o U.S. ENVIRONMENTAL PROTECTION AGENCY ? OFFICE OF INSPECTOR GENERAL Catalyst for Improving the Environment Compendium of Unimplemented Recommendations as of March 31, 2011 Report No. 11-N-0212 April 29, 2011 ------- Abbreviations ARRA American Recovery and Reinvestment Act of 2009 CSO Combined Sewer Overflow CWA Clean Water Act CWSRF Clean Water State Revolving Fund DWSRF Drinking Water State Revolving Fund EAS EPA Acquisition System EPA U.S. Environmental Protection Agency FMFIA Federal Managers' Financial Integrity Act GAO U.S. Government Accountability Office ICMS Integrated Contracts Management System MATS Management Audit Tracking System NPDES National Pollutant Discharge Elimination System OARM Office of Administration and Resources Management OCFO Office of the Chief Financial Officer OECA Office of Enforcement and Compliance Assurance OEI Office of Environmental Information OIG Office of Inspector General OMB Office of Management and Budget ORD Office of Research and Development OW Office of Water POTW Publicly Owned Treatment Works SAAP Special Appropriation Act Project Hotline To report fraud, waste, or abuse, contact us through one of the following methods: e-mail: OIGJHotline@epa.gov phone: 1-888-546-8740 fax: 703-347-8330 online: http://www.epa.gov/oig/hotline.htm write: EPA Inspector General Hotline 1200 Pennsylvania Avenue NW Mailcode 8431P (Room N-4330) Washington, DC 20460 ------- b | UNITED STATES ENVIRONMENTAL PROTECTION AGENCY ^ WASHINGTON, D.C. 20460 X^ THE INSPECTOR GENERAL April 29, 2011 MEMORANDUM SUBJECT: Compendium of Unimplemented Recommendations as of March 31, 2011 Report No. ll-N-0212 FROM: Arthur A. Elkins, Jr. / Inspector General TO: Deputy Administrator Assistant Administrators Regional Administrators General Counsel Chief Financial Officer Associate Administrators Attached is the semiannual Compendium of Unimplemented Recommendations as of March 31, 2011, prepared by the Office of Inspector General (OIG) of the U.S. Environmental Protection Agency (EPA). This compendium fulfills the requirement of the Inspector General Act of 1978, as amended, to identify reports containing significant recommendations described in previous semiannual reports to Congress on which corrective actions have not been completed. This compendium, issued in conjunction with the Semiannual Report to Congress, October 1, 2010 through March 31, 2011, and as a separate document to EPA leadership, is part of the OIG's followup strategy to promote robust internal controls. Followup is done in collaboration with the EPA Office of the Chief Financial Officer and EPA audit followup coordinators. The goal is to improve overall audit management by increasing EPA managers' awareness of outstanding agreed-to commitments for action on OIG report recommendations. Implementing these recommendations will correct weaknesses, reduce vulnerabilities to risk, and leverage opportunities for improved performance. The significance of audit followup, as described by the Office of Management and Budget (OMB) Circular A-50, is enhanced by the public's expectation for greater transparency and a heightened interest by Congress in realizing potential opportunities for improvement in the federal government. The OIG's previous compendium reports appear to be increasing Agency awareness of and action on Unimplemented OIG recommendations. ------- We selected the unimplemented recommendations listed in this compendium based on their significance and their status in EPA's Management Audit Tracking System. In addition, some unimplemented recommendations were identified through review by the OIG. According to OMB Circular A-50, audit followup is a shared responsibility between the Agency and the OIG. We will continue to identify unimplemented recommendations for attention and action, as well as remove the listing of recommendations as unimplemented when appropriate information of completion is provided. We hope that you find this tool useful in identifying ways to further improve Agency operations. ------- Compendium of Unimplemented Recommendations as of March 31, 2011 (Report No. 11-N-0212) Table of Contents Introduction 1 Purpose 1 Background 1 Scope and Methodology 2 Unimplemented Recommendations 4 OIG Report Number 10-P-0081 4 10-P-0071 6 10-R-0057 7 09-P-0232 9 09-P-0223 11 08-P-0213 13 08-P-0049 14 2007-P-00027 15 2007-P-00008 16 2007-P-00007 17 2004-P-00030 18 2002-P-00012 20 Appendix A: OIG Reports With Unimplemented Recommendations by Program Office as of March 31, 2011 21 Appendix B: Unimplemented Recommendations: Current Compendium Compared to 10/26/10 Compendium 22 ------- Compendium of Unimplemented Recommendations as of March 31, 2011 (Report No. 11-N-0212) Introduction Purpose The purpose of this Compendium of Unimplemented Recommendations is to highlight for U.S. Environmental Protection Agency (EPA) management significant recommendations that remained Unimplemented past the due date agreed upon by EPA and the Office of Inspector General (OIG). In addition, the compendium satisfies part of Section 5(a) of the Inspector General Act of 1978, as amended, which requires each inspector general to issue semiannual reports to Congress and include "an identification of each significant recommendation described in previous semiannual reports on which corrective action has not been completed." We are issuing the compendium in conjunction with the OIG's Semiannual Report to Congress, October 1, 2010 through March 31, 2011. We intend to issue a compendium each semiannual reporting period. The compendium will keep Agency management informed about EPA's outstanding commitments and its progress in taking agreed-upon corrective actions on OIG recommendations to improve programs and operations. Background The OIG issues recommendations to improve the economy, efficiency, effectiveness, and integrity of EPA programs and operations. Office of Management and Budget (OMB) Circular A-50, Audit Followup, provides that corrective action taken by management on resolved findings and recommendations is essential to improving the effectiveness and efficiency of government operations, and that audit followup is a shared responsibility of agency management officials and auditors. OMB Circular A-50 requires each agency to establish systems to ensure the prompt and proper resolution and implementation of audit recommendations. EPA Order 2750, based on OMB Circular A-50, details EPA's policy and procedures on audit followup. The Chief Financial Officer is EPA's audit followup official and is responsible for resolving audits Agency-wide and ensuring that action officials implement corrective actions and meet the milestone dates contained in the OIG-accepted management decision. If the action officials need to make a significant change to the corrective actions by modifying an action or deferring critical milestone dates for 6 months or more, they are required to obtain the OIG's approval of the change. The OIG is required to respond to an action official's request within 15 calendar days of receipt of the request; if the OIG does not respond, the action official may consider that the OIG has approved the requested change. EPA uses the Management Audit Tracking System (MATS) to track information on Agency implementation of OIG recommendations. The Office of the Chief Financial Officer (OCFO) maintains and operates MATS. MATS receives report data, such as the report title, issue date, and recommendations, from the Inspector General Enterprise Management System. The audit management official in the Office of the Administrator, the Office of General Counsel, and each Assistant Administrator or Regional Administrator office designates an audit followup ------- Compendium of Unimplemented Recommendations as of March 31, 2011 (Report No. 11-N-0212) coordinator for that office. Audit followup coordinators are responsible for: managing their office's data contained in MATS, tracking implementation of corrective actions, facilitating timely progress on all corrective actions and maintaining documentation from the action official confirming that corrective actions are complete. When corrective actions in response to recommendations in an audit report are completed and certified, the Agency may inactivate that report in MATS and the audit followup coordinator would no longer have to track it. The Agency self-certifies that it has completed the corrective actions. The Agency is also responsible under the Inspector General Act for reporting on audit reports for which the Agency has not taken final corrective action within one year or more of the Agency's management decision. This is the sixth edition of the Compendium of Unimplemented Recommendations. It identifies 18 Unimplemented recommendations from 12 reports, compared with 18 Unimplemented recommendations from 15 reports identified in the fifth edition for the period ending September 30, 2010. Of the 18 Unimplemented recommendations reported herein, 6 from 6 reports were included in the previous Compendium, and 12 from 8 reports are newly identified. We removed 12 Unimplemented recommendations from 9 reports that were included in the previous compendium. Removal of an Unimplemented recommendation does not mean that it was verified as implemented, but rather that it was reported as being completed or that the target completion date has been revised with OIG approval. Scope and Methodology We used MATS as our primary source for identifying Unimplemented recommendations. We also performed additional steps to search for Unimplemented recommendations that may not have been identified in MATS. These steps included consulting with OIG staff and Agency audit followup coordinators for clarification of information contained in MATS. To identify significant Unimplemented recommendations for inclusion in the compendium, we reviewed: • Selected OIG audit and evaluation reports issued to EPA during the period October 1, 1997, through September 30, 2010 • Recommendations that have corrective actions with agreed-to dates of March 31, 2011, or earlier We based our analysis on the status of recommendations entered into MATS by April 7, 2011, for corrective actions that were completed by March 31, 2011. We excluded those recommendations for which the OIG approved, by March 31, 2011, Agency-submitted requests to extend the completion dates. We did not identify any significant Unimplemented recommendations for fiscal years 1998 through 2001, 2003, 2005, and 2006. We did not review recommendations from reports without an OIG agreement on the Agency's corrective action plan (management decision). A list of these reports can be found in appendix 2 of the OIG Semiannual Report to Congress, October 1, 2010 through March 31, 2011. Some Unimplemented recommendations that were excluded from this compendium may, upon further review, be included in the next compendium. A recommendation's exclusion from the ------- Compendium of Unimplemented Recommendations as of March 31, 2011 (Report No. 11-N-0212) compendium does not indicate our determination that the recommendation has been implemented. We limited the inclusion of unimplemented recommendations to those we believe are significant because they could have a material impact on the economy, efficiency, effectiveness, or integrity of EPA programs and operations. For this purpose, we define significant recommendations in the following terms: • Economy: Opportunity to save, prevent loss, or recover at least $500,000 in monetary costs or value • Efficiency: Improvement in the process, capacity, accessibility, or delivery of program objectives and the elimination of unnecessary or unproductive actions or expenses • Effectiveness: Improvement in the quality of, or reduction in the risk to, public health and the environment • Integrity: Improvement in operational accountability, enforcement of and compliance with laws and regulations, and security of resources for public confidence The following EPA offices have unimplemented recommendations listed in this compendium discussion draft: • Office of Administration and Resources Management (OARM) • Office of Enforcement and Compliance Assurance (OECA) • Office of Environmental Information (OEI) • Office of Research and Development (ORD) • Office of Water (OW) • Region 3 • Region 8 We anticipate that the Agency will update MATS on the status of each unimplemented recommendation, including a description of progress, an explanation of the delay in completing an agreed-to action, and any approved extensions of the planned completion dates. ------- Compendium of Unimplemented Recommendations as of March 31, 2011 (Report No. 11-N-0212) Unimplemented Recommendations Action Office: OW Report Title: EPA Needs Procedures to Address Delayed Earmark Projects Report No.: 10-P-0081 Date Issued: 03/22/2010 Report Summary The OIG performed this audit to quantify unused Special Appropriation Act Project (SAAP) funds and to determine whether EPA awarded funds, and grantees used the funds, in a timely manner. The OIG found that EPA still had not obligated some SAAP funds 5 years after Congress appropriated them. Frequently, either earmark recipients could not obtain the matching funds required to obtain the grants, or the projects were complex and required extensive planning. As of April 2009, there were 84 earmarks that Congress appropriated before fiscal year 2004 with unobligated funds totaling over $28 million. Additionally, as of April 2009, there were 119 SAAP grants that EPA awarded prior to fiscal year 2004 that had total funds remaining of over $122 million. In many cases, funds were not completely spent because the recipient had to make changes to the work plan, or the recipient was required to comply with various state and local regulations, thereby delaying the project. EPA established the goal of completing SAAP projects within 5 years of grant award. However, EPA does not believe it has the authority to take action or require corrective action for delayed SAAP earmarks or grants. EPA has no defined process for its regions to contact sponsoring Members of Congress about reallocating unused SAAP funds. EPA needs a policy that specifies time limits and procedures for addressing earmarks that remain unobligated. It should also address steps to be taken when projects are delayed. Currently, unless Congress initiates a rescission, millions of dollars are available for projects that may never get started, while other projects that could improve the environment are not funded. Unimplemented Recommendations Recommendation 2-1: We recommend that the Assistant Administrator for Water, in consultation with OCFO, establish a national policy containing a response framework for handling unobligated earmarks. The framework should include criteria for when to escalate the handling of unobligated earmarks. Recommendation 3-1: We recommend that the Assistant Administrator for Water, in consultation with OCFO, establish a national policy that clearly identifies corrective actions for delayed projects. Recommendation 3-2: We recommend that the Assistant Administrator for Water, in consultation with OCFO, create an exception reporting procedure for delayed projects to focus management attention on such cases. ------- Compendium of Unimplemented Recommendations as of March 31, 2011 (Report No. 11-N-0212) Status: OW agreed to create a response framework to address the issue of unobligated and unliquidated earmark grants. OW also agreed to have the draft issued 6 months after the issuance of the OIG final report and the final 1 year after the OIG report. OW planned to issue a final management plan and begin implementation as of March 30, 2011. These corrective actions, which are past due, are associated with the three recommendations above. As of November 30, 2010, OW had completed the following steps toward the development of the final management plan: • July 30, 2010—Sent the regions a draft management plan for review and comment. • September 30, 2010—Issued a revised draft after incorporating regional comments. • October 6-7, 2010—Discussed the draft document with the regional SAAP coordinators at the Annual SAAP Coordinators' Conference. • November 30, 2010—Submitted a final draft to OW for review and comment.l 1 Subsequent to the close of our reporting period, March 31, 2011, OW informed us that it was revising the final management plan based on comments received. OW expects to finalize the plan by May 31,2011. ------- Compendium of Unimplemented Recommendations as of March 31, 2011 (Report No. 11-N-0212) Action Office: OARM Report Title: Plans to Migrate Data to the New EPA Acquisition System Need Improvement Report No.: 10-P-0071 Date Issued: 02/24/2010 Report Summary The OIG engaged Williams, Adley & Company, LLP, to conduct an audit of EPA's plans for migrating data from the Integrated Contracts Management System (ICMS) to the EPA Acquisition System (EAS). Williams, Adley & Company, LLP, identified that EPA's plans lack sufficient incorporation of data integrity and quality checks to ensure the complete and accurate transfer of procurement data. In particular, the Agency relies heavily on contracting officers to review their own contract data in EAS for overall data accuracy after it has been migrated from ICMS. However, EPA does not require that contracting officers attend data migration training. In addition, EPA does not require verification of the accuracy and completeness of those data in its plans to migrate closed contracts, which will be utilized for historic reporting purposes in EAS. While EAS data validation and edit checks will enforce integrity constraints over user-entered data, proper data migration controls are paramount to ensuring that the acquisition data transfer accurately and completely from ICMS to EAS. Proper data migration controls ensure that data intended for migration arrive in the new system ready for their intended purpose and that erroneous data are identified and corrected prior to release in the new system. By taking steps to improve its data migration strategy, EPA would increase its chances of achieving effective data cleanup prior to migrating ICMS data to EAS. Likewise, incorporation of data integrity checks and manual quality control review of data would provide management with assurance that (1) it could rely on the accuracy and completeness of the data in the new system, and (2) it could report that EPA has effective internal controls over financial reporting as required by OMB Circular A-123, Management's Responsibility for Internal Control. Unimplemented Recommendation Recommendation 3: We recommend that the Director of the Office of Acquisition Management within OARM develop a plan to ensure closed contract data are reviewed for accuracy. Status: OARM concurred with this recommendation. OARM planned the use of the Federal Procurement Data System-Next Generation Verification and Validation Annual Exercise to ensure that closed contract data are reviewed for accuracy. The original agreed-to completion date was November 15, 2010. OARM later indicated it would complete the corrective action by February 28, 2011. This corrective action is past due for completion. ------- Compendium of Unimplemented Recommendations as of March 31, 2011 (Report No. 11-N-0212) Action Office: OW Report Title: EPA Needs Definitive Guidance for Recovery Act and Future Green Reserve Projects Report No.: 10-R-0057 Date Issued: 02/01/2010 Report Summary EPA has not provided clear and comprehensive guidance to states on how to determine the eligibility of green reserve projects. EPA was promoting a green approach to wastewater and drinking water programs for at least a year prior to enactment of the American Recovery and Reinvestment Act of 2009 (ARRA). Despite that experience, EPA did not develop and issue clear and comprehensive guidance in time to meet many of the states' needs. For example, EPA did not provide guidance on how to solicit and select green projects until after many states had finished doing so. Some states felt the need to resolicit for green projects while others did not. EPA's guidance and subsequent updates have not addressed important aspects of project selection. At the time of this review, EPA had not established water and energy efficiency threshold ranges for many types of green projects. In addition, the Agency still had not provided sufficient information to states on how to develop business case justifications for noncategorical projects. Moreover, changes over time in EPA's guidance for how to determine project eligibility resulted in EPA regions applying different standards for approving states' green project proposals. EPA cannot provide reasonable assurance that its green reserve projects will meet the objectives of Congress without issuing guidance that sets definitive expectations. Additionally, future green funding may face similar issues. Unimplemented Recommendations Recommendation 1: We recommend that the Assistant Administrator for Water develop and revise guidance, information, and, as appropriate, specific criteria that states can employ to assist them in identifying projects qualifying for funding from the state's green project reserve. Status: OW indicated that it completed multiple actions within the 12-month deadline of ARRA enactment that were successful in achieving approximately 30 percent green project reserve funding for both the Clean Water State Revolving Fund (CWSRF) and the Drinking Water State Revolving Fund (DWSRF). This accomplishment is well above the 20 percent requirement contained in the statute. OW also developed guidance for regions and states on the green project reserve requirements of EPA's fiscal year 2010 appropriation and issued additional guidance on business cases provided in the appropriation. OW planned to develop eight example business cases for the DWSRF and two fact sheets by July 2010. These corrective actions are past due for completion.2 Recommendation 2: We recommend that the Assistant Administrator for Water conduct a timely review of the states' submitted green projects and, where necessary, accompanying 2 OW submitted a request to the OIG on March 31, 2011, to extend the completion date to October 31, 2011. ------- Compendium of Unimplemented Recommendations as of March 31, 2011 (Report No. 11-N-0212) business cases, in accordance with the pertinent statutory provisions and EPA guidance, information, and criteria. Status: OW indicated that it completed a series of checklists for the regions to use in conducting oversight visits to ensure that the reviews were complete, well documented, and consistent. OW agreed that regions would conduct regular state oversight reviews. The first two state reviews were to be completed by December 2010. At a minimum, regions were to conduct one project site visit per program during this same period. Additionally, oversight visits to the regional offices by national program teams from both the CWSRF and DWSRF were to be completed. The DWSRF visit was to be completed by October 2010, and the CWSRF visit was to be completed by December 2010. These corrective actions are past due for completion.3 3 Subsequent to the close of our reporting period, March 31, 2011, OW informed us that it had completed many of the agreed-to oversight reviews. However, OW had not updated MATS with this information. ------- Compendium of Unimplemented Recommendations as of March 31, 2011 (Report No. 11-N-0212) Action Office: ORD Report Title: EPA's Office of Research and Development Could Better Use the Federal Managers' Financial Integrity Act to Improve Operations Report No.: 09-P-0232 Date Issued: 09/15/2009 Report Summary ORD's management integrity program is inconsistent with Agency Federal Managers' Financial Integrity Act (FMFIA) guidance. ORD approaches FMFIA as an administrative reporting activity rather than an opportunity to evaluate and report on research program performance. As a result, ORD has not: • Conducted a comprehensive risk assessment • Included national program directors in the FMFIA process • Developed and implemented a strategy to establish and evaluate the effectiveness of internal controls over research programs • Provided FMFIA training to managers and staff • Included relevant risk and program performance information in assurance letters EPA Order 1000.24 requires all organizations to systematically review and assess the effectiveness of internal controls consistent with U.S. Government Accountability Office (GAO) internal control standards. The order gives program managers flexibility in designing review strategies. While ORD's largest laboratory, the National Health and Environmental Effects Research Laboratory, informally identifies program risks, neither ORD nor the laboratory conducts internal control risk assessments on which to base a program review strategy. Applying FMFIA as intended would help EPA achieve its mission and program results through improved accountability. ORD's Administrative Efficiencies Project management integrity workgroup has initiated actions that we believe will address our findings, such as developing a draft multiyear review strategy. In developing its new strategy, ORD should include programmatic elements, a training plan, pertinent results from peer reviews, and best practices to ensure more effective FMFIA implementation. Unimplemented Recommendation Recommendation 2-1: We recommend that the Assistant Administrator for Research and Development conduct a risk assessment using the GAO internal control standard for risk assessment and EPA Order 1000.24 and, based upon the results, develop a comprehensive risk- based program review strategy. Status: ORD finalized and posted a strategy to examine and report on internal controls covering programmatic and administrative operation and financial activities to ORD's website in May 2010. ORD's multiyear program review strategy will help ORD officials identify high-risk areas, detect weaknesses and deficiencies, and identify best practices associated with internal controls. ORD is also piloting a risk assessment protocol ------- Compendium of Unimplemented Recommendations as of March 31, 2011 (Report No. 11-N-0212) intended to aid its management and management integrity coordinators with conducting a risk assessment. All of ORD's assessable units will use this tool to identify and prioritize existing program and administrative/research support risks. The risk assessment protocol summarizes the roles and responsibilities as described in ORD:'s Management Integrity Program manual. Like the manual, ORD centered the protocol on programmatic operations. The protocol, which is still ongoing, was launched in one of ORD's laboratories to see how well the protocol and manual support the risk assessment process. ORD agreed to review its processes, test key internal controls related to ORD activities, and assess programmatic and administrative risks by August 2010. After completing the risk assessment, ORD agreed to revise its multiyear program review strategy as necessary by September 2010. These agreed-to corrective actions are past due for completion. ORD indicated that it plans to complete an organization-wide risk assessment by August 31, 2011. 10 ------- Compendium of Unimplemented Recommendations as of March 31, 2011 (Report No. 11-N-0212) Action Office: OW Report Title: EPA Needs to Accelerate Adoption of Numeric Nutrient Water Quality Standards Report No.: 09-P-0223 Date Issued: 08/26/2009 Report Summary EPA's 1998 national strategy and plan to promote state adoption of nutrient water quality standards to better protect aquatic life and human health have been ineffective. In 1998, EPA stated that a critical need existed for improved water quality standards, given the number of waters that were impaired from nutrients. In the 11 years since EPA issued its strategy, half the states still had no numeric nutrient standards. States have not been motivated to create these standards because implementing them is costly and often unpopular with various constituencies. EPA has not held the states accountable to committed milestones. The current approach does not assure that states will develop standards that provide adequate protection for downstream waters. Until recently, EPA has not used its Clean Water Act (CWA) authority to promulgate water quality standards for states. EPA cannot rely on the states alone to ensure that numeric nutrient standards are established. EPA should prioritize states/waters significantly impacted by excess nutrients and determine whether it should set the standards. EPA should also establish effective monitoring and measures so that accurate program progress is reported. Accurate reporting will assist EPA management in program decision-making. Unimplemented Recommendations Recommendation 2-1: We recommend that the Assistant Administrator for Water select significant waters of national value which need numeric nutrient water quality standards to meet the requirements of the CWA. Status: OW developed a list of selection factors to consider when identifying and prioritizing states and waters that need numeric nutrient water quality standards to meet the requirements of the CWA. OW is developing a Nutrient Screening Tool that includes state-specific data for each factor so that EPA can apply these factors to compare states on a national basis with regard to the risk and impact of nutrient impairment, and to assess a state's progress toward mitigating nitrogen and phosphorus pollution. The tool will help EPA to evaluate whether numeric nutrient criteria are necessary for a given state and to prioritize states for possible CWA Section 303(c) determinations. The agreed-to completion date was May 31, 2010. Additional time was needed to refine the selection factors and to collect and verify the state data. This corrective action is past due for completion. OW also agreed to assess availability of resources and determine the number of evaluations and possible determinations that can be funded. Given the funding and full-time equivalent that OW has already dedicated and continues to put toward the determination and promulgation of nutrient criteria, OW determined it would not have the capacity to initiate another determination in 2010, as planned. 11 ------- Compendium of Unimplemented Recommendations as of March 31, 2011 (Report No. 11-N-0212) Recommendation 2-3: We recommend that the Assistant Administrator for Water establish EPA and state accountability for meeting milestones for adopting numeric nutrient water quality standards for those waters in the rest of the nation that require them. EPA should do this by: a. Requiring states to develop milestones based on resources available b. Reviewing those milestones and approving them as appropriate Recommendation 2-4: We recommend that the Assistant Administrator for Water establish metrics to gauge the actual progress made by states in adopting numeric nutrient water quality standards. Recommendation 2-5: We recommend that the Assistant Administrator for Water ensure that the regions annually validate Water Quality Standards Action Tracking Application data. Status: OW indicated that it revised the program activity measures for nutrient criteria in the National Water Program Guidance, which will guide state actions for 2011. The guidance describes the more aggressive approach EPA will use regarding overseeing state performance in developing nutrient criteria. OW also indicated that it developed a template to assist EPA regions in their performance discussions with states to provide consistent information regarding the development and documentation of milestones and measurable expectations for numeric nutrient criteria development. Next, OW will launch a revised nutrient criteria website with more comprehensive information on the progress of states to better track progress and routinely update/maintain the information contained therein. These corrective actions are associated with the three recommendations above. The website has been revised to provide more information on state progress and to provide the public more information regarding the nature and scope of the nutrient pollution problem. The expansion of this effort has delayed its launch because EPA senior managers determined that these changes should be made before the revised website is launched. Additionally, the official launching of this effort has been delayed due to a significant change in EPA's website format, which was institutionalized in mid-2010. OW had not foreseen this major change in website formatting when making the original commitment. EPA must now migrate the revised site into the new format. This migration will take a considerable amount of effort, but EPA expects that the revised website will be launched in June 2011. The agreed-to completion date was December 31, 2010. This corrective action is past due for completion. 12 ------- Compendium of Unimplemented Recommendations as of March 31, 2011 (Report No. 11-N-0212) Action Office: Region 8 Report Title: Oglala Sioux Single Audits—Corrective Actions Taken but Improvements Needed in Resolving Costs Report No.: 08-P-0213 Date Issued: 07/28/2008 Report Summary EPA Region 8 continues to take actions to resolve the internal control findings in single audit reports. Region 8 identified the Oglala Sioux Tribe as high risk, requested a corrective action plan, and reviewed the tribe's accounting documentation. However, Region 8 did not monitor implementation of the corrective actions in MATS until all actions were completed. As a result, the Agency was not accurately reporting on its status of implementing corrective actions resulting from audit reports. Region 8 did not obtain sufficient documentation to support resolving $2.5 million in questioned costs. The documentation for resolving the questioned costs was not from the Oglala Sioux Tribe's official accounting system and did not reconcile to the costs claimed. Region 8 did not resolve these issues before concluding that the tribe did incur the costs. Without sufficient documentation to support resolving questioned costs, the region cannot ensure those costs were allowable under the EPA grants. Unimplemented Recommendation Recommendation 1: We recommend that the Region 8 Regional Administrator track the remaining corrective action that the Oglala Sioux Tribe has not implemented in MATS, or submit a revised corrective action plan to the OIG for evaluation. Status: Region 8 agreed to arrange for ongoing training and technical assistance for the accounting staff. Region 8 plans to work with the Oglala Sioux Finance Department to provide training to the tribal program directors on the expectations for compliance with specific provisions of the grants management common rule and OMB Circulars A-87, A-102, and A-133. The training is to take place in May 2011. Region 8 agreed to complete this corrective action by December 31, 2006. This corrective action is past due for completion. 13 ------- Compendium of Unimplemented Recommendations as of March 31, 2011 (Report No. 11-N-0212) Action Office: Region 3 Report Title: Despite Progress, EPA Needs to Improve Oversight of Wastewater Upgrades in the Chesapeake Bay Watershed Report No.: 08-P-0049 Date Issued: 01/08/2008 Report Summary Chesapeake Bay wastewater treatment facilities were at risk of not meeting the 2010 deadline for nutrient reductions if key facilities were not upgraded in time. In the 7 years since signing the Chesapeake 2000 Agreement, EPA and its state partners have taken a number of steps to lay the foundation for achieving the 2010 wastewater nutrient reduction goals. Water quality standards have been set, nutrient loadings have been allocated, and nutrient limits are beginning to be incorporated into permits. However, states need to finish adding nutrient limits to the National Pollutant Discharge Elimination System (NPDES) permits, and the facilities will need to make significant reductions in the 3 years remaining before the deadline. It is critical that these reductions be maintained once the reduction goals are achieved. Significant challenges include generating sufficient funding and addressing continuing population growth. EPA needs to better monitor progress to ensure that needed upgrades occur on time and loading reductions are achieved and maintained. Otherwise, Chesapeake Bay waters will continue to be impaired, adversely affecting the ecosystem that supports commercial and recreational uses. Unimplemented Recommendation Recommendation 2-1: We recommend that the Region 3 Regional Administrator instruct staff to review and comment on state-drafted NPDES permits for significant facilities to ensure that interim construction milestones are included in compliance schedules longer than 1 year to meet the Chesapeake Bay allocations. The milestones should include design completion, construction start, construction completion, and compliance with permit limits. Status: Region 3 will continue to review and comment on state-drafted NPDES permits for significant facilities. Region 3 will assure that interim construction milestones are in place if the compliance schedule to achieve the permit limit exceeds 1 year. Region 3 will seek to include the following milestones as appropriate in the permits: design completion, construction start, construction completion, and compliance with permit limits. The agreed-to completion date for the corrective action was December 31, 2010. The corrective action is past due for completion.4 4 Subsequent to the close of our reporting period, March 31, 2011, Region 3 informed us that it has completed all of the corrective actions and is closing this audit in MATS. 14 ------- Compendium of Unimplemented Recommendations as of March 31, 2011 (Report No. 11-N-0212) Action Office: OECA Report Title: Overcoming Obstacles to Measuring Compliance: Practices in Selected Federal Agencies Report No: 2007-P-00027 Date Issued: 06/20/2007 Report Summary Federal regulatory agencies with missions and obstacles similar to EPA's use statistical methods to generate compliance information. They use this information to monitor their enforcement and compliance programs and demonstrate program results. These federal programs extensively use statistical methods to identify and analyze risk, set goals, develop strategies to manage the most significant risks, and report their accomplishments. The federal programs we reviewed face obstacles similar to those OECA faces, and they use practical approaches to overcome those obstacles that OECA could potentially apply to its programs. Other programs apply statistical methods, such as selective random inspections, to develop and publish compliance and other rates for their regulated populations. Some programs collect data through national surveys, while others require states to submit data as a condition of grant agreements. Programs do not use statistical methods solely for reporting compliance rates. Programs reported that other benefits include identifying previously unknown risks, quantifying results, verifying the effectiveness of targeting schemes, and maximizing limited resources. Unimplemented Recommendation Recommendation 2-1: We recommend that the Assistant Administrator for Enforcement and Compliance Assurance establish a plan of action with milestones to incorporate using statistical methods to demonstrate the results of EPA's enforcement and compliance strategies. Status: OECA has been working continuously to develop the measures and the implementation strategies for the initiatives. Because these measures are new and will direct Agency-wide enforcement resources for some time, this complex project has been given the highest priority. These measures are new and different than what have been historically used by the Agency; the goal is to provide a set of strategic measures that better describe the progress and benefits derived from enforcement and compliance actions. These new experimental measures for the National Enforcement and Compliance Initiatives are almost complete, but need final review by OECA's senior management. The agreed-to completion date was December 31, 2010. The corrective action is past due for completion.5 5 OECA submitted a request to the OIG on March 25, 2011, to extend the completion date to July 5, 2011. Subsequent to the close of our reporting period, March 31, 2011, the OIG approved the request. 15 ------- Compendium of Unimplemented Recommendations as of March 31, 2011 (Report No. 11-N-0212) Action Office: OEI Report Title: EPA Could Improve Controls Over Mainframe System Software Report No.: 2007-P-00008 Date Issued: 01/29/2007 Report Summary The OIG engaged KPMG, LLP, to conduct an audit of access to and modification of EPA's mainframe system software housed at the Agency's National Computer Center. The National Computer Center is located at the Research Triangle Park Campus in Raleigh, North Carolina. KPMG identified several weaknesses in EPA's internal controls over its mainframe systems software, including: • Roles and responsibilities were not clearly assigned. • Change controls were not performed in accordance with Agency policies. • Policies, procedures, and guides could be strengthened. • Security settings for sensitive datasets and programs were not effectively configured or implemented. As a result of these weaknesses, EPA is exposed to greater risk since its mainframe system software could potentially be compromised. Unimplemented Recommendation Recommendation 9: We recommend that the Director of the Office of Technology Operations and Planning within OEI complete efforts to update the OEI Information Security Manual and the EPA Information Security Manual. Subsequent to finalizing the changes, ensure the manuals are: (1) reviewed timely by EPA management for adequacy, accuracy, and completeness; and (2) approved by EPA management in a timely manner. Status: OEI determined that updating the Agency Network Security Manual would be more appropriate than updating the OEI Information Security Manual and the EPA Information Security Manual. OEI has developed a schedule for approval/signature of the Agency Network Security Manual. The Quality and Information Council must review and approve it. The agreed-to completion date was March 30, 2011. The corrective action is past due for completion.6 6 OEI submitted a request to the OIG on March 29, 2011, to extend the completion date to September 15, 2011. The request was submitted too late to be approved before the end of the reporting period, March 31, 2011. 16 ------- Compendium of Unimplemented Recommendations as of March 31, 2011 (Report No. 11-N-0212) Action Office: OEI Report Title: EPA Could Improve Processes for Managing Contractor Systems and Reporting Incidents Report No.: 2007-P-00007 Date Issued: 01/11/2007 Report Summary EPA uses contractors to collect and process information on its behalf. EPA's Computer Security Incident Response Capability defines the formal process by which EPA responds to computer- security-related incidents. We found that EPA had not established procedures to ensure identification of all contractor systems. Further, EPA had not ensured that information security requirements were accessible for the contractors and appropriately maintained. Although EPA offices were aware of the Agency's computer security incident response policy, many offices lacked local reporting procedures, had not fully implemented automated monitoring tools, and did not have access to network attack trend information necessary to implement proactive defensive measures. The report was issued to OEI and OARM. OARM reported in MATS that its one corrective action has been completed. Unimplemented Recommendation Recommendation 2-1: We recommend that the Assistant Administrator for Environmental Information develop and implement guidance that EPA offices can use to identify contractor systems that contain EPA data. Status: OEI planned to update its Information Security Manual io include procedures EPA offices can use to identify contractor systems that contain EPA data. The original agreed-to date for completion of this corrective action was September 18, 2008. OEI indicated it is following OMB Memorandum M-09-29, FY 2009 Reporting Instructions for the Federal Information Security Management Act and Agency Privacy Management (August 20, 2009), as required. This guidance pertains to contractor systems and the types of information systems that have contractor involvement. In a followup audit (Report No. 09-P-0240, Project Delays Prevent EPA from Implementing an Agency-wide Information Security Vulnerability Management Program, September 21, 2009), the OIG determined that this recommendation had not been completed. The OIG recommended that OEI update the status of this recommendation in MATS and establish plans of action and milestones for this recommendation. OEI reopened this recommendation in MATS with a planned completion date of March 30, 2011. The corrective action is past due for completion.7 7 OEI submitted a request to the OIG on March 29, 2011, to extend the completion date to September 15, 2011. The request was submitted too late to be approved before the end of the reporting period, March 31, 2011. 17 ------- Compendium of Unimplemented Recommendations as of March 31, 2011 (Report No. 11-N-0212) Action Office: OW Report Title: EPA Needs to Reinforce Its National Pretreatment Program Report No: 2004-P-00030 Date Issued: 09/28/2004 Report Summary The reductions in industrial waste discharges to the nation's sewer systems that characterized the early years of the pretreatment program have not endured. Since the mid-1990s, there has been little change in the volume of a broad list of toxic pollutants transferred to publicly owned treatment works (POTW) or in the index of risk associated with these pollutants. As a result, the performance of EPA's pretreatment program, which is responsible for controlling these discharges, is threatened, and progress toward achieving the CWA goal of eliminating toxic discharges that can harm water quality has stalled. The curtailing of the early gains may be explained in part by two factors: (1) dischargers that developed systems in response to EPA's initial program requirements have not enhanced their pretreatment systems in recent years, and (2) the rate at which EPA has been issuing effluent guidelines dramatically declined since 1990. Without more visible leadership from headquarters, improved programmatic information, and the adoption of results-based performance measures, EPA's pretreatment program is at risk of losing the gains it made in its early years. Unimplemented Recommendation Recommendation 4-1: We recommend that the Assistant Administrator for Water direct staff to develop a long-term strategy to identify the data it needs for developing pretreatment results- based measurements; determine the resources necessary to carry out the strategy; and gain the support of other Agency, state, and POTW staff to carry out the strategy. Provide milestones for the development of this strategy to the OIG, and if this strategy cannot be completed within 90 days of report issuance, provide quarterly progress reports to the OIG until results-based measures are developed. Status: OW agreed to request information on databases used by the EPA regions and states to store information regarding POTW pretreatment program performance. Through the Permitting for Results process, OW will compile information regarding current data systems used to store pretreatment data at the EPA regional and state level. OW intends to use this information to identify inaccurate data and target data correction in the Permit Compliance System. Both of these activities are crucial to facilitate migration and retention of data as OW transitions to the Integrated Compliance Information System. Once these efforts are complete, OW will be able to determine a long-term strategy based on data availability and resources, which should ultimately assist it in developing pretreatment result-based measurements. OW indicated it has not met its commitment with respect to pretreatment because developing a long-term strategy for results-based measurements and gaining support of stakeholders has proven to be more complex than initially expected. As part of its plan of action to address the OIG recommendations, OW agreed to assess data collection, methods of data collection, and data availability and accessibility on pretreatment 18 ------- Compendium of Unimplemented Recommendations as of March 31, 2011 (Report No. 11-N-0212) program performance. OW examined information on EPA regions' and states' databases used to store program information. Although data considered crucial to program management were historically required through policy, OW determined that data input into a central, national database was inconsistent for the past 20 years. Instead, programmatic data were maintained in decentralized databases within each state and/or EPA regional office. To resolve the centralized data entry challenges identified by states and EPA regions, EPA is developing an educational handbook for non-program managers that identifies the environmental and economic merits of implementing the pretreatment program, developing new guidance to minimize data quality errors and facilitate data upload to a centralized database (necessary for national reporting requirements), and exploring ways to reduce the burden of data entry into a centralized database through the CWA Action Plan. Currently, EPA is pursuing the proposal of the NPDES Electronic Reporting Rule to define NPDES reporting necessary to manage the national NPDES Program and achieve the tools needed to populate EPA's data systems. The agreed-to completion date for these corrective actions was September 30, 2007. These corrective actions are past due for completion. 19 ------- Compendium of Unimplemented Recommendations as of March 31, 2011 (Report No. 11-N-0212) Action Office: OW Report Title: Wastewater Management: Controlling and Abating Combined Sewer Overflows Report Number: 2002-P-00012 Date Issued: 08/26/2002 Report Summary Combined sewer overflows (CSOs) are the total discharges into water bodies of untreated domestic, commercial, and industrial waste; wastewater; and storm water runoff. CSOs can adversely affect the health of humans, animals, and aquatic organisms, as well as cause beach closings and fishing and recreational restrictions. Many communities do not have the data to determine the effect of CSO controls on water quality. Most communities were only monitoring the number, volume, and duration of CSO discharges, and did not have data on the effect that CSO controls were having on the quality of receiving waters. EPA does not require monitoring until completion of CSO projects. Consequently, whether each CSO project was a wise investment of taxpayer dollars could not be determined until it was too late. Unimplemented Recommendation Recommendation 5-1; We recommend that the Assistant Administrator for Water work with CSO permitting authorities and communities to assure they negotiate and establish the proper level of interim monitoring of CSO efforts to determine the impact of the project on water quality. Status: OW agreed to initiate an effort at EPA headquarters to develop a compilation of the monitoring approaches that are or may be used in different situations. This compilation will help permit writers develop appropriate monitoring expectations for those permittees that have completed construction of their planned CSO controls. OW has developed CSO monitoring guidance for developing and conducting postconstruction water quality monitoring programs that can be used to verify compliance with water quality standards, as well as to ascertain the effectiveness of CSO controls. This guidance was reviewed by OW's regional offices and revised to reflect their comments. The guidance, while still in draft, is available for use. However, due to budget uncertainties, further development of this guidance has been delayed. The agreed-to completion date was September 30, 2009. This corrective action is past due for completion8. EPA's current CSO policy requires permittees to conduct post-construction water quality monitoring to verify compliance with water quality standards and protection of designated uses, as well as to ascertain the effectiveness of CSO controls. Under the NPDES program, permitting authorities are responsible for determining the level of monitoring necessary to assess the effectiveness of the CSO controls. The guidance will help permit writers develop appropriate monitoring expectations for permittees who have completed construction of their planned CSO controls. 8 OW submitted a request to the OIG on March 31, 2011, to extend the completion date to September 30, 2012. The request was submitted too late to be approved before the end of the reporting period, March 31, 2011. 20 ------- Compendium of Unimplemented Recommendations as of March 31, 2011 (Report No. 11-N-0212) Appendix A OIG Reports With Unimplemented Recommendations by Program Office as of March 31, 2011 OARM 10-P-0071 Plans to Migrate Data to the New EPA Acquisition System Need Improvement OECA 2007-P-00027 Overcoming Obstacles to Measuring Compliance: Practices in Selected Federal Agencies OEI 2007-P-00008 EPA Could Improve Controls Over Mainframe System Software 2007-P-00007 EPA Could Improve Processes for Managing Contractor Systems and Reporting Incidents ORD 09-P-0232 EPA's Office of Research and Development Could Better Use the Federal Managers' Financial Integrity Act to Improve Operations ow 10-P-0081 EPA Needs Procedures to Address Delayed Earmark Projects 10-R-0057 EPA Needs Definitive Guidance for Recovery Act and Future Green Reserve Projects 09-P-0223 EPA Needs to Accelerate Adoption of Numeric Nutrient Water Quality Standards 2004-P-00030 EPA Needs to Reinforce Its National Pretreatment Program 2002-P-00012 Wastewater Management: Controlling and Abating Combined Sewer Overflows Resion 3 08-P-0049 Despite Progress, EPA Needs to Improve Oversight of Wastewater Upgrades in the Chesapeake Bay Watershed Resion 8 08-P-0213 Oglala Sioux Single Audits—Corrective Actions Taken but Improvements Needed in Resolving Costs 21 ------- Compendium of Unimplemented Recommendations as of March 31, 2011 (Report No. 11-N-0212) Appendix B Unimplemented Recommendations: Current Compendium Compared to 10/26/10 Compendium Continuing Unimvlemented Recommendations 10-R-0057 EPA Needs Definitive Guidance for Recovery Act and Future Green Reserve Projects (Recommendation 1) 09-P-0223 EPA Needs to Accelerate Adoption of Numeric Nutrient Water Quality (Recommendation 2-1) 08-P-0213 Oglala Sioux Single Audits—Corrective Actions Taken but Improvements Needed in Resolving Costs (Recommendation 1) 2007-P-00008 EPA Could Improve Controls Over Mainframe System Software (Recommendation 9) 2004-P-00030 EPA Needs to Reinforce Its National Pretreatment Program (Recommendation 4-1) 2002-P-00012 Wastewater Management: Controlling and Abating Combined Sewer Overflows (Recommendation 5-1) New Unimvlemented Recommendations 10-P-0081 EPA Needs Procedures to Address Delayed Earmark Projects (Recommendations 2-1,3-1, and 3-2) 10-P-0071 Plans to Migrate Data to the New EPA Acquisition System Need Improvement (Recommendation 3) 10-R-0057 EPA Needs Definitive Guidance for Recovery Act and Future Green Reserve Projects (Recommendation 2) 09-P-0232 EPA's Office of Research and Development Could Better Use the Federal Managers' Financial Integrity Act to Improve Operations (Recommendation 2-1) 09-P-0223 EPA Needs to Accelerate Adoption of Numeric Nutrient Water Quality (Recommendations 2-3,2-4, and 2-5) 08-P-0049 Despite Progress, EPA Needs to Improve Oversight of Wastewater Upgrades in the Chesapeake Bay Watershed (Recommendation 2-1) 2007-P-00027 Overcoming Obstacles to Measuring Compliance: Practices in Selected Federal Agencies (Recommendation 2-1) 2007-P-00007 EPA Could Improve Processes for Managing Contractor Systems and Reporting Incidents (Recommendation 2-1) 22 ------- Compendium of Unimplemented Recommendations as of March 31, 2011 (Report No. 11-N-0212) Removed Unimplemented Recommendations Note: Removal of an Unimplemented recommendation does not imply that it was verified as implemented, but rather that it was reported as being completed or that the target completion date has been revised with OIG approval. 10-P-0065 EPA Can Improve Its Preparation and Use of Independent Government Cost Estimates for Superfund Contracts (Recommendation 2-5) 10-P-0002 Review of Hotline Complaint on Employee Granted Full-Time Work-at-Home Privileges (Recommendations 2a and 2b) 09-P-0197 EPA Should Delay Deploying Its New Acquisition System until Testing is Completed (Recommendation 1) 08-P-0141 EPA Needs to Track Compliance with Superfund Cleanup Requirements (Recommendation 4) 08-P-0049 Despite Progress, EPA Needs to Improve Oversight of Wastewater Upgrades in the Chesapeake Bay Watershed (Recommendation 2-4) 2007-P-00036 Total Maximum Daily Load Program Needs Better Data and Measures to Demonstrate Environmental Results (Recommendation 1-2) 2007-P-00017 EPA Needs to Strengthen Financial Database Security Oversight and Monitor Compliance (Recommendation 4) 2006-P-00007 More Information is Needed on Toxaphene Degradation Products (Recommendation 2) 2005-P-00010 Substantial Changes Needed in Implementation and Oversight of Title V Permits If Program Goals Are to be Fully Realized (Recommendations 2-1,2-2, and 2-3) 23 ------- |