Report Contents
What OIG Inspected
OIG inspected the executive direction, program and policy implementation, management controls, and resource management operations of Embassy Guatemala City.
What OIG Recommended
This report includes 24 recommendations. OIG made 23 recommendations to Embassy Guatemala City to improve Public Diplomacy, International Narcotics and Law Enforcement, Consular, General Services, Human Resources, and
In its Information Management operations. OIG also made one recommendation to the Bureau of Diplomatic Security regarding the embassy’s Sensitive But Unclassified computer network. In its comments on the draft report, the Department concurred with all 24 recommendations. OIG considers the recommendations resolved. The Department’s response to each recommendation, and OIG’s reply, can be found in the Recommendations section of this report. The Department’s formal written response is reprinted in its entirety in Appendix B.
What OIG Found
- The Ambassador and the Deputy Chief of Mission set an inclusive, positive tone and promoted strong coordination among country team members focused on Embassy Guatemala City’s strategic goals of countering the flow of narcotics to the United States and dealing with good governance, prosperity, and security issues.
- Embassy Guatemala City experienced 44 percent growth in authorized Department of State American positions and 63 percent growth in authorized American positions of other agencies from 2008 through 2017. Insufficiently coordinated staffing growth placed at risk the Department’s ability to successfully plan and execute construction of a new embassy compound.
- The Bureau of International Narcotics and Law Enforcement Affairs’ aviation program in Guatemala failed to achieve program goals.
- Internal control deficiencies existed across embassy sections in contract, grants, property management, and occupational health and safety.
- Significant issues in the embassy Information Management operations created cybersecurity risks. These concerns stemmed from ineffective information technology configuration control and inadequate monitoring of the embassy’s computer networks.
Report Terms
Report Recommendations
Embassy Guatemala City should track and report to the Department accurate staffing levels needed to plan for the new embassy compound.
Embassy Guatemala City, in coordination with the Bureau of International Narcotics and Law Enforcement Affairs, should develop and monitor benchmarks for its Bureau of International Narcotics and Law Enforcement Affairs aviation program to improve administrative, technical, and operational capabilities of Guatemala’s aviation operations.
Embassy Guatemala City should document Contracting Officer’s Representative and payment files in accordance with Department standards.
Embassy Guatemala City should complete an annual end-use monitoring plan that includes procedures for monitoring defense articles and ensuring separation of duties.
Embassy Guatemala City should institute internal controls consistent with Department standards for personal property procured by the International Narcotics and Law Enforcement Affairs Section.
Embassy Guatemala City should follow Federal Assistance Directive requirements with respect to monitoring and risk assessments in its Public Affairs Section grants.
Embassy Guatemala City should comply with Department standards for management of the American Space.
Embassy Guatemala City should complete a comprehensive assessment of its warden system and improve the organization and efficiency of warden program operations.
Embassy Guatemala City, in coordination with the Bureau of Human Resources, should complete updates to the local compensation plan.
Embassy Guatemala City should submit its overdue allowance reports to the Bureau of Administration.
Embassy Guatemala City, in coordination with the Bureau of Overseas Buildings Operations, should perform seismic evaluations of its residential properties in accordance with Department standards.
Embassy Guatemala City should perform required annual inspections of all work areas and semi-annual inspections of increased risk work areas and operations in accordance with Department standards.
Embassy Guatemala City should require that all chauffeurs and incidental drivers under Chief of Mission authority comply with applicable Department motor vehicle safety requirements.
Embassy Guatemala City should require that Information Systems Security Officers perform duties specified in Department guidance.
Embassy Guatemala City should require its local Information Technology Configuration Control Board to follow Department guidance.
The Bureau of Diplomatic Security, in coordination with the Bureau of Information Resource Management and Embassy Guatemala City, should audit the embassy’s Sensitive But Unclassified network to ensure it complies with Department standards.
Embassy Guatemala City should inventory, secure, monitor, and register its dedicated internet networks with the Bureau of Information Resource Management.
Embassy Guatemala City should conduct an assessment of the Bureau of International Narcotics and Law Enforcement Affairs’ wireless dedicated internet network based on the National Institute of Standards and Technology Risk Management Framework and implement appropriate controls to protect the information stored on the network.
Embassy Guatemala City should manage its classified and unclassified Active Directory groups in accordance with Department standards.
Embassy Guatemala City should implement standard operating procedures for managing its classified and unclassified networks.
Embassy Guatemala City should conduct annual tests of the information technology contingency plans for unclassified and classified networks in accordance with Department standards.
Embassy Guatemala City should implement a plan for conducting initial and annual refresher information technology contingency training for employees with information technology contingency planning responsibilities.
Embassy Guatemala City should protect its network devices in accordance with the Department standards.
Embassy Guatemala City should relocate the telecommunications demarcation point outside the limited access main telephone frame room.