Reports & Testimonies

Share This:

Recommendations Database

GAO’s recommendations database contains report recommendations that still need to be addressed. GAO’s priority recommendations are those that we believe warrant priority attention. We sent letters to the heads of key departments and agencies, urging them to continue focusing on these issues. Below you can search only priority recommendations, or search all recommendations.

Our recommendations help congressional and agency leaders prepare for appropriations and oversight activities, as well as help improve government operations. Moreover, when implemented, some of our priority recommendations can save large amounts of money, help Congress make decisions on major issues, and substantially improve or transform major government programs or agencies, among other benefits.

As of October 25, 2020, there are 4812 open recommendations, of which 473 are priority recommendations. Recommendations remain open until they are designated as Closed-implemented or Closed-not implemented.

Browse or Search Open Recommendations

Priority recommendations only All recommendations

Browse

Search

Have a Question about a Recommendation?

For questions about a specific recommendation, contact the person or office listed with the recommendation.
For general information about recommendations, contact GAO's Audit Policy and Quality Assurance office at (202) 512-6100 or apqa@gao.gov.

« Back to Results List Sort by

Results:

Federal Agency: "Department of Health and Human Services: Office of the Secretary"

7 publications with a total of 29 open recommendations including 4 priority recommendations

Download these results in CSV format or XLSX format.

Telecommunications: Agencies Should Fully Implement Established Transition Planning Practices to Help Reduce Risk of Costly Delays
GAO-20-155, Apr 7, 2020

Director: Carol C. Harris
Phone: (202) 512-4456

5 open recommendations

Display

Recommendation: The Secretary of Health and Human Services should ensure that the agency's Chief Information Officer develops a policy that requires the agency's components to maintain an inventory of the telecommunications assets and services that they acquire independently from headquarters; updates the telecommunications inventory to include all telecommunications assets and services in use at HHS, and updates the agency's process for ongoing maintenance of the inventory to include the complete inventory. (Recommendation 6)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: HHS concurred with this recommendation. We will continue to follow-up on the department's efforts to address it.

Recommendation: The Secretary of Health and Human Services should ensure that the agency's Chief Information Officer completes efforts to identify future telecommunications needs using a complete inventory of existing telecommunications services; and aligns HHS's telecommunications needs with its long-term IT plans. (Recommendation 7)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: HHS concurred with this recommendation. We will continue to follow-up on the department's efforts to address it.

Recommendation: The Secretary of Health and Human Services should ensure that the agency's Chief Information Officer identifies and documents telecommunications transition roles and responsibilities related to (1) managing assets and human capital during the planning and execution phases of the transition and (2) providing legal expertise during the execution phase of the transition, and assigns the transition information security management role to a staff member; and establishes and implements configuration and change management processes for HHS's transition. (Recommendation 8)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: HHS concurred with this recommendation. We will continue to follow-up on the department's efforts to address it.

Recommendation: The Secretary of Health and Human Services should ensure that the agency's Chief Information Officer identifies all of the funding needed to support the telecommunications transition at each of the agency's components, justifies requests for transition resources related to hardware and software upgrades, conducts an analysis to identify staff resources needed for the entire transition effort, and analyzes training needs for staff assisting with the transition. (Recommendation 9)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: HHS concurred with this recommendation. We will continue to follow-up on the department's efforts to address it.

Recommendation: The Secretary of Health and Human Services should ensure that the agency's Chief Information Officer completes efforts to identify telecommunications transition measures of success that can be used to assess transition progress; and takes into account all of the agency's components, as well as its mission critical systems, contingency plans,and telecommunications transition risks, in HHS's transition time line. (Recommendation 10)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: HHS concurred with this recommendation. We will continue to follow-up on the department's efforts to address it.

Payment Integrity: Selected Agencies Should Improve Efforts to Evaluate Effectiveness of Corrective Actions to Reduce Improper Payments
GAO-20-336, Apr 1, 2020

Director: Beryl H. Davis
Phone: (202) 512-2623

1 open recommendations

Display

Antibiotic Resistance: Additional Federal Actions Needed to Better Determine Magnitude and Reduce Impact
GAO-20-341, Mar 30, 2020

Director: Timothy M. Persons
Phone: (202) 512-6888

3 open recommendations

Display

Recommendation: The Secretary of HHS should identify leadership and clarify roles and responsibilities among HHS agencies to assess the clinical outcomes of diagnostic testing for identifying antibiotic-resistant bacteria. (Recommendation 5)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: The Department of Health and Human Services concurred with GAO's recommendation. When we confirm any actions the agency has taken to implement the recommendation, we will provide updated information.

Recommendation: The Secretary of HHS should develop a strategic framework to further incentivize the development of new treatments for antibiotic-resistant infections, including through the use of postmarket financial incentives, and, if appropriate, make recommendations to Congress for necessary authority. (Recommendation 7)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: The Department of Health and Human Services did not concur with GAO's recommendation. In commenting on our report, the department noted that it has convened a workgroup to develop a strategic framework that includes proposals to address a variety of challenges facing antibiotic product developers and agreed that additional incentives are needed. However, the department stated it is still analyzing whether postmarket financial incentives should be included in this framework. We believe our recommendation is still warranted, given the importance of antibiotic resistance to public health and the importance of sustaining the antibiotic pipeline, including after antibiotics are brought to market. When we confirm any actions the agency has taken to implement the recommendation, we will provide updated information.

Recommendation: The Secretary of HHS should direct the CARB Task Force to include in its annual updates to the President plans for addressing any barriers preventing full implementation of the National Action Plan and, as appropriate, make recommendations for new or modified actions. Specifically, the CARB Task Force should identify plans to address barriers, such as those related to expanding (1) a CDC program designed to strengthen the U.S. response to resistant gonorrhea; (2) antibiotic stewardship programs across health care settings; and (3) antibiotic use data collection across health care settings, to the extent feasible. (Recommendation 8)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: The Department of Health and Human Services concurred with this recommendation, and stated that beginning in 2020 and continuing annually thereafter, the CARB Task Force's progress reports will include discussion of any barriers preventing full implementation of the National Action Plan, including, as appropriate, barriers that GAO has identified. When we confirm any actions the agency has taken to implement the recommendation, we will provide updated information.

Sexual Harassment in STEM Research: Agencies Have Taken Actions, but Need Complaint Procedures, Overall Plans, and Better Collaboration
GAO-20-187, Mar 19, 2020

Director: John Neumann
Phone: (202) 512-6888

4 open recommendations

Display

Recommendation: The Secretary of the Department of Health and Human Services should direct the Director for the Office for Civil Rights to publicize a stand-alone list of promising practices for Title IX compliance on its websites for their university grantees. (Recommendation 3)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: HHS agreed with the recommendation. In its February 2020 formal comment letter, the department stated the Office for Civil Rights will incorporate effective practices from materials posted on its website and external sources in a stand-alone list of effective practices to help universities comply with Title IX. The Office for Civil Rights will also draw from its Title IX enforcement work to update the effective practices list on an ongoing basis.

Recommendation: The Secretary of the Department of Health and Human Services should direct the Director for the Office for Civil Rights to assess the feasibility of receiving and reviewing concerns of sex discrimination—including sexual harassment—and communicating to individuals on agency-funded grants the option to notify the agency of these concerns, outside of the Title IX complaint process. (Recommendation 7)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: HHS agreed with the recommendation. In its February 2020 formal comment letter, the department stated that outside of the Title IX enforcement process, the Office for Civil Rights updated its sex discrimination web pages to inform persons on how to file complaints of discrimination directly to the Office for Civil Rights, including complaints of sexual harassment. The Office for Civil Rights has also incorporated information about Title IX rights and obligations in outreach material used on university campuses, including information addressing sexual harassment.

Recommendation: The Secretary of the Department of Health and Human Services should direct the Director for the Office for Civil Rights and the Director of NIH to develop and implement formal procedures for sharing relevant information about Title IX (compliance reviews, violations, and complaints) and sex discrimination concerns, including sexual harassment. For example, HHS components should internally share information regarding findings of Title IX violations, concerns of sex discrimination, including sexual harassment, and Title IX compliance review reports. (Recommendation 11)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: HHS agreed with the recommendation. In its February 2020 formal comment letter, the department stated that the Office for Civil Rights and NIH will review the current procedure for sharing information, and development and implement (as necessary) formal procedures for sharing relevant information about Title IX and sexual harassment concerns. Furthermore, an action plan to address the recommendation will be provided in the department's 180-day letter response to Congress.

Recommendation: The Secretary of the Department of Health and Human Services should establish goals and an overall plan to assess all of the agency's sexual harassment prevention efforts for their university grantees, including methods to regularly monitor and evaluate its sexual harassment prevention policies and communication mechanisms (e.g. Title IX or sex discrimination websites). (Recommendation 13)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: HHS agreed with the recommendation. In its February 2020 formal comment letter, the department stated that NIH has created goals for all NIH grantee sexual harassment prevention efforts, as noted in GAO's report. NIH will develop a plan to assess progress towards achieving those goals, including methods to regularly monitor and evaluate policies and communication methods. To the extent Title IX enforcement and outreach efforts may prevent sexual harassment, the Office for Civil Rights will develop a plan for leveraging enforcement efforts and outreach communications to help HHS grantees implement prevention efforts. HHS will submit an action plan that fully address department efforts regarding this recommendation in its 180-day letter response to Congress.

Critical Infrastructure Protection: Additional Actions Needed to Identify Framework Adoption and Resulting Improvements
GAO-20-299, Feb 25, 2020

Director: Vijay A. D'Souza
Phone: (202) 512-6240

1 open recommendations

Display

National Biodefense Strategy: Additional Efforts Would Enhance Likelihood of Effective Implementation
GAO-20-273, Feb 19, 2020

Director: Chris Currie
Phone: (404) 679-1875

4 open recommendations
including 4 priority recommendations

Display

Recommendation: The Secretary of HHS should direct the Biodefense Coordination Team to establish a plan that includes change management practices—such as strategies for feedback, communication, and education—to reinforce collaborative behaviors and enterprise-wide approaches and to help prevent early implementation challenges from becoming institutionalized. (Recommendation 1)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open
Priority recommendation

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of HHS should direct the Biodefense Coordination Team to clearly document guidance and methods for analyzing the data collected from the agencies, including ensuring that nonfederal resources and capabilities are accounted for in the analysis. (Recommendation 2)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open
Priority recommendation

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of HHS should direct the Biodefense Coordination Team to establish a resource plan to staff, support, and sustain its ongoing efforts. (Recommendation 3)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open
Priority recommendation

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Recommendation: The Secretary of HHS should direct the Biodefense Coordination Team to clearly document agreed upon processes, roles, and responsibilities for making and enforcing enterprise-wide decisions. (Recommendation 4)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open
Priority recommendation

Comments: When we confirm what actions the agency has taken in response to this recommendation, we will provide updated information.

Cloud Computing Security: Agencies Increased Their Use of the Federal Authorization Program, but Improved Oversight and Implementation Are Needed
GAO-20-126, Dec 12, 2019

Director: Gregory C. Wilshusen
Phone: (202) 512-6244

11 open recommendations

Display

Recommendation: The Secretary of HHS should direct the Director of CDC to update the security plan for the selected system to identify the authorization boundary, the system operational environment and connections, a description of security controls, and the individual reviewing and approving the plan and date of approval. (Recommendation 8)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: In June 2020, CDC stated it has taken actions to address our recommendations, but we have not received evidence of its corrective actions. We will continue to monitor the agency's progress and update the recommendation's status when CDC provides its corrective actions.

Recommendation: The Secretary of HHS should direct the Director of CDC to update the security assessment report for the selected system to identify the summarized results of control effectiveness tests. (Recommendation 9)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: In June 2020, CDC stated it has taken actions to address our recommendations, but we have not received evidence of its corrective actions. We will continue to monitor the agency's progress and update the recommendation's status when CDC provides its corrective actions.

Recommendation: The Secretary of HHS should direct the Director of CDC to update the list of corrective actions for the selected system to identify the specific weaknesses, funding source, changes to milestones and completion dates, identified source of weaknesses, and status of corrective actions. (Recommendation 10)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: In June 2020, CDC stated it has taken actions to address our recommendations, but we have not received evidence of its corrective actions. We will continue to monitor the agency's progress and update the recommendation's status once CDC provides its corrective actions.

Recommendation: The Secretary of HHS should direct the Administrator of CMS to update the system security plans for selected systems to identify a description of security controls. (Recommendation 11)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: In June 2020, HHS stated CMS took actions to close this recommendation, but CMS has not yet provided evidence of its corrective actions. We will continue to monitor the agency's progress and update the recommendation's status when CMS provides its corrective actions.

Recommendation: The Secretary of HHS should direct the Administrator of CMS to update the security assessment report for selected system to identify the summarized results of control effectiveness tests. (Recommendation 12)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: In June 2020, HHS stated CMS took actions to close this recommendation, but CMS has not yet provided evidence of its corrective actions. We will continue to monitor the agency's progress and update the recommendation's status when CMS provides its corrective actions.

Recommendation: The Secretary of HHS should direct the Administrator of CMS to update and document the CMS remedial action plan for the selected system to identify the anticipated source of funding. (Recommendation 13)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: In June 2020, HHS stated CMS took actions to close this recommendation, but CMS has not yet provided evidence of its corrective actions. We will continue to monitor the agency's progress and update the recommendation's status when CMS provides its corrective actions.

Recommendation: The Secretary of HHS should direct the Administrator of CMS to prepare letters authorizing the use of cloud services for the selected systems and submit the letters to the FedRAMP program management office. (Recommendation 14)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: In June 2020, HHS stated CMS took actions to close this recommendation, but CMS has not yet provided evidence of its corrective actions. We will continue to monitor the agency's progress and update the recommendation's status when CMS provides its corrective actions.

Recommendation: The Secretary of HHS should direct the Director of NIH to update security plans for selected systems to identify the authorization boundary, system operation in terms of mission and business processes, operational environment and connections, and a description of security controls. (Recommendation 15)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: In June 2020, NIH stated it is taking actions to address this recommendation, but the agency did not provide evidence of its corrective actions. NIH stated it will provide an update in December 2020. We will continue to monitor the agency's progress and update the recommendation's status when NIH provides its corrective actions.

Recommendation: The Secretary of HHS should direct the Director of NIH to update the security assessment report for selected systems to identify summarized results of control effectiveness tests. (Recommendation 16)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: In June 2020, NIH stated it is taking actions to address this recommendation, but the agency did not provide evidence of its corrective actions. NIH stated it will provide an update in December 2020. We will continue to monitor the agency's progress and update the recommendation's status when NIH provides its corrective actions.

Recommendation: The Secretary of HHS should direct the Director of NIH to update the NIH list of corrective actions for selected systems to identify estimated funding and anticipated source of funding, key milestones with completion dates, and changes to milestones and completion dates. (Recommendation 17)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: In June 2020, NIH stated it is taking actions to address this recommendation, but the agency did not provide evidence of its corrective actions. NIH stated it will provide an update in December 2020. We will continue to monitor the agency's progress and update the recommendation's status when NIH provides its corrective actions.

Recommendation: The Secretary of HHS should direct the Director of NIH to submit the division's letters authorizing the use of cloud services for the selected systems to the FedRAMP program management office. (Recommendation 18)

Agency: Department of Health and Human Services: Office of the Secretary
Status: Open

Comments: In June 2020, NIH stated it is taking actions to address this recommendation, but the agency did not provide evidence of its corrective actions. NIH stated it will provide an update in December 2020. We will continue to monitor the agency's progress and update the recommendation's status when NIH provides its corrective actions.