Reports

Small Business Administration OIG

COVID-19 and Disaster Assistance Information Systems Security Controls

This report presents the results of our audit to determine whether the U.S. Small Business Administration (SBA) maintained effective management control activities and monitoring of the design and implementation of third-party operated SBA systems. SBA needed information technology systems from third-party service providers that could improve the system efficiency and productivity to process high transaction volumes, transmit data between other information systems, and safeguard the integrity and confidentiality of the personally identifiable information processed by the programs. We found the...

Full Details: Oversight.gov Report Page

Audit | 9/27/2022

1 - Open

Ensure the existing SBA System Development Methodology is updated to include supply chain risk-management practices as required by OMB Circular A-130 and high-value asset system designation guidance. Also, ensure high-value asset system risks are incorporated into the enterprise risk management framework, as recommended by OMB M-19-03 and SBA SOP 90 47 6.

10 - Open

Implement an automated process to document and monitor system changes as recommended by NIST SP 800-53 Rev. 5.

2 - Open

Communicate and enforce the SBA System Development Methodology in which a traceability matrix is used to ensure that system requirements can be tested and demonstrated in the operational system. Ensure all requirements are aligned with the contractual acceptance criteria.

3 - Open

Implement in updated agency guidance, the requirements of OMB Circular No. A-123 that stipulate a SOC 1 Type 2 report is needed for all new and existing financial systems. This guidance should also require confirmation at least annually that the controls are functioning as designed.

4 - Closed

Enforce the requirement to establish and implement internal controls to ensure appropriate program officials perform and document contract reviews to ensure that information security is appropriately addressed in the contracting language, as required by OMB Circular A-130 and SBA SOP 90 47 6.

5 - Open

In conjunction with the Enterprise Risk Management Board, implement enterprise-wide privacy risk mitigation practices that can be assimilated into new and existing system program designs.

6 - Open

Complete an initial assessment and authorization for each information system and all agency-designated common controls before operation.

7 - Open

Transition information systems and common controls to an ongoing authorization process (when eligible for such a process) with the formal approval of the respective authorizing officials or reauthorize information systems and common controls as needed, on a time or event-driven basis in accordance with agency risk tolerance, as required by OMB Circular No. A-130 and SOP 90 47 6.

8 - Open

Review and update POA&Ms at least quarterly as required by SOP 90 47 6.

9 - Closed

Ensure data-sharing agreements are reviewed annually as required by SBA SOP 90 47 6.

Department of Education OIG

The Department’s Use of Pandemic Assistance Program Administration Funds

We found that the Department has allocated nearly 100 percent of its pandemic assistance program administration funds and that the Department is on track to obligate all of its program administration funds prior to the dates the funds are set to expire. The Department allocated the funds to 11 principal offices and as of February 1, 2022, these principal offices have obligated or committed approximately $19.4 million (51 percent) of the $38 million in total pandemic assistance program administration funds.

Full Details: Oversight.gov Report Page

Department of Education OIG

Allocation of ESSER I Funds at Selected Local Educational Agencies

The objective of our review is to describe how selected local educational agencies (LEA) allocated Elementary and Secondary School Emergency Relief (ESSER) funds provided under the Coronavirus Aid, Relief, and Economic Security Act (CARES Act). As of March 2022, the 46 LEAs spent over $19.2 million, or about 95 percent, of the $20.2 million in ESSER I funds that they were awarded. The majority of these ESSER I funds were spent on district-wide programs, and about 26 percent of ESSER I funds were allocated to specific schools, with the majority of that portion allocated to Title I schools over...

Full Details: Oversight.gov Report Page

Small Business Administration OIG

Paycheck Protection Program Eligibility for Nonprofit Organizations

The U.S. Small Business Administration (SBA) Office of Inspector General (OIG) conducted this review to assess Paycheck Protection Program (PPP) eligibility for nonprofit organizations. Based on data analysis, we identified 179 PPP loans, totaling approximately $684 million, made to potentially ineligible nonprofits that may have exceeded SBA’s requirements for business size, known as size standards, at the time of application. We also reviewed PPP loans for three large nonprofits, including Planned Parenthood of Illinois that received over $3.8 million, Goodwill of Southwestern Pennsylvania...

Full Details: Oversight.gov Report Page

Inspection / Evaluation | 9/26/2022

Department of Labor OIG

COVID 19 – UI Claims With Deceased Persons' Social Security Numbers

In September 2022, the Office of Inspector General (OIG) alerted U.S. Department of Labor to over $45 billion in potential fraud paid in four high-risk areas. One high-risk area was Unemployment Insurance (UI) claimants filing with Social Security numbers (SSN) of deceased persons. Through Employment and Training Administration (ETA), the OIG provided states with underlying methodology as well as specific claimant information for follow-up action. This audit will examine the extent to which ETA and states have taken action to follow up on potentially fraudulent CARES Act UI claims filed with SSNs of deceased persons identified and referred by the OIG.

Election Assistance Commission OIG

Audit of the Help America Vote Act Grants Awarded to the Commonwealth of Pennsylvania

EAC OIG, through the independent public accounting firm of McBride, Lock & Associates, LLC, audited funds received by the Commonwealth of Pennsylvania under the Help America Vote Act, including state matching funds and interest earned, totaling $53.4 million. This included Election Security, reissued Section 251, and Coronavirus Aid, Relief, and Economic Security Act grants.

Full Details: Oversight.gov Report Page

Audit | 9/22/2022

Election Assistance Commission OIG

Audit of the Help America Vote Act Grants Awarded to the State of Delaware

EAC OIG, through the independent public accounting firm of McBride, Lock & Associates, LLC, audited funds received by the State of Delaware under the Help America Vote Act, including state matching funds and interest earned, totaling $20 million. This included Election Security and Coronavirus Aid, Relief, and Economic Security Act grants.

Full Details: Oversight.gov Report Page

Audit | 9/21/2022

1 - Closed

We recommend that the EAC require the Office to transfer to the election fund $629,248 for the unsupported costs cited above.

2 - Closed

We recommend that the EAC require the Office to implement policies and procedures or training to ensure adequate documentation is maintained to support the allowability of expenditures charged to the HAVA grant, including maintaining copies of invoices paid, contracts from which purchases were made and purchase orders for purchases exceeding $10,000.

3 - Closed

We recommend the EAC require the Office to provide the inventory listing maintained by the IT Department and each County.

4 - Closed

We recommend the EAC require the Office to implement policies and procedures or training to ensure that assets are managed in accordance Uniform Guidance and the State of Delaware’s policy.

5 - Closed

We recommend the EAC require the Office to ensure that documented policies and procedures related to internal controls and asset management are established and implemented in accordance with the State of Delaware’s policy. Implementation should include policies to review and update the procedures on a regular basis.

6 - Closed

We recommend that the EAC require the Office to provide transaction detail of interest income earned for the Election Security and CARES Act grants.

7 - Closed

We recommend that the EAC require the Office to complete and file FFRs for the Section 251 funds or if the Office is unable to complete the Section 251 FFR, obtain financial services to support the completion of the filings.

8 - Closed

We recommend that the EAC require the Office to implement procedures and training to properly fill out the required FFRs, which reflect the uses of award funds and the interest income generated from those funds for all HAVA grants.

Department of Labor OIG

Alert Memorandum: Potentially Fraudulent Unemployment Insurance Payments in High-Risk Areas Increased to $45.6 Billion

Full Details: Oversight.gov Report Page

Other | 9/21/2022

Department of Labor OIG

COVID-19 – UI Claims with Federal Prisoners' Social Security Numbers

In September 2022, the Office of Inspector General (OIG) alerted U.S. Department of Labor to over $45 billion in potential fraud paid in four high-risk areas. One high-risk area was UI claimants filing with Social Security numbers (SSNs) of federal prisoners. Through Employment and Training Administration (ETA), the OIG provided states with underlying methodology as well as specific claimant information for follow-up action. This audit will examine the extent to which ETA and states have taken action to follow up on potentially fraudulent CARES Act Unemployment Insurance (UI)claims filed with SSNs of federal prisoners identified and referred by the OIG.

Department of Labor OIG

COVID-19 – Multi-State UI Claimants

In September 2022, the Office of Inspector General (OIG) alerted the U.S. Department of Labor to over $45 billion in potential fraud paid in four high-risk areas. Multistate claimants were the largest high-risk area. Through Employment and Training Administration (ETA) the OIG provided states with underlying methodology as well as specific claimant information for follow-up action. This audit will examine the extent to which ETA and states have taken action to follow up on potentially fraudulent CARES Act Unemployment Insurance (UI) claims identified and referred by the OIG.

Date Range

Report Type

Report Category

Submitting Agency

State/Local Agency

State (State and Local Reports)

Fraud Type

Agency Reviewed

Related Organizations

Management Challenges

Any Recommendations

Any Open Recommendations

Reports

COVID-19 and Disaster Assistance Information Systems Security Controls

The Department’s Use of Pandemic Assistance Program Administration Funds

Allocation of ESSER I Funds at Selected Local Educational Agencies

Paycheck Protection Program Eligibility for Nonprofit Organizations

COVID 19 – UI Claims With Deceased Persons' Social Security Numbers

Audit of the Help America Vote Act Grants Awarded to the Commonwealth of Pennsylvania

Audit of the Help America Vote Act Grants Awarded to the State of Delaware

Alert Memorandum: Potentially Fraudulent Unemployment Insurance Payments in High-Risk Areas Increased to $45.6 Billion

COVID-19 – UI Claims with Federal Prisoners' Social Security Numbers

COVID-19 – Multi-State UI Claimants

Glossary

Glossary name will go here