ASPR Established Adequate Controls for Maintaining Physical Security Over Stockpile Site A, but Some Inventory Discrepancies Were Identified

Why OIG Did This Audit

• Between 1999 and 2018, the Strategic National Stockpile (Stockpile) was managed by the Centers for Disease Control and Prevention (CDC). During that time, we identified several systemic issues, such as the Stockpile’s inventory system inaccurately tracking the movement and location of items.
• In 2018, HHS transferred responsibility for the Stockpile from CDC to the Administration for Strategic Preparedness and Response (ASPR). Changes in operational responsibility can create new risks that require implementation of mitigating controls.
• This audit is part of a series that examines whether ASPR established adequate controls for maintaining (1) physical security over selected Stockpile sites and (2) its records of inventory.

What OIG Found

ASPR has established adequate controls for maintaining physical security over Stockpile Site A and for maintaining its records of inventory. For example, ASPR upgraded the physical security at Site A by updating camera systems and adding guards, and the Stockpile’s inventory records were generally accurate. However, we noted two discrepancies related to the location and description of inventory items. These discrepancies occurred because ASPR had not conducted an inventory review since Site A was expanded and reconfigured. These discrepancies we identified were corrected before the completion of our audit.

What OIG Recommends

We recommend that ASPR correct the one Push Package sample item in its Stockpile’s inventory system and complete its annual warehouse inventory check by the established target date of September 2024.

ASPR concurred with our recommendation and detailed steps it has taken and plans to take in response to our recommendation.