Reports & Testimonies

  • GAO’s recommendations database contains report recommendations that still need to be addressed.

    GAO’s recommendations help congressional and agency leaders prepare for appropriations and oversight activities, as well as help improve government operations. Recommendations remain open until they are designated as Closed-implemented or Closed-not implemented. You can explore open recommendations by searching or browsing.

    GAO's priority recommendations are those that we believe warrant priority attention. We sent letters to the heads of key departments and agencies, urging them to continue focusing on these issues. These recommendations are labeled as such. You can find priority recommendations by searching or browsing our open recommendations below, or through our mobile app.

  • Browse Open Recommendations

    Explore priority recommendations by subject terms or browse by federal agency

    Search Open Recommendations

    Search for a specific priority recommendation by word or phrase



  • Governing on the go?

    Our Priorities for Policy Makers app makes it easier for leaders to search our recommendations on the go.

    See the November 10th Press Release


  • Have a Question about a Recommendation?

    • For questions about a specific recommendation, contact the person or office listed with the recommendation.
    • For general information about recommendations, contact GAO's Audit Policy and Quality Assurance office at (202) 512-6100 or apqa@gao.gov.
  • « Back to Results List Sort by   

    Results:

    Subject Term: "Material weaknesses"

    8 publications with a total of 49 open recommendations including 4 priority recommendations
    Director: Dawn B. Simpson
    Phone: (202) 512-3406

    3 open recommendations
    including 3 priority recommendations
    Recommendation: The Secretary of the Treasury should direct the Fiscal Assistant Secretary to develop and implement procedures and metrics for monitoring the federal government's year-to-year progress in resolving intragovernmental differences for significant federal entities at the reciprocal category and trading partner levels.

    Agency: Department of the Treasury
    Status: Open
    Priority recommendation

    Comments: As of the completion of our fiscal year 2016 consolidated financial statements (CFS) audit, we identified this control deficiency related to monitoring intragovernmental differences. Treasury stated that it will continue to evolve its processes as deemed necessary to ensure that appropriate and effective metrics are deployed to measure and monitor agency performance. We will follow-up on progress made by Treasury and OMB as part of our fiscal year 2017 CFS audit, which is ongoing as of September 2017.
    Recommendation: The Secretary of the Treasury should direct the Fiscal Assistant Secretary to develop and implement a sufficient process for working with federal entities to reduce or resolve the need for significant adjustments to federal entity data submitted for the CFS.

    Agency: Department of the Treasury
    Status: Open
    Priority recommendation

    Comments: As of the completion of our fiscal year 2016 consolidated financial statements (CFS) audit, we identified this control deficiency related to significant adjustments to federal entity data submitted for the CFS. Treasury stated that it will continue to work with agencies to facilitate improvement of processes, minimizing the need for Treasury adjustments to agency reporting. We will follow-up on progress made by Treasury and OMB as part of our fiscal year 2017 CFS audit, which is ongoing as of September 2017.
    Recommendation: The Secretary of the Treasury should direct the Fiscal Assistant Secretary, working in coordination with the Controller of OMB, to improve corrective action plans for (1) treaties and international agreements, (2) additional audit procedures for intragovernmental activity and balances, and (3) the Reconciliation Statements so that they include sufficient information to address the control deficiencies in these areas effectively.

    Agency: Department of the Treasury
    Status: Open
    Priority recommendation

    Comments: As of the completion of our fiscal year 2016 consolidated financial statements (CFS) audit, we identified improvements needed to corrective action plans in three areas. Treasury stated that its current remediation plan, including its various corrective action plans, is comprehensive, appropriate, and effective, with robust ongoing monitoring processes in place. However, we continue to believe that the corrective action plans in these three areas do not include sufficient information to effectively address related control deficiencies involving processes used to prepare the CFS. We will follow-up on progress made by Treasury and OMB as part of our fiscal year 2017 CFS audit, which is ongoing as of September 2017.
    Director: Malenich, J Lawrence
    Phone: (202) 512-3406

    9 open recommendations
    Recommendation: The Director of the Federal Housing Finance Agency should direct the Chief Financial Officer to develop a mechanism that captures all of the key factors to be considered, such as materiality and risk, when designing the evaluation of internal control over financial reporting and collaborate, as appropriate, with the Inspector General to develop a similar mechanism for use by FHFA-OIG.

    Agency: Federal Housing Finance Agency
    Status: Open

    Comments: FHFA agreed with this recommendation. FHFA is in the process of developing a mechanism that captures key factors, including risk and materiality, when designing the evaluation of internal control over financial reporting. This mechanism will be documented for the FY 2017 evaluation of internal control over financial reporting. FHFA and FHFA OIG are collaborating in these efforts.
    Recommendation: The Director of the Federal Housing Finance Agency should direct the Chief Financial Officer to coordinate with the Inspector General, as appropriate, when calculating materiality thresholds to reasonably assure that materiality determinations are appropriate for the agency as a whole and rationale is adequately documented.

    Agency: Federal Housing Finance Agency
    Status: Open

    Comments: FHFA agreed with this recommendation. During the FY 2017 evaluation of internal control over financial reporting, FHFA will coordinate with the FHFA OIG when calculating materiality thresholds to reasonably assure that materiality determinations are appropriate for the Agency as a whole and the rationale is adequately documented.
    Recommendation: The Director of the Federal Housing Finance Agency should direct the Chief Financial Officer to coordinate with the Inspector General, as appropriate, to assess and document the aggregate effect of all deficiencies identified at the agency-wide level during the evaluation of internal control over financial reporting.

    Agency: Federal Housing Finance Agency
    Status: Open

    Comments: FHFA agreed with this recommendation. FHFA will coordinate with the FHFA OIG during the FY 2017 evaluation of internal control over financial reporting to assess and document the aggregate effect of all deficiencies identified at the Agency-wide level.
    Recommendation: The Director of the Federal Housing Finance Agency should direct the Chief Financial Officer to (1) summarize in sufficient detail by internal control principle those activities from the program offices that have an effect on internal control over financial reporting to reasonably assure the consideration of all internal control components and related principles; (2) collaborate, as appropriate, with the Inspector General to implement corresponding actions at FHFA-OIG; and (3) document how that information is used to conclude on the internal control components and related principles for financial reporting.

    Agency: Federal Housing Finance Agency
    Status: Open

    Comments: FHFA agreed with this recommendation. During the FY 2017 evaluation of internal control over financial reporting, FHFA will summarize by internal control principle those activities from the program offices that have an effect on internal control over financial reporting to reasonably assure the consideration of all internal control components and related principles. FHFA will also document how information is used to conclude on the internal control components and related principles for financial reporting activities that are evaluated. FHFA will collaborate with FHFA OIG in these efforts.
    Recommendation: The Director of the Federal Housing Finance Agency should direct the Chief Financial Officer to enhance the evaluation of internal control over financial reporting by identifying and testing all key control activities, including those related to the preparation of the financial statements.

    Agency: Federal Housing Finance Agency
    Status: Open

    Comments: FHFA agreed with this recommendation. FHFA will enhance the FY 2017 evaluation of internal control over financial reporting by identifying and testing all key control activities, including those related to the preparation of the financial statements.
    Recommendation: The Director of the Federal Housing Finance Agency should direct the Chief Financial Officer to (1) thoroughly document FHFA's review of SSAE No. 16 reports issued for the period under evaluation by reasonably assuring that all applicable control objectives and related control activities are clearly identified and described and the evaluation of user entity controls is adequately explained and (2) collaborate, as appropriate, with the Inspector General to implement corresponding actions at FHFA-OIG.

    Agency: Federal Housing Finance Agency
    Status: Open

    Comments: FHFA agreed with this recommendation. During the FY 2017 evaluation of internal control over financial reporting, FHFA will thoroughly document FHFA's review of SSAE No. 16 reports issued for the period under evaluation by reasonably assuring that all applicable control objectives and related control activities are clearly identified and described and the evaluation of user entity controls is adequately explained. FHFA will collaborate with the FHFA OIG during these efforts.
    Recommendation: The Director of the Federal Housing Finance Agency should direct the Chief Financial Officer to (1) clearly define and document an approach that identifies the information systems that are key to financial reporting, the process areas these information systems support, the key control activities for each information system, and how the key control activities are evaluated and (2) collaborate, as appropriate, with the Inspector General to implement corresponding actions at FHFA-OIG.

    Agency: Federal Housing Finance Agency
    Status: Open

    Comments: FHFA agreed with this recommendation. During the FY 2017 evaluation of internal control over financial reporting, FHFA will clearly define and document an approach that identifies the information systems that are key to financial reporting, the process areas these information systems support, the key control activities for each information system, and how the key control activities are evaluated. FHFA will collaborate with the FHFA OIG in these efforts.
    Recommendation: The Director of the Federal Housing Finance Agency should direct the Chief Financial Officer to collaborate, as appropriate, with the Inspector General to (1) develop a complete list of the specific provisions of laws and regulations that may have an effect on material amounts and related disclosures in the financial statements that are applicable to FHFA-OIG and (2) prepare documentation that clearly links each applicable provision of law or regulation to the key control activities tested.

    Agency: Federal Housing Finance Agency
    Status: Open

    Comments: FHFA agreed with this recommendation. FHFA will collaborate with the FHFA OIG to develop a complete list of the specific provisions of laws and regulations that may have an effect on material amounts and related disclosures in the financial statements that are applicable to the FHFA OIG and prepare documentation that clearly links each applicable provision of law or regulation to the key control activities tested.
    Recommendation: The Director of the Federal Housing Finance Agency should direct the Chief Financial Officer to design an evaluation process that reasonably assures assignment of independent roles between the implementation and monitoring of control activities that are significant to the evaluation of internal control over financial reporting.

    Agency: Federal Housing Finance Agency
    Status: Open

    Comments: FHFA agreed with this recommendation. FHFA is designing an evaluation process that reasonably assures assignment of independent roles between implementation and monitoring of control activities that are significant to the evaluation of internal control over financial reporting. To this end, FHFA has hired an independent contractor to aid in the evaluation process for FY 2017, and has involved staff from FHFA's Office of Quality Assurance in the FY 2017 evaluation process to reasonably assure independent roles between monitoring and implementation going forward.
    Director: Clark, Cheryl E
    Phone: (202)512-9377

    10 open recommendations
    Recommendation: The IRS Commissioner should direct the appropriate IRS officials to develop and implement a process to reasonably assure that IRS operating divisions and the information technology (IT) organization effectively coordinate with the Chief Financial Officer (CFO) organization when making programming changes to information systems affecting financial reporting.

    Agency: Department of the Treasury: Internal Revenue Service
    Status: Open

    Comments: IRS agreed with this recommendation. IRS stated that by December 2017, the Information Technology (IT) organization, in collaboration with the Chief Financial Officer (CFO) organization, will develop and implement a process to reasonably assure that IRS operating divisions and the IT organization effectively coordinate with the CFO organization when making programming changes to information systems affecting financial reporting. We will follow-up during our audit of IRS's FY 2017 financial statements to determine the status of this recommendation.
    Recommendation: The IRS Commissioner should direct the appropriate IRS officials to research and determine the reason the IT organization did not follow IRS policy to thoroughly test programming changes related to the automation of specific penalty abatement procedures to reasonably assure that they worked as intended before implementation. Based on this determination, the IRS Commissioner should direct the appropriate IRS officials to establish a process to better ensure compliance with existing policies for testing programming changes, including the use and review of the Applications Development transmittal checklist when developing program changes and retention of test results.

    Agency: Department of the Treasury: Internal Revenue Service
    Status: Open

    Comments: IRS agreed with this recommendation. IRS stated that by June 2018, the IT organization will research IRS policies and practices for testing programming changes to determine what modifications may be needed to reasonably assure programming changes work as intended before implementation. Based on this research, the IT organization will update the affected policies and implement any related process changes, as needed. We will follow-up during our audit of IRS's FY 2017 financial statements to determine the status of this recommendation.
    Recommendation: The IRS Commissioner should direct the appropriate IRS officials to strengthen the process for reasonably assuring that the Internal Revenue Manual (IRM) is reviewed annually to align with the current control procedures and guidance being implemented by agency personnel. This should include a mechanism for reasonably assuring that program owner directors (1) review their respective program control activities and related guidance annually and timely update the IRM as needed, (2) document their reviews, and (3) utilize interim guidance and supplemental guidance correctly for their intended purposes.

    Agency: Department of the Treasury: Internal Revenue Service
    Status: Open

    Comments: IRS agreed with this recommendation. IRS stated that by March 2018, the Research, Applied Analytics and Statistics organization will strengthen the process to reasonably assure that all IRMs are reviewed annually to align with the current control procedures and guidance being implemented by IRS personnel. This will include a mechanism to reasonably assure that program owner directors (1) review their respective program control activities and related guidance annually, and update the IRM timely, if needed; (2) document their reviews; and (3) use interim guidance and supplemental guidance correctly for their intended purposes. We will follow-up during our audit of IRS's FY 2017 financial statements to determine the status of this recommendation.
    Recommendation: The IRS Commissioner should direct the appropriate IRS officials to ensure that the respective Agency-Wide Shared Services IRM and supplemental guidance related to the frequency of performing (1) emergency/alarm contact-list validation, (2) duress alarm inventory validation, and (3) federal security risk assessments are consistent.

    Agency: Department of the Treasury: Internal Revenue Service
    Status: Open

    Comments: IRS agreed with this recommendation and considers it closed. IRS stated that in February 2017, the Agency-Wide Shared Services (AWSS) organization updated SOP-17-0002, Alarm Notification, Testing and Maintenance, to synchronize the frequency of performing (1) emergency/alarm contact-list validation; (2) duress alarm inventory validation; and (3) federal security risk assessments, with revised IRM 10.2.14.9, Methods of Providing Protection, Detection Equipment, and IRM 10.2.11.2.5 (3), Facility Security Risk Management. We will assess IRS's actions during our fiscal year 2017 financial statement audit.
    Recommendation: The IRS Commissioner should direct the appropriate IRS officials to update the respective (1) Privacy, Governmental Liaison and Disclosure and (2) CFO IRM sections related to the definition of the tax gap to align with the current understanding followed by IRS personnel.

    Agency: Department of the Treasury: Internal Revenue Service
    Status: Open

    Comments: IRS agreed with this recommendation. IRS stated that in April 2017, the CFO organization updated IRM 1.34.1.2 (124) Revenue Accounting, Definitions and Acronyms, to align the tax gap definition with the current understanding followed by IRS personnel. Further, by February 2018, the Privacy, Governmental Liaison and Disclosure organization will remove the tax gap definition from IRM 11.4.1.3.1.2, Tax Gap Initiatives. We will follow-up during our audit of IRS's FY 2017 financial statements to determine the status of this recommendation.
    Recommendation: The IRS Commissioner should direct the appropriate IRS officials to revise the applicable IRM sections pertaining to manual refunds to require employees to verify the validity of the digital signatures on the manual refund request forms and the manual refund signature authorization forms.

    Agency: Department of the Treasury: Internal Revenue Service
    Status: Open

    Comments: IRS agreed with this recommendation. IRS stated that by March 2018, the Wage and Investment (W&I) organization will revise the applicable IRM manual refund sections to require that employees validate the digital signatures on the manual refund request forms and the manual refund signature authorization forms. We will follow-up during our audit of IRS's FY 2017 financial statements to determine the status of this recommendation.
    Recommendation: The IRS Commissioner should direct the appropriate IRS officials to revise system access rights in Human Resources (HR) Connect to prevent HR assistants within the Employment Operations office from approving and releasing pay-related personnel actions to the National Finance Center (NFC).

    Agency: Department of the Treasury: Internal Revenue Service
    Status: Open

    Comments: IRS agreed with this recommendation and considers it closed. IRS stated that in February 2017, the Human Capital Office (HCO) revised system access rights in HR Connect to prevent the Employment Operations Office HR assistants from approving and releasing pay-related personnel actions to the National Finance Center (NFC). We will assess IRS's actions during our fiscal year 2017 financial statement audit.
    Recommendation: The IRS Commissioner should direct the appropriate IRS officials to revise the HR Connect HR User Profiles Desk Guide to clearly indicate that HR assistants within the Employment Operations office should not be granted access to approve and release pay-related personnel actions to NFC.

    Agency: Department of the Treasury: Internal Revenue Service
    Status: Open

    Comments: IRS agreed with this recommendation and considers it closed. IRS stated that in February 2017, HCO revised the HR Connect HR User Profiles Desk Guide to clearly indicate that the Employment Operations Office HR assistants should not be granted access to approve and release pay-related personnel actions to NFC. We will assess IRS's actions during our fiscal year 2017 financial statement audit.
    Recommendation: The IRS Commissioner should direct the appropriate IRS officials to establish and implement procedures to periodically review the process for determining the intragovernmental costs and costs with the public for each major program reported in the notes to the financial statements to provide reasonable assurance that these amounts are reliable and fairly presented.

    Agency: Department of the Treasury: Internal Revenue Service
    Status: Open

    Comments: IRS agreed with this recommendation. IRS stated that by February 2018, the CFO organization will establish and implement procedures to review periodically the process for determining intragovernmental and public costs for each major program reported in the notes to the financial statements, providing reasonable assurance that these amounts are reliable and presented fairly. We will follow-up during our audit of IRS's FY 2017 financial statements to determine the status of this recommendation.
    Recommendation: The IRS Commissioner should direct the appropriate IRS officials to provide clear guidelines as to what events constitute removal from IRS premises and the disposal date that should be recorded in its inventory system, either through an update of the IRM or other property and equipment-related desk guides.

    Agency: Department of the Treasury: Internal Revenue Service
    Status: Open

    Comments: IRS agreed with this recommendation. IRS stated that by December 2017, the AWSS organization will provide clear guidelines on events that constitute removal of trackable property and equipment assets from IRS premises, and the disposal date that should be recorded in its inventory system, either by updating the IRM or the property and equipment-related desk guides. We will follow-up during our audit of IRS's FY 2017 financial statements to determine the status of this recommendation.
    Director: Asif A. Khan
    Phone: (202) 512-9869

    8 open recommendations
    Recommendation: The Secretary of the Army should direct the Internal Review Directorate under the Assistant Secretary of the Army, Financial Management and Comptroller, to develop written policies and procedures for all financial management-related audit findings and recommendations under its purview that include the following: (1) how the status of the recommendations will be tracked; (2) the process and criteria to be followed for prioritizing the findings and recommendations; (3) the process for developing CAPs to remediate the findings and recommendations, including the detailed CAP elements recommended by the Implementation Guide for OMB Circular A-123; and (4) the process for monitoring the status and progress of the CAPs, including the documentation to be maintained for monitoring CAP status and any actions to be taken if a lack of progress is found.

    Agency: Department of Defense: Department of the Army
    Status: Open

    Comments: The Army concurred with this recommendation. The Army stated that the Internal Review Directorate has completed updating its written standard operating procedures to include monitoring financial management-related external audit findings and recommendations. The Army stated that this new guidance includes an explanation of how recommendations will be tracked; how findings and recommendations will be prioritized; how status and progress of corrective action plans (CAPs) will be developed; and how the status and progress of CAPs will be monitored.
    Recommendation: The Secretary of the Army should direct the Accountability and Audit Readiness Directorate under the Assistant Secretary of the Army, Financial Management and Comptroller, to enhance the directorate's policies and procedures for (1) tracking and prioritizing all financial management-related audit findings and recommendations under its purview and (2) developing and monitoring CAPs for all such recommendations so that they include sufficient details, such as the criteria used to prioritize the CAPs, the recommended CAP elements, and the process for monitoring and documenting the progress and status of CAPs.

    Agency: Department of Defense: Department of the Army
    Status: Open

    Comments: The Army concurred with this recommendation. The Army stated that the Accountability and Audit Readiness Directorate has completed actions to enhance its current standard operating procedures to include (1) updating its corrective action plan (CAP) database and reporting tool, (2) documenting its reporting procedures, and (3) updating its CAP template to include additional elements recommended by the Implementation Guide for OMB Circular A-123. In addition, the Army stated that its policies and procedures include steps to incorporate external financial management-related audit findings assigned to the Accountability and Audit Readiness Directorate by the Internal Review Directorate and that the existing process the Army uses to prioritize findings and the related CAPs and to monitor the progress and status of CAPs has been documented.
    Recommendation: The Secretary of the Navy should, when finalizing the Navy's policies and procedures for identifying and tracking its CAPs to remediate financial management-related audit findings and recommendations, enhance this guidance so it includes detailed steps and specific procedures for confirming and validating the completeness and accuracy of the status of these audit findings and recommendations.

    Agency: Department of Defense: Department of the Navy
    Status: Open

    Comments: The Navy concurred with this recommendation. The Navy stated that it is (1) recording new findings and recommendations on a weekly basis in its deficiency database, (2) reviewing historical audits to ensure that previous findings and recommendations are recorded, and (3) collaborating with audit agencies to establish a process to reconcile the status of recommendations to ensure that its deficiency database accurately reports open and closed recommendations. The Navy also stated that these processes would be documented and implemented by January 31, 2017.
    Recommendation: The Secretary of the Air Force should design and document a comprehensive process to ensure that the complete universe of all financial management-related findings and recommendations from all audit sources is identified and tracked.

    Agency: Department of Defense: Department of the Air Force
    Status: Open

    Comments: The Air Force concurred with this recommendation. The Air Force stated that it will revise its existing process for identifying and tracking all financial management-related findings and recommendations from all audit sources. The Air Force stated that the process will include the procedures for summarizing the status of findings on a bi-monthly basis and providing a summary for the FIAR Governance Board meetings. The Air Force stated that it plans to implement this recommendation by January 31, 2018.
    Recommendation: The Secretary of the Air Force should update the Air Force's written policies and procedures for prioritizing financial management-related audit findings and recommendations from all audit sources and for developing and monitoring CAPs so that they include sufficient details. These procedures should include the following details: (1) The process to be followed for prioritizing the financial management-related findings and recommendations from audit sources. (2) The guidance for developing CAPs for all financial management-related audit findings and recommendations from all audit sources to include complete details, including the elements recommended by the Implementation Guide for OMB Circular A-123. (3) The process for monitoring the status of the CAPs for all financial management-related audit findings and recommendations from all audit sources, including the documentation to support any corrective actions taken, as recommended by the Implementation Guide for OMB Circular A-123.

    Agency: Department of Defense: Department of the Air Force
    Status: Open

    Comments: The Air Force concurred with this recommendation. The Air Force stated that it will revise its existing written policies and procedures for tracking and monitoring all financial management-related audit findings and recommendations. Specifically, the Air Force stated the these revised policies and procedures will (1) articulate prioritizing findings and recommendations; (2) provide guidance for developing detailed and actionable corrective action plans (CAPs), which address the condition and root cause of the findings and include elements recommended by OMB Circular A-123; and (3) provide clear guidance for monitoring the status and progress towards implementing and closing the CAPs. The Air Force plans to implement this recommendation by January 31, 2019.
    Recommendation: To improve DOD management's process for monitoring the military services' audit remediation efforts and to provide timely and useful information to stakeholders as needed, the Secretary of Defense should direct the Secretary of the Army, the Secretary of the Navy, and the Secretary of the Air Force to prepare and submit to the Under Secretary of Defense (Comptroller), on at least a bimonthly basis for availability at the FIAR Governance Board meetings, a summary of key information included in the CAPs that at a minimum contains the data elements recommended by the Implementation Guide for OMB Circular A-123 for each CAP related to critical capabilities for achieving audit readiness.

    Agency: Department of Defense
    Status: Open

    Comments: DOD concurred with this recommendation. DOD stated that it solicits input on a bi-monthly basis, on critical capability corrective action plans (CAPs) at a summary level. This information is provided routinely at regularly scheduled FIAR Governance Board meetings. DOD also stated that an updated notice of finding and recommendation (NFR) form template is being developed and will be provided to the military services to use for reporting this information so that it will include the recommended standard data elements outlined in OMB Circular A-123 to provide greater transparency into the nature of remediation plans. DOD also stated that FIAR Guidance will be updated to explicitly state that military services should include the OMB recommended standard data elements in CAPs.
    Recommendation: To reasonably assure that DOD management and external stakeholders have a comprehensive picture of the status of corrective actions needed for audit readiness throughout the department, the Secretary of Defense should direct the Under Secretary of Defense (Comptroller) to prepare a consolidated CAP management summary on a bimonthly basis that includes the data elements referred to above on the status of all CAPs related to critical capabilities for the military services and for the service providers and other defense organizations.

    Agency: Department of Defense
    Status: Open

    Comments: DOD partially concurred with this recommendation. According to DOD, the military services already provide summary-level updates on their critical capability corrective action plans (CAPs) at FIAR Governance Board meetings. It also stated that the template that is used to present CAPs to the FIAR Governance Board meetings at the summary level has been updated to align CAPs to critical capabilities. DOD still needs to address how all of the data elements from the Implementation Guide for OMB Circular A-123 will be summarized or otherwise reported for all CAPs pertaining to critical capabilities across the Department. In addition, DOD stated that because the DOD Comptroller takes responsibility for maintaining, monitoring, and reporting on the status of CAPs for the service providers and other defense organizations and of DOD-wide issues, the Comptroller will also summarize this information. However, DOD has not clarified what information from the military services will be summarized.
    Recommendation: To facilitate the development of a consolidated CAP management summary and the ability to efficiently respond to stakeholder requests, the Under Secretary of Defense (Comptroller) should develop and implement a centralized monitoring and reporting process that at a minimum (1) captures department-wide information on the military services' and other defense organizations' CAPs related to critical capabilities, including the standard data elements recommended in the Implementation Guide for OMB Circular A-123, and (2) maintains up-to-date information on the status of these CAPs.

    Agency: Department of Defense: Under Secretary of Defense (Comptroller)
    Status: Open

    Comments: DOD partially concurred with this recommendation. DOD stated that as outlined in the military services' responses to our recommendations directed to them, the Army, Navy, and Air Force have agreed to take the responsibility for developing, maintaining, and monitoring all CAPs at the level recommended by the Implementation Guide for OMB Circular A-123. Further, DOD stated that based on the Comptroller actively participating in monthly meetings with military services to gain an understanding of their CAPs and the information reported in bi-monthly FIAR Governance Board meetings, this provides the Department the ability to efficiently respond to stakeholder requests related to critical capabilities CAPs. However, DOD did not describe a centralized reporting process to ensure consistent standard data elements are provided in CAPs and that the information on the status of the CAPs is up to date.
    Director: Dawn B. Simpson
    Phone: (202) 512-3406

    1 open recommendations
    including 1 priority recommendation
    Recommendation: The Secretary of the Treasury should direct the Fiscal Assistant Secretary to develop and implement procedures to determine whether user accounts already exist before establishing or recertifying user accounts in the Governmentwide Treasury Account Symbol Adjusted Trial Balance System or Governmentwide Financial Report System.

    Agency: Department of the Treasury
    Status: Open
    Priority recommendation

    Comments: As of the completion of our fiscal year 2016 consolidated financial statements (CFS) audit, Treasury agreed that this recommendation remained open. Treasury plans to implement processes to validate new users who do not already have an existing account in the Governmentwide Treasury Account Symbol Adjusted Trial Balance System (GTAS) or the Governmentwide Financial Report System (GFRS); and to ensure that users do not have conflicting roles or privileges. We will follow-up on progress made by Treasury as part of our fiscal year 2017 CFS audit, which is ongoing as of March 2017.
    Director: Malenich, J Lawrence
    Phone: (202) 512-3406

    5 open recommendations
    Recommendation: To provide reasonable assurance that the property, equipment, and software transactions are properly tracked and capitalized or expensed as appropriate, the Director of CFPB should direct the program offices to require vendors to provide detailed invoices with costs broken out by project.

    Agency: Consumer Financial Protection Bureau
    Status: Open

    Comments: During our fiscal year 2016 audit, we continued to find control deficiencies over CFPB's accounting for its property, equipment, and software. CFPB was still in the process of working with its Office of Procurement and program offices to require more detailed invoices with costs broken out by project. We will continue to evaluate CFPB's actions to address this recommendation during our fiscal year 2017 financial statement audit.
    Recommendation: To provide reasonable assurance that the property, equipment, and software transactions are properly tracked and capitalized or expensed as appropriate, the Director of CFPB should direct the Chief Financial Officer to update OCFO's financial records to include costs by project.

    Agency: Consumer Financial Protection Bureau
    Status: Open

    Comments: Although CFPB took actions to attempt to address this recommendation, as of September 30, 2016, there were still some unidentified costs in the OCFO's financial records. In addition, our fiscal year 2016 audit continued to identify deficiencies over the recording of property, equipment, and software costs. We will continue to evaluate CFPB's actions to address this recommendation during our fiscal year 2017 financial statement audit.
    Recommendation: The Director of CFPB should direct the Office of Technology and Innovation's Chief Information Officer to develop and document training materials that are consistent with CFPB's policies and procedures and provide training to employees, on a recurring basis, on how to conduct inventory of electronic equipment and how to update and maintain accurate inventory records.

    Agency: Consumer Financial Protection Bureau
    Status: Open

    Comments: During our fiscal year 2016 audit, we continued to find incomplete and inaccurate information in CFPB's inventory records. We will continue to evaluate CFPB's actions to address this recommendation during our fiscal year 2017 financial statement audit.
    Recommendation: The Director of CFPB should direct the Chief Financial Officer and Chief Information Officer to develop and implement procedures that require coordination between the OCFO and the Office of Technology and Innovation to provide reasonable assurance that the records maintained by both divisions are accurate, consistent, complete, and comparable for inventory and accounting purposes.

    Agency: Consumer Financial Protection Bureau
    Status: Open

    Comments: During our fiscal year 2016 audit, we continued to find incomplete and inaccurate information in CFPB's inventory records. We will continue to evaluate CFPB's actions to address this recommendation during our fiscal year 2017 financial statement audit.
    Recommendation: The Director of CFPB should direct the Chief Financial Officer to design and implement effective procedures over the preparation of CFPB financial statements and note disclosures, including procedures such as completing the FAM 2010 and 2020 checklists at fiscal year-end, to provide reasonable assurance that the financial statements as of fiscal year-end are prepared in accordance with GAAP and note disclosures are adequate.

    Agency: Consumer Financial Protection Bureau
    Status: Open

    Comments: During our fiscal year 2016 audit, we continued to find errors and inconsistent disclosures in CFPB's financial statements, some of which resulted in post-closing adjusting entries. We will continue to evaluate CFPB's actions to address this recommendation during our fiscal year 2017 financial statement audit.
    Director: Clark, Cheryl E
    Phone: (202) 512-9377

    12 open recommendations
    Recommendation: The IRS Commissioner should direct the appropriate IRS officials to establish a process to prevent Employment Operations staff from allowing potential employees to enter on duty without favorable determinations of suitability by Personnel Security adjudicators.

    Agency: Department of the Treasury: Internal Revenue Service
    Status: Open

    Comments: In December 2015, the HCO developed a process and revised procedures in an attempt to improve the monitoring of Employment Operations office decisions to reasonably assure that new employees do not enter on duty before prescreening adjudications are completed and approved by Personnel Security adjudicators. However, during our fiscal year 2016 audit, we identified IRS employees who entered on duty without completed or approved suitability adjudication determinations. We will continue to evaluate IRS's actions to address this recommendation during our fiscal year 2017 audit.
    Recommendation: The IRS Commissioner should direct the appropriate IRS officials to establish a policy and procedures requiring IRS officials to review and address situations in which it is later discovered that an employee deemed unsuitable for employment during the prescreening process was erroneously allowed to enter on duty.

    Agency: Department of the Treasury: Internal Revenue Service
    Status: Open

    Comments: While IRS responded that it established a policy and procedures, it did not provide documentation to sufficiently demonstrate that the policy and procedures were implemented. During our fiscal year 2016 audit, we identified an instance where an employee was allowed to enter on duty and it was subsequently discovered that this employee was deemed unsuitable for employment during the prescreening process. IRS did not provide additional documentation to demonstrate that its procedures had been carried out for this employee. We will continue to evaluate IRS's actions to address this recommendation during our fiscal year 2017 audit.
    Recommendation: The IRS Commissioner should direct the appropriate IRS officials to develop and provide training, on a recurring basis, to all Facilities Management and Security Services specialists and managers involved in the duress alarm validation and testing process to reinforce the related policies and procedures.

    Agency: Department of the Treasury: Internal Revenue Service
    Status: Open

    Comments: According to IRS, in February 2016, AWSS developed and provided training on duress alarm validation and testing to FMSS specialists and managers. However, during our June 2016 field office audit testing, we found that the FMSS specialists responsible for the physical security at the sites we visited had not received training on duress alarm validation and testing. Further, our testing identified instances where (1) duress alarm testing did not include all duress alarms, (2) documented validations of the duress alarm inventory were not completed timely or available to individuals (FMSS and non-FMSS staff) before each test was conducted, and (3) descriptions of the duress alarm inventory used by the security specialist to conduct testing were labeled incorrectly. During follow up discussions with IRS officials, we were informed that FMSS specialists were not fully evaluating alarm test results and adhering to established procedures for monitoring those tests. We will continue to evaluate IRS's efforts to address this recommendation during our fiscal year 2017 audit.
    Recommendation: The IRS Commissioner should direct the appropriate IRS officials to establish and implement a policy requiring recurring training for TAC group and territory managers on their TSRRD responsibilities, including detailed instructions for completing responses to questions in TSRRD and for reviewing TSRRD submissions for accuracy and completeness. This training should be updated for changes in TSRRD questions over time and be provided to new TAC group and territory managers soon after they are hired or appointed.

    Agency: Department of the Treasury: Internal Revenue Service
    Status: Open

    Comments: IRS efforts to address this recommendation are ongoing. IRS stated that during fiscal year 2017, the Wage and Investment organization will incorporate into the IRM its new training policy requiring training for TAC group and territory managers on their TSRRD responsibilities, including specific instructions for completing questions in TSRRD and for reviewing TSRRD submissions. According to IRS, this training will be provided on a recurring basis to account for changes in TSRRD questions and newly hired or appointed TAC group and territory managers. As these actions occurred after the end of fiscal year 2016, we will evaluate IRS's actions to address this recommendation during our fiscal year 2017 audit.
    Recommendation: The IRS Commissioner should direct the appropriate IRS officials to determine the reason(s) why staff did not always comply with IRS's established policies and procedures related to initiating, monitoring, and reviewing the monitoring of manual refunds and, based on this determination, establish a process to better enforce compliance with these requirements.

    Agency: Department of the Treasury: Internal Revenue Service
    Status: Open

    Comments: IRS efforts to address this recommendation are ongoing. IRS stated that by September 2017, it will determine the reasons for staff noncompliance with established policies and procedures related to initiating, monitoring, and reviewing the monitoring of manual refunds, and based on this determination, establish a process to better enforce compliance with these requirements. We will continue to evaluate IRS's actions to address this recommendation during our fiscal year 2017 audit.
    Recommendation: The IRS Commissioner should direct the appropriate IRS officials to enhance the training program provided to COs to address all the job responsibilities related to certifying manual refunds for payment, including the required review of supporting documentation for manual refunds.

    Agency: Department of the Treasury: Internal Revenue Service
    Status: Open

    Comments: IRS stated that in February 2016, it provided a refresher course to COs as part of their annual training to address their responsibilities related to certifying manual refunds. However, based on our review of the refresher course materials, the course did not address our recommendation to enhance the training program. For example, the materials did not provide guidelines on how to perform the required reviews related to certifying manual refunds. As a result, during our fiscal year 2016 audit, we continued to find instances where the COs did not comply with the review requirements. We will continue to evaluate IRS's actions to address this recommendation during our fiscal year 2017 audit.
    Recommendation: The IRS Commissioner should direct the appropriate IRS officials to identify the cause of and implement a solution for dealing with the periodic backlogs of ICO inventory that is hampering the performance of quality reviews.

    Agency: Department of the Treasury: Internal Revenue Service
    Status: Open

    Comments: IRS efforts to address this recommendation are ongoing. IRS stated that by September 2017, it will identify a cause of and implement a solution for dealing with the periodic backlogs of ICO inventory. We will continue to evaluate IRS's actions to address this recommendation during our fiscal year 2017 audit.
    Recommendation: The IRS Commissioner should direct the appropriate IRS officials to establish policies for (1) how long an asset can remain in missing status before it is removed from P&E reported on the financial statements and (2) how long assets can go unverified during the annual inventory process before they are identified as missing in the property management system.

    Agency: Department of the Treasury: Internal Revenue Service
    Status: Open

    Comments: IRS's IT organization issued AM064, Asset Management Policy Directive to Identify Uncertified Class A and Class B Assets as Missing in KISAM, effective October 1, 2016. The directive states that in accordance with the annual Hardware Asset Management Inventory Certification Plan, assets that are not verified or certified for more than two inventory cycles should be identified as missing in IRS's property management system. It further states that the property management system should be updated by the end of the first quarter of the fiscal year after an asset meets the "missing" criterion. In November 2016, IRS's CFO organization developed the Missing Assets Financial Reporting Assessment procedure, which states that assets in missing status for 1 year or more should be removed from the P&E reported on IRS's financial statements. As these actions occurred after the end of fiscal year 2016, we will evaluate IRS's actions to address this recommendation during our fiscal year 2017 audit.
    Recommendation: The IRS Commissioner should direct the appropriate IRS officials to establish and implement procedures to reasonably assure that missing assets are timely removed from the financial statements when applicable.

    Agency: Department of the Treasury: Internal Revenue Service
    Status: Open

    Comments: In November 2016, IRS's CFO organization established the Missing Assets Financial Reporting Assessment procedure, which included procedures for identifying assets that have been in missing status in the property management system for 1 year or more and removing them from the P&E reported on the financial statements. As this procedure was established after the end of fiscal year 2016, we will evaluate IRS's implementation of this procedure during our fiscal year 2017 audit.
    Recommendation: The IRS Commissioner should direct the appropriate officials to establish and implement monitoring procedures designed to reasonably assure that the key detailed information for tangible capitalized P&E is properly recorded and updated in the KISAM system.

    Agency: Department of the Treasury: Internal Revenue Service
    Status: Open

    Comments: IRS's IT organization established SOP FY17-01, Asset Management Program Monitoring and Review, effective October 1, 2016. The SOP details the IRS Asset Management Group's procedures for conducting a quarterly review on a sample of asset records and transactions in KISAM to verify the accuracy and completeness of key KISAM data elements and correct any discrepancies found. In September 2016, IRS issued AWSS-01-0916-0001, Interim Guidance for IRM 1.14.4, Personal Property Management, to require the FMSS territory manager or section chief to perform quarterly sample reviews of non-IT assets in KISAM to verify that key data elements are complete and updated. As these procedures were established after we conducted our internal control testing in fiscal year 2016, we will evaluate IRS's implementation of these procedures during our fiscal year 2017 audit.
    Recommendation: The IRS Commissioner should direct the appropriate officials to design a process to reasonably assure the adequacy of detailed supporting information for tangible P&E amounts recorded in the general ledger.

    Agency: Department of the Treasury: Internal Revenue Service
    Status: Open

    Comments: IRS's actions to address this recommendation are ongoing. According to IRS, by September 2017, its CFO organization will implement a P&E subsidiary ledger, and will design and implement processes based on the subsidiary ledger that will reasonably assure the adequacy of detailed supporting information for tangible P&E amounts recorded in the general ledger. We will assess IRS's actions to address this recommendation during our fiscal year 2017 audit.
    Recommendation: The IRS Commissioner should direct the appropriate IRS officials to establish and implement detailed written procedures for calculating future lease payments for noncancelable operating leases that are reported in the notes to the financial statements. The procedures should (1) include steps for considering any ad hoc clauses that may have specific termination dates and (2) include a requirement for supervisory review to provide reasonable assurance of the accuracy of future lease payment amounts for noncancelable operating leases.

    Agency: Department of the Treasury: Internal Revenue Service
    Status: Open

    Comments: In October 2016, IRS established procedures for calculating future lease payments for noncancelable operating leases that are reported in the notes to its financial statements. The procedures included (1) steps for considering any ad hoc clauses that may have specific termination dates and (2) a requirement for supervisor review to provide reasonable assurance of the accuracy of future lease payment amounts for noncancelable operating leases. As these actions occurred after the end of fiscal year 2016, we will evaluate IRS's actions to address this recommendation during our fiscal year 2017 audit.
    Director: Dalkin, James R
    Phone: (202) 512-3133

    1 open recommendations
    Recommendation: The U.S. Securities and Exchange Commission should direct the COO and CFO to implement controls, such as periodic reviews of asset dispositions, to help reasonably assure that SEC's procedures for the preparation and maintenance of documentation related to the disposition of assets are consistently implemented and that any deviations from established procedures are documented.

    Agency: United States Securities and Exchange Commission
    Status: Open

    Comments: SEC Officials are still working on corrective actions as of the end of fiscal year 2016. We will follow up on this recommendation during our fiscal year 2017 SEC financial statement audit.