OIG Reports

No. 1   to Veterans Health Administration (VHA)

The District Director determines reasons clinical quality review remediation plans did not include documentation of deficiency resolution and the time frame for resolution for the Center City, Huntington, Northeast, and Scranton Vet Centers; takes indicated actions to ensure completion; and monitors compliance.

No. 2   to Veterans Health Administration (VHA)

The District Director determines reasons for lack of evidence that clinical quality review deficiencies were resolved at the Center City, Huntington, Northeast, and Scranton Vet Centers; takes indicated actions to ensure completion; and monitors compliance.

No. 3   to Veterans Health Administration (VHA)

The District Director determines reasons administrative quality review remediation plans were not completed at the Beckley and Bucks County Vet Centers, ensures completion, and monitors compliance.

No. 4   to Veterans Health Administration (VHA)

The District Director determines the reasons administrative quality review remediation plans do not include the Deputy District Director’s approval and date of approval as required, and ensures compliance.

No. 5   to Veterans Health Administration (VHA)

The District Director determines reasons administrative quality review remediation plans did not include documentation of deficiency resolution and the time frame for resolution for the Center City, Huntington, Northeast, and Scranton Vet Centers; takes indicated actions to ensure completion; and monitors compliance.

No. 6   to Veterans Health Administration (VHA)

The District Director determines reasons for lack of evidence for administrative quality review deficiency resolution for the Center City, Huntington, Northeast, and Scranton Vet Centers; takes indicated actions to ensure completion; and monitors compliance.

No. 7   to Veterans Health Administration (VHA)

The District Director ensures completion of a morbidity and mortality review for the death by homicide, and ensures all future morbidity and mortality reviews are completed as required.

No. 8   to Veterans Health Administration (VHA)

The District Director ensures the intake portion of the psychosocial assessment is completed, and monitors compliance across all zone vet centers.

No. 9   to Veterans Health Administration (VHA)

The District Director ensures suicide risk assessments are completed on the first clinical visit, and monitors compliance across all zone vet centers.

No. 10   to Veterans Health Administration (VHA)

The District Director ensures clinical staff consult and coordinate care with the support VA medical facility for shared clients flagged as high risk for suicide, and monitors compliance across all zone vet centers.

No. 11   to Veterans Health Administration (VHA)

The District Director verifies clinical staff follow confidentiality requirements when consulting and coordinating care with the support VA medical facility for shared clients at high risk for suicide, and monitors compliance across all zone vet centers.

No. 12   to Veterans Health Administration (VHA)

The District Director confirms clinical staff make timely notification to the suicide prevention coordinator at the support VA medical facility for clients with significant safety risks, and monitors compliance across all zone vet centers.

No. 13   to Veterans Health Administration (VHA)

The District Director ensures clinical staff complete safety plans for clients that are assessed at intermediate or high suicide risk level in either acute, chronic, or both categories as required, and monitors compliance across all zone vet centers.

No. 14   to Veterans Health Administration (VHA)

The District Director ensures clinical staff consult with the vet center director, external clinical consultant, associate district director for counseling, or support VA medical facility mental health provider following a client’s suicide risk assessment as required, and monitors compliance across all zone vet centers.

No. 15   to Veterans Health Administration (VHA)

The District Director, in collaboration with the support VA medical facility clinical or administrative liaisons, determines the reasons for noncompliance with staff participation on the mental health council for the Center City, Huntington, Northeast, and Scranton Vet Centers, and takes actions as indicated to ensure compliance with Readjustment Counseling Service requirements.

No. 16   to Veterans Health Administration (VHA)

The District Director determines the reasons for noncompliance with critical event plans with desktop reference at the Center City and Northeast Philadelphia Vet Centers, and takes actions as indicated to ensure compliance with Readjustment Counseling Service requirements.

No. 17   to Veterans Health Administration (VHA)

The District Director determines reasons for noncompliance with the appointment of a clinical liaison at the Scranton Vet Center, ensures assignment of a mental health professional as liaison, and monitors compliance.

No. 18   to Veterans Health Administration (VHA)

The District Director determines reasons for noncompliance with a process for completing and tracking four hours of external clinical consultation per month at the Center City, Scranton, and Northeast Vet Centers; ensures Vet Center Directors implement processes; and monitors compliance.

No. 19   to Veterans Health Administration (VHA)

The District Director determines reasons for noncompliance with staff supervision provided by vet center directors at the Center City, Huntington, Northeast, and Scranton Vet Centers; ensures staff supervision occurs as required; and monitors compliance.

No. 20   to Veterans Health Administration (VHA)

The District Director verifies and determines reasons for noncompliance with monthly chart audits at the Center City, Huntington, Northeast, and Scranton Vet Centers; ensures chart audits are completed as required; and monitors compliance.

No. 21   to Veterans Health Administration (VHA)

The District Director determines reasons employees at the Center City, Huntington, Northeast, and Scranton Vet Centers did not complete required trainings; ensures all staff complete mandatory trainings; and monitors compliance.

No. 22   to Veterans Health Administration (VHA)

The District Director evaluates and determines reasons for noncompliance with tactile (braille) signage at the Center City, Huntington, and Northeast Vet Centers, and ensures all exit doors are compliant with Architectural Barriers Act Standards.

No. 23   to Veterans Health Administration (VHA)

The District Director reviews reasons for noncompliance with securing confidential and sensitive information at the Center City Vet Center, and ensures all vet center employees safely and securely store protected health information.

No. 24   to Veterans Health Administration (VHA)

The District Director reviews reasons for noncompliance with having a current and comprehensive emergency and crisis plan at the Center City and Northeast Vet Centers, ensures completion of a current and comprehensive emergency and crisis plan, and monitor’s compliance.

No. 1   to Veterans Health Administration (VHA)

The District Director determines reasons clinical quality review remediation plans did not include documentation of deficiency resolution and the time frame for resolution for the Baltimore, Dundalk, Raleigh, and Richmond Vet Centers; takes indicated actions to ensure completion; and monitors compliance.

No. 2   to Veterans Health Administration (VHA)

The District Director determines reasons for lack of evidence for clinical quality review deficiency resolution for the Baltimore, Dundalk, Raleigh, and Richmond Vet Centers; takes indicated actions to ensure completion; and monitors compliance.

No. 3   to Veterans Health Administration (VHA)

The District Director determines reasons the administrative quality review remediation plan was not completed for one vet center within the zone, ensures completion, and monitors compliance.

No. 4   to Veterans Health Administration (VHA)

The District Director determines reasons administrative quality review remediation plans did not include documentation of deficiency resolution and the time frame of resolution for the Dundalk, Raleigh, and Richmond Vet Centers; takes indicated actions to ensure completion; and monitors compliance.

No. 5   to Veterans Health Administration (VHA)

The District Director determines reasons for lack of evidence for administrative quality review deficiency resolution for the Dundalk, Raleigh, and Richmond Vet Centers; takes indicated actions to ensure completion; and monitors compliance.

No. 6   to Veterans Health Administration (VHA)

The District Director ensures the intake portion of the psychosocial assessment is completed and monitors compliance across all zone vet centers.

No. 7   to Veterans Health Administration (VHA)

The District Director ensures suicide risk assessments are completed on the first clinical visit and monitors compliance across all zone vet centers.

No. 8   to Veterans Health Administration (VHA)

The District Director ensures clinical staff consult and coordinate care with the support VA medical facility for shared clients flagged as high risk for suicide and monitors compliance across all zone vet centers.

No. 9   to Veterans Health Administration (VHA)

The District Director verifies clinical staff follow confidentiality requirements when consulting and coordinating care with the support VA medical facility for shared clients at high risk for suicide and monitors compliance across all zone vet centers.

No. 10   to Veterans Health Administration (VHA)

The District Director ensures clinical staff complete safety plans for clients that are assessed at intermediate or high suicide risk level in either acute, chronic, or both categories as required; and monitors compliance across all zone vet centers.

No. 11   to Veterans Health Administration (VHA)

The District Director ensures clinical staff consult with the vet center director, external clinical consultant, associate district director for counseling, or support VA medical facility mental health provider following a client’s suicide risk assessment as required; and monitors compliance across all zone vet centers.

No. 12   to Veterans Health Administration (VHA)

The District Director, in collaboration with the support VA medical facility clinical or administrative liaisons, determines the reasons for noncompliance with staff participation on the mental health council for the Baltimore, Dundalk, Raleigh, and Richmond Vet Centers; and takes action as indicated to ensure compliance with Readjustment Counseling Services requirements.

No. 13   to Veterans Health Administration (VHA)

The District Director determines reasons for noncompliance with High Risk Suicide Flag SharePoint site requirements and the tracking of continuity of care for clients at risk at the Raleigh Vet Center and takes action to ensure requirements are met, and monitors compliance.

No. 14   to Veterans Health Administration (VHA)

The District Director determines reasons the Raleigh and Richmond Vet Center Directors did not have accurate knowledge of type of clients on the High Risk Suicide Flag SharePoint site, takes actions to ensure vet center directors incorporate relevant information from the SharePoint site to safely disposition clients, and monitors compliance.

No. 15   to Veterans Health Administration (VHA)

The District Director determines the reasons for noncompliance with staff access to critical event plans that included a desktop reference at the Baltimore and Dundalk Vet Centers and takes actions as indicated to ensure compliance with Readjustment Counseling Service requirements.

No. 16   to Veterans Health Administration (VHA)

The District Director determines reasons for noncompliance with a process for completing and tracking four hours of external clinical consultation per month at the Baltimore, Dundalk, and Raleigh Vet Centers; ensures vet center directors implement processes; and monitors compliance.

No. 17   to Veterans Health Administration (VHA)

The District Director determines reasons for noncompliance with staff supervision provided by vet center directors at the Baltimore and Dundalk Vet Centers, ensures staff supervision occurs as required, and monitors compliance.

No. 18   to Veterans Health Administration (VHA)

The District Director verifies and determines reasons for noncompliance with monthly chart audits at the Baltimore, Dundalk, Raleigh, and Richmond Vet Centers; ensures chart audits are completed as required; and monitors compliance.

No. 19   to Veterans Health Administration (VHA)

The District Director determines reasons employees at the Baltimore, Dundalk, Raleigh, and Richmond Vet Centers did not complete required trainings; ensures all staff complete mandatory trainings; and monitors compliance.

No. 20   to Veterans Health Administration (VHA)

The District Director evaluates and determines reasons for noncompliance with a presentable exterior at the Richmond Vet Center and ensures all exterior grounds are in good repair.

No. 21   to Veterans Health Administration (VHA)

The District Director evaluates and determines reasons for noncompliance with tactile (braille) signage at the Baltimore, Dundalk, and Raleigh Vet Centers and ensures all exit doors are compliant with Architectural Barriers Act Accessibility Standards.

No. 22   to Veterans Health Administration (VHA)

The District Director reviews reasons for noncompliance with maintaining a current and comprehensive emergency and crisis plan at the Raleigh and Richmond Vet Centers and ensures all emergency and crisis plans are updated and comprehensive as required.

No. 1   to Veterans Health Administration (VHA)

The Director evaluates and determines reasons for noncompliance and ensures leaders evaluate sentinel events and conduct institutional disclosures when criteria are met.

No. 2   to Veterans Health Administration (VHA)

The Director evaluates and determines any additional reasons for noncompliance and ensures that for all events assigned an actual or potential safety assessment code score of three, staff either complete an individual root cause analysis or include the event in an aggregated patient safety review.

No. 3   to Veterans Health Administration (VHA)

The Chief of Staff evaluates and determines any additional reasons for noncompliance and ensures clinical managers use Focused Professional Practice Evaluation criteria that are defined in advance and accepted by the practitioner.

No. 4   to Veterans Health Administration (VHA)

The Chief of Staff evaluates and determines any additional reasons for noncompliance and makes certain clinical managers define time frames for Focused Professional Practice Evaluations.

No. 5   to Veterans Health Administration (VHA)

The Chief of Staff evaluates and determines any additional reasons for noncompliance and verifies that the Medical Executive Council’s meeting minutes consistently reflect the data reviewed for licensed independent practitioners’ re-privileging requests and the rationale for the recommendations.

No. 1   to Veterans Health Administration (VHA)

The Chief of Staff evaluates and determines any additional reasons for noncompliance and ensures service chiefs define Focused Professional Practice Evaluation criteria in advance using objective criteria accepted by the licensed independent practitioner.

No. 2   to Veterans Health Administration (VHA)

The Chief of Staff evaluates and determines any additional reasons for noncompliance and ensures service chiefs establish service-specific criteria in the Ongoing Professional Practice Evaluations of licensed independent practitioners.

No. 3   to Veterans Health Administration (VHA)

The Chief of Staff evaluates and determines any additional reasons for noncompliance and ensures service chiefs base determinations to continue current privileges on Ongoing Professional Practice Evaluation activities.

No. 4   to Veterans Health Administration (VHA)

The Associate Director evaluates and determines any additional reasons for noncompliance and ensures staff remove sterile supplies from storage when the packaging is damaged or compromised.

No. 5   to Veterans Health Administration (VHA)

The Associate Director evaluates and determines any additional reasons for noncompliance and ensures staff keep clinical areas in good repair and maintain a safe and clean environment throughout the healthcare system.

No. 6   to Veterans Health Administration (VHA)

The Medical Center Director evaluates and determines any additional reasons for noncompliance and ensures staff post notices in areas that are subject to photography or video recording.

No. 1   to Veterans Health Administration (VHA)

The Director determines the reasons for noncompliance and ensures leaders evaluate adverse events and conduct institutional disclosures when criteria are met.

No. 2   to Veterans Health Administration (VHA)

The Chief of Staff evaluates and determines any additional reasons for noncompliance and ensures service chiefs consider service-specific Ongoing Professional Practice Evaluation data when recommending licensed independent practitioners’ continued privileges.

No. 3   to Veterans Health Administration (VHA)

The Director evaluates and determines any additional reasons for noncompliance and ensures staff conduct follow-up within one week for intermediate, high-acute, or chronic risk-for-suicide patients who were discharged home from the emergency department.

No. 1   to Office of Information and Technology (OIT)

We recommended the Assistant Secretary for Information and Technology consistently implement an improved continuous monitoring program in accordance with the NIST Risk Management Framework. Specifically, implement an independent security control assessment process to evaluate the effectiveness of security controls prior to granting authorization decisions. (This is a repeat recommendation from prior years.)

No. 2   to Office of Information and Technology (OIT)

We recommended the Assistant Secretary for Information and Technology implement improved mechanisms to ensure system stewards and Information System Security Officers follow procedures for establishing, tracking, and updating Plans of Action and Milestones for all known risks and weaknesses including those identified during security control assessments. (This is a repeat recommendation from prior years.)

No. 3   to Office of Information and Technology (OIT)

We recommended the Assistant Secretary for Information and Technology implement controls to ensure that system stewards and responsible officials obtain appropriate documentation prior to closing Plans of Action and Milestones. (This is a repeat recommendation from prior years.)

No. 4   to Office of Information and Technology (OIT)

We recommended the Assistant Secretary for Information and Technology develop mechanisms to ensure system security plans reflect current operational environments, include an accurate status of the implementation of system security controls, and all applicable security controls are properly evaluated. (This is a repeat recommendation from prior years.)

No. 5   to Office of Information and Technology (OIT)

We recommended the Assistant Secretary for Information and Technology implement improved processes for reviewing and updating key security documents such as security plans, risk assessments, and interconnection agreements on an annual basis and ensure the information accurately reflects the current environment. (This is a repeat recommendation from prior years.)

No. 6   to Office of Information and Technology (OIT)

We recommended the Assistant Secretary for Information and Technology implement improved processes to ensure compliance with VA password policy and security standards on domain controls, operating systems, databases, applications, and network devices. (This is a repeat recommendation from prior years.)

No. 7   to Office of Information and Technology (OIT)

We recommended the Assistant Secretary for Information and Technology implement periodic reviews to minimize access by system users with incompatible roles, permissions in excess of required functional responsibilities, and unauthorized accounts. (This is a repeat recommendation from prior years.)

No. 8   to Office of Information and Technology (OIT)

We recommended the Assistant Secretary for Information and Technology enable system audit logs on all critical systems and platforms and conduct centralized reviews of security violations across the enterprise. (This is a repeat recommendation from prior years.)

No. 9   to Office of Information and Technology (OIT)

We recommended the Office of Personnel Security, Human Resources, and Contract Offices implement improved processes for establishing and maintaining accurate data within VA’s authoritative system of record for background investigations. (This is a modified repeat recommendation from prior years.)

No. 10   to Office of Information and Technology (OIT)

We recommended the Office of Personnel Security, Human Resources, and Contract Offices strengthen processes to ensure appropriate levels of background investigations are completed for applicable VA employees and contractors. (This is a modified repeat recommendation from prior years.)

No. 11   to Office of Information and Technology (OIT)

We recommended the Assistant Secretary for Information and Technology implement more effective automated mechanisms to continuously identify and remediate security deficiencies on VA’s network infrastructure, database platforms, and web application servers. (This is a repeat recommendation from prior years.)

No. 12   to Office of Information and Technology (OIT)

We recommended the Assistant Secretary for Information and Technology implement a more effective patch and vulnerability management program to address security deficiencies identified during our assessments of VA’s web applications, database platforms, network infrastructure, and workstations. (This is a repeat recommendation from prior years.)

No. 13   to Office of Information and Technology (OIT)

We recommended the Assistant Secretary for Information and Technology maintain a complete and accurate security baseline configuration for all platforms and ensure all baselines are appropriately monitored for compliance with established VA security standards. (This is a repeat recommendation from prior years.)

No. 14   to Office of Information and Technology (OIT)

We recommended the Assistant Secretary for Information and Technology implement improved network access controls that restrict medical devices from systems hosted on the general network. (This is a repeat recommendation from prior years.)

No. 15   to Office of Information and Technology (OIT)

We recommended the Assistant Secretary for Information and Technology consolidate the security responsibilities for networks not managed by the Office of Information and Technology, under a common control for each site and ensure vulnerabilities are remediated in a timely manner. (This is a repeat recommendation from prior years.)

No. 16   to Office of Information and Technology (OIT)

We recommended the Assistant Secretary for Information and Technology implement improved processes to ensure that all devices and platforms are evaluated using credentialed vulnerability assessments. (This is a repeat recommendation from prior years.)

No. 17   to Office of Information and Technology (OIT)

We recommended the Acting Assistant Secretary for Information and Technology implement improved procedures to enforce standardized system development and change control processes that integrates information security throughout the life cycle of each system. (This is a repeat recommendation from prior years.)

No. 18   to Office of Information and Technology (OIT)

We recommended the Assistant Secretary for Information and Technology review system boundaries, recovery priorities, system components, and system interdependencies and implement appropriate mechanisms to ensure that established system recovery objectives can be measured and met. (This is a modified repeat recommendation from prior years.)

No. 19   to Office of Information and Technology (OIT)

We recommended the Assistant Secretary for Information and Technology ensure that contingency plans for all systems are updated to include critical inventory components and are tested in accordance with VA requirements. (This is a repeat recommendation from prior years.)

No. 20   to Office of Information and Technology (OIT)

We recommended the Assistant Secretary for Information and Technology implement more effective agency-wide incident response procedures to ensure timely notification, reporting, updating, and resolution of computer security incidents in accordance with VA standards. (This is a repeat recommendation from prior years.)

No. 21   to Office of Information and Technology (OIT)

We recommended the Assistant Secretary for Information and Technology ensure that VA’s Cybersecurity Operations Center has full access to all security incident data to facilitate an agency-wide awareness of information security events. (This is a repeat recommendation from prior years.)

No. 22   to Office of Information and Technology (OIT)

We recommended the Assistant Secretary for Information and Technology implement improved safeguards to identify and prevent unauthorized vulnerability scans on VA networks. (This is a repeat recommendation from prior years.)

No. 23   to Office of Information and Technology (OIT)

We recommended the Assistant Secretary for Information and Technology implement improved measures to ensure that all security controls are assessed in accordance with VA policy and that identified issues or weaknesses are adequately documented and tracked within POA&Ms. (This is a repeat recommendation from prior years.)

No. 24   to Office of Information and Technology (OIT)

We recommended the Assistant Secretary for Information and Technology fully develop a comprehensive list of approved and unapproved software and implement continuous monitoring processes to prevent the use of prohibited software on agency devices. (This is a repeat recommendation from prior years.)

No. 25   to Office of Information and Technology (OIT)

We recommended the Assistant Secretary for Information and Technology develop a comprehensive inventory process to identify connected hardware, software, and firmware used to support VA programs and operations. (This is a repeat recommendation from prior years.)

No. 26   to Office of Information and Technology (OIT)

We recommended the Assistant Secretary for Information and Technology implement improved procedures for monitoring contractor-managed systems and services and ensure information security controls adequately protect VA sensitive systems and data. (This is a repeat recommendation from prior years.)

No. 1   to Veterans Health Administration (VHA)

The Executive Director determines the reasons for noncompliance and ensures leaders conduct institutional disclosures for all applicable sentinel events.

No. 2   to Veterans Health Administration (VHA)

The Executive Director evaluates and determines any additional reasons for noncompliance and ensures staff complete final peer reviews within 120 calendar days or approves a written extension request.

No. 3   to Veterans Health Administration (VHA)

The Executive Director evaluates and determines any additional reasons for noncompliance and ensures that for all patient safety events assigned an actual or potential safety assessment code score of three, the Patient Safety Manager conducts an individual root cause analysis or includes the events in an aggregate review.

No. 4   to Veterans Health Administration (VHA)

The Chief of Staff evaluates and determines any additional reasons for noncompliance and ensures service chiefs use Focused Professional Practice Evaluation criteria that are defined in advance and accepted by the practitioners.

No. 5   to Veterans Health Administration (VHA)

The Chief of Staff evaluates and determines any additional reasons for noncompliance and ensures the Medical Executive Committee reviews professional practice evaluations for licensed independent practitioners’ privileging requests and documents the review in meeting minutes.

No. 6   to Veterans Health Administration (VHA)

The Chief of Staff evaluates and determines any additional reasons for noncompliance and ensures service chiefs establish service-specific criteria for reprivileging decisions.

No. 7   to Veterans Health Administration (VHA)

The Chief of Staff evaluates and determines any additional reasons for noncompliance and ensures service chiefs recommend reprivileging based, in part, on Ongoing Professional Practice Evaluations completed by practitioners with similar training and privileges.

No. 8   to Veterans Health Administration (VHA)

The Deputy Health System Director evaluates and determines any additional reasons for noncompliance and ensures staff identify and minimize physical environmental risks to reduce suicide or suicide attempts in acute inpatient mental health units.

No. 1   to Veterans Health Administration (VHA)

The Chief of Staff evaluates and determines any additional reasons for noncompliance and makes certain that service chiefs’ recommendations to continue current privileges are based on Ongoing Professional Practice Evaluation activities.