Open Recommendations

Ensure CORs formally appoint technical monitors for overseeing the contractors and include in the appointment letter a detailed description of the monitoring responsibilities.

For IPT procurements including the Agile method, ensure IPT team members who participate in contractor oversight receive appropriate training on their roles and responsibilities.

Develop IPT processes and procedures for overseeing contractors to include integration of key roles into the procurement oversight process according to the Quality Assurance Surveillance Plan standards.

Develop and implement a mechanism in an electronic system to ensure that contract actions that require legal reviews according to PBGC policy receive these reviews and that disagreements with legal sufficiency comments are communicated to OGC.

Software that is no longer supported or receiving regular security updates from the vendor should be upgraded to supported versions with relevant security patches.

Conduct experience study over for theSpouse age difference for seriatim andphase out liability for unlocatable missingparticipant assumptions.

Due to the sensitive nature of the findings and recommendations in this report, its disclosure has been restricted.

Due to the sensitive nature of the findings and recommendations in this report, its disclosure has been restricted.

We recommend PBGC management to coordinate with its CSP to update its service agreement and shared responsibility matrix to address ambiguities regarding accountable parties for key controls and develop and implement a contingency plan for the system.

Periodically monitor the satisfaction of the system risk assessment and POA&M creation requirements to help ensure ongoing compliance associated with the timely completion of and updates to system risk assessments and documentation and tracking of…