Reports

Department of Labor OIG

Tracking the Department of Labor's Unemployment Insurance Response to Local Communities During the Pandemic

Tennessee Valley Authority OIG

Remote Application and Desktop Virtualization Client

The Office of the Inspector General audited the Tennessee Valley Authority’s (TVA) use of remote application and desktop virtualization client due to the risks of (1) potential system intrusion through misconfigurations and (2) continued elevated remote users during the COVID-19 pandemic. We found the configuration management control for TVA’s remote application desktop virtualization client was ineffective. However, we determined compensating access controls were in place to mitigate the risk to an overall acceptable level.

Full Details: Oversight.gov Report Page

Department of Labor OIG

The U.S. Department of Labor Did Not Meet the Requirements for Compliance with the Payment Integrity Information Act for FY 2022

Full Details: Oversight.gov Report Page

Audit | 6/09/2023

Election Assistance Commission OIG

Audit of the Help America Vote Act Grants Awarded to the Commonwealth of the Northern Mariana Islands

EAC OIG audited funds received by the Commonwealth of the Northern Mariana Islands under the Help America Vote Act, totaling $1.2 million. This included Election Security and Coronavirus Aid, Relief, and Economic Security Act grants.

Full Details: Oversight.gov Report Page

Audit | 2/24/2023

Department of Labor OIG

FY 2022 Independent Auditors' on DOL's Consolidated Financial Statements Report

Full Details: Oversight.gov Report Page

Audit | 12/13/2022

Department of Labor OIG

COVID-19: OSHA's Enforcement Activities Did Not Sufficiently Protect Workers From Pandemic Health Hazards

Full Details: Oversight.gov Report Page

Audit | 10/31/2022

Election Assistance Commission OIG

Audit of the Help America Vote Act Grants Awarded to the State of California

EAC OIG, through the independent public accounting firm of McBride, Lock & Associates, LLC, audited funds received by the State of California under the Help America Vote Act, including state matching funds and interest earned, totaling $216.3 million. This included Election Security, reissued Section 101, reissued Section 251, and Coronavirus Aid, Relief, and Economic Security Act grants.

Full Details: Oversight.gov Report Page

Audit | 10/04/2022

1 - Closed

We recommend that the EAC require the Office perform a reconciliation of the grant activity for the Election Security, Section 251 reissued, Section 101 reissued, and CARES Act funds and ensure that all expenditures are fully disclosed, and file amended FFRs, as applicable. If the Office determines that it is unable to perform the reconciliation of the grant activity, obtain financial services to support the completion of the reconciliation.

2 - Closed

We recommend that the EAC require the Office implement procedures and training to properly fill out the required Federal Financial Reports, which reflect the uses of award funds and the interest and program income generated from those funds for all HAVA grants.

3 - Closed

We recommend that the EAC require the Office transfer into the election fund $51,012 and any related fringe benefits and indirect costs for the unsupported payroll costs cited above.

4 - Closed

We recommend that the EAC require the Office implement procedures or provide additional training to ensure that payroll costs are adequately supported with appropriate signature approvals, pay rates, and timesheets when being allocated to the HAVA grants.

5 - Closed

We recommend that the EAC require the Office perform detailed testing on the $180,350 of additional wages selected for substantive testing to determine what amount, if any, remains unsupported.

6 - Closed

We recommend that the EAC work with the Office to resolve the one remaining unsupported County reimbursement.

7 - Closed

We recommend that the EAC require the Office to transfer into the election fund any amount which remains unsupported.

8 - Closed

We recommend that the EAC require the Office to develop and implement policies and procedures and provide training to ensure adequate documentation is maintained to support the allowability of expenditures charged to the HAVA grant.

Department of Labor OIG

COVID-19: ETA and States Did Not Protect Pandemic-Related UI Funds from Improper Payments Including Fraud or from Payment Delays

Full Details: Oversight.gov Report Page

Audit | 9/30/2022

Small Business Administration OIG

COVID-19 and Disaster Assistance Information Systems Security Controls

This report presents the results of our audit to determine whether the U.S. Small Business Administration (SBA) maintained effective management control activities and monitoring of the design and implementation of third-party operated SBA systems. SBA needed information technology systems from third-party service providers that could improve the system efficiency and productivity to process high transaction volumes, transmit data between other information systems, and safeguard the integrity and confidentiality of the personally identifiable information processed by the programs. We found the...

Full Details: Oversight.gov Report Page

Audit | 9/27/2022

1 - Open

Ensure the existing SBA System Development Methodology is updated to include supply chain risk-management practices as required by OMB Circular A-130 and high-value asset system designation guidance. Also, ensure high-value asset system risks are incorporated into the enterprise risk management framework, as recommended by OMB M-19-03 and SBA SOP 90 47 6.

10 - Open

Implement an automated process to document and monitor system changes as recommended by NIST SP 800-53 Rev. 5.

2 - Open

Communicate and enforce the SBA System Development Methodology in which a traceability matrix is used to ensure that system requirements can be tested and demonstrated in the operational system. Ensure all requirements are aligned with the contractual acceptance criteria.

3 - Open

Implement in updated agency guidance, the requirements of OMB Circular No. A-123 that stipulate a SOC 1 Type 2 report is needed for all new and existing financial systems. This guidance should also require confirmation at least annually that the controls are functioning as designed.

4 - Closed

Enforce the requirement to establish and implement internal controls to ensure appropriate program officials perform and document contract reviews to ensure that information security is appropriately addressed in the contracting language, as required by OMB Circular A-130 and SBA SOP 90 47 6.

5 - Open

In conjunction with the Enterprise Risk Management Board, implement enterprise-wide privacy risk mitigation practices that can be assimilated into new and existing system program designs.

6 - Open

Complete an initial assessment and authorization for each information system and all agency-designated common controls before operation.

7 - Open

Transition information systems and common controls to an ongoing authorization process (when eligible for such a process) with the formal approval of the respective authorizing officials or reauthorize information systems and common controls as needed, on a time or event-driven basis in accordance with agency risk tolerance, as required by OMB Circular No. A-130 and SOP 90 47 6.

8 - Open

Review and update POA&Ms at least quarterly as required by SOP 90 47 6.

9 - Closed

Ensure data-sharing agreements are reviewed annually as required by SBA SOP 90 47 6.

Election Assistance Commission OIG

Audit of the Help America Vote Act Grants Awarded to the Commonwealth of Pennsylvania

EAC OIG, through the independent public accounting firm of McBride, Lock & Associates, LLC, audited funds received by the Commonwealth of Pennsylvania under the Help America Vote Act, including state matching funds and interest earned, totaling $53.4 million. This included Election Security, reissued Section 251, and Coronavirus Aid, Relief, and Economic Security Act grants.

Full Details: Oversight.gov Report Page

Audit | 9/22/2022

Date Range

Report Type

Report Category

Submitting Agency

State/Local Agency

State (State and Local Reports)

Fraud Type

Agency Reviewed

Related Organizations

Management Challenges

Any Recommendations

Any Open Recommendations

Reports

Tracking the Department of Labor's Unemployment Insurance Response to Local Communities During the Pandemic

Remote Application and Desktop Virtualization Client

The U.S. Department of Labor Did Not Meet the Requirements for Compliance with the Payment Integrity Information Act for FY 2022

Audit of the Help America Vote Act Grants Awarded to the Commonwealth of the Northern Mariana Islands

FY 2022 Independent Auditors' on DOL's Consolidated Financial Statements Report

COVID-19: OSHA's Enforcement Activities Did Not Sufficiently Protect Workers From Pandemic Health Hazards

Audit of the Help America Vote Act Grants Awarded to the State of California

COVID-19: ETA and States Did Not Protect Pandemic-Related UI Funds from Improper Payments Including Fraud or from Payment Delays

COVID-19 and Disaster Assistance Information Systems Security Controls

Audit of the Help America Vote Act Grants Awarded to the Commonwealth of Pennsylvania

Glossary

Glossary name will go here