Corrective Action Plans

Browse how organizations respond to audit findings

Total CAPs
55,681
In database
Filtered Results
11,904
Matching current filters
Showing Page
23 of 477
25 per page

Filters

Clear
The Bureau of Financial Operations (BFO) will continue conducting during-the-award subrecipient monitoring for the SSBG based on the results of the documented risk assessment. As it relates to the cash management portion of the finding, given the relatively small amount of funds involved and the num...
The Bureau of Financial Operations (BFO) will continue conducting during-the-award subrecipient monitoring for the SSBG based on the results of the documented risk assessment. As it relates to the cash management portion of the finding, given the relatively small amount of funds involved and the number of counties affected, DHS has determined that it is not economically feasible to change the payment methodology at this time. Anticipated Completion Date: 06/30/2026 Contact Name: Kelly Graham, Director, Division of Financial Reporting
TANF Youth Development Program (TANF YDP) operations transitioned from the Bureau of Workforce Development Administration (BWDA) to the Bureau of Workforce Partnerships and Operations (BWPO) in January 2023. Due to this transition, BWPO did not conduct onsite monitoring of the TANF YDP program in pr...
TANF Youth Development Program (TANF YDP) operations transitioned from the Bureau of Workforce Development Administration (BWDA) to the Bureau of Workforce Partnerships and Operations (BWPO) in January 2023. Due to this transition, BWPO did not conduct onsite monitoring of the TANF YDP program in program year (PY) 2022. BWPO did begin onsite monitoring in program year 2023 on a limited basis as a pilot with 3 local areas in September of 2024. BWPO conducted expanded monitoring efforts for PY 2024 by aligning TANF YDP monitoring with the WIOA Common Measures Data Validation cycle (larger areas are monitored annually with smaller areas monitored on a 3-year rotating schedule). PYs are July 1st to June 30th. TANF YDP PY 2024 monitoring concluded by January 2026. BWPO provided written communication to local areas within 45 days post monitoring to issue results, concerns, recommendations, and corrective actions as needed. During PY 2025, July 1, 2025 to June 30, 2026, L&I will monitor all 22 subrecipients for both program and fiscal compliance to ensure that the goals and objectives of the subaward are achieved. This will be done in coordination between BWPO and BWDA. Monitoring will then be completed annually. Currently, BWDA does reconcile the TANF Youth Development Partnership Statement of Expenditures of Financial Awards for each of the subrecipients’ single audits, reviews all TANF findings related to the TANF YDP funds and ensures all single audits are received - issuing audit management determinations. The overall goal of monitoring activities is to ensure that TANF YDF funding is used for authorized purposes by subrecipients, in compliance with Federal statutes and regulations, and that the TANF YDP program is being implemented in accordance with current PA Dept. of Labor & Industry’s policies and procedures. BWPO in collaboration with BWDA plans to begin monitoring TANF YDP activities via enhanced desk review monitoring in the spring of 2026 for PY 2025. This effort will be ongoing and moving forward for every subsequent program year either onsite or by enhanced desk review monitoring. PY 2025 monitoring will be completed by 6/30/26 with results issued as a written communication within 45 days of the monitoring completion date. Anticipated Completion Date: 06/30/2026 Contact Name: Dorraine Rauch, Division Chief
DHS’ Office of Income Maintenance (OIM) Bureau of Operations (BOO): BOO will take the following actions to address the finding: The BOO will work with the EBT Project Office to create a dedicated section in the OIM EBT Procedure Manual to document the exceptions identified during the single audit ea...
DHS’ Office of Income Maintenance (OIM) Bureau of Operations (BOO): BOO will take the following actions to address the finding: The BOO will work with the EBT Project Office to create a dedicated section in the OIM EBT Procedure Manual to document the exceptions identified during the single audit each year. This addition will ensure that all offices are informed of the issues, can review their processes and procedures, and can make any necessary corrections. It will be added by April 1, 2026. The below items will be included: Knowing how to reconcile: • The Roles/Permissions Report from the EBT Card Tracking Database. • The Daily Log Summary and Weekly log report in the EBT Card Tracking Database. Reminders of the following concerns: • EBT card creation should end, and all cards should be logged in the EBT Card Tracking Database, by the close of business each day. No cards should be created after 5 PM. • When to use EBT Card Tracking Paper Logs, and how long to maintain them. • Ensuring that, upon receipt of each shipment of EBT cards and related supplies, the shipping manifest date is stamped. • Mailing locally created EBT cards directly to customers on the same day that the card is created. • Timeframes for completing and submitting the EPPIC EBT Systems Application forms to the OIM EBT Project Office. • Timeframe to deactivate user access in the EBT Card Tracking Database. • Timeframe for when to enter a shipment received into the EBT Card Tracking Database. The BOO, in conjunction with the EBT Project Office, distributes attestation forms to staff each year, typically during the first quarter. Employees are required to sign and return these forms to confirm that they have reviewed the procedure manual. The form for this cycle was sent out in February 2026. Anticipated Completion Date: 04/01/2026 Contact Name: Jeanette Coulston, Staff Assistant to BOO Director OIM Bureau of Program Evaluation (BPE) Division of Corrective Action (DCA): BPE will take the following actions to address the finding: The DCA conducts EBT Card Security reviews at every CAO and District Office that issues EBT cards. These reviews are conducted on a 3-year rotation to ensure compliance with documented policies and procedures. Annually, BPE/DCA EBT Headquarters staff provide training to DCA Income Maintenance Examiners in both field offices, to ensure awareness of any policy or procedure changes, prior to the start of EBT reviews. This training occurred on October 2, 2025. The current rotation schedule spans FFY 2025 through FFY 2027. Anticipated Completion Date: 04/01/2026 Contact Names: Amira Milikin, DCA Director; Bryan Bumpers, EBT Project Officer
PDA: PDA is creating mechanisms to fulfill the requirements for pass-through entities within 4 to 6 months after FAC acceptance date of the audit, which include: 1. Evaluation of single audit report submissions received from BAFM to determine program purpose acceptability by verifying, at a minimum,...
PDA: PDA is creating mechanisms to fulfill the requirements for pass-through entities within 4 to 6 months after FAC acceptance date of the audit, which include: 1. Evaluation of single audit report submissions received from BAFM to determine program purpose acceptability by verifying, at a minimum, that all agency-funded programs are properly included on the applicable financial schedules; that findings affecting the agency contain sufficient information to facilitate a management decision; and that the subrecipient has submitted an adequate corrective action plan. 2. Issuance of management decisions relative to audit findings and crosscutting findings assigned to the agency for resolution, as required by 2 CFR §200.521. 3. To impose or coordinate the imposition of remedial action in accordance with 2 CFR Part 200.339 and Management Directive 325.08 Amended, Remedies for Recipient Noncompliance with Audit Requirements, when subrecipients fail to comply with the provisions of Subpart F. PDA has developed a SEFA reconciliation process that will ensure that the SEFA is accurate, allowing for major programs to be properly identified and subjected to audit. PDA is developing a procedure for all programs to follow for any entity that is in non-compliance with the audit requirements and is failing to comply with the provisions of Subpart F. Anticipated Completion Date: 06/30/2026 Contact Name: Nichole Nedinsky, Fiscal Management Specialist, PDA Audit Coordinator PDOA: 1. Strengthen written policies and procedures governing subrecipient monitoring and audit resolution. 2. Update the audit tracker to proactively ensure the six-month management decision due date is met. 3. Implement segregation of duties between reconciliation review and management decision issuance. 4. PDOA will develop and utilize a standardized SEFA Review Checklist. 5. Conduct annual Uniform Guidance training for fiscal staff. Anticipated Completion Date: 06/30/2026 Contact Names: Jason Kavulich, Secretary of Aging; Jennifer Beck, Fiscal Management Specialist & PDOA Audit Liaison PDE: Implemented 2/17/26: Audit Coordinator verifies finding status of all single audit packages uploaded to the PDE single audit SharePoint site. Implemented 7/1/25: PDE audit section has begun to enforce timely audit submission by using remedial action within its authority as granted by federal guidelines. Implemented 7/1/25: PDE has expanded the resources available through the use of the compliance office for audit finding review and resolution in an effort to resolve all audit findings timely. Anticipated Completion Date: Completed Contact Name: Clayton P. Carroll, II, Audit Coordinator PENNVEST: PENNVEST will maintain a comprehensive tracking list that contains all equivalency projects that have disbursed any funds during the audit period. All those projects will be reviewed and reconciled to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward, including the timely submission of the single audit to the FAC. Once received, PENNVEST will reconcile the SEFA to ensure the information is accurate. PENNVEST will complete the reconciliation within six months of the FAC’s acceptance of the audit report and respond to the subrecipient with any adverse findings. Anticipated Completion Date: Completed Contact Names: Steven Anspach, Dep. Exec. Dir.; Heather Brookmyer, Loan Service Officer; Robert Boos, Exec. Dir.
PDA: The Pennsylvania Department of Agriculture (PDA) Bureau of Food Assistance has already put the following steps in place to address this deficiency and noncompliance finding. 1. As of August 2025, PDA has a documented process to evaluate each subrecipient’s risk of noncompliance with federal sta...
PDA: The Pennsylvania Department of Agriculture (PDA) Bureau of Food Assistance has already put the following steps in place to address this deficiency and noncompliance finding. 1. As of August 2025, PDA has a documented process to evaluate each subrecipient’s risk of noncompliance with federal statutes, regulations, and the term and conditions of the subaward for purposes of determining appropriate subrecipient monitoring. The evaluation process looks at Key Performance Indicators – such as leadership tenure, prior incidents of food spoilage, complaints, values of USDA Foods and USDA administrative funding – to determine the need for additional or more frequent monitoring. 2. As of October 2025, PDA has implemented a system to document the evaluation of each subrecipient’s risk of noncompliance. This system was used to determine if agencies would receive monitoring reviews throughout Federal Fiscal Year 2026 (October 1, 2025 - September 30, 2026). 3. PDA has been providing FAINs and providing information on applicable requirements at the time of subawards to all TEFAP counties and agencies. However, as the cited CSFP contract pre-dated this finding, the information had not been properly provided to our subrecipient. This has been rectified as of February 2026. Anticipated Completion Date: Completed Contact Name: Caryn Long Earl, Director, Bureau of Food Assistance PDOA: 1. Revise the risk-based subrecipient monitoring procedures. 2. Establish a formal risk-tiered monitoring framework requiring enhanced oversight for high-risk subrecipients. 3. Update written policies and procedures to meet standards. 4. Conduct annual internal compliance review of a sample of subawards. Anticipated Completion Date: 06/30/2026 Contact Names: Jason Kavulich, Secretary of Aging; Jennifer Beck, Fiscal Management Specialist & PDOA Audit Liaison
1. Revise the written, risk-based subrecipient monitoring procedures in accordance with 2 CFR §200.332. 2. Conduct an annual risk assessment of all 52 AAAs and assign risk ratings. 3. Implement an annual monitoring schedule ensuring coverage of active grant years (FY2024 and forward). 4. Complete ca...
1. Revise the written, risk-based subrecipient monitoring procedures in accordance with 2 CFR §200.332. 2. Conduct an annual risk assessment of all 52 AAAs and assign risk ratings. 3. Implement an annual monitoring schedule ensuring coverage of active grant years (FY2024 and forward). 4. Complete catch-up monitoring of all subrecipients not reviewed for FY2024 and FY2025 within 12 months. 5. Revise monitoring checklists to require review of current-year expenditures to verify compliance. 6. Improve centralized tracking system for monitoring activities and audit reviews. 7. Confirm supervisory approval following completion of monitoring reports. 8. Provide mandatory staff training on 45 CFR §1321.9 and 2 CFR Part 200 requirements. 9. Develop quarterly compliance reporting to leadership to ensure ongoing oversight. Anticipated Completion Date: 06/30/2026 Contact Names: Jason Kavulich, Secretary of Aging ; Jennifer Beck, Fiscal Management Specialist & PDOA Audit Liaison
The MatrixCare SOC2 report for 2025 was received on Friday February 6, 2026 and was reviewed by the Agency’s Information Technology (IT) Executive. The Agency’s Information Technology Executive/designee will educate the Information Technology Project Manager to request from Matrixcare on an annual b...
The MatrixCare SOC2 report for 2025 was received on Friday February 6, 2026 and was reviewed by the Agency’s Information Technology (IT) Executive. The Agency’s Information Technology Executive/designee will educate the Information Technology Project Manager to request from Matrixcare on an annual basis the SOC2 report and will review compliance criteria such as data security and confidentiality. An Agency Information Technology Resource Account will be developed for the SOC2 report/s to be sent to for review. Future contracts will request the vendor to automatically send SOC2 reports to the established IT Resource Account. Matrixcare security templates for Healthcare Record access have been updated by the Change Management Committee and activated by the Nurse Administrator-Technical for all users to ensure appropriate access. The Agency’s Human Resources Field Operations Manager/designee will educate the State Veterans Home (SVH) Human Resources Assistants of their responsibilities for on-boarding and off-boarding documentation for employee hires, classification changes and separations and of the DMVA’s Onboarding and Offboarding User Guides. The SVH Human Resource Analyst/designee will provide to the SVH Privacy Officer/designee all employee actions monthly to review for appropriate Healthcare Record access, the Bureau of Veterans Homes (BVH) Healthcare Record Management protocol will be updated to reflect this audit. The Agency’s Privacy Officer/designee will review 25% of all employee actions annually during each State Veterans’ Homes’ Facility Performance Assessment (FPA) to verify appropriate Healthcare Record access, the BVH FPA Protocol will be updated to reflect this audit. Anticipated Completion Date: 04/15/2026 Contact Name: Barbara L. Raymond, Director, Bureau of Veterans Homes
The Pennsylvania Department of Agriculture, Bureau of Food Assistance is in the process of developing a procedure to ensure that a report of review findings is submitted to each eligible agency after their review. This procedure will also ensure that, if the review resulted in findings that require ...
The Pennsylvania Department of Agriculture, Bureau of Food Assistance is in the process of developing a procedure to ensure that a report of review findings is submitted to each eligible agency after their review. This procedure will also ensure that, if the review resulted in findings that require implementation of corrective actions, additional monitoring is conducted until the eligible agency has successfully taken actions to mitigate the deficiencies. Anticipated Completion Date: 09/30/2026 Contact Name: Caryn Long Earl, Director, Bureau of Food Assistance
Finding 1181238 (2025-001)
Material Weakness 2025
Finding 2025-001 N. Special Tests and Provisions – N6. NSLDS Reporting Identification of the federal program: Federal Grantor: United States Department of Education Federal Cluster: Student Financial Assistance (SFA) Cluster Assistance Listing Nos.: 84.063, Federal Pell Grant Program, and 84.268, Fe...
Finding 2025-001 N. Special Tests and Provisions – N6. NSLDS Reporting Identification of the federal program: Federal Grantor: United States Department of Education Federal Cluster: Student Financial Assistance (SFA) Cluster Assistance Listing Nos.: 84.063, Federal Pell Grant Program, and 84.268, Federal Direct Student Loans Award Period of Performance: July 1, 2024–June 30, 2025 Condition: Internal controls over the review and approval of the enrollment report sent to the third-party servicer, National Student Clearinghouse (NSC), were not adequately designed or operating effectively as follows: • A record count reconciliation between the enrollment report submitted to the NSC and the number of files received by the NSC, and documentation over how any rejected records were addressed, is not performed as part of the internal control. • Details of the validation of student information included in the enrollment report for accuracy prior to being sent to the NSC were not retained by Mercy Health. • Details of the NSC error report and corrections made were not retained by Mercy Health. Views of Responsible Officials and Planned Corrective Actions: 1. Corrective Action: Record Count Reconciliation & Rejected Records • Implement a mandatory, documented reconciliation process for every submission. 2. Corrective Action: Pre-Submission Validation Documentation • Formalize the validation process and retain evidence of accuracy checks. 3. Corrective Action: Retention of NSC Error Reports & Corrections • Establish a procedure for downloading and retaining error reports. By implementing these actions, Southeast Missouri Hospital College of Nursing & Health Sciences will ensure compliance with federal regulations regarding the accuracy and timeliness of student enrollment reporting to the NSC and NSLDS. Responsible Party: Steve Ritter, Registrar and/or Deanna Sells, Business Officer Date of Completion: Phased implementation began in January 2026 and our action plan will be fully implemented as of the March 2026 enrollment reporting process.
FINDING 2025-005 SPED Procurement and Suspension and Debarment Finding Subject: Special Education Cluster (IDEA) – Procurement and Suspension and Debarment Contact Person Responsible for Corrective Action: Patty Kelley Contact Phone Number and Email Address: 812-913-9622 pkelley@bhsc.school Views of...
FINDING 2025-005 SPED Procurement and Suspension and Debarment Finding Subject: Special Education Cluster (IDEA) – Procurement and Suspension and Debarment Contact Person Responsible for Corrective Action: Patty Kelley Contact Phone Number and Email Address: 812-913-9622 pkelley@bhsc.school Views of Responsible Officials: We concur with the finding Description of Corrective Action Plan: The Accounting Department will start keeping a binder that will include all the Procurement and Suspension and Debarment Certificates pertaining to the vendors in our federal programs that equal or exceed $25,000 for each school year. The A/P Clerk will alert the Treasurer when a certificate is needed, and the Treasurer will first check SAM, and then proceed with collecting a certificate from the vendor if one is not found online. When applicable, we can add a clause or condition to a contract noting this acknowledgement. Anticipated Completion Date: This process will be in place by the end of the current fiscal year, June 30, 2026.
FINDING 2025-004 CNC Procurement and Suspension and Debarment Finding Subject: Child Nutrition Cluster – Procurement and Suspension and Debarment Contact Person Responsible for Corrective Action: Patty Kelley Contact Phone Number and Email Address: 812-913-9622 pkelley@bhsc.school Views of Responsib...
FINDING 2025-004 CNC Procurement and Suspension and Debarment Finding Subject: Child Nutrition Cluster – Procurement and Suspension and Debarment Contact Person Responsible for Corrective Action: Patty Kelley Contact Phone Number and Email Address: 812-913-9622 pkelley@bhsc.school Views of Responsible Officials: We concur with the finding Description of Corrective Action Plan: The Accounting Department will start keeping a binder that will include all the Procurement and Suspension and Debarment Certificates pertaining to the vendors in our federal programs, which includes Child Nutrition, that equal or exceed $25,000 for each school year. The A/P Clerk will alert the Treasurer when a certificate is needed, and the Treasurer will first check SAM, and then proceed with collecting a certificate from the vendor if one is not found online. When applicable, we can add a clause or condition to a contract noting this acknowledgement. Anticipated Completion Date: This process will be in place by the end of the current fiscal year, June 30, 2026.
Trainings have been conducted during the current school year for principals, secretaries, and cooks at all schools on following correct meal patterns and point of service procedures. The current child nutrition director performs random audits and visits at all schools to make sure schools are follow...
Trainings have been conducted during the current school year for principals, secretaries, and cooks at all schools on following correct meal patterns and point of service procedures. The current child nutrition director performs random audits and visits at all schools to make sure schools are following these procedures consistently.
REFERENCE: 2025-101 CFDA NUMBER: 10.558 – CHILD AND ADULT CARE FOOD PROGRAM U.S. DEPARTMENT OF AGRICULTURE - FOOD AND NUTRITION - 2025 PASSED THROUGH ARIZONA STATE DEPARTMENT OF EDUCATION GRANT NUMBER 256AZ003N1199 CLIENT RESPONSE AND CORRECTIVE ACTION PLAN We concur with the condition. 1. Name of t...
REFERENCE: 2025-101 CFDA NUMBER: 10.558 – CHILD AND ADULT CARE FOOD PROGRAM U.S. DEPARTMENT OF AGRICULTURE - FOOD AND NUTRITION - 2025 PASSED THROUGH ARIZONA STATE DEPARTMENT OF EDUCATION GRANT NUMBER 256AZ003N1199 CLIENT RESPONSE AND CORRECTIVE ACTION PLAN We concur with the condition. 1. Name of the contact person responsible for corrective action: Claudia Cordova, Director 2. Corrective action planned: AAFDCP will continue to follow the menu reading policy of reading 100% of all menus/OERS before submitting the Claim to The ADE and of double checking each person’s work by exchanging menus/OERs to include checking for clerical errors and creditable food components. The person reviewing the menus/OERs will initial the form to indicate it has been reviewed. All visit forms will be checked by The Director, Claudia Cordova, Assistant Director Cathy Reagan and Bi-lingual Specialist Veronica Mendoza before entering the data into KidKare to ensure all information is complete and accurate. The initials of the person double checking the form will be added to the bottom of the visit form along with the date it was reviewed. 3. Anticipated completion date: Ongoing process already implemented
Corrective action plan: The CAPPS Financials team uses Pathlock to monitor and log privileged user activities. Pathlock maintains documentation of approvals and business justifications. Documentation of recurring privileged access reviews will be maintained as appropriate across all dedicated CAPPS ...
Corrective action plan: The CAPPS Financials team uses Pathlock to monitor and log privileged user activities. Pathlock maintains documentation of approvals and business justifications. Documentation of recurring privileged access reviews will be maintained as appropriate across all dedicated CAPPS Financial modules. IAM team will establish a documented process through which it will coordinate with the CAPPS Financial team to perform quarterly reviews of accounts and audit logs to strengthen privileged access provisioning. The review process will include documented approval, business justification, and periodic revalidation for all elevated roles in CAPPS Financial. Pathlock software is being used to manage single sign-on for granting privileged access to allowed users. With this software, the IAM team can grant access to a user, who would then login as themselves and then switch to the appropriate privileged role. Once the user switches to a privileged role, the Pathlock software maintains the audit log of user activity. Implementation date: February 27, 2026 Responsible persons: Daniel Kellogg, Deputy Chier Information Officer (DCIO), Infrastructure Services Leatha Marr, DCIO & Chief Product Officer, System Applications
Corrective action plan: HHS Information Security: • Has implemented a centralized governance process to ensure completion of all required biennial risk assessments. • Will establish and maintain oversight, validation, and escalation procedures for overdue assessments to ensure sustained adherence to...
Corrective action plan: HHS Information Security: • Has implemented a centralized governance process to ensure completion of all required biennial risk assessments. • Will establish and maintain oversight, validation, and escalation procedures for overdue assessments to ensure sustained adherence to federal and state requirements. • Will establish an inventory of systems to ensure information owners and custodians are assigned. • Will create an automated compliance dashboard to facilitate monthly reporting to executive leadership. • Will prioritize high-risk Medicaid systems, targeting completion within three months and achieving full compliance with Texas Administrative Code (TAC) 202 requirements within twelve months. The Deputy Chief Information Officers (DCIO) and Chief Product Officers for System Applications, Public Health Applications, and Texas Integrated Eligibility Redesign System (TIERS)/Medicaid Enterprise Systems (MES) will provide support and assistance to the program areas in creating Plan of Actions and Milestones and completing risk assessments for all systems provided in the executive report for their respective areas related to the audit. Implementation date: February 28, 2027 Responsible persons: Anil Koindala, Chief Information Security Officer Leatha Marr, DCIO and Chief Product Officer, System Applications Madhavi Koganti, DCIO and Chief Product Officer, Public Health Applications James Huang, DCIO and Chief Product Officer, TIERS/MES
Corrective action plan: FDCM/OI has developed a comprehensive action plan to modernize and increase our detection of fraud in the child care program. Part of this modernization will include increased and more “real-time” monitoring of Board collection efforts. FDCM/OI is partnering with our Informat...
Corrective action plan: FDCM/OI has developed a comprehensive action plan to modernize and increase our detection of fraud in the child care program. Part of this modernization will include increased and more “real-time” monitoring of Board collection efforts. FDCM/OI is partnering with our Information, Innovation, and Insight Division (I3) to develop new dashboards and reports based upon weekly uploaded PIRTS data. This will allow FDCM/OI to generate weekly reports of Board collection letter non-compliance. If a Board fails to issue collection letters in a timely fashion, FDCM/OI will send a report to the Board Executive Director notifying them of non-compliance. Boards are also now required to have a Fraud Point of Contact (POC) that will be FDCM/OI’s direct liaison with the Board for all fraud matters. Additionally, FDCM/OI is conducting weekly PIRTS trainings throughout February for Boards. Boards have been asked to submit up to 5 fact finders who will be responsible for fraud case entry and management. The Board POC is ultimately responsible for every case. FDCM/OI is also reviewing our collection letters as a part of this process and generating prosecution referrals for cases which meet our criteria. It is our belief this will underscore the seriousness of the collection letters and increase their effectiveness. Finally, FDCM/OI will ensure that all relevant controlling documents, e.g. a new Workforce Development Letter, and all previous guidance is updated with this information. Implementation date: February 27, 2026 Responsible person: Jason Stalinsky, Division Director, Division of Fraud Deterrence and Compliance Monitoring.
Corrective action plan: HHSC cannot commit to the specific designation of CAPPS-Financials as the improvement solution for FFATA reporting. However, HHSC continues to be engaged in long-term planning related to improving FFATA reporting. Implementation date: September 1, 2027 Responsible person: Ari...
Corrective action plan: HHSC cannot commit to the specific designation of CAPPS-Financials as the improvement solution for FFATA reporting. However, HHSC continues to be engaged in long-term planning related to improving FFATA reporting. Implementation date: September 1, 2027 Responsible person: Ariana Torres, Deputy Director, Federal Funds
Corrective action plan: TANF/SEGIF: To ensure that correct UEIs are included on all Early Childhood Initiatives (ECI) contracts, the Early Childhood Initiatives (ECI) program has implemented a review system of the contracts and amendments prior to routing them through CAPPS FIN. The contract develop...
Corrective action plan: TANF/SEGIF: To ensure that correct UEIs are included on all Early Childhood Initiatives (ECI) contracts, the Early Childhood Initiatives (ECI) program has implemented a review system of the contracts and amendments prior to routing them through CAPPS FIN. The contract developer will create the document, and the assigned performance specialist will review the data included in the contract/amendment to ensure it is accurate before the contract is routed for approval. SUBG: Behavioral Health Services’ pass-through agreements effective September 1, 2026, will include 2 CFR §200.332 requirements. Implementation dates: TANF/SEGIF: September 1, 2025 SUBG: December 31, 2026 Responsible persons: TANF/SEGIF: Janene Roch, Manager, ECI Contracts and Finance SUBG: Roderick Swan, Associate Commissioner, Behavioral Health Services Operations
Corrective action plan: ITS will: • Work with HR and Security to analyze and validate the size and scope of the late submission of access termination requests for separated employees. Communicate the analysis results and recommendations on or before May 1, 2026. • Work with the Information Security ...
Corrective action plan: ITS will: • Work with HR and Security to analyze and validate the size and scope of the late submission of access termination requests for separated employees. Communicate the analysis results and recommendations on or before May 1, 2026. • Work with the Information Security Office for continuation of periodic reconciliation of HR data and network accounts. Schedule for reconciliation to be established on or before May 1, 2026. • Work with Human Resources to establish a schedule of periodic reconciliation for HR data and case management application accounts. Schedule for reconciliation to be established on or before May 1, 2026. • Review existing business process for offboarding separated employees and provided recommendations to HR for training and communication for staff. Recommendations to be provided by May 1, 2026. • Determine what technology solution may be needed by August 31, 2026, with consideration of effectiveness of mitigation actions, as noted above. Implementation dates: See Corrective action plan Responsible person: Angie Lindemann, Deputy Chief Information Officer
Corrective action plan: Program staff will ensure that a formal review by the Team Lead and the Manager of Fiscal and Reporting is completed prior to submission. The Team Lead will initiate the process by obtaining the obligation amount from the LIHEAP Contract Specialist and entering the amount int...
Corrective action plan: Program staff will ensure that a formal review by the Team Lead and the Manager of Fiscal and Reporting is completed prior to submission. The Team Lead will initiate the process by obtaining the obligation amount from the LIHEAP Contract Specialist and entering the amount into the quarterly report. The Manager of Fiscal and Reporting will review and confirm the amount to be submitted. Implementation date: April 30, 2026 Responsible persons: Michael De Young, Director of Community Affairs Cathy Jung, Senior Manager of Finance and Reporting
Corrective action plan: HHSC will conduct an end-to-end review of the sanctions process to identify and implement any needed changes to the business process, training, or system. Implementation date: May 31, 2026 Responsible person: Carrie Robertson, Manager, Strategy and Innovation–Business Integra...
Corrective action plan: HHSC will conduct an end-to-end review of the sanctions process to identify and implement any needed changes to the business process, training, or system. Implementation date: May 31, 2026 Responsible person: Carrie Robertson, Manager, Strategy and Innovation–Business Integration and Support
Corrective action plan: THECB ITS will: • Develop and implement a standardized process for all user access reviews, including a required template which documents review date, reviewer identity, scope, results, and remediation actions. • Maintain all documentation in a centralized location on our ITS...
Corrective action plan: THECB ITS will: • Develop and implement a standardized process for all user access reviews, including a required template which documents review date, reviewer identity, scope, results, and remediation actions. • Maintain all documentation in a centralized location on our ITS SharePoint site. • Implement regular monitoring to ensure reviews are performed time, and the proper documentation is retained. • We will seek to automate processes where possible. Implementation date: July 1, 2026 Responsible person: Layla Young, Brian Nolte, Joel Anguiano
Corrective action plan: TCEQ will provide targeted training to program staff on federal procurement requirements, including the necessity of coordinating all purchases through the Procurements & Contracts Section and completing required vendor compliance checks. Training will emphasize procedures fo...
Corrective action plan: TCEQ will provide targeted training to program staff on federal procurement requirements, including the necessity of coordinating all purchases through the Procurements & Contracts Section and completing required vendor compliance checks. Training will emphasize procedures for sole source or limited source procurements and reinforce staff responsibilities under 2 CFR procurement and internal control standards. Regular refresher sessions and documented guidance will help ensure consistent understanding and adherence to required procurement practices across all program areas. Implementation date: May 31, 2026 Responsible person: Yolanda Davis, Deputy Director, Financial Administration Division
Corrective action plan: ITS Management will establish a formal, documented user access review program applicable to both privileged and non-privileged network users. Key actions include: 1. Policy Updates: Revise information technology access control policies and procedures to re-quire periodic (at ...
Corrective action plan: ITS Management will establish a formal, documented user access review program applicable to both privileged and non-privileged network users. Key actions include: 1. Policy Updates: Revise information technology access control policies and procedures to re-quire periodic (at least annual) reviews of all network user access. 2. Standardized Process and Documentation: Implement a consistent, documented review process and maintain records in a centralized repository to ensure accountability and auditability. 3. Monitoring and Oversight: Implement oversight procedures to track completion of access re-views and remediation of identified issues, with reporting to IT and information security leadership to support governance. Implementation dates: 1. Policy and procedure updates: Expected completion by April 30, 2026 2. Standardized process and repository implementation: Expected completion by May 31, 2026 3. First completed annual review under the revised process: Expected completion by June 30, 2026 Responsible persons: Tara Mitchell, Director of IT Operations Sean Peterson, Chief Information Officer
Corrective action plan: A formalized process will be implemented, utilizing Standard Operating Procedures, to cover changes of hardware or software in relationship with network and infrastructure components. A change management tracking and approval system is under development that will be utilized ...
Corrective action plan: A formalized process will be implemented, utilizing Standard Operating Procedures, to cover changes of hardware or software in relationship with network and infrastructure components. A change management tracking and approval system is under development that will be utilized to track and provide audit logs of all network and infrastructure changes. Implementation date: August 31, 2026 Responsible person: Lars Hjaltman, CIO
« 1 21 22 24 25 477 »