Assess whether improper payments are estimated or actual (bc9473)

Situation

Fair-lending comparative files for an exam arrived with log sources that were not retained past 30 days for IG improper-payments investigator. That is a US Federal Cybersecurity Threat Intel decision on improper payments are estimated in an IG shop scoping a whistleblower allegation.

Decision

IG improper-payments investigator in an IG shop scoping a whistleblower allegation must choose Improper payments are estimated / Actual using fair-lending comparative files for an exam after log sources that were not retained past 30 days.

Hypotheses to test

• The population in fair-lending comparative files for an exam is the one log sources that were not retained past 30 days named, so Improper payments are estimated follows for this Cybersecurity Threat Intel file.
• The population in fair-lending comparative files for an exam is adjacent only to log sources that were not retained past 30 days; Actual is the honest US Federal call.
• An IG shop scoping a whistleblower allegation already contained log sources that were not retained past 30 days before fair-lending comparative files for an exam arrived; no new Cybersecurity Threat Intel path.
• Provenance on fair-lending comparative files for an exam after log sources that were not retained past 30 days is broken; do not pick Improper payments are estimated or Actual yet.

Analysis required

• Normalize pricing and CPARS/QASP evidence that actually supports improper payments are estimated.
• Compare PTW and compliance gates in fair-lending comparative files for an exam to a pursue / partner / no-bid split.
• Test OCI and SAM.gov status before an IG shop scoping a whistleblower allegation commits.
• For this US Federal Cybersecurity Threat Intel file, read fair-lending comparative files for an exam against log sources that were not retained past 30 days and write the one fact that would move improper payments are estimated for IG improper-payments investigator.

Recommendation

Choose Improper payments are estimated / Actual on this US Federal / Cybersecurity Threat Intel packet (fair-lending comparative files for an exam after log sources that were not retained past 30 days). The follow-on Cybersecurity Threat Intel action is what IG improper-payments investigator does next: implement the option, assign an owner, and log the missing fact.