.

USADF's Chief Information Security Officer document and implement scan configuration reviews to analyze, detect and remediate vulnerabilities.

USADF's Chief Information Security Officer document and implement a process to verify USADF's Authorizing Officials review the authorization packages from provider organizations as a fundamental basis for determining risk and issue the respective Authorizations to Use for USADF's external systems and/or services.

USADF's Chief Information Security Officer design and implement a process, such as a periodic reconciliation of access agreements on file with a listing of new hires, to validate that all new information system users complete USADF system access agreements.

USAID's Office of Acquisition and Assistance, Cost, Audit and Support Division verify that the Centre for International Studies and Cooperation corrects the three instances of material noncompliance detailed on pages III-1 and III-2 of the audit report.