OIG Seal
Department of Veterans Affairs, Office of Inspector General
Michael J. Missal, Inspector General

Oversight Reports

Legend:   Open|   Closed

No. 1   to Veterans Health Administration (VHA)

The Executive in Charge, Office of the Under Secretary for Health, develops a timeline to reduce improper payments under the 10 percent threshold for the Beneficiary Travel; Communications, Utilities, and Other Rents; Medical Care Contracts and Agreements; Prosthetics; Purchased Long Term Services and Support; Supplies and Materials; and VA Community Care Programs and activities. This is a repeat finding and recommendation for the Purchased Long Term Services and Support and VA Community Care programs from our FY 2015 and 2016 reports.

No. 2   to Veterans Health Administration (VHA)

The Executive in Charge, Office of the Under Secretary for Health, implements steps to achieve stated reduction targets for the Beneficiary Travel; Civilian Health and Medical Program of the Department of Veterans Affairs; Purchased Long Term Services and Support; Supplies and Materials; and VA Community Care Programs and activities. This is a repeat finding for all five programs from our FY 2016 report.

No. 3   to Veterans Benefits Administration (VBA)

The Executive in Charge, Veterans Benefits Administration, implements steps to achieve reduction targets for the Pension and Post-9/11 GI Bill Programs.

No. 4   to Veterans Health Administration (VHA)

The OIG recommended the Executive in Charge, Office of the Under Secretary for Health, implement procedures to ensure thorough testing of sample items used to estimate improper payments for Supplies and Materials purchases under indefinite delivery contracts.

No. 5   to Veterans Benefits Administration (VBA)

The OIG recommended the Executive in Charge, Veterans Benefits Administration, continue working with the Department of Defense to increase the frequency of drill pay adjustments from annually to monthly. This is a repeat recommendation from our FY 2016 report.

No. 6   to Veterans Benefits Administration (VBA)

The OIG recommended the Executive in Charge, Veterans Benefits Administration, continue to report statutory barriers preventing complete resolution of drill pay improper payments in future Agency Financial Reports until resolved.

Total Monetary Impact of All Recommendations

These recommendations have no monetary value.

Legend:   Open|   Closed

No. 1   to Veterans Health Administration (VHA)

The OIG recommended the Under Secretary for Health require Veterans Integrated Service Networks to implement periodic reviews to ensure clinicians and Beneficiary Travel Office staff comply with Veterans Health Procedure Guide 1601B.05 eligibility requirements for authorizing Special Mode of Transportation services.

No. 2   to Veterans Health Administration (VHA)

The OIG recommended the Under Secretary for Health modify Veterans Health Administration Procedure Guide 1601B.05 to require the Beneficiary Travel Office staff to verify beneficiaries attended medical appointments prior to approving payment of Special Mode of Transportation vendor invoices.

No. 3   to Veterans Health Administration (VHA)

The OIG recommended the Under Secretary for Health require Veterans Integrated Service Networks to implement periodic reviews to ensure VA Medical Centers comply with Veterans Health Administration policies for verifying beneficiaries listed on vendor invoices had been properly authorized for Special Mode of Transportation services or attended medical appointments prior to approving payment of Special Mode of Transportation vendor invoices.

No. 4   to Veterans Health Administration (VHA)

The OIG recommended the Under Secretary for Health ensure the Improper Payments Elimination and Recovery Act reports provided to Veterans Integrated Service Networks are modified to include Special Mode of Transportation information specific to vendor payments by VA Medical Centers.

No. 5   to Veterans Health Administration (VHA)

The OIG recommended the Under Secretary for Health implement use of Centers for Medicare and Medicaid Services Rates when savings can be achieved for Special Mode of Transportation ambulance services in accordance with 38 U.S.C. Section 111(b)(3)(C).

No. 6   to Veterans Health Administration (VHA)

The OIG recommended the Under Secretary for Health implement controls to prevent beneficiaries using Special Mode of Transportation services from also obtaining mileage reimbursement for the same appointment(s).

Total Monetary Impact of All Recommendations

Open: $ 173,829,000.00
Closed: $ 0.00

Legend:   Open|   Closed

No. 1   to Veterans Benefits Administration (VBA); Office of Acquisitions, Logistics, and Construction (OALC); Office of General Counsel (OGC)

The OIG recommended the Executive in Charge for Benefits coordinate with the Head of VA Contracting Activity and the Office of General Counsel to determine what actions need to be taken to remedy the unauthorized commitment.

No. 2   to Veterans Benefits Administration (VBA)

The OIG recommended the Executive in Charge for Benefits obtain appropriate funding for all future information technology costs.

No. 3   to Veterans Benefits Administration (VBA); Office of Management; Office of Information and Technology (OIT); Office of General Counsel (OGC)

The OIG recommended the Executive in Charge for Benefits coordinate with the Office of Information Technology, the Office of Management, and the Office of General Counsel to make accounting adjustments to debit the information technology account that should have been used and credit the general operating expense account that was inappropriately used, determine whether Antideficiency Act violations occurred, and report the violations as appropriate.

Total Monetary Impact of All Recommendations

Open: $ 11,700,000.00
Closed: $ 0.00

Legend:   Open|   Closed

No. 1   to Veterans Health Administration (VHA)

We recommended the Executive in Charge for Information and Technology fully implement an agency-wide risk management governance structure, along with mechanisms to identify, monitor, and manage risks across the enterprise. (This is a repeat recommendation from prior years.)

No. 2   to Veterans Health Administration (VHA)

We recommended the Executive in Charge for Information and Technology implement mechanisms to ensure sufficient supporting documentation is captured to justify closure of Plans of Action and Milestones. (This is a repeat recommendation from prior years.)

No. 3   to Veterans Health Administration (VHA)

We recommended the Executive in Charge for Information and Technology implement improved processes to ensure that all identified weaknesses are incorporated into the Governance Risk and Compliance tool, in a timely manner, and corresponding Plans of Actions and Milestones are developed to track corrective actions and remediation. (This is a repeat recommendation from prior years.)

No. 4   to Veterans Health Administration (VHA)

We recommended the Executive in Charge for Information and Technology implement clear roles, responsibilities, and accountability for developing, maintaining, completing, and reporting on Plans of Action and Milestones. (This is a repeat recommendation from prior years.)

No. 5   to Veterans Health Administration (VHA)

We recommended the Executive in Charge for Information and Technology develop mechanisms to ensure system security plans reflect current operational environments, include an accurate status of the implementation of system security controls, and all applicable security controls are properly evaluated. (This is a modified repeat recommendation from prior years.)

No. 6   to Veterans Health Administration (VHA)

We recommended the Executive in Charge for Information and Technology implement improved processes for reviewing and updating key security documents such as risk assessments and security control assessments on an annual basis and ensure the information accurately reflects the current environment. (This is a modified repeat recommendation from prior years.)

No. 7   to Veterans Health Administration (VHA)

We recommended the Executive in Charge for Information and Technology implement mechanisms to enforce VA password policies and standards on all operating systems, databases, applications, and network devices. (This is a repeat recommendation from prior years.)

No. 8   to Veterans Health Administration (VHA)

We recommended the Executive in Charge for Information and Technology implement periodic reviews to minimize access by system users with incompatible roles, permissions in excess of required functional responsibilities, and unauthorized accounts. (This is a repeat recommendation from prior years.)

No. 9   to Veterans Health Administration (VHA)

We recommended the Executive in Charge for Information and Technology enable system audit logs on all critical systems and platforms and conduct centralized reviews of security violations across the enterprise. (This is a repeat recommendation from prior years.)

No. 10   to Veterans Health Administration (VHA)

We recommended the Executive in Charge for Information and Technology fully implement two-factor authentication for all network access methods throughout the agency. (This is a repeat recommendation from prior years.)

No. 11   to Veterans Health Administration (VHA)

We recommended the Executive in Charge for Information and Technology implement more effective automated mechanisms to continuously identify and remediate security deficiencies on VA’s network infrastructure, database platforms, and web application servers. (This is a repeat recommendation from prior years.)

No. 12   to Veterans Health Administration (VHA)

We recommended the Executive in Charge for Information and Technology implement a more effective patch and vulnerability management program to address security deficiencies identified during our assessments of VA’s web applications, database platforms, network infrastructure, and workstations. (This is a repeat recommendation from prior years.)

No. 13   to Veterans Health Administration (VHA)

We recommended the Executive in Charge for Information and Technology maintain a complete and accurate security baseline configurations for all platforms and ensure all baselines are appropriately implemented for compliance with established VA security standards. (This is a modified repeat recommendation from prior years.)

No. 14   to Veterans Health Administration (VHA)

We recommended the Executive in Charge for Information and Technology implement improved network access controls to ensure medical devices and networks, not managed by the Office of Information and Technology, are appropriately segregated from general networks and mission-critical systems. (This is a repeat recommendation from prior years.)

No. 15   to Veterans Health Administration (VHA)

We recommended the Executive in Charge for Information and Technology consolidate the security responsibilities for networks not managed by the Office of Information and Technology, under a common control for each site and ensure vulnerabilities are remediated in a timely manner. (This is a repeat recommendation from prior years.)

No. 16   to Veterans Health Administration (VHA)

We recommended the Executive in Charge for Information and Technology implement improved processes to ensure that all devices and platforms are evaluated using credentialed vulnerability assessments. (This is a repeat recommendation from prior years.)

No. 17   to Veterans Health Administration (VHA)

We recommended the Executive in Charge for Information and Technology implement improved procedures to enforce a standardized system development and change control framework that integrates information security throughout the life cycle of each system. (This is a repeat recommendation from prior years.)

No. 18   to Veterans Health Administration (VHA)

We recommended the Executive in Charge for Information and Technology implement improved processes for ensuring the encryption of backup data prior to transferring the data offsite for storage. (This is a repeat recommendation from prior years.)

No. 19   to Veterans Health Administration (VHA)

We recommended the Executive in Charge for Information and Technology implement improved processes for the testing of contingency plans and failover capabilities for critical systems to ensure that all components can be recovered at the assigned sites and within stated timeframes. (This is a modified repeat recommendation from prior years.)

No. 20   to Veterans Health Administration (VHA)

We recommended the Executive in Charge for Information and Technology identify all external network interconnections and implement improved processes for monitoring VA networks, systems, and connections for unauthorized activity. (This is a repeat recommendation from prior years.)

No. 21   to Veterans Health Administration (VHA)

We recommended the Executive in Charge for Information and Technology implement more effective agency-wide incident response procedures to ensure timely reporting, updating, and resolution of computer security incidents in accordance with VA standards. (This is a repeat recommendation from prior years.)

No. 22   to Veterans Health Administration (VHA)

We recommended the Executive in Charge for Information and Technology ensure that VA’s Network Security and Operations Center has full access to all security incident data to facilitate an agency-wide awareness of information security events. (This is a repeat recommendation from prior years.)

No. 23   to Veterans Health Administration (VHA)

We recommended the Executive in Charge for Information and Technology implement improved safeguards to identify and prevent unauthorized vulnerability scans and data exfiltrations from VA networks. (This is a repeat recommendation from prior years.)

No. 24   to Veterans Health Administration (VHA)

We recommended the Executive in Charge for Information and Technology fully develop a comprehensive list of approved and unapproved software and implement continuous monitoring processes to prevent the use of unauthorized software on agency devices. (This is a repeat recommendation from prior years.)

No. 25   to Veterans Health Administration (VHA)

We recommended the Executive in Charge for Information and Technology develop a comprehensive software inventory process to identify major and minor software applications used to support VA programs and operations. (This is a repeat recommendation from prior years.)

No. 26   to Veterans Health Administration (VHA)

We recommended the Executive in Charge for Information and Technology implement improved procedures for overseeing contractor-managed cloud-based systems and ensure information security controls adequately protect VA sensitive systems and data. (This is a repeat recommendation from prior years.)

No. 27   to Veterans Health Administration (VHA)

We recommended the Executive in Charge for Information and Technology implement mechanisms for updating systems inventory, including contractor-managed systems and interfaces, and provide this information in accordance with Federal reporting requirements. (This is a repeat recommendation from prior years.)

Total Monetary Impact of All Recommendations

These recommendations have no monetary value.

Legend:   Open|   Closed

No. 1   to Veterans Health Administration (VHA)

The OIG recommended the VA Eastern Colorado Health Care System Director establish a policy requiring the Research Service implement a process to identify all accountable equipment annually that does not have a barcode label, and ensure these items are communicated to the Logistics Service so they receive a barcode label and are recorded in the automated inventory system.

No. 2   to Veterans Health Administration (VHA)

The OIG recommended the VA Eastern Colorado Health Care System Director develop an action plan that would ensure all Research Service sensitive information technology equipment is assigned to an information technology equipment inventory list.

No. 3   to Veterans Health Administration (VHA)

3. The OIG recommended the VA Eastern Colorado Health Care System Director implement a training program to ensure Information Technology, Research, and Logistics Service staffs are properly trained to enable them to identify and place sensitive information technology equipment under control.

No. 4   to Veterans Health Administration (VHA)

The OIG recommended the VA Eastern Colorado Health Care System Director implement a policy requiring the Logistics Service perform recurring, at least annually, quality reviews of Research Service automated equipment data to identify and correct incomplete, inaccurate, and unreliable records, maintain copies of the reviews, and provide the completed reviews to the director.

No. 5   to Veterans Health Administration (VHA)

The OIG recommended the VA Eastern Colorado Health Care System Director implement a policy requiring the Logistics Service perform recurring quality reviews, at least annually, to ensure equipment transaction records are maintained, logically organized, and easily accessible for assigned research equipment, in accordance with policy.

No. 6   to Veterans Health Administration (VHA)

The OIG recommended the VA Eastern Colorado Health Care System Director develop a local policy requiring the Logistics Service to perform recurring reviews of inventory dates for all Research Service accountable equipment and sensitive items, to ensure all equipment has been inventoried on an annual basis, which is from the month of completion to the next 12-month period, as required by VA Handbook 7002.

No. 7   to Veterans Health Administration (VHA)

The OIG recommended the VA Eastern Colorado Health Care System Director implement a procedure to ensure compliance with the VA Handbook 6500.1 requirement to attach VA Form 0751, Information Technology Equipment Sanitization Certificate, to VA Form 2237, Request, Turn-In, and Receipt for Property or Services, prior to disposal of sensitive information technology equipment.

No. 8   to Veterans Health Administration (VHA)

The OIG recommended the VA Eastern Colorado Health Care System Director take steps necessary to ensure required Report of Survey actions listed in VA Handbook 7002 are completed for the missing items reported lost by the Research Service on the eight Reports of Survey initiated in calendar year 2015.

No. 9   to Veterans Health Administration (VHA)

The OIG recommended the VA Eastern Colorado Health Care System Director require the accountable officer to follow policy, establish, and maintain a Report of Survey register by fiscal year, to track, monitor, and ensure required actions are completed timely.

No. 10   to Veterans Health Administration (VHA)

The OIG recommended the VA Eastern Colorado Health Care System Director ensure there are an adequate number of officials who have the required training to complete Report of Survey actions so Reports of Survey can be fully processed, timely.

No. 11   to Veterans Health Administration (VHA)

The OIG recommended the VA Eastern Colorado Health Care System Director implement a mechanism to ensure all Research Service Custodial Officers complete their required annual Custodial Officer’s training.

No. 12   to Veterans Health Administration (VHA)

The OIG recommended the VA Eastern Colorado Health Care System Director ensure Delegation of Authority letters for all current Research Service Custodial Officers are completed in accordance with VA Handbook 7002.

No. 13   to Veterans Health Administration (VHA)

The OIG recommended the VA Eastern Colorado Health Care System Director ensure all materials and specimens are stored in a freezer with a remote temperature monitoring system.

No. 14   to Veterans Health Administration (VHA)

The OIG recommended the VA Eastern Colorado Health Care System Director ensure exterior doors on Research Service buildings are repaired so they consistently lock upon closure.

No. 15   to Veterans Health Administration (VHA)

The OIG recommended the VA Eastern Colorado Health Care System Director ensure all exterior doors to Research Service buildings are secured by self-closing doors with automatic locking upon closure with access by keycard or a system that is equal to or exceeds the security of a keycard system.

No. 16   to Veterans Health Administration (VHA)

The OIG recommended the VA Eastern Colorado Health Care System Director establish procedures to timely decommission vacant laboratories, and collect, store or dispose of unused chemicals and personally identifiable information in accordance with applicable policies.

Total Monetary Impact of All Recommendations

These recommendations have no monetary value.

Legend:   Open|   Closed

No. 1   to Veterans Health Administration (VHA)

The OIG recommended the Under Secretary for Health ensure the Spinal Cord Injury program complies with VA’s Privacy Program and information security requirements for all veteran sensitive data collected.

No. 2   to Veterans Health Administration (VHA)

The OIG recommended the Executive Director for the National Spinal Cord Injury Program Office discontinue the use of unauthorized versions of Microsoft Access for the storage of Spinal Cord Injury program data and implement an approved system to support its data storage and analysis needs.

No. 3   to Office of Information and Technology (OIT)

The OIG recommended the Acting Assistant Secretary for Information Technology ensure that VA’s Field Security Services and Privacy Service implement improved procedures to identify unauthorized uses of Sensitive Personal Information and train the facility information security officers and privacy officer to ensure that appropriate corrective actions are taken.

No. 4   to Office of Information and Technology (OIT)

The OIG recommended VA’s Field Security Services and Privacy Service conduct a formal review of Spinal Cord Injury projects to identify acceptable disclosures of veteran Sensitive Personal Information and ensure that appropriate safeguards are implemented to protect the confidentiality of veteran data.

Total Monetary Impact of All Recommendations

These recommendations have no monetary value.

Legend:   Open|   Closed

No. 1   to Veterans Health Administration (VHA)

The OIG recommended the Oklahoma City VA Health Care System Director ensure local policies and procedures are established for resident educational activity record keeping, monitoring resident participation in assigned educational activities, and reconciling VA educational activity with invoices submitted by the University of Oklahoma College of Medicine.

No. 2   to Veterans Health Administration (VHA)

The OIG recommended the Oklahoma City VA Health Care System Director ensure all staff involved in educational activity record keeping receive initial and annual refresher training on how to maintain the records.

No. 3   to Veterans Health Administration (VHA)

The OIG recommended the Oklahoma City VA Health Care System Director establish procedures to ensure agreed-upon salary and benefits rates for residents are properly approved by the Office of Academic Affiliations.

No. 4   to Veterans Health Administration (VHA)

The OIG recommended the Oklahoma City VA Health Care System Director require the medical school to submit adequate documentation tosupport its benefits rate for Social Security and Medicare costs for residents who are exempt from those taxes.

No. 5   to Veterans Health Administration (VHA)

The OIG recommended the Oklahoma City VA Health Care System Director ensure the Designated Education Officer certifies final invoices for payment after all discrepancies identified in the reconciliation process are resolved.

No. 6   to Veterans Health Administration (VHA)

The OIG recommended the Oklahoma City VA Health Care System Director ensure the Designated Education Officer approves and maintains copies of the approved agreements for all off-site educational activities each academic year.

No. 7   to Veterans Health Administration (VHA)

The OIG recommended the Oklahoma City VA Health Care System Director review all academic year 2015–2016 invoices and initiateactions to recover overpayments from the medical school for residents who worked at non-VA facilities without prior written approval of the VA site directors and Designated Education Officer.

No. 8   to Veterans Health Administration (VHA)

The OIG recommended the Oklahoma City VA Health Care System Director appoint a team to conduct periodic audits of the disbursement agreement, including educational activity record keeping at the service and section level, reconciliation procedures, and the accuracy of the invoices submitted by the medical school.

No. 9   to Veterans Health Administration (VHA)

The OIG recommended the Oklahoma City VA Health Care System Director ensure service chiefs conduct required reviews of part-time physicians to ensure they are working as scheduled.

No. 10   to Veterans Health Administration (VHA)

The OIG recommended the Oklahoma City VA Health Care System Director require service chiefs and supervisors ensure part-time physicians on adjustable work schedules enter their work hours in the electronic subsidiary record on a daily basis.

No. 11   to Veterans Health Administration (VHA)

The OIG recommended the Oklahoma City VA Health Care System Director ensure that all overdue reconciliations of part-time physicians’ adjustable work hour agreements identified in the report are performed and actions are taken to address over- and underpayments.

No. 12   to Veterans Health Administration (VHA)

The OIG recommended the Oklahoma City VA Health Care System Director establish procedures to verify that all reconciliations of part-time physicians’ adjustable work hour agreements are completed timely.

No. 13   to Veterans Health Administration (VHA)

The OIG recommended the Oklahoma City VA Health Care System Director ensure service chiefs conduct quarterly reviews of all part-time physicians on adjustable work schedules.

Total Monetary Impact of All Recommendations

Open: $ 7,407,000.00
Closed: $ 0.00

Legend:   Open|   Closed

No. 1   to Veterans Health Administration (VHA)

The OIG recommended the Medical Center Director, Eastern Oklahoma Department of Veterans Affairs Health Care System, ensure contracting officer’s representatives comply with duties assigned in the Delegation of Authority Memo.

No. 2   to Veterans Health Administration (VHA)

The OIG recommended the Medical Center Director, Eastern Oklahoma Department of Veterans Affairs Health Care System, ensure that on future contracts, the Chief, Engineering Service, assign contracting officer’s representatives who have experience commensurate with delegated responsibilities in accordance with the Federal Acquisition Regulation.

No. 3   to Veterans Health Administration (VHA)

The OIG recommended the Medical Center Director, Eastern Oklahoma Department of Veterans Affairs Health Care System, ensure personnel follow established Veterans Health Administration policies on safety inspections.

No. 4   to Veterans Health Administration (VHA)

The OIG recommended the Medical Center Director, Eastern Oklahoma Department of Veterans Affairs Health Care System, clarify the implementation of the safety inspections in Veterans Health Administration Directive 7715, Safety and Health During Construction, April 6, 2017, to ensure the safety inspections are not performed routinely or in a discernable pattern.

No. 5   to Veterans Health Administration (VHA)

The OIG recommended the Medical Center Director, Eastern Oklahoma Department of Veterans Affairs Health Care System, ensure the assignment of a safety officer in accordance with Veterans Health Administration Directive 7715, Safety and Health During Construction, April 6, 2017.

Total Monetary Impact of All Recommendations

Open: $ 22,540,470.00
Closed: $ 0.00

Filter Options

Use the controls below to filter the list of oversight reports. Click on the headings to view the filter choices.

Current Filter

  • Report Type: Audits, Reviews & Evaluations

Records 1 - 10 of 590 oversight reports that match your filter criteria.

6/19/2018 10:34:28 AM


Date RangeRemove

Limits the list of reports to those published in the date range specified below.

Report LocationRemove

Limits the list of reports to those pertaining to the cities selected below. Hold down the control key to select multiple values or to toggle an individual value on or off.

VA Administration/Staff OfficeRemove

Limits the list of reports to those pertaining to the VA offices selected below. Hold down the control key to select multiple values or to toggle an individual value on or off.

Report TypeRemove

Limits the list of reports to the report types selected below. Hold down the control key to select multiple values or to toggle an individual value on or off. For a description of the types of oversight reports published by the OIG, please visit our Reports and Publications homepage.

OIG Report AuthorRemove

Limits reports to those authored by specific OIG elements. Hold down the control key to select multiple values or to toggle an individual value on or off.

Report NumbersRemove

Helpful for finding reports if you know the report number. Separate multiple values with semicolons.

Search TermsRemove

Limit the results to reports that match your search terms.

Recommendation StatusRemove

Limits reports to those with open or closed recommendations.

Recommendation Action OfficeRemove

Limits reports to those with recommendations specific to the following VA Offices

Displaying records at a time.