Risk management (31 - 40 of 283 items)
Homeland Security: Actions Needed to Better Manage Security Screening at Federal Buildings and Courthouses
GAO-15-445: Published: Mar 31, 2015. Publicly Released: Apr 30, 2015.
The Department of Homeland Security's (DHS) Federal Protective Service (FPS) and the Department of Justice's (DOJ) United States Marshals Service (USMS) experience a range of challenges in their efforts to provide effective security screening, including:Building characteristics and location may limit security options: many General Services Administration (GSA) buildings were designed and construct...
Homeland Security: Action Needed to Better Assess Cost-Effectiveness of Security Enhancements at Federal Facilities [Reissued on April 2, 2015]
GAO-15-444: Published: Mar 24, 2015. Publicly Released: Mar 24, 2015.
The federal civilian entities GAO selected—the Department of Homeland Security's (DHS) Federal Emergency Management Agency (FEMA), the General Services Administration (GSA), the Department of Justice's United States Marshals Service (USMS), the Smithsonian Institution (Smithsonian), and the Social Security Administration (SSA)—have implemented a range of enhancements to improve physical securi...
Homeland Security Acquisitions: DHS Should Better Define Oversight Roles and Improve Program Reporting to Congress
GAO-15-292: Published: Mar 12, 2015. Publicly Released: Mar 16, 2015.
The Department of Homeland Security (DHS) has taken steps to improve oversight of major acquisition programs, but it lacks written guidance for a consistent approach to day-to-day oversight. Federal Standards for Internal Control call for organizations to define and document key areas of responsibility in order to effectively plan, direct, and control operations to achieve agency objectives. DHS h...
Aviation Security: TSA Should Take Additional Action to Obtain Stakeholder Input when Modifying the Prohibited Items List
GAO-15-261: Published: Feb 4, 2015. Publicly Released: Mar 6, 2015.
Transportation Security Administration (TSA) officials stated that TSA considers four factors when determining whether to make modifications to the Prohibited Items List (PIL), but the agency did not fully assess risk when considering its recent proposed PIL modifications, as GAO has previously recommended. TSA generally considers the following four factors when determining whether to modify the P...
Federal Facility Cybersecurity: DHS and GSA Should Address Cyber Risk to Building and Access Control Systems
GAO-15-6: Published: Dec 12, 2014. Publicly Released: Jan 12, 2015.
The Department of Homeland Security (DHS) has taken preliminary steps to begin to understand the cyber risk to building and access controls systems in federal facilities. For example, in 2013, components of DHS's National Protection and Programs Directorate (NPPD) conducted a joint assessment of the physical security and cybersecurity of a federal facility. However, significant work remains.Lack o...
Hurricane Sandy: FEMA Has Improved Disaster Aid Verification but Could Act to Further Limit Improper Assistance
GAO-15-15: Published: Dec 12, 2014. Publicly Released: Dec 12, 2014.
By implementing new controls since the mid-2000s, the Federal Emergency Management Agency (FEMA) improved its ability to detect improper and potentially fraudulent payments, but GAO identified continued weaknesses in the agency's validation of Social Security numbers, among other things. As of August 2014, FEMA stated that it had provided over $1.4 billion in Hurricane Sandy assistance through its...
Aviation Security: Rapid Growth in Expedited Passenger Screening Highlights Need to Plan Effective Security Assessments
GAO-15-150: Published: Dec 12, 2014. Publicly Released: Dec 12, 2014.
Since the Transportation Security Administration (TSA) implemented its expedited screening program—known as TSA Pre✓TM in 2011, the number of passengers receiving expedited screening grew slowly, and then increased about 300 percent in October 2013 when TSA expanded its use of methods to increase passenger participation, such as conducting automated risk assessments of all passengers. In condu...
Combating Terrorism: Strategy to Counter Iran in the Western Hemisphere Has Gaps That State Department Should Address
GAO-14-834: Published: Sep 29, 2014. Publicly Released: Oct 21, 2014.
The Department of State (State) uses a variety of mechanisms to collaborate with interagency partners and host governments to address activities of Iran in the Western Hemisphere. In developing the strategy, which includes an Intelligence Community Assessment developed by the Office of the Director of National Intelligence (ODNI), State's Bureau of Western Hemisphere Affairs worked with other U.S...
Secure Flight: TSA Could Take Additional Steps to Strengthen Privacy Oversight Mechanisms
GAO-14-647: Published: Sep 9, 2014. Publicly Released: Sep 18, 2014.
The Transportation Security Administration (TSA) has taken steps to implement several of the privacy oversight mechanisms it planned to establish when Secure Flight implementation began in 2009, but additional actions could allow TSA to sustain and strengthen its efforts. Overall, TSA has implemented mechanisms to identify privacy implications associated with program operations and address them as...
Critical Infrastructure Protection: DHS Action Needed to Enhance Integration and Coordination of Vulnerability Assessment Efforts [Reissued on September 17, 2014]
GAO-14-507: Published: Sep 15, 2014. Publicly Released: Sep 15, 2014.
During fiscal years 2011 to 2013, various Department of Homeland Security (DHS) offices and components conducted or required thousands of vulnerability assessments of critical infrastructure (CI), but DHS is not positioned to integrate them in order to identify priorities. Although the Homeland Security Act of 2002 and the National Infrastructure Protection Plan (NIPP) call for DHS to integrate...