OIG-24-A-09, Status of Recommendations: Audit of the U.S. Nuclear Regulatory Commission’S Contract Management of Information Technology Services, Dated, March 17, 2025
| ML25076A300 | |
| Person / Time | |
|---|---|
| Issue date: | 03/17/2025 |
| From: | Virkar H NRC/OIG/AIGA |
| To: | Mirela Gavrilas NRC/EDO |
| References | |
| OIG-24-A-09 | |
| Download: ML25076A300 (1) | |
Text
NRC Headquarters l 11555 Rockville Pike l Rockville, Maryland 20852 l 301.415.5930 nrcoig.oversight.gov MEMORANDUM DATE:
March 17, 2025 TO:
Mirela Gavrilas Executive Director for Operations FROM:
Hruta Virkar, CPA /RA/
Assistant Inspector General for Audits & Evaluations
SUBJECT:
STATUS OF RECOMMENDATIONS: AUDIT OF THE U.S.
NUCLEAR REGULATORY COMMISSIONS CONTRACT MANAGEMENT OF INFORMATION TECHNOLOGY SERVICES (OIG-24-A-09)
REFERENCE:
ACTING DIRECTOR, OFFICE OF ADMINISTRATION, MEMORANDUM DATED MARCH 7, 2025 Attached is the Office of the Inspector Generals (OIG) analysis and status of recommendations as discussed in the agencys response dated March 7, 2025.
Based on this response, recommendations 1 and 2 are now closed. Therefore, all recommendations are now closed.
If you have any questions or concerns, please call me at 301.415.1982 or Mike Blair, Team Leader, at 301.415.8399.
Attachment:
As stated cc: J. Martin, ADO D. Lewis, DADO J. Jolicoeur, OEDO OIG Liaison Resource EDO ACS Distribution
Audit Report AUDIT OF THE U.S. NUCLEAR REGULATORY COMMISSIONS CONTRACT MANAGEMENT OF INFORMATION TECHNOLOGY SERVICES Status of Recommendations (OIG-24-A-09) 2 Recommendation 1:
Develop and implement agency guidance on how and when Service Level Agreements (SLAs) should be included in Information Technology (IT) contracts.
Agency Response Dated March 7, 2025:
Completed. The Office of the Chief Information Officer (OCIO) has developed the attached Service Level Agreement Guidance for IT Contracts. This guidance has been uploaded to the NRCs Enterprise Acquisition Toolset (NEAT) which provides acquisition guidance and templates for NRC Contracting Officers Representatives.
OIG Analysis:
The OIG was able to locate and review the Service Level Agreement Guidance for IT Contracts in NEAT. The NRCs actions meet the intent of this recommendation; therefore, this recommendation is now closed.
Status:
Closed
Audit Report AUDIT OF THE U.S. NUCLEAR REGULATORY COMMISSIONS CONTRACT MANAGEMENT OF INFORMATION TECHNOLOGY SERVICES Status of Recommendations (OIG-24-A-09) 3 Recommendation 2:
Develop and implement a method to prioritize NRC contract closeout, including:
- a. Updating agency guidance to describe current practices for contract closeout and deobligation;
- b. Reinforcing contract closeout policy to the CORs and acquisition personnel through formal communications and refresher training on the closeout process; and,
- c. Creating a procedure to track closeout requisitions, from submission to completion, that results in the timely completion of closeouts by the AMD. The tracking information should include, among other things, contract type, date the CO received evidence of physical completion, funding allocation, and, where the expired contract is in the contract management process.
Agency Response Dated March 7, 2025:
Completed. The Office of Administration (ADM),
Acquisition Management Division (AMD), completed the update of Management Directive 11.1, NRC Acquisition of Supplies and Services, which describes current practices for contract closeout and deobligation. In addition, ADM/AMD provided multiple training sessions on the contract closeout process for agency Contracting Officers Representatives (CORs). ADM/AMD created the Closeout Summary Dashboard on NRC Enterprise Acquisition Tool (NEAT),
which provides a way for CORs, Funds Certifying Officials and AMD staff to track closeout requisitions including contract type, the date the requisition was submitted, funding allocations and if the contract has been closed or not. Multiple training sessions on this tool were provided to all the stakeholders who may use the dashboard, and a recording of one of these sessions has been posted on NEAT for reference.
Audit Report AUDIT OF THE U.S. NUCLEAR REGULATORY COMMISSIONS CONTRACT MANAGEMENT OF INFORMATION TECHNOLOGY SERVICES Status of Recommendations (OIG-24-A-09) 4 Recommendation 2 (continued):
OIG Analysis:
The OIG was able to locate and review the updated MD 11.1, the Closeout Process Trainings from March and November 2024, and the Closeout Dashboard Training provided to staff in November 2024. The OIG also reviewed the Closeout Summary Dashboard in NEAT. The NRCs actions meet the intent of this recommendation; therefore, this recommendation is now closed.
Status:
Closed