Reports

General Services Administration OIG

Audit of GSA’s Response to COVID-19: PBS Faces Challenges to Meet the Ventilation and Acceptable Indoor Air Quality Standard in GSA-Owned Buildings

Full Details: Oversight.gov Report Page

Audit | 6/05/2023

Federal Deposit Insurance Corporation OIG

FDIC Examinations of Government-Guaranteed Loans

Full Details: Oversight.gov Report Page

Inspection / Evaluation | 5/10/2023

1 - Open

Develop and implement guidance to examination staff on the credit, operational (including fraud), liquidity, and compliance risks related to Government-guaranteed loans to ensure staff adequately plans and conducts examinations to identify and address emerging risks.

10 - Open

Develop and implement a training plan to ensure examination staff are trained on the requirements and risks of Government-guaranteed loan programs.

11 - Closed

Update, develop, and distribute to FDIC examination personnel a list of FDIC examiners who have significant experience examining banks that specialize in Government-guaranteed loan programs to regional offices.

12 - Closed

Develop and implement a process to obtain improved data regarding Government-guaranteed lending activities of FDIC-supervised financial
institutions.

13 - Closed

Update the [redacted] MOU to include the sharing of loan portfolio information such as historical loan performance, status of guaranty, and loan-level risk characteristics.

14 - Closed

Establish arrangements with other Federal agencies that administer Government-guaranteed loan programs to facilitate information sharing and
proactive identification of risk.

15 - Closed

Develop and implement processes and procedures for the routine sharing, receipt, and storage of confidential information with Federal agencies that administer Government-guaranteed loan programs.

16 - Closed

Develop and implement guidance to provide instruction to FDIC bank examination staff requiring communication and information sharing with Federal agencies that administer Government-guaranteed loan programs to ensure FDIC staff and the Federal agencies are aware of any emerging risks.

17 - Closed

Determine whether other Federal agencies that administer Government-guaranteed loan programs have a list of FDIC-supervised banks with high risk factors associated with such programs and develop protocols to share information with relevant FDIC personnel, including examiners.

18 - Closed

Develop and implement guidance to ensure relevant risk information exchanged with Federal Government agencies that administer Government-guaranteed loan programs is shared internally within the FDIC on an ongoing basis with the appropriate FDIC employees.

19 - Closed

Develop and implement updated FDIC examination guidance to establish an appropriate timeframe for uploading complete supervisory business records to RADD.

2 - Open

Develop and implement guidance to examination staff to ensure the staff consistently evaluate Government-guaranteed loans in their review of loan classification, assessment of off-balance sheet risk, concentration risk, and ongoing monitoring.

3 - Closed

Update and implement the Examination Profile Script to include additional questions on financial institution participation in Government-guaranteed loan programs in order to identify and address emerging risk.

4 - Closed

Develop and implement additional items to the Safety and Soundness Request List to identify Government-guaranteed loans, the performance of those loans, and status of the guaranty.

5 - Closed

Issue and implement guidance to require that examination staff conduct a fraud risk assessment on future Government-guaranteed loan programs involving FDIC-insured and FDIC-supervised financial institutions to inform policy decisions.

6 - Closed

Ensure guidance on future Government-guaranteed loan programs includes all risks associated with such programs and has instructions to allow for consistency in supervisory activities.

7 - Closed

Issue and implement guidance for examiners clarifying the FDIC supervisory expectations for reviewing bank PPP activities, including the level of PPP loan volume triggering a heightened review, how examiners should assess the PPP activities of banks that have existing BSA/AML weaknesses, and protocols for examination staff to communicate observed weaknesses.

8 - Open

Revise and implement FDIC guidance and practices for assessing concentrations and loan classification to ensure uniform application with the other Federal bank regulators of supervisory approaches to banks

9 - Open

Coordinate with the other Federal bank regulators to ensure uniform application of supervisory approaches to banks regarding concentrations and loan classification.

Department of Justice OIG

Capstone Review of the Federal Bureau of Prisons' Response to the Coronavirus Disease 2019 Pandemic

Full Details: Oversight.gov Report Page

Review | 3/21/2023

Department of Education OIG

University of Cincinnati’s Use of Higher Education Emergency Relief Fund Student Aid and Institutional Grants

Our objective was to determine whether the University of Cincinnati (University) used the Student Aid (Assistance Listing Number (ALN) 84.425E) and Institutional (ALN 84.425F) portions of its Higher Education Emergency Relief Fund (HEERF) funds for allowable and intended purposes. The University spent $109.9 million (83 percent) of its total HEERF allocation of $132.8 million as of September 30, 2021. The University generally used the Student Aid ($42.1 million) and Institutional ($67.8 million) portions of its HEERF grant funds for allowable and intended purposes but needs to strengthen its...

Full Details: Oversight.gov Report Page

Audit | 1/17/2023

1.1 - Closed

Require the University of Cincinnati to develop and implement a review process to prevent or detect payment errors when awarding emergency financial aid grants to students, including written policies and procedures detailing how the reviews shall be conducted and the results documented, in accordance with 2 C.F.R. section 200.303.

1.2 - Open

Require the University of Cincinnati to develop and implement written policies, procedures, and management review to ensure that its award determinations, eligibility criteria, and management decisions related to eligibility for its emergency financial aid grants to students are adequately documented and supported at the time award decisions are made, in accordance with 2 C.F.R. section 200.302(b)(3).

1.3 - Open

Require the University of Cincinnati to carefully document how its student aid eligibility criteria prioritized and continues to prioritize students with exceptional need throughout the HEERF grant performance period.

2.1 - Open

Require the University of Cincinnati to develop and implement written policies and procedures, including procedures that would identify and prevent improper revenue recognition and duplicate charges, to ensure that future calculations for charging lost revenue to its HEERF Institutional grant are reviewed for accuracy and consistency with its financial reporting policies and procedures.

2.2 - Open

Determine whether the University of Cincinnati implemented appropriate corrective actions to resolve the $797,965 in unsupported lost revenue costs it charged to its HEERF Institutional grant; and, if the corrective actions are inappropriate, require the University to either return the funds to the Department or reallocate the funds for allowable expenditures.

2.3 - Open

Determine whether the $1,916,041 that the University of Cincinnati charged to its HEERF Institutional grant for noncompetitive procurements was reasonable when compared to the costs of suitable alternatives; and, if the charges were inappropriate, require the University to either return the funds to the Department or reallocate the funds for allowable expenditures.

2.4 - Open

Require the University of Cincinnati to develop and implement written policies and procedures to ensure that procurements charged to its HEERF Institutional grant are in accordance with applicable Federal requirements; and it consistently follows its procurement policies and procedures, including maintaining sufficient documentation to support its rationale for noncompetitive procurements and the basis for and reasonableness of the contract price.

3.1 - Open

Require the University of Cincinnati to incorporate in its policies and procedures and implement the cash management requirements for minimizing the time between drawing down and disbursing Federal grant funds, and remitting interest earned in excess of $500 in accordance with 2 C.F.R. section 200.305(b).

3.2 - Open

Require the University of Cincinnati to remit $35,439 based on the TIP’s average rate of return, less no more than $320 ($500 minus the $180 already retained) for administrative expenses if applicable; and remit the actual amount of earned interest on any future advances of Federal funds, in accordance with 2 C.F.R. section 200.305(b)(9).

4.1 - Open

Require the University of Cincinnati to develop and implement written policies and procedures that incorporate the HEERF program’s reporting requirements and ensure that the expenditures in its quarterly HEERF Institutional expenditure reports are accurate and reported in the appropriate expenditure category.

General Services Administration OIG

Ventilation Issues Persist in Unrenovated Wings of GSA Headquarters Building

Full Details: Oversight.gov Report Page

Inspection / Evaluation | 11/28/2022

General Services Administration OIG

COVID-19: PBS Faces Challenges in Its Efforts to Improve Air Filtration in GSA-Controlled Facilities

Full Details: Oversight.gov Report Page

Audit | 9/30/2022

Small Business Administration OIG

SBA's Guaranty Purchases for Paycheck Protection Program Loans

The Office of Inspector General (OIG) is issuing this management advisory to express concerns regarding the U.S. Small Business Administration’s (SBA) decision to end collections on purchased Paycheck Protection Program (PPP) loans with an outstanding balance of $100,000 or less. In anticipation of a significant number of delinquent PPP loans that lenders will submit for guaranty purchase, we began reviewing SBA’s process for approving PPP guaranty purchases. During our review, we identified concerns with SBA’s decision to end collections on these loans and found that expedited management...

Full Details: Oversight.gov Report Page

Review | 9/30/2022

Small Business Administration OIG

Follow-up Inspection of SBA’s Internal Controls to Prevent COVID-19 EIDLs to Ineligible Applicants

This report presents the results of our follow-up inspection to assess the effectiveness of the U.S. Small Business Administration’s (SBA) enhanced internal controls to prevent Coronavirus Disease 2019 (COVID-19) Economic Injury Disaster Loans (EIDL) to ineligible applicants. The Coronavirus Aid, Relief, and Economic Security (CARES) Act prohibited the agency from requiring tax return transcripts to prove eligibility. Congress eliminated this restriction 9 months later with the Consolidated Appropriations Act, 2021. We found SBA did not implement the tax transcript requirement in a timely...

Full Details: Oversight.gov Report Page

Inspection / Evaluation | 9/29/2022

U.S. Postal Service OIG

COVID-19 Test Kit Distribution

The Biden administration purchased rapid COVID-19 test kits to give to Americans free of charge for home use and partnered with the U.S. Postal Service to package and deliver the kits. Within a short period, the Postal Service established a test kit program, which facilitated ordering, fulfillment, and delivery of kits to 125 million residential addresses. The Postal Service designed and developed a website for customers to order test kits for delivery to their homes. Our objective was to assess the accounting treatment and selected technology support associated with the distribution of the...

Full Details: Oversight.gov Report Page

Audit | 9/28/2022

Small Business Administration OIG

COVID-19 and Disaster Assistance Information Systems Security Controls

This report presents the results of our audit to determine whether the U.S. Small Business Administration (SBA) maintained effective management control activities and monitoring of the design and implementation of third-party operated SBA systems. SBA needed information technology systems from third-party service providers that could improve the system efficiency and productivity to process high transaction volumes, transmit data between other information systems, and safeguard the integrity and confidentiality of the personally identifiable information processed by the programs. We found the...

Full Details: Oversight.gov Report Page

Audit | 9/27/2022

1 - Open

Ensure the existing SBA System Development Methodology is updated to include supply chain risk-management practices as required by OMB Circular A-130 and high-value asset system designation guidance. Also, ensure high-value asset system risks are incorporated into the enterprise risk management framework, as recommended by OMB M-19-03 and SBA SOP 90 47 6.

10 - Open

Implement an automated process to document and monitor system changes as recommended by NIST SP 800-53 Rev. 5.

2 - Open

Communicate and enforce the SBA System Development Methodology in which a traceability matrix is used to ensure that system requirements can be tested and demonstrated in the operational system. Ensure all requirements are aligned with the contractual acceptance criteria.

3 - Open

Implement in updated agency guidance, the requirements of OMB Circular No. A-123 that stipulate a SOC 1 Type 2 report is needed for all new and existing financial systems. This guidance should also require confirmation at least annually that the controls are functioning as designed.

4 - Closed

Enforce the requirement to establish and implement internal controls to ensure appropriate program officials perform and document contract reviews to ensure that information security is appropriately addressed in the contracting language, as required by OMB Circular A-130 and SBA SOP 90 47 6.

5 - Open

In conjunction with the Enterprise Risk Management Board, implement enterprise-wide privacy risk mitigation practices that can be assimilated into new and existing system program designs.

6 - Open

Complete an initial assessment and authorization for each information system and all agency-designated common controls before operation.

7 - Open

Transition information systems and common controls to an ongoing authorization process (when eligible for such a process) with the formal approval of the respective authorizing officials or reauthorize information systems and common controls as needed, on a time or event-driven basis in accordance with agency risk tolerance, as required by OMB Circular No. A-130 and SOP 90 47 6.

8 - Open

Review and update POA&Ms at least quarterly as required by SOP 90 47 6.

9 - Closed

Ensure data-sharing agreements are reviewed annually as required by SBA SOP 90 47 6.

Date Range

Report Type

Report Category

Submitting Agency

State/Local Agency

State (State and Local Reports)

Fraud Type

Agency Reviewed

Related Organizations

Management Challenges

Any Recommendations

Any Open Recommendations

Reports

Audit of GSA’s Response to COVID-19: PBS Faces Challenges to Meet the Ventilation and Acceptable Indoor Air Quality Standard in GSA-Owned Buildings

FDIC Examinations of Government-Guaranteed Loans

Capstone Review of the Federal Bureau of Prisons' Response to the Coronavirus Disease 2019 Pandemic

University of Cincinnati’s Use of Higher Education Emergency Relief Fund Student Aid and Institutional Grants

Ventilation Issues Persist in Unrenovated Wings of GSA Headquarters Building

COVID-19: PBS Faces Challenges in Its Efforts to Improve Air Filtration in GSA-Controlled Facilities

SBA's Guaranty Purchases for Paycheck Protection Program Loans

Follow-up Inspection of SBA’s Internal Controls to Prevent COVID-19 EIDLs to Ineligible Applicants

COVID-19 Test Kit Distribution

COVID-19 and Disaster Assistance Information Systems Security Controls

Glossary

Glossary name will go here